Re: [SM-USERS] Disable PHP's 'register_globals' setting

2009-04-05 Thread res5it
Thanx for your reply... I know that some times nessus is produsing false positives , but in this case I was not sure.. Any other suggestions maybe? Best Regards -- View this message in context: http://www.nabble.com/Disable-PHP%27s-%27register_globals%27-setting-tp22493467p22532965.html Sent f

Re: [SM-USERS] Disable PHP's 'register_globals' setting

2009-03-16 Thread Tomas Kuliavas
res5it wrote: > > > Thanx for your reply... I know that some times nessus is produsing false > positives , but in this case I was not sure.. Any other suggestions maybe? > > Best Regards > SquirrelMail 1.4.8 and later should not have any security issues that depend on register_globals=on. Co

Re: [SM-USERS] Disable PHP's 'register_globals' setting

2009-03-15 Thread Marc Powell
On Mar 13, 2009, at 5:10 AM, res5it wrote: > Solution : > > Disable PHP's 'register_globals' setting > > in my /etc/php.ini register_globals = off ... > > How do I change this and correct this issue? Seems like you have. Solution is to disable register_globals and you have disabled register_gl

[SM-USERS] Disable PHP's 'register_globals' setting

2009-03-15 Thread res5it
Hi all, i need some help I did scan of my network with nessus and i get the following warning: Description : The version of SquirrelMail installed on the remote fails to check the origin of the 'base_uri' parameter in the 'functions/strings.php' script before using it to set the path for its co