Re: I get a "You need to be Logged in" Error on certain SquirrelMail functions.

On Fri, Jun 27, 2008 at 8:16 AM, Gerry Lieberwirth
<[email protected]> wrote:
> I have SquirrelMail 1.4.12 installed in my productions environment.

IMMEDIATE UPGRADE is strongly recommended.  This package was
compromised by unknown parties.  You are running untrusted code.

> I also
> installed version 1.4.15 in a parallel system for testing.  The problem
> occurs in both installations (Same config.php).
>
> (I have changed settings in the configuration to avoid the purge.  I
> commented out the "delete" link in "read_body.php" so users will no see that
> function.  You see my user base consist of 20,000 insurance brokers nation
> wide in the United States, I want to eliminate phone calls.)
>
> When I login I nicely see all my email and I can manage it nicely too.
> There are a few functions however that give me an error that I need to be
> logged in.  The function still completes. If I click back on inbox and
> refresh after that the left menu. Everything looks like the error never
> happened.
>
> These functions are:
>
> 1. The delete function inside the message.  (The delete button on the
> message list works fine).
> 2. When I try to create, delete, subscribe or unsubscribe a folder.
> 3. When I try to purge the deleted items from my Trash folder.

Since it happens only upon certain actions, not specifically POST or
GET requests, but not others, I have to assume it is a problem with
your web server's configuration.  I'm not a Windoze admin, so won't be
much help, but double checking the full functioning of your session
mechanism in PHP is good, then make sure you enable the most verbose
PHP logging that you can and watch for PHP errors.  You could also try
to clear out $config_location_base and see if that makes any
difference at all.  I don't know what IMAP server you are running, but
it appears to be non-standard, so maybe it is simply overloaded and is
randomly answering valid login requests with a rejection instead.
Please watch your IMAP server log as you test your system.

> My SquirrelMail is installed on a Windows 2003 SP2 Server running IIS.
> PHP Version 5.1.2 (all php info can be retrieved via
> http://support.psic-onespot.com/Gallery/phpinfo.php)
>
> My config.php:
> -----------------------------------------------------------------------
> <?php
>
> /**
>  * SquirrelMail Configuration File
>  * Created using the configure script, conf.pl
>  */
>
> global $version;
> $config_version = '1.4.0';
> $config_use_color = 2;
>
> $org_name      = "The McGraw Group";
> $org_logo      = '/images/logo_McGrawInsurance_home.gif';
> $org_logo_width  = '136';
> $org_logo_height = '151';
> $org_title     = "The McGraw Group of Affiliated Companies";
> $signout_page  =
> 'https://willow.psic-onespot.com/net.data.pms.ndm/blankpage';
> $frame_top     = 'MailArea';
>
> $provider_uri     = 'http://www.psic-onespot.com';
>
> $provider_name     = 'McGraw Insurance Services';
>
> $motd = "";
>
> $squirrelmail_default_language = 'en_US';
> $default_charset       = 'iso-8859-1';
> $lossy_encoding        = false;
>
> $domain                 = 'mcgrawgroup.com';
> $imapServerAddress      = '192.168.28.148';
> $imapPort               = 143;
> $useSendmail            = false;
> $smtpServerAddress      = '192.168.28.148';
> $smtpPort               = 25;
> $sendmail_path          = '/usr/sbin/sendmail';
> $sendmail_args          = '-i -t';
> $pop_before_smtp        = false;
> $imap_server_type       = 'other';
> $invert_time            = false;
> $optional_delimiter     = 'detect';
> $encode_header_key      = '';
>
> $default_folder_prefix          = '';
> $trash_folder                   = 'Deleted Items';
> $sent_folder                    = 'Sent Items';
> $draft_folder                   = 'Drafts';
> $default_move_to_trash          = false;
> $default_move_to_sent           = true;
> $default_save_as_draft          = true;
> $show_prefix_option             = false;
> $list_special_folders_first     = true;
> $use_special_folder_color       = true;
> $auto_expunge                   = true;
> $default_sub_of_inbox           = true;
> $show_contain_subfolders_option = false;
> $default_unseen_notify          = 2;
> $default_unseen_type            = 1;
> $auto_create_special            = true;
> $delete_folder                  = false;
> $noselect_fix_enable            = false;
>
> $data_dir                 = SM_PATH . 'data/';
> $attachment_dir           = SM_PATH . 'attach/';
> $dir_hash_level           = 0;
> $default_left_size        = '130';
> $force_username_lowercase = false;
> $default_use_priority     = true;
> $hide_sm_attributions     = true;
> $default_use_mdn          = true;
> $edit_identity            = false;
> $edit_name                = false;
> $hide_auth_header         = false;
> $allow_thread_sort        = false;
> $allow_server_sort        = false;
> $allow_charset_search     = false;
> $uid_support              = false;
>
>
> $theme_css = '';
> $theme_default = 0;
> $theme[0]['PATH'] = SM_PATH . 'themes/powder_blue.php';
> $theme[0]['NAME'] = 'Powder Blue';
>
> $default_use_javascript_addr_book = false;
> $abook_global_file = '';
> $abook_global_file_writeable = false;
> $abook_global_file_listing = true;
> $abook_file_line_length = 2048;
>
> $addrbook_dsn = '';
> $addrbook_table = 'address';
>
> $prefs_dsn = '';
> $prefs_table = 'userprefs';
> $prefs_user_field = 'user';
> $prefs_key_field = 'prefkey';
> $prefs_val_field = 'prefval';
> $addrbook_global_dsn = '';
> $addrbook_global_table = 'global_abook';
> $addrbook_global_writeable = false;
> $addrbook_global_listing = false;
>
> $no_list_for_subscribe = false;
> $smtp_auth_mech = 'none';
> $imap_auth_mech = 'login';
> $smtp_sitewide_user = '';
> $smtp_sitewide_pass = '';
> $use_imap_tls = false;
> $use_smtp_tls = false;
> $session_name = 'SQMSESSID';
>
> $config_location_base     = 'http://home.ridewithmcgraw.com';
>
> @include SM_PATH . 'config/config_local.php';
> --------------------------------------------------------------------
>
> config/config_local.php
> --------------------------------------------------------------------
> <?php
>
> /**
>  * Local config overrides.
>  *
>  * You can override the config.php settings here.
>  * Don't do it unless you know what you're doing.
>  * Use standard PHP syntax, see config.php for examples.
>  *
>  * @copyright &copy; 2002-2007 The SquirrelMail Project Team
>  * @license http://opensource.org/licenses/gpl-license.php GNU Public
> License
>  * @version $Id: config_local.php 12522 2007-07-10 14:52:53Z kink $
>  * @package squirrelmail
>  * @subpackage config
>  */
>
> ?>

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel