Author Topic: Calendar plugin (Read 68125 times)

alainpp · « **Reply #45 on:** February 12, 2009, 10:52:54 AM »

I found a security issue in the calendar.

If you go to the calendar menu "View" -> "Another user's calendar" i can see the calendar of any user in the server. This happens also in your server (mail4us).

I think that your calendar is a private thing and if you want share your calendar this shouldn't be active by default.

I know this is NOT a problem of myroundcube at all, but is good to know. I need to check how to disable this option. If anyone knows, please let us know.

rosali · « **Reply #46 on:** February 12, 2009, 12:15:30 PM »

Yes, settings on mail4us were incomplete. Thanks to remember me ...

#1 Login using default Webcalender Login Page as a user with admin privileges.
#2 If you don't have an admin user yet, then modify webcalender database table 'webcal_user' and set field 'cal_is_admin' to 'Y'.
#3 Configure Webcalendar by menu Settings -> System Settings
#4 Open ./includes/menu/menu_config.php and disable menus related to group work

alainpp · « **Reply #47 on:** February 12, 2009, 02:25:38 PM »

Perfect, that works.

Thanks.

alainpp · « **Reply #48 on:** February 13, 2009, 09:07:50 AM »

I found a new problem with the calendar:

The username is limited to 25 characters, because myroundcube use the email as username, some emails have more than 25 characters. I have a lot of emails with more than 25 characters.

I went to the database and increase the username (webcal_user) characters to 50, i also increase the maxlength in login.php, but now i have this error when a username is more than 25 characters (even if the user name is saved complete in the database):

Error

Error executing query.

rosali · « **Reply #49 on:** February 15, 2009, 04:57:37 AM »

Why the heck they have decided to limit user names to 25 strings?

I have reviewed the code. To get rid of the 25s limitation it would be necessary to hack CORE of webcalendar. Bad approach for future updates ... So, give me a week to re-write "user-imap.php".

rosali · « **Reply #50 on:** February 17, 2009, 03:16:37 PM »

@alainpp ... check your PM's

tfyisupportteam · « **Reply #51 on:** February 18, 2009, 04:43:45 PM »

What do i need to do in order to integrate this with roundcube, is there a download for roundcube, i know where to get web calendar but im not sure what to do to integrate this calendar.

Thx

alainpp · « **Reply #52 on:** February 18, 2009, 05:50:31 PM »

1. You need first install the webcalendar somewhere, it doesn't matter. For example: http://www.yourdomain.com/webcalendar

2. Make sure your webcalendar installation works creating a test user.

3. Update to the latest version of myroundcube.

4. In your myroundcube folder, go to: c:\myroundcubefolder\myplugins\collection\calendar\

5. Open "config.inc.dist" and put the correct values to:

- calendar = TRUE

- calendar_url = http://www.yourdomain.com/webcalendar

- db_dsnw_calendar = connection to your webcalendar database, must be something like this: "mysql://_username_:_password_@_yourserver_/_database_name_"

6. Go to: C:\myroundcubefolder\myplugins\config and open "config_plugins.php", if you don't have this file, use "config_plugins.php.dist" and change the value of "$rcmail_config['plugins']['calendar']" to TRUE.

Then login to your webmail and an icon of a calendar should appear in the upper menu.

Alain.

rosali · « **Reply #53 on:** February 26, 2009, 12:58:09 PM »

http://www.roundcubeforum.net/myroundcube/3884-myroundcube-release-notes-2.html

alainpp · « **Reply #54 on:** February 26, 2009, 03:15:11 PM »

I'm confused now:

#1- Download and install Webcalendar k5n.us: WebCalendar Home Page out of MyRoundCube Root Folder !!!

Q/ i saw that you included the webcalendar in the app folder, if we have to install the webcalendar outside why do we need this folder with the webcalendar files?

#3- Delete ./myplugins/collection/calendar

Q/ do i have to delete this folder from my current myroundcube installation?

#5- Configure Calendar pluging config file

Q/ in the config file you are doing reference to the app folder inside the calendar folder, do we need to replace this line with our calendar installation? example: http://www.mydomain/webcalendar??

thanks,

Alain.

rosali · « **Reply #55 on:** February 26, 2009, 03:31:25 PM »

Well, I'm in hurry due to vacations starting tomorrow ...

#-1 You need an install of Webcal outside of MyRoundCube Root just to set it up (database creation and so on ...)

#3-Yes, delete it from the plugin folder before unzip ... reason: file structure (see .htaccess in patch folders)

#5-Depends on your config ... on my local test environment the packaged cal works as plugin. Nethertheless, the config value which is confusing you, keeps the ability to nav out to a fully featured webcal ... OK?

EDIT: I have updated mail4us.net and it seems to work properly ...

alainpp · « **Reply #56 on:** February 26, 2009, 07:19:18 PM »

Don't worry, enjoy your vacation. I'll figure it out.

One more question, the user in the webcalendar database should be the MD5 Code with 25 characters or the email?

rosali · « **Reply #57 on:** February 27, 2009, 12:33:56 AM »

The user (cal_login) is hashed by ...

base_convert(md5("someone@mydom.com"), 16, 36 );

alainpp · « **Reply #58 on:** February 28, 2009, 07:47:13 AM »

For some reason the user is not created in the webcalendar database when I do login in my webmail.

When i try to login and the calendar is active i get this error: "user not found", this is related to the problem described above. if I deactivate the calendar plugging i don't get this error.

rosali · « **Reply #59 on:** February 28, 2009, 10:20:37 AM »

Did you route it to your existing WebCal installation? If so, copy patched files in ./myplugins/collenction/calender/app over WebCal install.