Jump to content

Problems reporting from Squirrelmail


sscotti

Recommended Posts

I just signed up with an account for Spamcop. I am using SquirrelMail and the plugin seems to be installed correctly. There is a link on my mail to 'Report as spam' and the link is http://sscotti.net/squirrelmail/plugins/sp...passed_ent_id=0

This brings up another window with 'Close Window' and 'Send spam Report' buttons.

There is a form on this page of the format:

<form method="post" action="http://www.spamcop.net/sc" name="submitspam"

enctype="multipart/form-data"> <input type="hidden" name="action" value="submit" />

<input type="hidden" name="oldverbose" value="1" />

<input type="hidden" name="code" value="myauthcode" />

<input type="hidden" name="spam" value="mail text" />

<input type="submit" name="x1" value="Send spam Report" /></form>

where mail text is the text of the e-mail in question.

When I submit the form I get an error that says:

No userid found, sorry.

Any help with getting this configured to work?

P.S. I donated $15.00 for what seems like a nice system. I am also using SpamAssassin.

Link to comment
Share on other sites

I just signed up with an account for Spamcop. I am using SquirrelMail and the plugin seems to be installed correctly.

You probably want to check out http://www.squirrelmail.org/ for help on that application as it is not directly related to spamcop and I don't know of any people here that use it.

Link to comment
Share on other sites

You probably want to check out http://www.squirrelmail.org/ for help on that application as it is not directly related to spamcop and I don't know of any people here that use it.

I know that the issue, as described, with Squirrel Mail is not unknown. I get the same errors but since I rarely use SquirrelMail as a web interface I haven't worked on resolving the problem.

sscotti, are you aware that reporting (whether from SquirrelMail or otehrwise) will not affect the amount of spam you receive unless you also implement mail filtering based on the SCBL? Just a heads up.

Andrew

Link to comment
Share on other sites

  • 1 month later...

I know that the issue, as described, with Squirrel Mail is not unknown. I get the same errors but since I rarely use SquirrelMail as a web interface I haven't worked on resolving the problem.

I don't believe this issue was as well known as you might think. I couldn't find much mention of it here or at SquirrelMail. I have submitted a bug to the SquirrelMail team along with a suggested solution. It appears that SpamCop no longer accepts the SpamCop user's authorization code via the web based form using the form input name "code".

My suggested solution would be to have SquirrelMail store the users SpamCop username and password and authenticate to http://members.spamcop.net/sc

Does this sound like it will work?

Bug ID# is 1519673.

Link to comment
Share on other sites

It appears that SpamCop no longer accepts the SpamCop user's authorization code via the web based form using the form input name "code".

I believe this may be a web browser security issue that was closed on most browsers (that were kept current) a couple years ago. site.domain.tld]http://username:password[at]site.domain.tld became such an exploited security hole that most browsers do not support it any longer.

Link to comment
Share on other sites

I believe this may be a web browser security issue that was closed on most browsers (that were kept current) a couple years ago. site.domain.tld]http://username:password[at]site.domain.tld became such an exploited security hole that most browsers do not support it any longer.

I don't believe the SquirrelMail plugin is trying to authenticate to SpamCop at all which seems to be the problem. I think SpamCop used to allow you to report spam by just passing your authorization code as part of a form. Now you have to authenticate and the SquirrelMail plugin isn't compatible anymore (at least when using the web based form submission mode). E-mail submission mode still works.

Link to comment
Share on other sites

Also, perhaps we should rename this thread to something like "Problems reporting from Squirrelmail" as that would be a little more descriptive. Anyone reading this have access to do that?

I have a number of postings existing thoughout this thing that talks about crafting usable, meaningful, specific Subject Titles ... yet ... the same issue also keeps coming ip when folks want to create their own definitions of terms and actions, thus rendering them invisible to others that do try to perform a search before posting .... yet trying to correct things like seems to generally end up with someone taking the stance that I'm calling them stupid ... gets old .. but consider the request granted and actioned .... anticipating the next complaint that I "deleted" someone's Topic as they'll never find it again ....

