Current time: 11-22-2024, 04:42 AM Hello There, Guest! (LoginRegister)


Post Reply 
New Version of E-mail, FTP, and SQL Password Changer
Author Message
Dolomike Offline
Newbie
*

Posts: 7
Joined: Sep 2009
Reputation: 1
Post: #1
New Version of E-mail, FTP, and SQL Password Changer
Hi all,

I have completed a new version of the password changer. Please give it a try and let me know if you find any errors or would like any additions. I've tried to follow the coding standards so hopefully this code is good enough to make it into the trunk at some point.

The password changer has the following features:
  • Allows users to change E-mail, FTP, and SQL passwords
  • Administrator can turn on/off password changer
  • Administrator can select which passwords can be changed
  • Uses captcha (same one already used in ispCP)
  • Performs all the same password checks that is done within ispCP
  • Timer retry for incorrect attempts (not fully working)
  • Uses default ispCP theme for same look and feel as the rest of the ispCP
  • Logs each failure and successful password change

To install, perform the following steps:
  • Change to the ispCP GUI directory ( cd /var/www/ispcp/gui)
  • Extract the files (tar -zxvf changepassword-0.1.tar.gz)
  • Add the following configuration settings into include/ispcp-lib.php

    PHP Code:
    // Enable change password functionality
    Config::set('CHANGEPASSWORD'true);

    // Enable individual password change
    Config::set('CHANGEPASSWORDEMAIL'true);
    Config::set('CHANGEPASSWORDFTP'true);
    Config::set('CHANGEPASSWORDSQL'true);

    // captcha imagewidth
    Config::set('CHANGEPASSWORD_CAPTCHA_WIDTH'280);
    // captcha imagehigh
    Config::set('CHANGEPASSWORD_CAPTCHA_HEIGHT'70);
    // captcha background color
    Config::set('CHANGEPASSWORD_CAPTCHA_BGCOLOR', array(229,243,252));
    // captcha text color
    Config::set('CHANGEPASSWORD_CAPTCHA_TEXTCOLOR', array(0,53,92)); 
  • For any accounts you don't want users to be able to change, simply set the corresponding configuration setting in include/ispcp-lib.php to false
  • Try it out! http://ispcp.domain.tld/changepassword.php

A few things still need to be done:
  • Fix the retry timer - not displayed at the right page and the "back" link is hardcoded to index.php in include/login-functions.php
  • Add web GUI code to allow the configuration settings to be changed within the ispCP web GUI (Under the Settings page)


Attached File(s)
.gz  changepassword-0.1.tar.gz (Size: 5.06 KB / Downloads: 69)
02-28-2010 05:57 PM
Find all posts by this user Quote this message in a reply
MasterTH Offline
Member
***

Posts: 570
Joined: Feb 2009
Reputation: 4
Post: #2
RE: New Version of E-mail, FTP, and SQL Password Changer
Looks great,

big thanks!!!
02-28-2010 06:44 PM
Find all posts by this user Quote this message in a reply
Knut Offline
Member
***

Posts: 736
Joined: Nov 2006
Reputation: 10
Post: #3
RE: New Version of E-mail, FTP, and SQL Password Changer
Thanks !
I hope this come into the next Trunk.
02-28-2010 11:45 PM
Find all posts by this user Quote this message in a reply
TheCry Away
Member
***

Posts: 851
Joined: Oct 2008
Reputation: 21
Post: #4
RE: New Version of E-mail, FTP, and SQL Password Changer
(02-28-2010 11:45 PM)Knut Wrote:  Thanks !
I hope this come into the next Trunk.

We can think about this, but we need a ticket as enhancement or nice to have!
03-01-2010 05:22 PM
Find all posts by this user Quote this message in a reply
help40 Offline
Junior Member
*

Posts: 16
Joined: Mar 2010
Reputation: 0
Post: #5
RE: New Version of E-mail, FTP, and SQL Password Changer
sorry for stupid question , but what is the difference "old pass change" and "new one" ?
03-07-2010 09:08 PM
Visit this user's website Find all posts by this user Quote this message in a reply
Knut Offline
Member
***

Posts: 736
Joined: Nov 2006
Reputation: 10
Post: #6
RE: New Version of E-mail, FTP, and SQL Password Changer
(03-01-2010 05:22 PM)TheCry Wrote:  We can think about this, but we need a ticket as enhancement or nice to have!

Here we go: http://www.isp-control.net/ispcp/ticket/2263
03-07-2010 09:16 PM
Find all posts by this user Quote this message in a reply
Dolomike Offline
Newbie
*

Posts: 7
Joined: Sep 2009
Reputation: 1
Post: #7
RE: New Version of E-mail, FTP, and SQL Password Changer
Thanks Knut for adding the ticket!

Help40,

The new one follows the ispCP programming structure, uses the ispCP template system, themes, translation system, captcha and retry timer while the old one didn't contain any of these features.

Although they perform the same function, simply put, it looks and operates more like a built in ispCP module rather than something just thrown together.

Dolomike
03-08-2010 01:41 PM
Find all posts by this user Quote this message in a reply
grisu Offline
Junior Member
*

Posts: 64
Joined: Jun 2009
Reputation: 0
Post: #8
RE: New Version of E-mail, FTP, and SQL Password Changer
hi there

Nice one... I like the feature! but gotta problem. I've just installed it.

After submitting the form it just reloads the form again (with new captcha). No error, no confirmation, just nothing... This happens every time and it's not depending if captcha-answer is right or wrong.

What works is: If the language of the panel is in ENGLISH the form is in english.. and if the language is set to german, the form either is german..

I don't find an error message, so maybe you have an idea where to check / what to try?

thanks in advance!
06-17-2010 03:43 AM
Find all posts by this user Quote this message in a reply
N!Ce Offline
Newbie
*

Posts: 8
Joined: Jul 2010
Reputation: 0
Post: #9
RE: New Version of E-mail, FTP, and SQL Password Changer
I installed this on ispCP 1.0.5 and have a little problem with it, hope anyone can help me out.

Changing password seems to work, I get the message that it was successfully changed and looking at the database it changed indeed. However, if I try to log into the webmail account of the changed password, it still accepts only the old password.

But, if I try to change the password again with PasswordChanger it asks for the changed password. It's like SquirrelMail takes its password/user details from another DB than the one this tool writes in.

Changing password from ispCP frontend works btw.

Does anyone have an idea? I have the feeling I am just not seeing the forest because of too many trees. o_O

Technical info
ispCP Version: 1.0.5
SquirrelMail: 1.4.20 (the one included in ispCP 1.0.5)
Distro: Debian Lenny
Error messages: none

PS: Ich spreche auch Deutsch =x
(This post was last modified: 07-06-2010 02:03 AM by N!Ce.)
07-06-2010 02:02 AM
Find all posts by this user Quote this message in a reply
joximu Offline
helper
*****
Moderators

Posts: 7,024
Joined: Jan 2007
Reputation: 92
Post: #10
RE: New Version of E-mail, FTP, and SQL Password Changer
Hi N!Ce

the password changer from this thread is not part of ispcp.

But we may try to help you.

Obviously the password is changed at least in the ispcp database.

It seems not to be changed in the userdb of imap (where squirrel authenticates). So also the pop and imap passwords should be unchanged -> please verify.

Now: if also the "smtp auth" passwords are unchanged (please check) then we know at least what's working and what is not.

Then we can look where the error is....

(btw: you don't have errors in the ispcp logs???)

/J
07-07-2010 05:31 PM
Visit this user's website Find all posts by this user Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)