vB WebMail v1.3

[vB-Host.com]

I am proud to announce my first hack here! vB WebMail

Inspired by Chad777's neomail signup

My version has cosmetic changes to the template files along with php rewritten to not need a db install to add the neomail table along with forcing the member to be registered with your forum and to use the forum username. along with a confirm to the new sign up that the account is created and sending them to the page to log in.

Support will only be provided in this thread, please do not PM me or e-mail me for support. You can find a working demo here http://www.thesportsforum.net/webmail.php

requirements vB 2.x
cPanel 4.x or higher (tested on cPanel 4, 5 and 6 using bluelagoon theme)
NeoMail (you can go to www.your-domain.com/webmail/ to see if your server has neomail).

things to do:
add-on to lesane's store to buy webmail access
add-on to lasane's store to increase mailbox size
write vB webmail for HordeMail

Sites using vB WebMail include:
(feel free to PM me to add your site)
http://www.TheSportsForum.net

Please be sure to kick, click or lick the install button when downloading!

Thanks,
Slapshot Harry

note: zipfile updated, now v1.3 please redownload as this fixes a security hole in older versions

[Dolby]

unable to open zip in winZip or winRar.

[vB-Host.com]

I am d/l dropzip now.. will update in just a few

[vB-Host.com]

ok, zipfile updated

[Logikos]

You need to update your install.txt trying to view it as a txt looks bad, even worst as html. People are going to get confused.

[GoTTi]

ok...

when some1 is a guest, and they goto the setup page, they are logged in as unregistered and it lets them create a email account : unregistered@emailaddy.com

also, it doesnt verify the forum password for the user, so how does it know its a correct password for that account?

[vB-Host.com]

Today at 01:56 AM []\[]emesis said this in Post #5 (https://vborg.vbsupport.ru/showthread.php?postid=394059#post394059)
You need to update your install.txt trying to view it as a txt looks bad, even worst as html. People are going to get confused.

Thank you for the input.. New version is now in first post with cleaner instructions

[vB-Host.com]

Today at 02:40 AM Da_GoTTi said this in Post #6 (https://vborg.vbsupport.ru/showthread.php?postid=394063#post394063)
ok...

when some1 is a guest, and they goto the setup page, they are logged in as unregistered and it lets them create a email account : unregistered@emailaddy.com

also, it doesnt verify the forum password for the user, so how does it know its a correct password for that account?


There is no way to check a vB password. You just have to hope the user puts the same. Either way, the password they enter there will be there e-mail password as it sends the vb username and what they put as the password there to cPanel to create a mail account.

Log into cPanel and make a account "unregistered" now if a guest clicks on it there is no way to create an account. Using the hidden value for username like I did only allows your forum members to register for e-mail using the name they registered with, so one you have a unregistered account created, no fake accounts can be made.

[bgray]

I have squirrelmail. Will this hack work with that?

[vB-Host.com]

I have never used squirrel mail.. I am writing a version to work with hordemail now. Do you have a dedicated server you could create a control panel and squirrel mail account on and I will try to write it.

### off topic ### I see you have a spportscardsite, I have just started thesportsforum.net Let me know if you care to trade links or a button or something. ### end off Topic ###

[snyx]

screenys please? :)

[vB-Host.com]

there is no need for screenshots as you can see the loginpage here http://www.thesportsforum.net/webmail.php once the user logs in it takes them into neomail inside of cPanel

[assassingod]

You havent updated the ZIP. Open it in WORDPAD to fix the problem.

[vB-Host.com]

it is updated. I get the latest version when I d/l it off here, as for wordpad.. don't have it.. I used my text editor in OS X...

[assassingod]

Wasnt for me. I had to use wordpad to view the install file correctly. And thats why you have to use wordpad to view it, you wrote it in Mac.

[MetroSports82]

Yea, I had the same issue with the .txt file vB-Host.com. ;) just converted it into wordpad, and hope ya don't me putting up the wordpad version of your install .txt file here, for those who don't have the program to view the file correctly. Thanks for the hack. ;)

[vB-Host.com]

ok file reuploaded in first post.. Thank you for saving it in notepad for me.

[alkatraz]

Would I be able to install NEOMail myself, or does my host have to?

[TheComputerGuy]

I can't seem to get it to work...it keeps asking for my username and password...

I put in "TheComputerGuy" then my password....and I get access denied.

[insanctus]

Maybe It is only for deticated iped hosts ?

[Kurayami]

I recieve the same error as TheComputerGuy... and my forum domain is on a dedicated IP.

[vB-Host.com]

alkatraz: to install neomail you need root access to the server, If you have cPanel you should have it as it installs as a side kick with cPanel

thecomputerguy: login to cpanel and go to your mail section, from there go to e-mail accounts and make sure the script created the account. If it is created, please let me know what version of cPanel your using and what theme.

insanctus: no, it will work with anyone using NeoMail and the cPanel Control panel. shared ip or static.

