Author Topic: Get password? (Read 4650 times)

xeditor · « **on:** February 18, 2009, 05:54:56 AM »

Hi there.
I just can't get the password for accounts in a good way.
I try to use the following:
<roundcube:var name='session:username' />
<roundcube:var name='session:password' />
With this I get the user correct but the password crypted or something.
Hope that someone can help me.

Regards
John

Napsty · « **Reply #1 on:** February 18, 2009, 07:27:25 AM »

Well I hope that the password is crypted! Otherwise somebody could easily gain access on your system.
If you really want to use non-encrypted passwords, then you have to set them in the system so that the unix user has a text password.

xeditor · « **Reply #2 on:** February 18, 2009, 08:22:53 AM »

Hi and thank you.
The user is not in system but in a mysql db.
I can get this info in other webmail scripts but not in RC.
Is it the session pw that is crypted or where does it get crypted?
Or the third option is my "session:password" wrong? Should I use another way to get it?

Napsty · « **Reply #3 on:** February 18, 2009, 09:28:12 AM »

Well I don't know how exactly your system/your installation looks like but I guess it works like this:

You log in with your roundcube user. The roundcube application encrypts your given password and compares the given password with the one on the system. If the password is correct, the session gets started and the encrypted password is stored in your session and the value, you're trying to read out.

I guess the only possibility to have that what you want is to make two different password-vars after loggin in: one which gets encrypted to compare with the password in the system and one which saved the given password in cleartext.
Unfortunately that goes too deep into the roundcube core - at least for me.
If anyone has another idea or I'm mistaken, give it a shot ^^

xeditor · « **Reply #4 on:** February 18, 2009, 10:24:17 AM »

You're right.
I see the problem.
I would really like to be able to this in one of our systems though.
If anyone can show me the way I'd be happy to try.
Thanks for you help.

xeditor · « **Reply #5 on:** February 23, 2009, 04:44:06 AM »

Is there anyone that can help me get this solved?
I really need to use the pass in a hidden field in one installation of RoundCube.

Thanks

xeditor · « **Reply #6 on:** February 24, 2009, 05:18:39 AM »

Solved by creating a new session in rcmail.php.