Thread: RoundCube Password Plugin -- PLESK Add-on.

While someone else recently posted that they got the existing password plugin to work with PLESK / Qmail - I was unable to do this.

I have a working solution that I would like to share and if anyone would like to discuss this, here is my question that I don't have time to figure out (laughing):

Am I wrong to say that PLESK needs to have both the 'accounts' table in database 'psa' updated -- as well as poppassd run?

If I'm wrong, there's a bit of redundancy below -- I used the code from the poppassd for RC v0.2.1 that was on here before to handle the poppassd aspect of this.

/.../plugins/password/config.inc.php:

Code:

$rcmail_config['password_driver'] = 'plesk';
$rcmail_config['plesk_db_host'] = 'localhost';
$rcmail_config['plesk_db_admin'] = 'admin';
$rcmail_config['plesk_db_pass'] = '[your plesk admin password here]';

/.../plugins/password/drivers/plesk.php:

Code:

/**
 * PLESK SQL+POPDPASSWD Password Driver
 *      poppassd code lifted from Crusher's Non-API RoundCube PLESK Password Plugin
 */

function password_save($curpass, $passwd) {

        $rcmail = rcmail::get_instance();


        $link = mysql_connect($rcmail->config->get('plesk_db_host'), $rcmail->config->get('plesk_db_admin'), $rcmail->config->get('plesk_db_pass'));

        if (!$link)
                return PASSWORD_ERROR;
        mysql_selectdb("psa");

        $sql = "SELECT a.id,a.password,m.mail_name,d.name
                FROM domains d, mail m, accounts a
                WHERE
                        d.name='" . $rcmail->user->get_username('domain') . "' AND
                        m.mail_name='" . $rcmail->user->get_username('local'). "' AND
                        m.dom_id=d.id AND a.id=m.account_id";
        $res = mysql_query($sql);
        if ($row = mysql_fetch_assoc($res)) {

                $driver = new Passwd_Driver_poppassd(array('host'=>'localhost', 'port'=> '106'));
                $return = $driver->changePassword($_SESSION['username'], $curpass, $passwd);
                if ($return[1] == "Success")
                        if ($row["password"] != $curpass)
                                return PASSWORD_ERROR;
                        elseif (mysql_query("UPDATE accounts set password='" . $passwd . "' where id='" . $row["id"] . "' LIMIT 1"))
                                return PASSWORD_SUCCESS;
                        else
                                return PASSWORD_ERROR;
                else
                        return PASSWORD_ERROR;
        }
        else
                return PASSWORD_ERROR;
}

class Passwd_Driver_poppassd{

    var $_fp;
    function Passwd_Driver_poppassd($params = array())
    {
        $this->_params['host'] = array_key_exists('host', $params) ? $params['host'] : 'localhost';
        $this->_params['port'] = array_key_exists('port', $params) ? $params['port'] : 106;
    }
    function _connect()
    {
        $this->_fp = fsockopen($this->_params['host'], $this->_params['port'], $errno, $errstr, 30);
        if (!$this->_fp) {
            return array(false, $errstr);
        } else {
            $res = $this->_getPrompt();
            return $res;
        }
    }
    function _disconnect()
    {
        if (isset($this->_fp)) {
            fputs($this->_fp, "quit\n");
            fclose($this->_fp);
        }
    }
    function _getPrompt()
    {
        $prompt = fgets($this->_fp, 4096);
        if (!$prompt) {
            return array(false, "No prompt returned from server.");
        }
        if (preg_match('/^[1-5][0-9][0-9]/', $prompt)) {
            $rc = substr($prompt, 0, 3);
            /* This should probably be a regex match for 2?0 or 3?0, no? */
            if ($rc == '200' || $rc == '220' || $rc == '250' || $rc == '300' ) {
                return array(true, "Success");
            } else {
                return array(false, $prompt);
            }
        } else {
            return array(true, "Success");
        }
    }

    function _sendCommand($cmd, $arg)
    {
        $line = $cmd . ' ' . $arg . "\n";
        $res_fputs = fputs($this->_fp, $line);
        if (!$res_fputs) {
            return array(false, "Cannot send command to server.");
        }
        $res = $this->_getPrompt();
        return $res;
    }

    function changePassword($username, $old_password, $new_password)
    {
        $res = $this->_connect();
        if (!$res[0]) {
            return $res;
        }

        $res = $this->_sendCommand('user', $username);
        if (!$res[0]) {
            $this->_disconnect();
            return array(false, "User not found");
        }

        $res = $this->_sendCommand('pass', $old_password);
        if (!$res[0]) {
            $this->_disconnect();
            return array(false, "Incorrect Password");
        }



        $res = $this->_sendCommand('newpass', $new_password);
        $this->_disconnect();
        if (!$res[0]) {
            return $res;
        }

        return array(true, "Success");
    }

}

?>