Does this make any sense:

diff /usr/local/www/roundcube/program/include/rcmail.php*

446c446

< if ($host == rcube_utils::parse_host($post_host)) {

    if ($host == $host_allowed) {

626c626

< $host = rcube_utils::parse_host($post_host);

    $host = $post_host;

Actually what I want to achieve is to use only the e-mail address and password fields to be able to connect to any IMAP server. With the addition to have 'profiles' (instead of default hosts) that describe how to translate the e-mail address. For example:

Profile 1: IMAP: ssl://mail.%h:993 User Name: %u

Profile 2: IMAP: ssl://%h:993 User Name: %u@%h

Login examples:

Input: Email: mickey@donald.com / Profile 1 Connection: IMAP: ssl://mail.donald.com:993 / User Name: mickey

Input: Email: tom@jerry.com / Profile 2 Connection: IMAP: ssl://jerry.com:993 / User Name: tom@jerry.com

The user opening Roundcube will have to know only his e-mail address and his profile (plus password, of course).

Any thoughts?

Regards Balazs

From: sbremal@hotmail.com To: dev@lists.roundcube.net Date: Thu, 20 Feb 2014 17:29:25 +0000 Subject: [RCD] $rcmail_config['default_host'] = array('ssl://mail.%s:993', 'ssl://%s:993');

Hello

What should be changed in the source that the above line functions correctly?

I have different e-mail accounts with different IMAP host name patterns: some use mail subdomain, others do not. Would be glad to see this working. Thanks!

Cheers Balazs

Roundcube Development discussion mailing list dev@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/dev

On Thu, Feb 20, 2014 at 6:29 PM, sbremal@hotmail.com wrote:

Hello

What should be changed in the source that the above line functions correctly?

I have different e-mail accounts with different IMAP host name patterns: some use mail subdomain, others do not. Would be glad to see this working. Thanks!

Using pleaceholders from user input should be avoided because it open potential exploitation paths. You should consider to install an IMAP proxy [1,2,3] which forwards connections to the according backends. Or let users from different domains use individual hosts for webmail access. Set up virtual hosts for webmail.donald.com and webmail.jerry.com which still can point to one single Roundcube installation. Read http://trac.roundcube.net/wiki/Howto_Config/Multidomains how to handle this in Roundcube's config.

[1] http://www.imapproxy.org/ [2] http://horms.net/projects/perdition/ [3] http://www.whatastruggle.com/nginx-as-an-imappop3-proxy