Change password plugin for squirrelmail on ISPConfig 3

For those who installed ISPConfig 3 and want to give users the ability to change their email password from SquirrelMail, there is a guide on which describes the necessary steps in order to install, configure and activate change_sqlpass plugin for SquirrelMail. For me the steps described there were not enough to get it to work.

Complete steps :

  1. Download and install change_sqlpass plugin
  2. Patch functions.php (BUG with md5crypt)
  3. Create new config.php with some content
  4. Download and install compatibility plugin
  5. Install pear DB
  6. Activate the plugin in SquirrelMail
  7. Modify SquirrelMail include path
  8. Patch change_sqlpass functions.php file to get rid of “This page request could not be verified and appears to have expired.” error message

Steps 1-6 can be found here : ISPConfig Squirrelmail plugin for changing password

The problem i encountered :

Could not find Pear DB library

after trying to change password in SquirrelMail.

To get it to work :

Make sure you have Pear DB installed : apt-get install php-pear php-db

Step 7 : Edit : /etc/apache2/conf.d/squirrelmail.conf

Comment line :

php_value include_path .

Comment line :

php_admin_value open_basedir /usr/share/squirrelmail:/etc/squirrelmail:/var/lib/squirrelmail:/etc/hostname:/etc/mailname:/var/spool/squirrelmail

Change it to :

php_admin_value open_basedir /usr/share/squirrelmail:/etc/squirrelmail:/var/lib/squirrelmail:/etc/hostname:/etc/mailname:/usr/share/php

After that , the password was changed but i got a new error :

This page request could not be verified and appears to have expired.

To solve this one, you need to patch : /usr/share/squirrelmail/plugins/change_sqlpass/functions.php with the method described here :

Step 8Patch change_sqlpass

Final result :

Tested on :
Squirrelmail : 1.4.22
SQLpass plugin : 3.3.12
Ubuntu Server 12.04.1 LTS x64


Skip to comment form

    • Alex on August 7, 2013 at 4:55 pm
    • Reply

    Under Debian 6 and ISPconfig (SquirellMail 1.4.22) the file /etc/apache2/conf.d/squirrelmail.conf does not exist. Don’t pay attention…

    • thanh on September 27, 2013 at 9:27 am
    • Reply

    It’s work for me
    ubuntu 13.03 x64
    squirrelmail 1.22

    many thanks.


  1. All ok, but now I think we have a probleme with attachments.

    “Could not move/copy file. File not attached”

    This probleme is from change open_basedir ?

    1. You need an upload folder as described here :

      squirrelmail attachament problem

    • Daniel Nascimento on February 17, 2016 at 1:10 am
    • Reply

    Successfully Saved Options: Password changed successfully.
    Please use your new password to log in from now on.

    But there’s a catch ( “There’s ALWAYS a Catch” – Constantine, John) .. password doesn’t change!

    Only for the session already logged in!

    Example: If i change the password from 123456 to 123456b … i cannot change again without confirm with the new password as the OLD PASSWORD. It will mismatch. Of course for we just change it!

    So lets logout and try the new password – it fails. Wrong username or Password. The OLD 123456 password is the current yet. What the hell? : /

    Im clueless looking at logs .. nothing showing or popping out…

    Debian Wheezy 7.9
    SquirrelMail version 1.4.23 [SVN]

    pear list
    Installed packages, channel
    Package Version State
    Archive_Tar 1.4.0 stable
    Auth 1.6.4 stable
    Console_Getopt 1.4.1 stable
    DB 1.9.2 stable
    MDB2 2.4.1 stable
    PEAR 1.10.1 stable
    Structures_Graph 1.1.1 stable
    XML_Util 1.3.0 stable

    php DB debian package = php-db 1.7.14-2

    1. For me it works.

      Installed packages, channel
      Package Version State
      Archive_Tar 1.3.7 stable
      Auth 1.6.2 stable
      Console_Getopt 1.3.0 stable
      DB 1.7.13 stable
      PEAR 1.9.4 stable
      Structures_Graph 1.0.4 stable
      XML_Util 1.2.1 stable

      php-pear 5.3.10-1ubuntu3.18

    • Nghia on May 29, 2016 at 10:25 am
    • Reply


Leave a Reply

Your email address will not be published.


This site uses Akismet to reduce spam. Learn how your comment data is processed.