vB WebMail v1.3
 

I am proud to announce my first hack here! vB WebMail

Inspired by Chad777's neomail signup

My version has cosmetic changes to the template files along with php rewritten to not need a db install to add the neomail table along with forcing the member to be registered with your forum and to use the forum username. along with a confirm to the new sign up that the account is created and sending them to the page to log in.

Support will only be provided in this thread, please do not PM me or e-mail me for support. You can find a working demo here http://www.thesportsforum.net/webmail.php

requirements vB 2.x
cPanel 4.x or higher (tested on cPanel 4, 5 and 6 using bluelagoon theme)
NeoMail (you can go to www.your-domain.com/webmail/ to see if your server has neomail).

things to do:
add-on to lesane's store to buy webmail access
add-on to lasane's store to increase mailbox size
write vB webmail for HordeMail

Sites using vB WebMail include:
(feel free to PM me to add your site)
http://www.TheSportsForum.net

Please be sure to kick, click or lick the install button when downloading!

Thanks,
Slapshot Harry

note: zipfile updated, now v1.3 please redownload as this fixes a security hole in older versions

unable to open zip in winZip or winRar.

I am d/l dropzip now.. will update in just a few

ok, zipfile updated

You need to update your install.txt trying to view it as a txt looks bad, even worst as html. People are going to get confused.

ok...

when some1 is a guest, and they goto the setup page, they are logged in as unregistered and it lets them create a email account : unregistered@emailaddy.com

also, it doesnt verify the forum password for the user, so how does it know its a correct password for that account?

Thank you for the input.. New version is now in first post with cleaner instructions

There is no way to check a vB password. You just have to hope the user puts the same. Either way, the password they enter there will be there e-mail password as it sends the vb username and what they put as the password there to cPanel to create a mail account.

Log into cPanel and make a account "unregistered" now if a guest clicks on it there is no way to create an account. Using the hidden value for username like I did only allows your forum members to register for e-mail using the name they registered with, so one you have a unregistered account created, no fake accounts can be made.

I have squirrelmail. Will this hack work with that?

I have never used squirrel mail.. I am writing a version to work with hordemail now. Do you have a dedicated server you could create a control panel and squirrel mail account on and I will try to write it.

### off topic ### I see you have a spportscardsite, I have just started thesportsforum.net Let me know if you care to trade links or a button or something. ### end off Topic ###

screenys please? :)

there is no need for screenshots as you can see the loginpage here http://www.thesportsforum.net/webmail.php once the user logs in it takes them into neomail inside of cPanel

You havent updated the ZIP. Open it in WORDPAD to fix the problem.

it is updated. I get the latest version when I d/l it off here, as for wordpad.. don't have it.. I used my text editor in OS X...

Wasnt for me. I had to use wordpad to view the install file correctly. And thats why you have to use wordpad to view it, you wrote it in Mac.

Yea, I had the same issue with the .txt file vB-Host.com. ;) just converted it into wordpad, and hope ya don't me putting up the wordpad version of your install .txt file here, for those who don't have the program to view the file correctly. Thanks for the hack. ;)

ok file reuploaded in first post.. Thank you for saving it in notepad for me.

Would I be able to install NEOMail myself, or does my host have to?

I can't seem to get it to work...it keeps asking for my username and password...

I put in "TheComputerGuy" then my password....and I get access denied.

Maybe It is only for deticated iped hosts ?

I recieve the same error as TheComputerGuy... and my forum domain is on a dedicated IP.

alkatraz: to install neomail you need root access to the server, If you have cPanel you should have it as it installs as a side kick with cPanel

thecomputerguy: login to cpanel and go to your mail section, from there go to e-mail accounts and make sure the script created the account. If it is created, please let me know what version of cPanel your using and what theme.

insanctus: no, it will work with anyone using NeoMail and the cPanel Control panel. shared ip or static.

do the same as I told thecomputerguy above

The account I created with the script is in the list of addresses--I'm running version 6.4.0 with Blue Lagoon.
I hope this problem can be fixed, as I'd love to use this add-on. :)

if you go to your domain.com/webmail/ and log in using the user/pass you created... what happens?

