On Tue, 11 Jul 2006 08:04:04 -0700 squirrelmail-users-request@xxxxxxxxxxxxxxxxxxxxx wrote: > Send squirrelmail-users mailing list submissions to > squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.sourceforge.net/lists/listinfo/squirrelmail-users > or, via email, send a message with subject or body 'help' to > squirrelmail-users-request@xxxxxxxxxxxxxxxxxxxxx > > You can reach the person managing the list at > squirrelmail-users-owner@xxxxxxxxxxxxxxxxxxxxx > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of squirrelmail-users digest..." > > > Today's Topics: > > 1. Re: "Remain Secure After Login" check box (Paul Lesniewski) > 2. Attachment size? (Ralf Hildebrandt) > 3. Re: Attachment size? (Rainer Sokoll) > 4. Re: Attachment size? (Ralf Hildebrandt) > 5. Re: Attachment size? (Chris Hilts) > 6. [Fwd: Re: Testing and honesty] - From Debian mailing list > (Brent Clark) > 7. Re: [Fwd: Re: Testing and honesty] - From Debian mailing list > (Chris Hilts) > 8. sm prepending "$default_folder_prefix" to every page - frames > not working. (wizard) > 9. timeout issue (charlie derr) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 11 Jul 2006 01:39:20 -0700 > From: "Paul Lesniewski" <paul@xxxxxxxxxxxxxxxx> > Subject: Re: "Remain Secure After Login" check box > To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > Message-ID: > <58191e420607110139v5da9f3e2i5eee513638b8bdc7@xxxxxxxxxxxxxx> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > On 7/8/06, james edwards <lists.james.edwards@xxxxxxxxx> wrote: > > Looks like you need to install or enable this plugin -- > > > > > > > > > > http://www.squirrelmail.org/plugin_view.php?id=108 > > > > > > Version 2.2 introduced a feature that sounds suspiciously like what you > > > were using previously -- > > > "Added checkbox to secure screen that allows user to decide to > > > stay in SSL after login or not" > > > > > > -- > > > Marc > > > > > > > > Cool thanks. I installed as indicated in the INSTALL doc & ran conf.pl to > > add it to the list of > > available plugins. That broke squirrelmail: > > > > [client x.x198.59.128.182] PHP Warning: > > main(../plugins/compatibility/functions.php) [<a > > href='function.main'>function.main</a>]: failed to open stream: No such file > > or directory in > > /usr/share/squirrelmail/plugins/show_ssl_link/functions.php > > on line 20 > > [client x.x.128.182] PHP Warning: main() [<a > > href='function.include'>function.include</a>]: Failed opening > > '../plugins/compatibility/functions.php' for inclusion > > (include_path='.:/usr/share/pear') in > > /usr/share/squirrelmail/plugins/show_ssl_link/functions.php > > on line 20 > > [client x.x.128.182] PHP Fatal error: Call to undefined function > > compatibility_sqsession_register() in > > /usr/share/squirrelmail/plugins/show_ssl_link/functions.php > > on line 40 > > > > > > Hmmm, ../plugins/compatibility/ dir did not exist so I created it and cp'ed > > functions.php > > to it. No dice. I ran conf.pl and backed things out & squirrelmail now works > > (but no ssl_link). > > Any ideas ? This is squirrelmail-1.4.6-7.el4.centos4. > > Yeah, read the requirements on the web page. You need compatibility > plugin, v 1.x. There's even a link to it right up top of the plugin > details page.... how can you miss it? > > > > ------------------------------ > > Message: 2 > Date: Tue, 11 Jul 2006 12:49:43 +0200 > From: Ralf Hildebrandt <Ralf.Hildebrandt@xxxxxxxxxx> > Subject: Attachment size? > To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > Message-ID: <20060711104943.GD6511@xxxxxxxxxx> > Content-Type: