[rel] Gmail Notifier Plus for Windows 7

By daty2k1
in Software created by our members

 Share

Recommended Posts

Neowinian

Saidas

Posted
Posted

Nothing happens when clicking "Check for new email" and no new emails are indicated on the Taskbar icon even when new ones are sitting in my Gmail inbox. Everything else seems to work. I've uninstalled/reinstalled several times without change. Any ideas?

W7U 32

Neowinian

Ciantic (Jari Pennanen)

Posted
Posted

Warning! This has major security issue (using Chromium at least).

When you right click the Gmail Notifier Plus icon in Task bar, and choose for instance Go to your inbox, the program tries to open following url:

https://www.google.com/accounts/ServiceLoginAuth?continue=http://mail.google.com/mail/%23inbox&service=mail&Email=USERNAME&Passwd=YOURPASSWORDINPLAINTEXT&null=Sign+in

1.) The worst thing is that your password is saved to Browser History as plain text!

2.) It does not log in, it should not redirect to that page in the first place... that page gives me Log in prompt regardless were you logged in from the browser already.

Proposed fix:

1.) If only one account is in the defaults, go to URL http://mail.google.com/mail/ instead of auth URL.

2.) Regardless how you fix this, get rid of the password in URL.

Neowinian

infinitey

Posted
Posted

Warning! This has major security issue (using Chromium at least).

When you right click the Gmail Notifier Plus icon in Task bar, and choose for instance Go to your inbox, the program tries to open following url:

This is really bad and needs to be fixed asap. At least Google doesn't seem to accept the password in the URL anymore.

Is anyone still working on this? It appears the author has abandoned this project.

Grand Master

fhpuqrgrpgvirzhpujbj

Posted
Posted

Is there any support for this program? I see others with problems like I'm experiencing with no solutions being provided. Another abandoned program?

Sorry, I'm the one that took it over but I've been busy. Trying to find a way to login differently.

Neowinian

konieckropka

Posted
Posted

Sorry, I'm the one that took it over but I've been busy. Trying to find a way to login differently.

;) It is very nice and ambitious, that you are developing this program by diassembling it but ... what happened with source of this program and who is the author of it?

Wouldn't it be simpler if authour would share a source code for future developing? Who is it anyway and why isn't he developing it by himself?

And to you omnicoder. Wouldn't it be simpler for you to write it from very beginning? You wold have access to normal code in jour fav language :)

Developing and updating app would be much nicer and could be wider then ;)

Proficient

tehmemories

Posted
Posted

I keep getting this error:

Win7 Ultimate 32bit

See the end of this message for details on invoking

just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************

System.Xml.XmlException: 'text' is an unexpected token. The expected token is '"' or '''. Line 6, position 13.

at System.Xml.XmlTextReaderImpl.Throw(Exception e)

at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)

at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)

at System.Xml.XmlTextReaderImpl.ParseAttributes()

at System.Xml.XmlTextReaderImpl.ParseElement()

at System.Xml.XmlTextReaderImpl.ParseElementContent()

at System.Xml.XmlTextReaderImpl.Read()

at System.Xml.XmlLoader.LoadNode(Boolean skipOverWhitespace)

at System.Xml.XmlLoader.LoadDocSequence(XmlDocument parentDoc)

at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)

at System.Xml.XmlDocument.Load(XmlReader reader)

at System.Xml.XmlDocument.LoadXml(String xml)

at GmailNotifierPlus.Notifier.webClient_DownloadDataCompleted(Object sender, DownloadDataCompletedEventArgs e)

at System.Net.WebClient.OnDownloadDataCompleted(DownloadDataCompletedEventArgs e)

at System.Net.WebClient.DownloadDataOperationCompleted(Object arg)

************** Loaded Assemblies **************

mscorlib

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll

----------------------------------------

Gmail Notifier Plus

Assembly Version: 2.1.0.0

Win32 Version: 2.1.0.0

CodeBase: file:///C:/Program%20Files/Gmail%20Notifier%20Plus/Gmail%20Notifier%20Plus.exe

----------------------------------------

System.Windows.Forms

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll

----------------------------------------

System

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll

----------------------------------------

System.Drawing

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll

----------------------------------------

System.Runtime.Remoting

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll

----------------------------------------

System.Xml

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll

----------------------------------------

System.Web

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_32/System.Web/2.0.0.0__b03f5f7f11d50a3a/System.Web.dll

