On Wed, 1 Apr 2009 10:42:08 +0100, "Mahmoud M'HIRI"
<mahmoud.mh...@gmail.com> wrote:
> Hello,
> 
> I installed RoundCube and it's working perfectly. Besides, I want that
> users
> of our extranet get into their inboxes directly from a link in our
> collaboration platform, so how can I send a request to rcube so it logs
> users directly without asking for login/pwd.
> 
> PS: I'm aware that I have to store IMAP login/pwd for each user in my
> collaboration platform database.
> 
> Thanks in advance,
> 
> Best Regards

Change index.php per the following patch, then you should then be able to
login with a URL like:

http://yoursite.com/webmailpath/?_action=login&_timezone=<someoffset>&_user=<username>&_pass=<password>

diff --git a/roundcubemail/index.php b/roundcubemail/index.php
index 0d0da40..6817e71 100644
--- a/roundcubemail/index.php
+++ b/roundcubemail/index.php
@@ -82,9 +82,9 @@ if ($RCMAIL->action=='login' && $RCMAIL->task=='mail') {
   if (empty($_COOKIE)) {
     $OUTPUT->show_message("cookiesdisabled", 'warning');
   }
-  else if ($_SESSION['temp'] && !empty($_POST['_user']) &&
!empty($_POST['_pass
-           $RCMAIL->login(trim(get_input_value('_user', RCUBE_INPUT_POST),
' ')
-              get_input_value('_pass', RCUBE_INPUT_POST, true,
'ISO-8859-1'), $
+  else if ($_SESSION['temp'] && !empty($_GET['_user']) &&
!empty($_GET['_pass']
+           $RCMAIL->login(trim(get_input_value('_user', RCUBE_INPUT_GET),
' '),
+              get_input_value('_pass', RCUBE_INPUT_GET, true,
'ISO-8859-1'), $h
     // create new session ID
     unset($_SESSION['temp']);
     rcube_sess_regenerate_id();

However, you should be extra careful with this, as the user's login will be
in plain text in the web page and anyone walking up to the computer can
just hover over the link and see the credentials.  A better approach might
be to have your system start a session for the user in the background, and
then just provide a link to the URL for webmail and they will already be
logged in.

There may be some other concerns I'm not thinking of here.

Nathan

_______________________________________________
List info: http://lists.roundcube.net/users/

Reply via email to