[vB-Host.com]

Today at 09:05 PM Kurayami said this in Post #21 (https://vborg.vbsupport.ru/showthread.php?postid=394424#post394424)
I recieve the same error as TheComputerGuy... and my forum domain is on a dedicated IP.

do the same as I told thecomputerguy above

[Kurayami]

The account I created with the script is in the list of addresses--I'm running version 6.4.0 with Blue Lagoon.
I hope this problem can be fixed, as I'd love to use this add-on. :)

[vB-Host.com]

if you go to your domain.com/webmail/ and log in using the user/pass you created... what happens?

[insanctus]

Ok in my webmail join I have
require('./global.php');
$templatesused = "neowebmail_join";
if ($submit){
$host = "www.sanguinox.com"; //change to www.yourdomain.com including www.
$domain = "sanguinox.com"; //change to yourdomain.com with NO www

$socket = fsockopen($host,2082); //don't touch this setting
$cpaneluser = "realname"; //your cpanel login name goes here
$cpanelpass = "realpassy"; //your cpanel password goes here
$authstr = "$cpaneluser:$cpanelpass"; //don't touch this setting
$pass = base64_encode($authstr); //don't touch this setting


$in = "GET /frontend/cpstartup/mail/doaddpop.html?email=$email&domain=$domain&password=$password&quota=$quota HTTP/1.0\r\nAuthorization: Basic $pass \r\n";

fputs($socket,$in);
fclose( $socket );
header("Location: webmailcreated.php"); /* after sign up this redirects to login page telling them account has been created */

}
else {
eval("dooutput(\"".gettemplate("neowebmail_join")."\");");

}
?>


Now if i just use html (did as a check) with
http://sanguinox.com:2082/frontend/cpstartup/mail/doaddpop.html?email=testname&domain=sanguinox.com&password=testpassy

It works... but with your script it does not... Any ideas.? it just keeps kickin me back to the signup.

[Kurayami]

Hmmm... it logs in without any problem whatsoever.

[vB-Host.com]

Today at 09:37 PM insanctus said this in Post #26 (https://vborg.vbsupport.ru/showthread.php?postid=394440#post394440)

It works... but with your script it does not... Any ideas.? it just keeps kickin me back to the signup. [/B]

It is your theme. I am having the same problem with the xcontroller theme I give most of my hosting clients as it is very clean and includes fantastico. With xcontroller I couldn't even get it to configure the account. Over 25 people on my forum are already using this witthout issue. I have only tested it on blue lagoon. contact your hosting provider and ask them to change you to blue lagoon. It is a free theme that comes standard with WHM/cPanel

[vB-Host.com]

Today at 09:38 PM Kurayami said this in Post #27 (https://vborg.vbsupport.ru/showthread.php?postid=394441#post394441)
Hmmm... it logs in without any problem whatsoever.
url to my webmail.php please

[insanctus]

Hmm there is nothing i can config to change that?

My host is very um..... bad lmao... they have the worst service I have seen and will take them weeks to change me (if at all).

[vB-Host.com]

nope, your settings would be different for non "default" themes...

sorry, but..... Why do you pay for such bad service? If you were our customer and you wrote in needing a theme changed, you'd have it same day if not within just a few minutes to an hour. It takes all of about 30 seconds.. 1)login to whm 2)click mod account 3)select your domain 4)pull down menu to blue lagoon theme 5)hit save 6)reply it is updated

[insanctus]

I was dumb ? lmao.

I actualy plan to find a new host and user sanguinox.net on it then move sanguinox.com over to it later.

Your prices look good but I would be lost on moving all the dns's

[vB-Host.com]

Today at 01:24 AM insanctus said this in Post #32 (https://vborg.vbsupport.ru/showthread.php?postid=394473#post394473)
I was dumb ? lmao.

I actualy plan to find a new host and user sanguinox.net on it then move sanguinox.com over to it later.

Your prices look good but I would be lost on moving all the dns's

nahh DNS updates are cake... If in your shopping you decide to pick us, I'd be happy to help you over AIM easily move your DNS or if you want your welcome to give me the registers login info and I can do it for you then you just update your password after.. Being on cPanel.. your move would be easy too... WHM has an awesome feature to move cPanel's to another cPanel server keeping all your mail and all your accounts panel settings and website files. Feel free to PM regarding this...

ok... back to my hack thread :)

[TheComputerGuy]

I am using Cpanel 6.0, and I just changed it over to BlueLagoon.

I can not login whatso ever when I try to login manually with it.

