default webmail url workaround

Question

Hi, Is there a way or at least a workaround on masking default webmail urls or disabling access webmail urls so users will not be able to change their passwords?

Website is PHP based and is using apache server under a shared hosting account. The thing is that http://domain.com/webmail will let users access the main panel where they can change their individual passwords. We do not need this. Most solutions point to changing httpd.conf which we are not allowed to change since this is on a shared hosting service.

I'm looking for at least a workaround to this issue. How about disabling it through their browsers if my client is under a network server, this would be a decent workaround isn't it? or are there any more suggestions aside from this?

Please help. This is my urgent issue.

Thank you very much!

Answer 1

If you wanted to direct all requests to "http://domain.com/webmail" to "http://domain.com/webmail/address/" (made up URL here - I'm assuming you're taking them to an alternate page).

Add a ".htaccess" file with the following rule:

RewriteEngine on
RewriteRule ^webmail/ /webmail/address/ [NC,R=301]

Alternate solution...

The page that exists at "http://domain.com/webmail/index.php" - you could check the address in this page and put a redirect header to the page you want them to go to...

if ($_SERVER['REQUEST_URI'] == 'http://domain.com/webmail/') {
    header('Location: http://domain.com/webmail/address/');
}

It is important that this code goes near the very top of the page, before you have echo'd or print'd anything to the output buffer.