[RCD] [REQ]: Force new user to create identity (instead of RC creating one)

C P zippy1970 at hotmail.com
Tue Sep 30 20:32:28 CEST 2008


I had posted this on the RoundCube forums as well, but someone pointed out to me this (the mailing list) would be a better place for requesting new features.

If this isn't the proper place to request new features, please let me know (and accept my apologies).

I'm guessing that in most cases, RC is creating the wrong default
identity for new users since it either uses
$rcmail_config['default_host'] or virtusertable. In both cases the
chances this actually creates a usable identity are slim. For several
reasons.



So my request is to force a user to create a new identity the first
time he logs in, or at least have him confirm the identity created by
RC.



The way it is now not only utterly confuses a lot of users, but poses a
serious security risk as well because if a user doesn't change his
identity, it exposes information you really don't want exposed
(especially when a mail domain is a virtual domain with virtual users. RC will actually expose the real
server name and a real username -and this is a serious security risk).

Thanks in advance.

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.roundcube.net/pipermail/dev/attachments/20080930/13b9c3a7/attachment.html>
-------------- next part --------------
_______________________________________________
List info: http://lists.roundcube.net/dev/


More information about the Dev mailing list