[TheComputerGuy]

I just tried to login again, and I had to put my domain @runaked.com and it worked...not sure if that will help tho

[vB-Host.com]

that sounds buggy.. are you running a release, stable or edge version of cPanel? Also I have just completed the php for vB FreeHomePage. I just have to write the html templates and then I will release it!

[Slynderdale]

Nice..I was able to sign up for a 100 megabyte email account on thesportsforum.com without even having to register.

[vB-Host.com]

Please upgrade to version 1.2 found in post #1

[Slynderdale]

vB-Host.com, this is still bugged and have security holes, I still can make hundreds of email accounts now but with a 10 mega byte quota.
1) You dont check to see if the user is a guest and actually a member
2) You dont check to see if the account and password actually matches the correct account.

With a little html and php, some one could write a script to exploit these and make thousands of accounts in seconds.

[vB-Host.com]

I don't see how.. your user/pass to call to cpanel is within the php file, you need to have the user/pass of your cpanel to configure a mail account. Also vB passwords are hashed, there would be no way to send it to the server to configure an account.

[Slynderdale]

Heres an example of how to check if the user name and password matches a valid user, if not, show no permission.

$hashedpassword = md5($password);
if ($DB_Site -> query_first("Select * from users where username='$account' and password='$hashedpassword'")) {
//script here
} else {
nopermission();
}

[vB-Host.com]

now I get Fatal error: Call to a member function on a non-object in /home/sports/public_html/webmailjoin.php on line 10

[Slynderdale]

Today at 10:26 AM vB-Host.com said this in Post #42 (https://vborg.vbsupport.ru/showthread.php?postid=394555#post394555)
now I get Fatal error: Call to a member function on a non-object in /home/sports/public_html/webmailjoin.php on line 10


I think its shownopermission() or something of that sort, you need to check, I dont use it much.

[Breaker]

i'm using horde/imp thingy + plesk control panel i dont know the name of, will this ever be able to work?

[vB-Host.com]

Breaker, no, only cpanel, put if you can set me up a plesk control panel, I can figure out the script changes.

[vB-Host.com]

update added, now v1.3 fixes a security hole allowing non members to set up an account.

[alkatraz]

I've got
cx panel version 3.2.1 - copyright 1999-2003 phpwebhosting.com

will this work?

[vB-Host.com]

nope, It is written for cPanel and only cPanel.. To most hosting companies there is no other panel ;)

[insanctus]

I am still having no luck even with the right theme lmao.

[vB-Host.com]

insanctus,

Doing a traceroute, your domain is still going to your old host. It must be for you too with that it is trying to connect to Blue Lagoon there, which it can not as it is not your selected theme on that server. Once DNS probagates to our server it should work fine. until then, you could try using the ip address we assigned you instead of www.domain.com

Also, I hope you find our service reliable with faster support .... Welcome aboard :)

[insanctus]

well the .net is what i changed script to .... .com is not bein user the page people see when they go to it is .net :)

And love the service..........

[vB-Host.com]

Great to hear your enjoying our service :D

ok.. make sure you have the following just your cpanel user/pass



require('./checkmailauth.php');
require('./global.php');
$templatesused = "neowebmail_join";
if ($submit){
$host = "www.sanguinox.net";
$domain = "sanguinox.net";
$quota = "10"; //mailbox size 10 = 10mb
$email= "$bbuserinfo[username]"; //don't touch this setting
$socket = fsockopen($host,2082); //don't touch this setting
$cpaneluser = "user"; //your cpanel login name goes here
$cpanelpass = "pass"; //your cpanel password goes here
$authstr = "$cpaneluser:$cpanelpass"; //don't touch this setting
$pass = base64_encode($authstr); //don't touch this setting

$in = "GET /frontend/bluelagoon/mail/doaddpop.html?email=$email&domain=$domain&password=$password&quota=$quota HTTP/1.0\r\nAuthorization: Basic $pass \r\n";

[vB-Host.com]

also, If you goto webmailjoin.php and create an account, then log into your cpanel and go to e-mail accounts, did the account get created? If yes then go to www.sanguinox.net/webmail/ and see if it lets you log in. If it does not create the account then carefully recheck the code in post #52

[insanctus]

On webmail join I get a pop up for forum info.... So I put in my forum name and my passy and this is what i get

As a unregistered forum member, you are not authorized to access this area of thesportsforum.net If you are a registered member, Hit refresh and reenter your log in information when propted to do so

And it is a legit account... And yes your service rocks. can not wait till .com is parked there too but that host (gisol) is slow about anything.

They also wanted to charge me money to have another theme. Took them 2 days to email me back.

[insanctus]

Ps. If you feel going into my account and lookin would prove usefull please do lmao.

~ is at a total loss.

