SquirrelMail  
Donations
News
About
Support
Security
Screen shots
Download
Plugins
Documentation
Sponsors
Bounties





Junk Email Filter






Security Notice
Phishing campain
Version 1.4.15
Security Upgrade
Plugins - Password Forget
Category: Logging in

Many web browsers provide the capability to store all usernames and passwords entered on any web site. Especially on public-access computers, this could pose the risk of stolen user login credentials.

This plugin provides a workaround for this vulnerability, wherein the name of the username and password input fields is changed randomly every time the SquirrelMail login page is displayed. The browser is also asked specifically not to cache these fields.

Please note that in some cases, the browser may still remember user credentials (perhaps on some older or more obscure browsers), however the chances that a same-named username or password field would be displayed again on that computer are very small.

The administrator may, if desired, specify a list of "known clients" for which this functionality will be disabled (for the case when some users should be allowed to harness this browser feature to their benefit when at their home computers).


Version 2.3
by Paul Lesniewski on Dec 15, 2011
Please support this plugin's development: Donate to this author
[ password_forget-2.3-1.0.1.tar.gz tarball (14767 d/l) Help ]
Requires: SquirrelMail 1.0.1+

Description:
  • This plugin will now also attempt to "tell" the browser not to cache usernames/passwords (by using the "autocomplete" attribute on the input form tags)

Older versions

Version 2.2
by Paul Lesniewski on Nov 3, 2008
[ password_forget-2.2-1.0.1.tar.gz tarball (13997 d/l) Help ]
Requires: SquirrelMail 1.0.1+

Description:
  • Update to work with SquirrelMail 1.5.2+
  • General cleanup and updates


Version 2.1
by Paul Lesniewski on Sep 23, 2004
[ password_forget.2.1-1.0.1.tar.gz tarball (16448 d/l) Help ]
Requires: SquirrelMail 1.0.1, Compatibility plugin

Description:
  • Added ability to turn plugin off for certain known clients
  • Updated for compatibility with plugin updates plugin/plugin specs


Version 2.0
by Paul Lesniewski on Mar 16, 2003
[ password_forget.2.0-1.0.1.tar.gz tarball (13831 d/l) Help ]
Requires: SquirrelMail 1.0.1, Compatibility plugin

Description:
  • Updated for compatibility with SquirrelMail version 1.4 (NOTE - requires 1.4 from cvs as of 16/03/03)
  • New setup.php format for better overall SquirrelMail performance
Make sure to download the Compatibility plugin in order for Password Forget to function correctly.

Version 1.3
by Paul Lesniewski on Feb 5, 2003
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.0.1

Description:
  • Register_globals = Off compatible
  • Compatibility added for vlogin plugin
  • Compatible with "plugin updates" plugin


Version 1.2
by Tyler Akins on Mar 25, 2001
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.0.1

Description: Works with the changes to the login form.

Version 1.1
by Tyler Akins on Dec 6, 2000
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 0.5 or above

Description: Works with the focus_change plugin.

Version 1.0
by Tyler Akins on Unknown
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 0.5 or above

Description: Initial version.

If you have problems with the download or decompressing...
Internet Explorer
Right-click on the file, then select "Save Target As"
Firefox, Mozilla, Netscape
Right-click on the file, then select "Save Link As"
Opera
Right-click on the file, then select "Save Link Document As"
Lynx and Links
Press "d" on the link to download the file directly.
  • Untarring problems: Your browser might have un-gzipped it for you automatically. Try just "tar xvf" instead of "tar xvfz". Also, the plugins archive isn't gzipped (it is a tarball of .tar.gz files)
  • Macintosh users: Just hold down your mouse button to get the menu instead of right-clicking.
  • If all else fails, seek our help
© 1999-2016 by The SquirrelMail Project Team