> | > | >1. I have had cases where a user's .prefs file has been changed. > | > | > What I mean is that snubber-sm@xxxxxxxxxxxxxxxx has ended up > | > | > having pdontthink@xxxxxxxxxxxxxx as the e-mail address, for > | > | > example. How this happens has left me stumped. This is very > | > | > dangerous, because then, when snubber-sm@xxxxxxxxxx sends out > | > | > an e-mail, they appear as from pdontthink@xxxxxxxxxxxxxx, so > | > | > the replies would go to pdontthink@xxxxxxxxxxxxxxx > | > | > Some of my clients are planning to crucify me for this sad > | > | > problem. I am lost as to how this can happen... > | > | > On another setup where I do not use the vlogin plugin, this > | > | > has never happened (never reported to me). > | > | > | > | Maybe nice if you don't use our personal email addresses for > examples, > | > | thanks. > | > > | > Sorry for that. I tested the validity of the addresses b4 and found > they > | > were invalid. Maybe I was wrong on my tests. Sorry. > | > > | > | This is probably the session-cross bug that has been known for ages. > | > > | > I'm not quite sure, since one client who complained lives over 200km > | > away from the one who 'modified' their prefs. > | > > | > > | > | Usually happens when one user uses same browser (on same machine) to > | > | login to their account that another user had been using before that. > | > | I can see no way (and have never heard of) this could happen as a > | > | result of Vlogin. > | > > | > Thanks for exonerating vlogin from the equation. Now I need to think > | > about this once again, and get an explanation.... > | > | Maybe both of them use Internet Explorer and have invalid clock set on > | their machines? > > How would that affect, given that they use different machines? They both use same session called 'deleted'. IE sets session cookie value to 'deleted', if time is not correct. https://sourceforge.net/tracker/index.php?func=detail&aid=1462110&group_id=311&atid=100311 We have report about it, but in order to reproduce it and fix it, we might need testbed with two or three machines. -- Tomas All the advantages of Linux Managed Hosting--Without the Cost and Risk! Fully trained technicians. The highest number of Red Hat certifications in the hosting industry. Fanatical Support. Click to learn more http://sel.as-us.falkag.net/sel?cmd=lnk&kid=107521&bid=248729&dat=121642 -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