Link to comment
Share on other sites

I don't believe the SquirrelMail plugin is trying to authenticate to SpamCop at all which seems to be the problem. I think SpamCop used to allow you to report spam by just passing your authorization code as part of a form. Now you have to authenticate and the SquirrelMail plugin isn't compatible anymore (at least when using the web based form submission mode). E-mail submission mode still works.

Hi!

It may not be well documented but I have assisted a significant number of folk to resolve reporting from Squirrel Mail.

Those who have problems invariably do so if they select the 'web-based form' reporting option in SM. If you select the 'Through email-based reporting' option then all often seems to work as anticipated.

This is not a SpamCop issue but a SquirrelMail/ISP hosting the mailbox issue.

Andrew

Link to comment
Share on other sites

If web reporting option is selected, SquirrelMail Spamcop plugin provides simple html form that allows to submit spam email. spam email source is included automatically in hidden form field.

Could you confirm that

  • http://members.spamcop.net/sc form address is valid
  • it will ask for user's login information in HTTP Auth or any other login prompt
  • form won't lose spam email during authentication
  • form will work with free and paid reporters

Link to SquirrelMail bug report

Link to comment
Share on other sites

I have a number of postings existing thoughout this thing that talks about crafting usable, meaningful, specific Subject Titles ... yet ... the same issue also keeps coming ip when folks want to create their own definitions of terms and actions, thus rendering them invisible to others that do try to perform a search before posting .... yet trying to correct things like seems to generally end up with someone taking the stance that I'm calling them stupid ... gets old .. but consider the request granted and actioned .... anticipating the next complaint that I "deleted" someone's Topic as they'll never find it again ....

Thanks, Wazoo. I understand completely. Unfortunately I didn't start this thread.... just found it through searching and figured starting a new one wasn't the right thing to do either.

Hi!

It may not be well documented but I have assisted a significant number of folk to resolve reporting from Squirrel Mail.

Those who have problems invariably do so if they select the 'web-based form' reporting option in SM. If you select the 'Through email-based reporting' option then all often seems to work as anticipated.

This is not a SpamCop issue but a SquirrelMail/ISP hosting the mailbox issue.

Andrew

That's correct, Andrew. E-mail based reporting still works fine.

I believe the issue began when SpamCop made a change in the way they accept spam through their web based form, though, and SquirrelMail didn't keep up with the change.

If web reporting option is selected, SquirrelMail Spamcop plugin provides simple html form that allows to submit spam email. spam email source is included automatically in hidden form field.

Could you confirm that

  • http://members.spamcop.net/sc form address is valid
  • it will ask for user's login information in HTTP Auth or any other login prompt
  • form won't lose spam email during authentication
  • form will work with free and paid reporters

Link to SquirrelMail bug report

1. http://membes.spamcop.net/sc form address is indeed valid.

2. Correct, if the HTTP Auth is not already active from manually logging into SpamCop, it will ask the first time you report spam via the web based method. Then it won't ask anymore for that browser session.

3. Form does not lose spam e-mail.

4. This one I'm not 100% sure. I *was* a paid member for a while, but have since let my fuel run out, so I guess I'm doing it the same way as a free member would. Perhaps I should sign up with another account just to test.

Yes, that's the bug report I opened. :D

Link to comment
Share on other sites

4. This one I'm not 100% sure. I *was* a paid member for a while, but have since let my fuel run out, so I guess I'm doing it the same way as a free member would. Perhaps I should sign up with another account just to test.

I need confirmation from Spamcop staff.

Link to comment
Share on other sites

Looks like this has been corrected by the SquirrelMail team. According to the response from Tomas in the bug report:

"Fixed in 1.4.8cvs and 1.5.2cvs."

I have not grabbed a CVS snapshot of SquirreMail yet to try it. Someone let us know if you do.

dzekas = Tomas

Fix was tested on paid spamcop account. In 1.5.2cvs fix removed free/paid service type options and left only members.spamcop.net/sc form. In 1.4.8cvs www.spamcop.net/sc form action was replaced with members.spamcop.net/sc action.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...