[Tickets #15137] Re: IMP is marked as authenticated

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/15137
------------------------------------------------------------------------------
  Ticket             | 15137
  Updated By         | george.ccto at gmail.com
  Summary            | IMP is marked as authenticated
  Queue              | IMP
  Version            | 6.2.22
  Type               | Bug
  State              | Unconfirmed
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


george.ccto at gmail.com (2023-06-10 03:53) wrote:

(For your and my reference)

I tried to clone the Horde Webmail 5.2.22 from AlmaLinux 8 with manual  
installed PHP
7.4 environment (working fine) to AlmaLinux 9 with manual installed PHP 7.4
environment.

Then, inside AlmaLinux 9 , I encountered the same error - "IMP is  
marked as authenticated, but no credentials can be found in the  
session." inside IMP.

After a day study, it seems  
$_SESSION[imp][imap_ob_pass/xxxxxxxxxxxxxxxxxxx] -> become nothing

If I manually modified the file - imp/lib/Imap/Password.php
inside "public function serialize()" , changed
from
          $session->set('imp', self::PASSWORD_KEY . '/' . $this->_id,
$this->_password, $session::ENCRYPT);
to
          $session->set('imp', self::PASSWORD_KEY . '/' . $this->_id,
$this->_password,  0 );

It seems working again.

(Note: the password is stored in PHP session in plain text format.)

ref.: https://bugs.horde.org/ticket/12432