On 12/27/2012 07:42 PM, Reindl Harald wrote:
>
> Am 28.12.2012 01:38, schrieb Robert Moskowitz:
>>> Roundcube isn't going to tell you to set the timezone in php.ini ... that's
>>> an admin's job to have already done.
>> I was not clear. It is quite apparent that Roundcube requires timezone
>> set in php.ini. This is an application requirement
> boah it is NOT an application requirement
>
> it is a BASIC requirment for any proper configured server
> with PHP >= 5.3.0, as said: if you refuse to understand
> basics of webserver-configuration please hire someone who does
When I saw that I needed PHP for this setup, I began researching how to
limit php usage to the apps installed. I have lots of reading on this.
I know this is hard. I do have access to resources to harden this php
setup.
> with your "ignorance is a bliss"-attitude it is pretty clear that
> you are also missing and ignoring security basics as so many out
> there are doing while think the must setup their own server and
> the result are botnets attacking thrid parties
Ignorance is frustration. I have been reading steadily since I started
on this a month ago. Just, it seems not dealing with the actual setup
requirements. So far, I will start with limiting web access to local
systems only. Remote systems will have to VPN in. This is only a start,
I know there is more to do. If it was not for a couple users, I would
not provide a webmail interface even with them having to VPN in.
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
