[imp] auto compose

Milos Prudek milos.prudek@tiscali.cz
Wed, 12 Dec 2001 19:16:33 +0100


Chuck Hagenbuch wrote:
> 
> Quoting Milos Prudek <milos.prudek@tiscali.cz>:
> 
> > But how can I display the Compose window without going through
> > redirect.php?
> 
> Well, if you set up the session with IMP pre-authenticated, you can use
> $registry->link('mail/compose', array('to' => $toval', etc...));

How can I set up session pre-authenticated?

> 
> You can also call redirect.php?action=compose.

I looked again at your mail of 07/17/2001 to this list which suggests
creating a modified redirect.php that would pull password from SQL table
and autologin user if it receives username via a POST.

Wouldn't such redirect.php present a security breach? Anyone who knew
user name would be able to login to his/her mailbox just by visiting
redirect.php and submitting username via POST...


--
Milos Prudek