Change Password for QmailAdmin / roundcube0.2stable

[ikaris]

Base on:

http://wheaties.us/blog/2008/12/21/change-password-roundcube/

alter function ( roundcube/program/steps/settings/password.inc ):


function rcube_save_password($current_password,$new_password)
{
        global $OUTPUT, $RCMAIL;

        $emailuser=$_SESSION['username'];

        //$db = rcmail::get_instance()->get_dbh();

        // YOU MUST CHANGE THIS QUERY LINE TO MATCH YOUR DATABASE SETTINGS !!!!!
        //$passwordquery = "UPDATE database.table SET password_field =ENCRYPT('".$new_password."') WHERE user_name = '".$emailuser."';";   

        //$db->query($passwordquery);

        //console("email: $emailuser");
        //console("current password: $current_password");
        //console("New password: $new_password");

        //set POST variables
        $url = 'http://localhost/qmailadmin/index.cgi/passwd/';

        $fields = array(
                'address'=>urlencode($emailuser),
                'oldpass'=>urlencode($current_password),
                'newpass1'=>urlencode($new_password),
                'newpass2'=>urlencode($new_password),
                );

        //url-ify the data for the POST
        foreach($fields as $key=>$value) { $fields_string .= $key.'='.$value.'&'; }
        rtrim($fields_string,'&');

        //open connection
        $ch = curl_init();

        //set the url, number of POST vars, POST data
        curl_setopt($ch, CURLOPT_URL,$url);
        curl_setopt($ch, CURLOPT_POST,count($fields));
        curl_setopt($ch, CURLOPT_POSTFIELDS,$fields_string);
        curl_setopt($ch, CURLOPT_POST,1);
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION,1);
        curl_setopt($ch, CURLOPT_HEADER,0);  // DO NOT RETURN HTTP HEADERS
        curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);  // RETURN THE CONTENTS OF THE CALL

        //execute post
        //console("Curl: $url$fields_string");
        $result = curl_exec($ch);

        ob_start();
        header("Content-Type: text/html");
        $Temp_Output = ltrim(rtrim(trim(strip_tags(trim(preg_replace ( "/\s\s+/" , " " , html_entity_decode($result)))),"\n\t\r\h\v\0 ")), "%20");
        $Temp_Output = ereg_replace (' +', ' ', trim($Temp_Output));
        $Temp_Output = ereg_replace("[\r\t\n]","",$Temp_Output);

        /* The \b in the pattern indicates a word boundary, so only the distinct
         * word "web" is matched, and not a word partial like "webbing" or "cobweb" */
        if (preg_match("/\bsuccessfully\b/i", $Temp_Output)) {

                //console ("Temp_Out : $Temp_Output");

                $_SESSION['password'] = encrypt_password($new_password);

                $OUTPUT->show_message('successfullysaved', 'confirmation');
        } else {
                //console ("Temp_Out : $Temp_Output");
                $error_msg= explode(':',$Temp_Output);
                //console ("Error msg : $error_msg[0]");
                $OUTPUT->show_message("$error_msg[0]", 'error');
                //$OUTPUT->show_message('errorsaving', 'error');
        }

        //console ("Temp_Out : $Temp_Output");
        $Final_Out=ob_get_clean();
        //console ("Final_Out : $Final_Out");

        //close connection
        curl_close($ch);
}

[ikaris]

ups

Base on: wheaties.us || Andy and Natasha Wheatley's Blog