> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Matt > Sent: Thursday, September 06, 2007 3:06 PM > Cc: squirrelmail-users@lists.sourceforge.net > Subject: Re: [SM-USERS] Spam Sent From WebMail > > > If you use SquirrelMail 1.4.4 and turned off email modifications in > > SquirrelMail configuration, you haven't disabled it. > > Why do you keep saying that? I've turned it off, and if I go into > the settings... I definitely can not change the setting... how do you > propose someone would change it?
I haven't looked at the code but perhaps turning it off only controlled whether to _display_ the option to change it in that version but didn't actually prevent it? If someone with malicious intent already knew how to craft a proper POST to change it, they'd have no need for it to be displayed in the Options and would be free to change it at will regardless. If Paul suggests doing something, there's certainly a reason behind it. -- Marc ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@lists.sourceforge.net List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