[vB-Host.com]

make sure you have the correct settings in checkmailauth.php change user_forum to your-cpanel-username_database-name

$dbcheckusername = "user_forum"; // user name
$dbcheckpassword = "password"; // user password
$dbcheckbase = "user_forum"; // name of database

[insanctus]

Triple checked that.. They all good same thing as in my config for forum.

[insanctus]

ok found issue on that now that i see webmailjoin i toss in passy and nothing.

[vB-Host.com]

Did you make sure that (usergroupid = '2' or usergroupid = '5' or usergroupid = '6') "; is set for you. If you are not in a usergroup listed it will still fail.

I just logged into your cpanel and looked at all the code, looked right.. so then went to your forum and registered as vbhost.. went to webmailjoin.php put in my user/pass in the pop up.. it worked... then created the account and logged into neomail..

my guess is either admin is not set to auth.. check groupid's If it is, is there a space in your username? there can't be any spaces in your username.

[vB-Host.com]

Today at 12:13 AM insanctus said this in Post #58 (https://vborg.vbsupport.ru/showthread.php?postid=395359#post395359)
ok found issue on that now that i see webmailjoin i toss in passy and nothing.

after you put in your password, it should now take you to a new page telling you the account was created and asking for your password again to log you into neomail

[insanctus]

usergroupid = '2' or usergroupid = '5' or usergroupid = '6') ";

admins are user group 6 lol. But yes i see it worked good for yours... ~ will try on a fake... not like is realy an issue if admins can not do it cuase if admin then they will already have one.

[insanctus]

made name test and it still not doin it... could be my pc ?

[Xyphen]

Nice hack and all but I think you should have released it as a beta...

[.:.NetStartz.:.]

How's the hordemail version going?

All my servers are cPanel - the majority of my clients hate neomail so I figure using horde for this would be better.

[vB-Host.com]

horde mail is chugging along, I am going to most likely release it as a paid hack. It will be a combo hack hordemail w/ftp giving your forum users both free web mail and a free homepage at your forum address. As of now, cost will be $20 per server lisc.

[insanctus]

Any price cut for those hosted by you :)

[Emrys]

You need to alter the uppercase letters from the forum that go into the neomail to make them all lowercase. Cpanel doesn't support uppercase username for anything.

At least from my experience.

I think it is something like strtolower() or something like that.

[Slynderdale]

You also need to strip illegal characters from the username as well, for example, what if some one had there user name like:
user@stuff
and so on, it would cause problems when trying to create the email account

[Kohhal]

I was waiting for the Horde version, pity you're gonna charge for it. I'm only offering mail to a few of my mods so I guess I won't be using this hack now :(

Peas,

G...

[Cyricx]

I'm quite eager to check this out but will wait til you have it integrated with the store hack :), that would belay my less then avid members from using up the space I would rather my move dedicated members used. ;)

* Cyricx bookmarks this hack :P

[GoTTi]

the password verify is not working...

i created fake accounts, logged into the forum with them, did the signup, put a wrong password when it ask for the password to the forum and it says successfully created....

[GoTTi]

some help here...

[vB-Host.com]

gotti, do to the password being hashed, there is no way to send it to cpanel. So whatever password they put will be used to create the mail account

[GoTTi]

??

what is the purpose of checkmailauth.php then?

[GoTTi]

??

what is the purpose of checkmailauth.php then?

[mackers8923]

Sorry just had to click the un-install button, my server does not have nor does it support webmail.

Augh well, just have to wait until another hack comes along!!!!!!

[GoTTi]

??

what is the purpose of checkmailauth.php then?

[GoTTi]

any1 know what the purpose of checkmailauth.php is?

[Cyricx]

any update on integrating this with the store? :)

[gmarik]

Is there a version that
can work without cPanel?

[hpisavagecom]

I have it installed and it works great if an account is already set up but creating an account does not work.

I just keep getting prompted for my Forum info, and then it finally gives me this error message:

As a unregistered forum member, you are not authorized to access this area of thesportsforum.net If you are a registered member, Hit refresh and reenter your log in information when propted to do so.

So what am I doing wrong?

[Skyline_GT]

how come this hack can't create a username with uppercase?

[Skyline_GT]

as well how come the login thing is at the very bottom?
http://www.gamerzonline.net/forum/webmail.php

[Skyline_GT]

arr..
anyone can help?

[Skyline_GT]

arr..
anyone can help?

[Skyline_GT]

anyone can help...

[SatMan2028]

Works great! I just wish cpanel supported uppercase letters... Not your fault though... for the most part I like it...

I wonder if there is a way to restrict uppercase letters during registration???...need to think about that one....sounds possible...
Won't help much on a board with a ton of existing users but for a new one it would be perfect...

Great job!!!

[Skyline_GT]

ya
i have that problem too.....

[Skyline_GT]

ya
same problem here

[Skyline_GT]

ya
same problem here