Password Forget Plugin - SquirrelMail - Webmail for Nuts

Donations
News
About
Support
Security
Screen shots
Download
Plugins
Documentation
Sponsors
Bounties

search site:

Security Notice
Phishing campain
Version 1.4.15
Security Upgrade

Plugins - Password Forget
Category: Logging in

Many web browsers provide the capability to store all usernames and passwords entered on any web site. Especially on public-access computers, this could pose the risk of stolen user login credentials.

This plugin provides a workaround for this vulnerability, wherein the name of the username and password input fields is changed randomly every time the SquirrelMail login page is displayed. The browser is also asked specifically not to cache these fields.

Please note that in some cases, the browser may still remember user credentials (perhaps on some older or more obscure browsers), however the chances that a same-named username or password field would be displayed again on that computer are very small.

The administrator may, if desired, specify a list of "known clients" for which this functionality will be disabled (for the case when some users should be allowed to harness this browser feature to their benefit when at their home computers).

Version 2.3
by Paul Lesniewski on Dec 15, 2011
Please support this plugin's development: Donate to this author
[ password_forget-2.3-1.0.1.tar.gz tarball (15788 d/l) Help ]
Requires: SquirrelMail 1.0.1+
Description:

This plugin will now also attempt to "tell" the browser not to cache usernames/passwords (by using the "autocomplete" attribute on the input form tags)

Older versions

Version 2.2
by Paul Lesniewski on Nov 3, 2008
[ password_forget-2.2-1.0.1.tar.gz tarball (14971 d/l) Help ]
Requires: SquirrelMail 1.0.1+
Description:

Update to work with SquirrelMail 1.5.2+
General cleanup and updates

Version 2.1
by Paul Lesniewski on Sep 23, 2004
[ password_forget.2.1-1.0.1.tar.gz tarball (17330 d/l) Help ]
Requires: SquirrelMail 1.0.1, Compatibility plugin
Description:

Added ability to turn plugin off for certain known clients
Updated for compatibility with plugin updates plugin/plugin specs

Version 2.0
by Paul Lesniewski on Mar 16, 2003
[ password_forget.2.0-1.0.1.tar.gz tarball (14725 d/l) Help ]
Requires: SquirrelMail 1.0.1, Compatibility plugin
Description:

Updated for compatibility with SquirrelMail version 1.4 (NOTE - requires 1.4 from cvs as of 16/03/03)
New setup.php format for better overall SquirrelMail performance

Make sure to download the Compatibility plugin in order for Password Forget to function correctly.

Version 1.3
by Paul Lesniewski on Feb 5, 2003
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.0.1
Description:

Register_globals = Off compatible
Compatibility added for vlogin plugin
Compatible with "plugin updates" plugin

Version 1.2
by Tyler Akins on Mar 25, 2001
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.0.1
Description: Works with the changes to the login form.

Version 1.1
by Tyler Akins on Dec 6, 2000
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 0.5 or above
Description: Works with the focus_change plugin.

Version 1.0
by Tyler Akins on Unknown
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 0.5 or above
Description: Initial version.

If you have problems with the download or decompressing...

Internet Explorer: Right-click on the file, then select "Save Target As"
Firefox, Mozilla, Netscape: Right-click on the file, then select "Save Link As"
Opera: Right-click on the file, then select "Save Link Document As"
Lynx and Links: Press "d" on the link to download the file directly.

Untarring problems: Your browser might have un-gzipped it for you automatically. Try just "tar xvf" instead of "tar xvfz". Also, the plugins archive isn't gzipped (it is a tarball of .tar.gz files)
Macintosh users: Just hold down your mouse button to get the menu instead of right-clicking.
If all else fails, seek our help