----------------------------------------

WindowsBase

Assembly Version: 3.0.0.0

Win32 Version: 3.0.6920.4902 built by: NetFXw7

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/WindowsBase/3.0.0.0__31bf3856ad364e35/WindowsBase.dll

----------------------------------------

PresentationCore

Assembly Version: 3.0.0.0

Win32 Version: 3.0.6920.4902 built by: NetFXw7

CodeBase: file:///C:/Windows/assembly/GAC_32/PresentationCore/3.0.0.0__31bf3856ad364e35/PresentationCore.dll

----------------------------------------

PresentationFramework

Assembly Version: 3.0.0.0

Win32 Version: 3.0.6920.4902 built by: NetFXw7

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/PresentationFramework/3.0.0.0__31bf3856ad364e35/PresentationFramework.dll

----------------------------------------

System.Core

Assembly Version: 3.5.0.0

Win32 Version: 3.5.30729.4926 built by: NetFXw7

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Core/3.5.0.0__b77a5c561934e089/System.Core.dll

----------------------------------------

System.Configuration

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll

----------------------------------------

************** JIT Debugging **************

To enable just-in-time (JIT) debugging, the .config file for this

application or computer (machine.config) must have the

jitDebugging value set in the system.windows.forms section.

The application must also be compiled with debugging

enabled.

For example:

<configuration>

<system.windows.forms jitDebugging="true" />

</configuration>

When JIT debugging is enabled, any unhandled exception

will be sent to the JIT debugger registered on the computer

rather than be handled by this dialog box.

Rookie

apread

Posted
Posted

Hey guys,

I've been following this thread for awhile, more recently in hopes of finding a fix to this login (doesn't login, also sends password in plaintext) issue. Well, I finally got impatient and "fixed" it myself. I've got a modified version that changes the following:

1) The url opened when clicking on a message to open it is just of the form: 

https://mail.google.com/mail/?shva=1#inbox/&lt;unique mail number&gt;

There's no plain text password or login information in the url. It assumes you've logged in already. If you're not logged in, google will ask you to.

2) The url opened when clicking "Go to your inbox" also just goes to the generic mail inbox address. As above, if you're already logged in, it will take you right there.

3) Same fix for composing mail.

For me, this is all I need. As long as I have checked "Stay signed in" in gmail, this works as originally intended. If not, I'll be asked to sign in everytime. In either case, my password is no longer sent in the url in plaintext.

I'd like to post a link for others to download my new version, however it would be nice to have consent from the original poster/coder first. If he isn't reachable, perhaps I can put it up anyway? I'm not sure what's acceptable. Let me know what you guys think.

apread

Neowinian

timos_m

Posted
Posted

Hey guys,

I've been following this thread for awhile, more recently in hopes of finding a fix to this login (doesn't login, also sends password in plaintext) issue. Well, I finally got impatient and "fixed" it myself. I've got a modified version that changes the following:

1) The url opened when clicking on a message to open it is just of the form: 

https://mail.google.com/mail/?shva=1#inbox/&lt;unique mail number&gt;

There's no plain text password or login information in the url. It assumes you've logged in already. If you're not logged in, google will ask you to.

2) The url opened when clicking "Go to your inbox" also just goes to the generic mail inbox address. As above, if you're already logged in, it will take you right there.

3) Same fix for composing mail.

For me, this is all I need. As long as I have checked "Stay signed in" in gmail, this works as originally intended. If not, I'll be asked to sign in everytime. In either case, my password is no longer sent in the url in plaintext.

I'd like to post a link for others to download my new version, however it would be nice to have consent from the original poster/coder first. If he isn't reachable, perhaps I can put it up anyway? I'm not sure what's acceptable. Let me know what you guys think.

apread

I think that's all everyone was anxiously waiting for! I hope you get permission to link it to us. It would be great. I, personally, would be grateful :D

Rookie

apread

Posted
Posted

I think that's all everyone was anxiously waiting for! I hope you get permission to link it to us. It would be great. I, personally, would be grateful :D

Good to hear. I've sent a PM to the OP as of this morning.

