[SM-USERS] problem with security - login/sender mismatch

[Bartosz.C]

Hi,
I have a problem with field: Options->Personal Information->E-mail Address.
In that field I can write just any address and it will be sent without
problems - for example
whate...@whatever.com - and my postfix will send it.
My users names are the same like emails.
Is there any option to change behave of squirrelmail - and when user is
sending email it alaways is sending using his user name whatever field
"e-mail address" contain?

I know that I can remove that option from
/squirrelmail/include/options/personal.php script but in specific cases
cookies from IE, Firefox are messing with
/var/lib/squirrelmail/data/users.pref files. And that files contains
information about this address.

Bartosz.
--
LogMeIn Central: Instant, anywhere, Remote PC access and management.
Stay in control, update software, and manage PCs from one command center
Diagnose problems and improve visibility into emerging IT issues
Automate, monitor and manage. Do more in less time with Central
http://p.sf.net/sfu/logmein12331_d2d-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: [SM-USERS] problem with security - login/sender mismatch

[Jari Fredriksson]

05.11.2012 13:56, Bartosz.C kirjoitti:
> Hi,
> I have a problem with field: Options->Personal Information->E-mail
> Address.
> In that field I can write just any address and it will be sent without
> problems - for example
> whate...@whatever.com  - and my postfix
> will send it.
> My users names are the same like emails.
> Is there any option to change behave of squirrelmail - and when user
> is sending email it alaways is sending using his user name whatever
> field "e-mail address" contain?
>
> I know that I can remove that option from
> /squirrelmail/include/options/personal.php script but in specific
> cases cookies from IE, Firefox are messing with
> /var/lib/squirrelmail/data/users.pref files. And that files contains
> information about this address.
>
> Bartosz.

You can write any address to your email address in ANY email client
there is.

How could the client know your own "rightful" address anyway?

jarif


>
>
> --
> LogMeIn Central: Instant, anywhere, Remote PC access and management.
> Stay in control, update software, and manage PCs from one command center
> Diagnose problems and improve visibility into emerging IT issues
> Automate, monitor and manage. Do more in less time with Central
> http://p.sf.net/sfu/logmein12331_d2d
>
>
> -
> squirrelmail-users mailing list
> Posting guidelines: http://squirrelmail.org/postingguidelines
> List address: squirrelmail-users@lists.sourceforge.net
> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
> List info (subscribe/unsubscribe/change options): 
> https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


-- 

You have an ambitious nature and may make a name for yourself.




signature.asc
Description: OpenPGP digital signature
--
LogMeIn Central: Instant, anywhere, Remote PC access and management.
Stay in control, update software, and manage PCs from one command center
Diagnose problems and improve visibility into emerging IT issues
Automate, monitor and manage. Do more in less time with Central
http://p.sf.net/sfu/logmein12331_d2d-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users