postfixadmin

PostfixAdmin - web based virtual user administration interface for Postfix mail servers https://postfixadmin.github.io/postfixadmin/

History

David Goodwin 8a1f9a11af CSRF protection - support multiple tokens (#985 ) possible fix for https://github.com/postfixadmin/postfixadmin/issues/967 CSRF Token changes : rather than have one PFA_Token value in $_SESSION, store a list of them, where each value has a time stamp it was issued on. The aim is to allow the user to have multiple browser tabs open at once - and not have the last tab that loaded trample on others. Tokens expire after 1 hour. Adds a Smarty helper function `{CSRF_Token}` which will output `<input type=hidden name=CSRF_Token value=asdf123>` or `{CSRF_Token type=url}` which outputs a literal string like 'asdf123' suitable for placing in a URL. Adds a PHP exception handler in public/common.php, which could be used to display a more friendly error message/response (but at the moment is fairly minimal). Removes most uses of `die()` within the codebase, and instead moves to throw an exception		3 days ago
..
Changelog	list-virtual.php:	16 years ago
README-ES.txt	list-virtual.php:	16 years ago
README.txt	list-virtual.php:	16 years ago
cyrus-mailbox-postcreation.pl	list-virtual.php:	16 years ago
cyrus-mailbox-postdelete.pl	list-virtual.php:	16 years ago
cyrus-mailbox-postedit.pl	list-virtual.php:	16 years ago
cyrus.conf	list-virtual.php:	16 years ago

README.txt


Configuration
-------------

 - Edit cyrus.conf and set $cyrus_* variables correctly. User must have permission over all accounts.
 - Edit cyrus-*.pl and change path to cyrus.conf (require '/path/to/cyrus.conf'; line)