• Resolved gioglifx

    (@gioglifx)


    Hello,

    I’m an avid user of this plugin – it’s just great! I recently noticed that because of a particular .htaccess rule, I can’t change the password for that email.

    Roundcube allows for plugins – in this case to change the user’s password. My Roundcube installation works, except that it won’t read the password plugin. It won’t even show the tab and navigating directly does in fact show the option but won’t execute.

    I realize this is not about Roundcube, but I’m explaining where “I’m at”..

    I noticed that in the .htaccess file, there’s a rule:
    Redirectmatch 403 password\.

    Only when I remove this line, everything works!

    I Googled the rule, but I can’t seem to find a “simple” definition and how [un]secured the lack of that line means for my site.

    Would you please advise?
    Thank you in advance, kind regards.

    https://www.ads-software.com/plugins/all-in-one-wp-security-and-firewall/

Viewing 1 replies (of 1 total)
  • Plugin Contributor wpsolutions

    (@wpsolutions)

    It’s up to you really – everything is a trade-off and there is really no one-size-fits-all when it comes to security .htaccess rules for individual sites.

    I would recommend that you copy the whole chunk of the original code from the “Advanced Character String Filter” rules and paste them into the custom rules section and delete that line and then save the custom rules. Make sure that you deactivate the “Advanced Character String Filter” feature.

Viewing 1 replies (of 1 total)
  • The topic ‘Roundcube fails’ is closed to new replies.