Ok in my webmail join I have
require('./global.php');
$templatesused = "neowebmail_join";
if ($submit){
$host = "www.sanguinox.com"; //change to www.yourdomain.com including www.
$domain = "sanguinox.com"; //change to yourdomain.com with NO www

$socket = fsockopen($host,2082); //don't touch this setting
$cpaneluser = "realname"; //your cpanel login name goes here
$cpanelpass = "realpassy"; //your cpanel password goes here
$authstr = "$cpaneluser:$cpanelpass"; //don't touch this setting
$pass = base64_encode($authstr); //don't touch this setting


$in = "GET /frontend/cpstartup/mail/doaddpop.html?email=$email&domain=$domain&password =$password&quota=$quota HTTP/1.0\r\nAuthorization: Basic $pass \r\n";

fputs($socket,$in);
fclose( $socket );
header("Location: webmailcreated.php"); /* after sign up this redirects to login page telling them account has been created */

}
else {
eval("dooutput(\"".gettemplate("neowebmail_join"). "\");");

}
?>


Now if i just use html (did as a check) with
It works... but with your script it does not... Any ideas.? it just keeps kickin me back to the signup.

Hmmm... it logs in without any problem whatsoever.

It is your theme. I am having the same problem with the xcontroller theme I give most of my hosting clients as it is very clean and includes fantastico. With xcontroller I couldn't even get it to configure the account. Over 25 people on my forum are already using this witthout issue. I have only tested it on blue lagoon. contact your hosting provider and ask them to change you to blue lagoon. It is a free theme that comes standard with WHM/cPanel

url to my webmail.php please

Hmm there is nothing i can config to change that?

My host is very um..... bad lmao... they have the worst service I have seen and will take them weeks to change me (if at all).

nope, your settings would be different for non "default" themes...

sorry, but..... Why do you pay for such bad service? If you were our customer and you wrote in needing a theme changed, you'd have it same day if not within just a few minutes to an hour. It takes all of about 30 seconds.. 1)login to whm 2)click mod account 3)select your domain 4)pull down menu to blue lagoon theme 5)hit save 6)reply it is updated

I was dumb ? lmao.

I actualy plan to find a new host and user sanguinox.net on it then move sanguinox.com over to it later.

Your prices look good but I would be lost on moving all the dns's

nahh DNS updates are cake... If in your shopping you decide to pick us, I'd be happy to help you over AIM easily move your DNS or if you want your welcome to give me the registers login info and I can do it for you then you just update your password after.. Being on cPanel.. your move would be easy too... WHM has an awesome feature to move cPanel's to another cPanel server keeping all your mail and all your accounts panel settings and website files. Feel free to PM regarding this...

ok... back to my hack thread :)

I am using Cpanel 6.0, and I just changed it over to BlueLagoon.

I can not login whatso ever when I try to login manually with it.

I just tried to login again, and I had to put my domain @runaked.com and it worked...not sure if that will help tho

that sounds buggy.. are you running a release, stable or edge version of cPanel? Also I have just completed the php for vB FreeHomePage. I just have to write the html templates and then I will release it!

Nice..I was able to sign up for a 100 megabyte email account on thesportsforum.com without even having to register.

Please upgrade to version 1.2 found in post #1

vB-Host.com, this is still bugged and have security holes, I still can make hundreds of email accounts now but with a 10 mega byte quota.
1) You dont check to see if the user is a guest and actually a member
2) You dont check to see if the account and password actually matches the correct account.

With a little html and php, some one could write a script to exploit these and make thousands of accounts in seconds.

I don't see how.. your user/pass to call to cpanel is within the php file, you need to have the user/pass of your cpanel to configure a mail account. Also vB passwords are hashed, there would be no way to send it to the server to configure an account.