Comments on: Roundcube: allow users to change their own passwords

By: Alessio Placitelli

Alessio Placitelli — Sun, 06 Apr 2008 21:43:40 +0000

Yes, more or less

1. md5 function should be lowercase (check http://www.php.net/md5 ), and takes one parameter (the second one is optional and should be false to output a 32 hex digits string). So: $tmpEncPass = md5($_POST[’_password’]);

2. mysql_query(”UPDATE CCC.users SET password = ‘”.$tmpEncPass.”‘ WHERE username = ‘”.$_SESSION[’username’].”‘”) in that line of code, you should replace CCC with the name of the database containing the table “users”.

Then it should work ! Let me know

By: Martin

Martin — Sun, 06 Apr 2008 21:10:36 +0000

Thanks for the reply. I found out through research that our mail server uses MD5 since the password generated 32 hex digits.

So if I will enter these infos, correct me if I am wrong, please, I am new to this:

1. $tmpEncPass = MD5($_POST['_password'], “”);
2. mysql_query(“UPDATE CCC.users.MYROUNDCUBEDATABASEPASSWORD SET password = ‘”.$tmpEncPass.”‘ WHERE username = ‘”.$_SESSION['username'].”‘”)

I will really be grateful if you can help me with this. Thanks.

Martin

By: Alessio Placitelli

Alessio Placitelli — Sat, 05 Apr 2008 08:00:06 +0000

You have to replace YourEncryptionFunctionHERE with the name of the encryption function you are using to store user passwords in your database.

The second line pretty much depends on the structure of the previously mentioned database.

What email server are you using? If you are using Postfix, then you problably need and MD5 function in place of YourEncryptionFunctionHERE.

By: Martin

Martin — Sat, 05 Apr 2008 03:05:56 +0000

Thanks for this MOD, I am new to RoundCube and I wanted to know ehere you get these:

1. YourEncryptionFunctionHERE
2. UPDATE CCC.TableWithPasswordHERE SET password

Thanks