[imp] encrypted login password in form

Jan Schneider jan at horde.org
Sat Jul 24 08:10:29 PDT 2004


Zitat von Enrique <ecastro at dbbf.ulpgc.es>:

> Hi,
>   My university uses Horde/IMP as main WebMail system for staff and
> students. I want to integrate this mail system with other tools. I know
> how to login using a hidden form. However, the examples I have seen
> expose passwords in plain text in the hidden form.
>
> I am not the administrator of the IMP site, so I cannot test some things
>   myself experimentally. I wonder if redirect.php (or previous scrips)
> would accept md5 encrypted password data passed in the hidden form?.

No.

> redirect.php get user/pass data from a Horde::getFormData function.
> Where can I find that function's code or documentation?

horde/lib/Horde.php.

Jan.

--
Do you need professional PHP or Horde consulting?
http://horde.org/consulting.php


More information about the imp mailing list