Store password in session variable in HTTPS-environment - Joomla! Forum - community, help and support


hello,

i have joomla 1.0.12 site connected through https.
i use plugin insert php code. plugin show (for each user logged in) latest 5 e-mails, different pop3-mailserver.
the name , password of mailserver identical users in joomla.

my question:

can use loginname , password of user had logged in, in php-function 'imap_open':

$mbox=imap_open("{mail.server.com:110/pop3}", $username, $password);

if so, how?
is secure store, directly after login, password in session variable? remember, user logged in through https.
if not secure, there way solve problem?

a solution not found on internet.

king regards,

niek

i think question depends more on whether you're releasing own server or others use well. think you're suggesting secure, long have register globals turned off , sure session variables never returned client of other components in system. else have more experience session variables can tell if not secure?





Comments