[imp] cookies required?

Jeff Tucker jefft@wciatl.com
Tue, 30 Oct 2001 01:12:00 -0500


--On Thursday, October 25, 2001 11:11 AM +0200 Jan Schneider 
<jan@horde.org> wrote:

> I still can't reproduce it here, but the symptoms you describe let me
> think  there are some warning message inside tags and javascript areas.
>
> Can you take a look at the html source code of such a page and report any
> warning and error messages you find?
>
> Jan.
>

I don't see any warnings or errors. However, the HTML is definitely messed 
up.

I updated CVS Sunday night the 28th of October. Today, I login and refuse 
session cookies. It turns out I don't have to delete any messages or 
anything. All I have to do is refresh the screen using the little refresh 
button on the Inbox. I'll get messed up HTML when I do this. This is with 
IE 5.5.

When I refuse cookies, then refresh the inbox, the end of my HTML looks 
like:

        <td align="right">
        <form method="post" name="copymove2" 
action="/horde/imp/mailbox.php?Horde=34a4a103a31e6e410b734bbf2a490abd"><inp
ut type="hidden" name="Horde" value="34a4a103a31e6e410b734bbf2a490abd" />
            <a href="?Horde=34a4a103a31e6e410b734

At that point the file ends.

When I accept cookies, I instead get, well I'll post it later since it's 
long.

I've looked at the file mailbox/navbar.inc
It includes the code:
    <?php if (!$prefs->isLocked('filters')): ?>
        <?= Horde::link('', _("Blacklist"), 'widget', '', 'BlackList(' . 
IMP_BLACKLIST . ", $navform); return false;") . _("Blacklist") ?></a> |
    <?php endif; ?>

It appears this code is maybe dieing partway through building the URL. 
Quick tests indicate that it always prints 21 characters of the Horde 
number before it quits.

Obviously a big difference is that when you accept cookies, you don't have 
to pass the Horde session ID's around in URLs and forms. I'm not sure 
exactly who is sticking that Horde=xxx stuff in there, if it's IMP or PHP. 
(I do see that almost always Horde=xxx appears twice in every URL). Anyway, 
is it possible that Horde::link has a problem?

Here's the bottom of the HTML when I accept cookies and everything works 
fine:

        <form method="post" name="copymove2" 
action="/horde/imp/mailbox.php">
            <a href="" onclick="BlackList(158, 2); return false;" 
onmouseout="status='';" onmouseover="status='Blacklist'; return true;" 
class="widget">Blacklist</a> |
            <a href="" onclick="Transfer(102, 2); return false;" 
onmouseout="status='';" onmouseover="status='Move'; return true;" 
class="widget">Move</a> |
        <a href="" onclick="Transfer(103, 2); return false;" 
onmouseout="status='';" onmouseover="status='Copy'; return true;" 
class="widget">Copy</a>
        <select name="targetMailbox" onchange="updateFolders(2);">
            <option value="">Messages to</option>
<option value="INBOX.Held Mail">Held Mail</option>
<option value="INBOX.IMP">IMP</option>
<option value="INBOX.Sent Mail">Sent Mail</option>
<option value="INBOX.Trash">Trash</option>
        </select>
        </form>
    </td>
    </tr>
</table>

</td>
</tr>
</table>
<br />

<script language="JavaScript" type="text/javascript">
<!--

function open_compose_win(args)
{
    var url = "/horde/imp/compose.php";
    if (url.indexOf('?') == -1) glue = '?';
    else glue = '&amp;';
    var now = new Date();
    var name = "compose_windows_" + now.getTime();
    if (args != "") {
        url = url + glue + args + "&amp;uniq=" + now.getTime();
    } else {
        url = url + glue + "uniq=" + now.getTime();
    }
    param = 
"toolbar=no,location=no,status=yes,scrollbars=yes,resizable=yes,width=700,h
eight=650,left=0,top=0";
    eval ("name = window.open(url, name, param)");
    if (!eval("name.opener")) eval("name.opener = self");
}

// -->
</script>
</body>
</html>






> Zitat von Jeff Tucker <jefft@wciatl.com>:
>
>>
>> OK. I upgraded Horde and imp last Saturday night, that would be the
>> 20th, I
>>
>> guess.
>>
>> I'm using IE 5.5 running on Windows 98. 5.5.4134.0600 to be specific.
>>
>> I logged into imp and refused two offers for a session cookie. I believe
>> there's already a persistent cookie on my hard drive from logging in a
>> few  minutes ago. I closed all browser windows before starting up a new
>> window  and logging in this last time.
>>
>> In my Inbox, I clicked the first file, then clicked delete. This time,
>> the  HTML came back mostly OK but on the bottom line, next to Select and
>> Mark  As: I see this HTML code which got sent as plaintext: <a
>> href="?Horde=ae86b902f83061b573155b335f29cfa6" onclick="BlackList(158,
>> 2);  return false;" onmouseout="status='';
>>
>> Next I opened a message and clicked Forward. I got an alert box that
>> said  "Your browser does not support this print option. Press
>> Control/Option + P  to print." This is absolutely repeatable. I've had
>> this problem for several
>>
>> weeks, with several updates of IMP. I can reproduce it in IE 5.5 and IE
>> 6.0. It was first reported to me by a user who probably also uses IE,
>> but I
>>
>> don't know what version.
>>
>> If I logout and login, allowing cookies, I can forward all day long. If
>> I  logout again and login refusing cookies, the problem comes back.
>>
>> I hope this helps. I haven't spent any time debugging these two
>> problems,  as I assumed I would just have to tell my customers that they
>> had to use  cookies or else.
>>
>> Jeff
>>
>> --
>> Jeff Tucker
>> Williams Consulting, Inc.
>> jefft@wciatl.com
>>
>> --
>> IMP mailing list: http://horde.org/imp/
>> Archive: http://marc.theaimsgroup.com/?l=imp&r=1&w=2
>> Frequently Asked Questions: http://horde.org/faq/
>> To unsubscribe, mail: imp-unsubscribe@lists.horde.org
>>
>>
>
>
> ::::::::::::::::::::::::::::::::::::::::
> AMMMa AG - discover your knowledge
> :::::::::::::::::::::::::::
> Detmolder Str. 25-33 :: D-33604 Bielefeld
> fon +49.521.96878-0 :: fax  +49.521.96878-20
> http://www.ammma.de
> ::::::::::::::::::::::::::::::::::::::::::::::
>
> --
> IMP mailing list: http://horde.org/imp/
> Archive: http://marc.theaimsgroup.com/?l=imp&r=1&w=2
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: imp-unsubscribe@lists.horde.org
>



-- 
Jeff Tucker
Williams Consulting, Inc.
jefft@wciatl.com