[SM-USERS] question on attachment folder documentation

2002-12-26 Thread Erwin Zavala
why 733 and not 730 .. why are other given the right to write and excute? It should have the permission 733 (rwx-wx-wx) to make it impossible for a random person with access to the webserver to list files in this directory. Confidential data might be laying around in there. ___

[SM-USERS] data directory permissions

2002-12-26 Thread Erwin Zavala
I created a directory, sqdata, to store users' preferences. The instructions say to give the webserver permission to write to the folder. When I follow the instructions, SM fails to work because it cannot access default_pref. In my case the, apache is the owner and the group. When I set the pe

[SM-USERS] question about php session permissions

2002-12-26 Thread Erwin Zavala
The install file says: Edit the php.ini file and make sure session.use_cookies is 1. Also be sure to change the session.save_path to someplace that can only be read and written to by the webserver. session.save_path is the location that PHP's session data will be written to. I created a fol

[SM-USERS] SM not working with Redhat 8

2002-12-23 Thread Erwin Zavala
It is generating the follwing error Fatal error: Failed opening required '../config/config.php' (include_path=''.:/usr/share/pear'') in /var/www/html/squirrelmail/src/login.php on line 57 Any idea on how to solve this _ Add pho

[SM-USERS] are you sure

2002-12-11 Thread Erwin Zavala
I was able to modify a document by accident. Please look into it XXS hole found and fixed Dec 06, 2002 by Thijs Kinkhorst Euronymous pointed us to a XXS (Cross Site Scripting) hole in SquirrelMail. The impact of this problem is very low, because in most cases the user has to login before this