Webmail Without PHP
February 20, 2007 9:31 AM
Non-PHP based webmail?
Does anyone have experience implementing a robust non-PHP webmail system for an IMAP and/or POP3 server?
I used to run IMP for a server I'm in charge of, but the PHP setup was compromised and I've since taken it down. I'd like to restore webmail for my users but I'm not going to use PHP again. I'm looking for something that'll provide webmail with SSL that'll be secure and relatively easy to maintain. I'm amenable to open source or to a commercial product. It'd have to work on solaris or Mac OS X.
Does anyone have experience implementing a robust non-PHP webmail system for an IMAP and/or POP3 server?
I used to run IMP for a server I'm in charge of, but the PHP setup was compromised and I've since taken it down. I'd like to restore webmail for my users but I'm not going to use PHP again. I'm looking for something that'll provide webmail with SSL that'll be secure and relatively easy to maintain. I'm amenable to open source or to a commercial product. It'd have to work on solaris or Mac OS X.
What PHP solution were you using? We use SquirrelMail, and as far as I know it's been fine.
I hate PHP as much as the next guy, but honestly, security has a hell of a lot more to do with the developer than it does with the language. Perl isn't immune to this problem... just look up Matt Wright. The problem with PHP is that there are so many self-taught/poorly taught programmers and they make stupid (security wise) mistakes.
posted by sbutler at 9:51 AM on February 20, 2007
I hate PHP as much as the next guy, but honestly, security has a hell of a lot more to do with the developer than it does with the language. Perl isn't immune to this problem... just look up Matt Wright. The problem with PHP is that there are so many self-taught/poorly taught programmers and they make stupid (security wise) mistakes.
posted by sbutler at 9:51 AM on February 20, 2007
I was using IMP, which is a part of HORDE, but it wasn't via IMP that the compromise occurred, it was a hole in the PHP implementation. I had actually tried to update PHP before the compromise, but that had caused IMP to cease working, so I put it off for the time being and got hosed for it.
PHP is off the table.
And I need a web front end for my existing mail server. GAFYD doesn't seem to supply that.
posted by ursus_comiter at 10:06 AM on February 20, 2007
PHP is off the table.
And I need a web front end for my existing mail server. GAFYD doesn't seem to supply that.
posted by ursus_comiter at 10:06 AM on February 20, 2007
If you're using Courier, you could give SqWebMail a shot. I don't like it, but I do like that it's not PHP.
I hate PHP as much as the next guy, but at least for right now, if you want decent (flexible, pretty, etc.) webmail, PHP seems to be a necessary evil.
posted by cryosis at 10:45 AM on February 20, 2007
I hate PHP as much as the next guy, but at least for right now, if you want decent (flexible, pretty, etc.) webmail, PHP seems to be a necessary evil.
posted by cryosis at 10:45 AM on February 20, 2007
sbutler: Squirrelmail is totally PHP.
So is RoundCube, as nice as it is.
iBox might be an option. It's a perl webmail app.
posted by drstein at 10:56 AM on February 20, 2007
So is RoundCube, as nice as it is.
iBox might be an option. It's a perl webmail app.
posted by drstein at 10:56 AM on February 20, 2007
we did one in Coldfusion at work... It was poorly coded so we don't use it, but it is proof that it is possible.
Grant Brammer
posted by magikker at 10:56 AM on February 20, 2007
Grant Brammer
posted by magikker at 10:56 AM on February 20, 2007
Open Webmail and NeoMail are both reasonable perl-based options.
posted by braintoast at 9:56 AM on February 21, 2007
posted by braintoast at 9:56 AM on February 21, 2007
« Older Examples needed of ethical situations at work | When did America Know About the Holocaust? Newer »
This thread is closed to new comments.
posted by The Michael The at 9:46 AM on February 20, 2007