On Wednesday, November 2 at 07:03 PM, quoth Rick Root:
I wondered if anyone had devised a way for individual vpopmail users to manage a procmailrc file via a web-based interface.
I did something like that. The trick is you can't just give people blank access to a procmailrc file because they can use procmail to execute arbitrary commands with vpopmail permissions.
I use procmail in my vpopmail environment to drop certain messages into specific IMAP folders. But obviously it could also be useful for custom spam assassin stuff and other filtering.I could probably write something like this in Perl (although to be honest I'd probably build the interface in some other environemtn and just build a web service in perl to handle the actual file management....
The way I did it was via PHP script that uses a very simple setuid binary to fetch and save the procmailrc to and from the user's vpopmail home directory. It's not very complicated, and not very capable, but it lets users file and delete mails based on sender/destination/subject.
~Kyle --The criterion of truth is that it works even if nobody is prepared to acknowledge it.
-- Ludwig von Mises
pgpvZ6odGyDr8.pgp
Description: PGP signature
