#165 Wrong url in redirect right frame after send

[Uwe Böhme]

Squirrel 1.4.9a

Using squirrel via https:// works without problem.
After sending a mail the rdirect of the right frame goes no mor to a https but to a plain http url.

Example

Composing mail. Right frames url is:
https://www.cc-inet.de/mail/src/webmail.php

After pressing SEND the right frame redirects to:
http://www.cc-inet.de/mail/src/right_main.php?mailbox=INBOX.Sent&sort=0&startMessage=1

Definitely should be:
https://www.cc-inet.de/mail/src/right_main.php?mailbox=INBOX.Sent&sort=0&startMessage=1

I don't allow http:/ to the server, so resuls to a 404.

[Thijs Kinkhorst]

Logged In: YES
user_id=285765
Originator: NO

Can you reproduce this with 1.4.10a?
What does base_uri report in src/configtest.php?

[Paul Lesniewski]

Logged In: YES
user_id=508228
Originator: NO

You could also try setting $config_location_base, but if you update to 1.4.13 and still have this problem, please do show the results of src/configtest.php. Also, check the URIs of the links in the "menu bar" at the top of the right frame (Compose, Addresses, etc) and see if they are ALL correct or not. It would also be helpful to know what web server (and version) you are using, etc. Please report back all of these details so we can better help you.

[Paul Lesniewski]

Logged In: YES
user_id=508228
Originator: NO

Also see the comments I posted today on this tracker (1741469):

https://sourceforge.net/tracker/?func=detail&atid=100311&aid=1741469&group_id=311

There may be some problem with PHP_SELF in your web server

[Jim Waters]

I see this problem in SquirrelMail 1.4.13 (specifically 2:1.4.13-2ubuntu1).

The SquirrelMail virtual host is enabled via https but not via http. I can log in via https and use most of SquirrelMail without problem. When I visit the "Compose" page and click "Send", I get redirected to right_main.php via http. As a result, the right pane reads:

Not Found

The requested URL /src/right_main.php was not found on this server.
Apache/2.2.8 (Ubuntu) DAV/2 SVN/1.4.6 PHP/5.2.4-2ubuntu5.3 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at mail.foo.com Port 80"

The output of configtest.php reports a base URL of http://mail.foo.com/src. I will attach the entire output to this bug.

I could hardcode https into the base URL, but that seems like the wrong fix. Consider the following scenario:

1. Install Squirrelmail and enable both http and https access.
2. Login to Squirrelmail via https.
3. Click "Compose", type a message, and click "Send".
4. After the message has been sent, the contents of the right frame will be fetched unencrypted via http. This violates the user's expectation that, since they logged in via https, their traffic will be encrypted to prevent eavesdropping.

[Paul Lesniewski]

1) please try a vanilla SM package downloaded from squirrelmail.org, and not a package built by a third party
2) your scenario to consider assumes that SM *always* redirects to http after a mail send, and this is not the case
3) configtest.php should show something like the following if you have it set to auto-detect: Base URL detected as: http://www.example.org/squirrelmail/src (location base autodetected), so if http://mail.foo.com/src is a correct address path, then at least that part seems to be working.
4) check the other items requested in previous posts on this tracker and please submit those details
5) step through get_location() in functions/strings.php and insert debug code to see where the protocol calculation goes wrong