For corporations using Microsoft Outlook email clients, a very nice feature is the ability to display a "SpamFilter" folder within the Outlook client itself. This web-enabled folder then allows the end users to see their quarantined emails directly within their Outlook client without the need of an external web browser. From Outlook they can then view/deliver any emails in the quarantine.

To see more details, please click here for sample setup screenshots.




Edited by LogSat - 03 July 2008 at 12:33pm

sevo,

The procedure described in the article works with both Microsoft Outlook 2003 and 2007 (and with Microsoft Entourage for Mac).

Can you please ensure that your Authenticate.asp contains the following sections of code in bold below. If the bolded entries are not present, you may be using an older version of the file (you can download the latest from the download link on the home page). This file was only recently modified to include the ability to accept authentication requests using either "POST" or "GET" options in the username/password form. The ability to support the "GET" is what allows Outlook to display the user's spam emails automatically logging in the user.

Also, please make sure that the link in Outlook (follow the screenshot below):
http://www.logsat.com/_Media/outlooksetup2.png

is in the form:
http://my_domain.com/spam/ListSpam.asp?EMailAddress=john@my_domain.com&Password=mypassword


===========AUTHENTICATE.ASP===============

<!--#include file="db_connect.asp"-->   
<%
'The following code allows the retrieval of parameters for both POST and GET methods, allowing this
'page to work for forms that use either of the two methods.
'The "RequestCollection"  will hold either the Request.QueryString or the Request.Form data

    if StrComp("POST", Request.ServerVariables("REQUEST_METHOD"), vbTextCompare) = 0 then
      Set RequestCollection = Request.Form
    else
      Set RequestCollection = Request.QueryString
    End if
   
    If Len(Session("EmailTo")) < 1 Then
        EmailTo = RequestCollection("EmailAddress")

        If Len(EmailTo) < 3 Then
            Call DisplayLoginForm
            Response.End
        Else
            'Generate query.
            SQL = "SELECT Password "
            SQL = SQL & "FROM tblLogins "
            SQL = SQL & "WHERE EMail = '" & EmailTo & "'"
            Set rs = con.Execute(SQL)
            Failure = False

            If rs.EOF Then
                Failure = True
            ElseIf IsNull(rs("Password")) Then
                Failure = True
            ElseIf Len(rs("Password")) < 1 Then
                Failure = True
            ElseIf rs("Password") <> RequestCollection("Password") Then
                Failure = True
            End If

            If Failure Then
                Call DisplayFailedLogin
                Response.End
            Else
                Session("EmailTo") = EmailTo
            End If

        End If

    End If
%>



Edited by LogSat - 07 September 2008 at 7:17pm

Yeap... :-) Reproduced it.
There's Session information that is stored once a user logs in to help keeping the login state. But it's definely not helping here in this case.
You can edit the authenticate.asp file, and add the following line in bold to the existing code:

    if StrComp("POST", Request.ServerVariables("REQUEST_METHOD"), vbTextCompare) = 0 then
      Set RequestCollection = Request.Form
    else
      Set RequestCollection = Request.QueryString
    End if
    if Len(RequestCollection("EmailAddress")) > 0 then Session.Abandon

    If Len(Session("EmailTo")) < 1 Then
        EmailTo = RequestCollection("EmailAddress")

Ok, this was tickier than originally thought. Can you try replacing my previous suggested line in blue abov:

   if Len(Request.QueryString("EmailAddress")) > 0 then Session.Abandon

with:

    if Len(Request.QueryString("EmailAddress")) > 0 then Session("EmailTo")=""

Edited by Hamsen - 21 August 2019 at 9:27am

Thank you for pointing this out danego - we've updated the website exactly as you suggested!