Fixed the posible security issue. The admin section now uses double authentication and encryption.
Release V2.0 Beta 1......
Some minor bug fixes ('Back' links added to some pages and CPanel skin set in db.inc.php to name 2)
There is also an install script bundled with V2.0
This should ease setup.
Run the install script, enter your details and hit 'Install'.
This will then create db.inc.php for you with all your details and optionally create the database tables needed.
The install script will also create a 'default' admin email account which you can then use to login to RoundCube and then enter the Admin area. (Please make sure that the default admin address you specify is not taken and enter username only ie. everything before the '@')
As with the previous release users are able to signup and recover lost passwords.
On signup the user is sent a welcome email to their newly created email address and the alternate address that they specified at signup.
Admin are also notified that a new account has been created.
Password Recover Email
(Details are automatically generated from information given on install and user details given)
The Admin Panel is only accessable to those users who have been given admin rights.
If a user has rights they will see and extra link 'Admin'. If they do not have rights they will see no link.
To prevent anyone trying to just go to the admin landing page, the landing page itself will also authenticate the user again and check they have admin rights before allowing them access.
From here admins can control individual accounts with....
Create accounts
Delete accounts
Change quota
Send password
Change password
Give/Take admin rights
Some user information is also given (email, current quota, name, alternate email, date account was created, IP at account creation)
Whenever a user is given/taken admin rights both the address set for admin notification at install and the user are emailed. This is to help keep track of other admins giving admin rights.
I think that about sums it all up or at least I hope, it took me nearly as long to write this post!!
I hope that the bugs are gone and installation and use will be trouble free, of course I cannot guarantee it!
Please test this out and let me know your suggestions, ideas, comments (good or bad) and if there are any problems with installation or use just post your problem and I will resolve the issue as soon as is possible.
Have fun and thank you for everyones support and patience.