text/plain; charset=iso-8859-1 > > Where can I globally set the attachment size? > > Right now, I see this in the compose window: > (max. 8 M) > > and the respective code is: > compose.php: $maxsize = '(max. ' . show_readable_size( min( $sizes ) ) . ')'; > > -- > Ralf Hildebrandt (i.A. des IT-Zentrums) Ralf.Hildebrandt@xxxxxxxxxx > Charite - Universit?tsmedizin Berlin Tel. +49 (0)30-450 570-155 > Gemeinsame Einrichtung von FU- und HU-Berlin Fax. +49 (0)30-450 570-962 > IT-Zentrum Standort CBF send no mail to spamtrap@xxxxxxxxxx > > > > ------------------------------ > > Message: 3 > Date: Tue, 11 Jul 2006 12:52:58 +0200 > From: Rainer Sokoll <R.Sokoll@xxxxxxxxxxxx> > Subject: Re: Attachment size? > To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > Message-ID: <20060711105258.GM180@xxxxxxxxxxxxxxxxxxxxxxx> > Content-Type: text/plain; charset=us-ascii > > On Tue, Jul 11, 2006 at 12:49:43PM +0200, Ralf Hildebrandt wrote: > > > Where can I globally set the attachment size? > > In php.ini (max_upload_size, IIRC) > > Rainer > > > > ------------------------------ > > Message: 4 > Date: Tue, 11 Jul 2006 14:24:17 +0200 > From: Ralf Hildebrandt <Ralf.Hildebrandt@xxxxxxxxxx> > Subject: Re: Attachment size? > To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > Message-ID: <20060711122417.GB6511@xxxxxxxxxx> > Content-Type: text/plain; charset=iso-8859-1 > > * Rainer Sokoll <R.Sokoll@xxxxxxxxxxxx>: > > On Tue, Jul 11, 2006 at 12:49:43PM +0200, Ralf Hildebrandt wrote: > > > > > Where can I globally set the attachment size? > > > > In php.ini (max_upload_size, IIRC) > > Yes, that's set to > > file_uploads = On > upload_max_filesize = 16M > > so why does SM show 8M then? > > -- > Ralf Hildebrandt (i.A. des IT-Zentrums) Ralf.Hildebrandt@xxxxxxxxxx > Charite - Universit?tsmedizin Berlin Tel. +49 (0)30-450 570-155 > Gemeinsame Einrichtung von FU- und HU-Berlin Fax. +49 (0)30-450 570-962 > IT-Zentrum Standort CBF send no mail to spamtrap@xxxxxxxxxx > > > > ------------------------------ > > Message: 5 > Date: Tue, 11 Jul 2006 08:28:05 -0400 > From: Chris Hilts <tassium@xxxxxxxxxxxxxxxx> > Subject: Re: Attachment size? > To: Ralf Hildebrandt <Ralf.Hildebrandt@xxxxxxxxxx> > Cc: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > Message-ID: <44B39955.3080900@xxxxxxxxxxxxxxxx> > Content-Type: text/plain; charset=ISO-8859-1 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > file_uploads = On > > upload_max_filesize = 16M > > > > so why does SM show 8M then? > > http://www.squirrelmail.org/wiki/AttachmentSize > > > - -- > Chris Hilts > tassium@xxxxxxxxxxxxxxxx > Say it with flowers -- Send them a triffid! > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.4 (MingW32) > > iD8DBQFEs5lU98ixrK2vMtARApmtAJ0T2Qs+CkNzGjg6sXzgwTa7DMAYtQCfTJsK > pxahGjiie4ohCZswB4SH9KA= > =NHU9 > -----END PGP SIGNATURE----- > > > > ------------------------------ > > Message: 6 > Date: Tue, 11 Jul 2006 15:11:59 +0200 > From: Brent Clark <bclark@xxxxxxxxxxxxxxx> > Subject: [Fwd: Re: Testing and honesty] - From Debian > mailing list > To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > Message-ID: <44B3A39F.4040605@xxxxxxxxxxxxxxx> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Hi all > > This thread was on the Debian mailing list. > > Was a interesting read. > > Kind Regards > Brent Clark > > P.s This forwarding is not intended to offend anyone, just something I thought was interesting and might too interest someone. > ------------------------------------------------------------------------------ > > > > -------- