SquirrelMail  
Donations
News
About
Support
Security
Screen shots
Download
Plugins
Documentation
Sponsors
Bounties

search site:
more search




Junk Email Filter






Security Notice
Phishing campain
Version 1.4.15
Security Upgrade
Plugins - Change_passwd
Category: Change password

If your email users are system users, this plugin allow your users to change his/her system password in /etc/passwd or /etc/shadow.

Find more information about the current state of this plugin here.


Version 4.0
by Paul Lesniewski on Apr 23, 2004
Please support this plugin's development: Donate to this author
[ change_passwd-4.0-1.2.8.tar.gz tarball (84240 d/l) Help ]
Requires: SquirrelMail 1.2.8, Compatibility plugin 1.3
Description: This version includes important security fixes, so it should be considered high priority to upgrade this plugin ASAP.
  • PLEASE NOTE that this version requires that you upgrade to version 1.3 of the Compatibility Plugin
  • PLEASE NOTE that due to extensive changes made in this version that you should ENTIRELY remove your old change_passwd directory and reinstall this version from scratch.
  • Security fix: buffer overflow problem thwarted
  • Security fix: correctly sanitized user input
  • Updated to use MD5 password encryption (can now accomodate passwords greater than 8 characters) (Thanks to Victor Clodoaldo Salas Pumacayo [nmag at softhome dot net])
  • Switched to gettext style internationalization instead of one-off custom implementation. Translators please get in touch with your .po files!
  • Revised README file with detailed help and support sections
  • Better organized input validation
  • More secure verification of username and current password
  • Lots of HTML fixes/cleanup

Older versions

Version 3.1
by Paul Lesniewski on Jul 12, 2003
[ change_passwd-3.1-1.2.8.tar.gz tarball (24978 d/l) Help ]
Requires: SquirrelMail 1.2.8, Compatibility plugin
Description: Tons of fixes. Upgrade is highly recommended, even if you got an advanced copy through the mailing lists or directly through email, since there are even newer changes in this version.
  • Fixed logout link when forcing users to log out after password change (Thanks to Robert Tom [robert at estrell.com])
  • Added support for FreeBSD's 'pw' password change utility (Thanks to Rickard Lind [rickard.lind at ntier.se])
  • Fixed file include functionality to be more in line with the SquirrelMail paradigm; should fix anomalous behaviors some people were seeing
  • Fixed problems when trying to keep users logged in after password change
  • Force logout to both frames
  • Fixed color problems with some themes
  • Now escapes shell metacharacters in passwords
  • Added debugging functionality
  • Moved config.php to config.php.sample for hassle-free upgrades
  • Fixed erroneous error reporting
  • Added Italian language file (Thanks to Massimiliano Spini [massimiliano.spini at outsourcing.albacom.net])
  • Added Swedish language file (Thanks to Rickard Lind [rickard.lind at ntier.se])
  • Added Estonian language file (Thanks to Erkki Liba [lips at annenk.tartu.ee])
  • Added Romanian language file (Thanks to Iosif Fettich [ifettich at netsoft.ro])
  • Added German language file (Thanks to Cavegn Christian [ichris at rubbish.ch])
  • Added Dutch language file (Thanks to Anton Osinga [rzch0s at toonsmachine.homelinux.com])
  • Added French language file (Thanks to Lo~AE de VAULX [loic.de-vaulx at webinov.com])


Version 3.0.1
by Paul Lesniewski on Apr 18, 2003
[ change_passwd-3.0.1-1.2.8.tar.gz tarball (12712 d/l) Help ]
Requires: SquirrelMail 1.2.8, Compatibility plugin
Description:
  • Added Finnish language file (Thanks to Jukka Vuola [juki at linja.org])


Version 3.0
by Paul Lesniewski on Apr 9, 2003
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.8, Compatibility plugin
Description:
  • Corrections to English language file
  • Lots of E_ALL fixes
  • Added compatibility with SquirrelMail 1.4 (while also retaining backward compatibility with version 1.2.x)
  • Added compatibility with Plugin Updates plugin
  • Added register_globals=Off compatibility
  • Minor HTML formatting fixes


Version 2.0
by Thiago Melo de Paula on Oct 22, 2002
[ change_passwd2.0-1.2.8.tar.gz tarball (17641 d/l) Help ]
Requires: chpasswd
Description:
- I made a C program to diminish the complexity of the plugin, now you don't need worry about cgi.
- After password change, the user aren't disconnected of SM. You can choose this in the conf.php.
The default is that the user don't will be disconnected.
- The conf.php file have more options to configure the plugin.
- This plugin was tested with SM 1.2.7 and 1.2.8

Version 1.1
by Thiago Melo de Paula on Sep 5, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: chetcpasswd
Description:
- The conf.php file have more options to configure the plugin.
- If the password change is successful, the user will be disconnected of SM to connect with new password.
- I tried to detail the README file better.
- Removed some useless buttons. Now just have the submit button.

Version 1.0
by Thiago Melo de Paula on Sep 4, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: chetcpasswd
Description: Initial Version

If you have problems with the download or decompressing...
Internet Explorer
Right-click on the file, then select "Save Target As"
Firefox, Mozilla, Netscape
Right-click on the file, then select "Save Link As"
Opera
Right-click on the file, then select "Save Link Document As"
Lynx and Links
Press "d" on the link to download the file directly.
  • Untarring problems: Your browser might have un-gzipped it for you automatically. Try just "tar xvf" instead of "tar xvfz". Also, the plugins archive isn't gzipped (it is a tarball of .tar.gz files)
  • Macintosh users: Just hold down your mouse button to get the menu instead of right-clicking.
  • If all else fails, seek our help
© 1999-2016 by The SquirrelMail Project Team