[imp] encrypted login password in form
Jan Schneider
jan at horde.org
Sat Jul 24 08:10:29 PDT 2004
Zitat von Enrique <ecastro at dbbf.ulpgc.es>:
> Hi,
> My university uses Horde/IMP as main WebMail system for staff and
> students. I want to integrate this mail system with other tools. I know
> how to login using a hidden form. However, the examples I have seen
> expose passwords in plain text in the hidden form.
>
> I am not the administrator of the IMP site, so I cannot test some things
> myself experimentally. I wonder if redirect.php (or previous scrips)
> would accept md5 encrypted password data passed in the hidden form?.
No.
> redirect.php get user/pass data from a Horde::getFormData function.
> Where can I find that function's code or documentation?
horde/lib/Horde.php.
Jan.
--
Do you need professional PHP or Horde consulting?
http://horde.org/consulting.php
More information about the imp
mailing list