use session user and password in url (php noob)

woodie63 · 13.05.2004, 10:25

Hi, I would like to pass the following vaiables in a url to access an @mail account:

the logged in Mambo username, password and the Mambo site name

the @mail docs suggest that the following url syntax will work:

http://atmail.nl/atmail.pl?username=username&password=password&pop3 host=domain.com&LoginType=xp&Language=english

so this is my effort at using the mambo variables:

http://atmail.nl/atmail.pl?username=<?php echo $my->username;?>&password=<?php echo $pass;?>&pop3host=<?php echo $mosConfig_sitename; ?>&LoginType=xp&Language=english

OK, I've probably done something dumb because I don't really understand php that well.................

please could someone tell me what I'm doing wrong?

thanks

Peter

njcallen · 13.05.2004, 16:00

Hi Peter,

There are a few ways you can do this...

PHP Code:

  
<?php

 
$link = 'http://atmail.nl/atmail.pl?username=' . $my->username . '&password=' . $pass . '&pop3host=' . $mosConfig_sitename .'&LoginType=xp&Language=english';

 
//or

 
$link = "http://atmail.nl/atmail.pl?username=$my->username&password=$pass&pop3host=$mosConfig_sitename&LoginType=xp&Language=english";

 
//or

 
?>

 
<a href="http://atmail.nl/atmail.pl?username=<?php echo $my->username; ?>&password=<?php echo $pass; ?>&pop3host=<?php echo $mosConfig_sitename; ?>&LoginType=xp&Language=english">Link</a>

My only question is as to where the variable $pass is coming from. Are you pulling this straight out of the database because I don't think you can use the session table. I don't know that for a fact, but I'm sure I came across that when I was testing something similar.

Just as a note, I'm hesistant to send such information in the clear (plaintext) to another website. Although the password stored within mambo database is just an md5 hash of the user's password, it is still a potential security hazard.
It look's as if you maybe attempting to send across a plaintext password though, which is even more hazardous to place in a query string. Just a few thoughts!

Cheers,

Nathan

woodie63 · 13.05.2004, 17:20

thats great Nathan, thank you!
I should have explained, the @mail install is actually on my server - the same server as the Mambo site in question. (do you think there is still a security issue there?)
I'm tinkering with the code you gave me, I'll be back with a progress report if I can get it working.
to complicate matters a little further I'm attempting to make the link to @mail through a wrapper

I'll get back to it

cheers

Peter

njcallen · 13.05.2004, 21:29

Hi Peter,

No problem. If you need anymore help, feel free to ask

Regarding @mail being on your server, it is still a slight concern depending on how the information is transferred from Mambo to @mail. Do you require the user to enter a different password for @mail and is that password sent in plaintext? If it's an md5 hash of their password, it isn't anything to get to concerned about. In saying that though, I don't know exactly how you are implementing this and how well integrated @mail will be.

As a sidenote, I've been looking into @mail for the last couple weeks, as this is something I would like to offer people. The prices are a little high at the moment for me, however, if it's really good, I will look into it further. I wouldn't mind hearing your experience of it? How stable is it? How easy to maintain and run? Does it use excess system resources? Anything you have to say about it

I'm going to need to make a decision within the next month or so. There's a few others that I'm looking at such as Squirrelmail, but they don't seem as professional as @mail.

Thanks,

Nathan

woodie63 · 15.05.2004, 08:31

Hi Nathan
I will give you feedback about @mail as it comes, here's a few thoughts:

I don't know about you but I use Ensim pro 3.7 on my server. You may know that squirrelmail is preinstalled on ensim, so why am I going for @mail? Well, you are right its expensive, as compared to squirrelmail which is open source. SQmail is liked by coders who dislike bloat and want a simple html interface, fair do's but my clients are a fussy sort who are used to the likes of Yahoo and hotmail etc. I don't mind SQMail but I have had several complaints about it's amateur looks etc. so I decided to spend some cash to make my clients happy (hopefully

)
I researched a lot before making this decision and the only other two webmail alternatives that I felt were contenders were Horde and Hivemail.
Horde is again open source and tempting just for that, but somebody needs to give thier site a makeover because at first glance it just doesn't seem clear what Horde is! there are about 6-8 different apps which are part of the Horde email package (I'm being a bit vague probably) and the learning curve just didn't seem worth it to me. ( I have other things I need to concentrate on, know what I mean)
Hivemail seems pretty good, a nice looking package but the pricing seems more suited to installing it on your own site, not for a reseller like me.
@mail only requires one install and all my clients can use it, you get the source code so its pretty customizable. You can create a separate login page, branded how you like for each of your sites..........

So thats why I decided to take the plunge with @mail. Who knows, I have bitten the bullet with many a promising piece of software before, only to discover that it doesn't do what it says on the tin Or worse, the support is nonexistent.
So far I have only installed the demo version which I got up and running on my Powerbook in no time, the installation script is nice, minimum effort, the way I like it :-)

So I'll keep you posted once its installed on my linux box if you like?

now back to my other problems........

cheers

Peter

ps I forgot, having just one install vs multiple is great too (for obvious reasons)

vengo · 20.05.2005, 13:33

HI there, thanks for the given solutions.
Question: How do I make an URL (adding menu-item: Link - URL) and place the variable (username) in this link?

When I place <?php echo $my->username; ?> in the link, the variable is not used.
Only <?php echo $my->username; ?> as flat text in the link.

Someone got a solution?

Thankx!

craigholohan · 24.07.2006, 01:36

Anyony managed to solve this problem yet.
I am not at all knowlagable with any of this, when i use any of the sugested code I just get a blank page.
Except when I use the <a href= code it does not echo the username or password and I get "the user does not exist" error on my atmail site.

lovebeijso · 25.05.2008, 13:57

it is better to fight for good than to fail at the ill.-------------------------Our wow power leveling website offer Fast and Secure wow powerleveling service. WoW Power Leveling 60-70, Cheap wow power leveling 1-70. The Professional WoW Power Leveling! Powerlevel WoW Power Leveling now. WOrld of warcraft Power Leveling bloom of true love associated with this time of year!

weiwei · 10.06.2008, 19:47

The local washerwoman replied wow gold that it was perhaps a very wow goldgood plan of Miss or Mrs. Fawley's (as they called her indifferently) to have wow power leveling him with her--"to kip 'ee company in your loneliness, fetch wow power leveling water, shet the winder-shet-ters o' nights, and help in the wow power leveling bit o' baking."

baadman28 · 28.06.2008, 13:13

Very good!!! Support !美国留学美国留学美国留学美国留学美国留学