As a side note, one feature still neglected by my "fix" is the login if you have multiple accounts. Opening a mail item, for example, will just take you to the inbox of the currently logged-in user in your browser (although this won't happen if you don't choose to stay signed in to gmail). I only use one account, so this isn't an issue for me. Judging by the code, it looks like it would take more drastic changes to properly support auto-login for multiple accounts. If I had the full (original) source at my disposal, I could probably implement this feature properly. Since I'm only really able to modify the assembly right now, however, it is very unlikely I'll be able to change this.

Hopefully the OP gets back to me soon and is okay with me posting the modified version...

Enthusiast

daty2k1

Posted
  • Author
Posted

Hi guys,

Sorry for the lack of updates but there are a few reasons for this:

1. I have been very busy these last few months and I'm having a hard time finding time to work on the application. But I also kind of lost interest in developing it further because I've never wanted it to become a big complicated application that does coffee or other things that the actual Gmail already does better. I've created it to be just that: a notifier and I think it works pretty well.

2. I also kind of got tired of following the thread due to the huge amount of people requesting features all over the place or fixes for things that have been discussed many times before. Again, this is just a notifier, not a replacement for Gmail.

Anyway about that login thing, as you guessed, simply removing the auto login part of the url will not fix it. I could release a new version with that modified url but it would only fit people with only 1 account. What we need is to find a way to restore the original login thing the way it was before Google broke it. I've been trying to find a solution many times but I still haven't found anything working. My only hope right now would be to discover how it is done in the original notifier.

Rookie

apread

Posted
Posted

Hi guys,

Sorry for the lack of updates but there are a few reasons for this:

1. I have been very busy these last few months and I'm having a hard time finding time to work on the application. But I also kind of lost interest in developing it further because I've never wanted it to become a big complicated application that does coffee or other things that the actual Gmail already does better. I've created it to be just that: a notifier and I think it works pretty well.

2. I also kind of got tired of following the thread due to the huge amount of people requesting features all over the place or fixes for things that have been discussed many times before. Again, this is just a notifier, not a replacement for Gmail.

Anyway about that login thing, as you guessed, simply removing the auto login part of the url will not fix it. I could release a new version with that modified url but it would only fit people with only 1 account. What we need is to find a way to restore the original login thing the way it was before Google broke it. I've been trying to find a solution many times but I still haven't found anything working. My only hope right now would be to discover how it is done in the original notifier.

I think it would be nice if [either] you [or I] released a modified url version. It would only take a few minutes to do, and my understanding is that there are many users (apparently with only 1 account) who want this. Why not post this version? If you are not interested in posting it, can I?

Regarding the multiple account login issue: here is a page that lists 4 open source gmail notifiers. Perhaps you can look at their source(s) and see what they are doing to login?

I understand that you only want this to be a notifier, but I think it should also definitely be expected that any software release will be followed by feature requests by users. I personally would love to add some additional features to this notifier. Please let me know if you would consider sharing your source so that I might be able to add them. I could also try to fix the multiple login issue if you were feeling that you didn't have the time to do it...

Neowinian

robba

Posted
Posted

hi guys,

does anyone know why this happens.

Firefox only recognizes the email address, not the password. however I can see my password in the URL box.

this does happen when I'm still logged in but do not have an active Firefox tab.

I just want gmail notifier plus to put my password so I can login by clicking 'sign in' or no email address and password. this way I can double click to enter my email address and password at once.

the way you see in the picture I've to manually enter my (long) password.

post-328168-12659965559162_thumb.png

Rookie

Author X

Posted
Posted

Hi guys,

Sorry for the lack of updates but there are a few reasons for this:

1. I have been very busy these last few months and I'm having a hard time finding time to work on the application. But I also kind of lost interest in developing it further because I've never wanted it to become a big complicated application that does coffee or other things that the actual Gmail already does better. I've created it to be just that: a notifier and I think it works pretty well.

2. I also kind of got tired of following the thread due to the huge amount of people requesting features all over the place or fixes for things that have been discussed many times before. Again, this is just a notifier, not a replacement for Gmail.

Anyway about that login thing, as you guessed, simply removing the auto login part of the url will not fix it. I could release a new version with that modified url but it would only fit people with only 1 account. What we need is to find a way to restore the original login thing the way it was before Google broke it. I've been trying to find a solution many times but I still haven't found anything working. My only hope right now would be to discover how it is done in the original notifier.

