Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

#165 Wrong url in redirect right frame after send

open
nobody
None
5
2007-06-22
2007-06-22
Uwe Böhme
No

Squirrel 1.4.9a

Using squirrel via https:// works without problem.
After sending a mail the rdirect of the right frame goes no mor to a https but to a plain http url.

Example

Composing mail. Right frames url is:
https://www.cc-inet.de/mail/src/webmail.php

After pressing SEND the right frame redirects to:
http://www.cc-inet.de/mail/src/right_main.php?mailbox=INBOX.Sent&sort=0&startMessage=1

Definitely should be:
https://www.cc-inet.de/mail/src/right_main.php?mailbox=INBOX.Sent&sort=0&startMessage=1

I don't allow http:/ to the server, so resuls to a 404.

Discussion

  • Logged In: YES
    user_id=285765
    Originator: NO

    Can you reproduce this with 1.4.10a?
    What does base_uri report in src/configtest.php?

     
  • Logged In: YES
    user_id=508228
    Originator: NO

    You could also try setting $config_location_base, but if you update to 1.4.13 and still have this problem, please do show the results of src/configtest.php. Also, check the URIs of the links in the "menu bar" at the top of the right frame (Compose, Addresses, etc) and see if they are ALL correct or not. It would also be helpful to know what web server (and version) you are using, etc. Please report back all of these details so we can better help you.

     
  • Jim Waters
    Jim Waters
    2008-10-22

    I see this problem in SquirrelMail 1.4.13 (specifically 2:1.4.13-2ubuntu1).

    The SquirrelMail virtual host is enabled via https but not via http. I can log in via https and use most of SquirrelMail without problem. When I visit the "Compose" page and click "Send", I get redirected to right_main.php via http. As a result, the right pane reads:

    Not Found

    The requested URL /src/right_main.php was not found on this server.
    Apache/2.2.8 (Ubuntu) DAV/2 SVN/1.4.6 PHP/5.2.4-2ubuntu5.3 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at mail.foo.com Port 80"

    The output of configtest.php reports a base URL of http://mail.foo.com/src. I will attach the entire output to this bug.

    I could hardcode https into the base URL, but that seems like the wrong fix. Consider the following scenario:

    1. Install Squirrelmail and enable both http and https access.
    2. Login to Squirrelmail via https.
    3. Click "Compose", type a message, and click "Send".
    4. After the message has been sent, the contents of the right frame will be fetched unencrypted via http. This violates the user's expectation that, since they logged in via https, their traffic will be encrypted to prevent eavesdropping.

     
  • 1) please try a vanilla SM package downloaded from squirrelmail.org, and not a package built by a third party
    2) your scenario to consider assumes that SM *always* redirects to http after a mail send, and this is not the case
    3) configtest.php should show something like the following if you have it set to auto-detect: Base URL detected as: http://www.example.org/squirrelmail/src (location base autodetected), so if http://mail.foo.com/src is a correct address path, then at least that part seems to be working.
    4) check the other items requested in previous posts on this tracker and please submit those details
    5) step through get_location() in functions/strings.php and insert debug code to see where the protocol calculation goes wrong