On Mon, Jul 05, 2004 at 12:46:07PM -0000, Sujoy  Ghosh wrote:
>    Recently I installed Sqwebmail-4.0.5 on a Redhat Linux 9,
>    Apache/2.0.40.
>    On submitting the user ID & password via the url
>    http://server.com/cgi-bin/sqwebmail ;the web server is sending the
>    content of the file with the option for (save/open/cancel)instead of
>    executing the file.

And if you click "save", what does the saved file contain?

>    No mention of any error in the httpd log file.

It sounds like some disagreement between the browser and the CGI over MIME
types. You really need to get a HTTP dump of the session to debug what is
going on. Try running on the server:

  tcpdump -n -i eth0 -s1500 -X tcp port 80 and host x.x.x.x

where x.x.x.x is the IP address of the client you are connecting from. Save
the output of the tcpdump in a file. You are looking for the point where the
server sends back a page after the login has been submitted, when you get
the "save/open/cancel" dialog box.

Put the tcpdump output up on a web page somewhere, or post to the list, and
we'll have a look.

If you're not sure where in the HTTP transaction your password is sent, then
change your password to a dummy value temporarily before making the tcpdump,
and change it back afterwards, to prevent your password being seen.

Brian.

Reply via email to