Well, of course there's no obligation to keep updating a free app like this. But it would be great if you could just use the non-login URL or give apread the okay to post his, since links working for one account is still better than not working for anyone.

Also, FYI, the official Gmail notifier doesn't automatically log in, it just goes to http://mail.google.com/mail/ - if you're not logged in already, you have to do so.

Looking at the links apread suggested, KCheckGMail uses POST instead of GET to login. The POST format it uses is "Email=USER&Passwd=PASS&signIn=Sign+in&service=mail&continue=http%3A%2F%2Fmail.google.com%2Fmail%3F&ltmpl=default&ltmplcache=2&rm=false&rmShown=1&GALX=GALXValue" - substistuting USER, PASS, and GALXValue. From what I can understand looking at the KCheckGMail source code, and googling "gmail GALX", the GALX value is some kind of per-session value set as a cookie when you request the login page.

Does that help any?

Enthusiast

daty2k1

Posted
  • Author
Posted

Well, of course there's no obligation to keep updating a free app like this. But it would be great if you could just use the non-login URL or give apread the okay to post his, since links working for one account is still better than not working for anyone.

Also, FYI, the official Gmail notifier doesn't automatically log in, it just goes to http://mail.google.com/mail/ - if you're not logged in already, you have to do so.

Looking at the links apread suggested, KCheckGMail uses POST instead of GET to login. The POST format it uses is "Email=USER&Passwd=PASS&signIn=Sign+in&service=mail&continue=http%3A%2F%2Fmail.google.com%2Fmail%3F&ltmpl=default&ltmplcache=2&rm=false&rmShown=1&GALX=GALXValue" - substistuting USER, PASS, and GALXValue. From what I can understand looking at the KCheckGMail source code, and googling "gmail GALX", the GALX value is some kind of per-session value set as a cookie when you request the login page.

Does that help any?

Thanks for this, I'll see if I can get it working :)

I understand that you only want this to be a notifier, but I think it should also definitely be expected that any software release will be followed by feature requests by users. I personally would love to add some additional features to this notifier. Please let me know if you would consider sharing your source so that I might be able to add them. I could also try to fix the multiple login issue if you were feeling that you didn't have the time to do it...

It's not like I didn't expect to receive requests and I've improved the application a lot thanks to them but at some point it's getting ridiculous. Why would anyone want to be able to use an icon in the notification area when obviously the point of this notifier is to sit in the taskbar?

Grand Master

Mathachew Veteran

Posted
  • Veteran
Posted

Hi guys,

Sorry for the lack of updates but there are a few reasons for this:

1. I have been very busy these last few months and I'm having a hard time finding time to work on the application. But I also kind of lost interest in developing it further because I've never wanted it to become a big complicated application that does coffee or other things that the actual Gmail already does better. I've created it to be just that: a notifier and I think it works pretty well.

2. I also kind of got tired of following the thread due to the huge amount of people requesting features all over the place or fixes for things that have been discussed many times before. Again, this is just a notifier, not a replacement for Gmail.

Anyway about that login thing, as you guessed, simply removing the auto login part of the url will not fix it. I could release a new version with that modified url but it would only fit people with only 1 account. What we need is to find a way to restore the original login thing the way it was before Google broke it. I've been trying to find a solution many times but I still haven't found anything working. My only hope right now would be to discover how it is done in the original notifier.

Glad to see you back! For multiple accounts, specifically, GApps emails, you could send users to the Google domain path with the email's domain at the end: http://mail.google.com/a/example.com

Unless there's something I'm overlooking, you can just get the domain portion of an email address and safely assume the url will be like that above. If I've logged in in the past, my browser cookies should keep me logged in without the notifier having to send any of my account information. It's a big assumption on my part, but it makes sense.

Enthusiast

daty2k1

Posted
  • Author
Posted

Ok I've been doing some tests and I'm able to retrieve that GALX value using POST then login securely. However, all of this is done "programmatically" and I can't find a way to open the inbox in the browser once I'm logged in :(

I also tried to retrieve a GALX value programmatically then login using the old way plus the GALX parameter and it doesn't work. This is strange because if I retrieve the GALX manually in Firefox and hardcode it in the code, it works.

I don't know if it makes sense to anyone but I think I'm gonna need help on this one :wacko:

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.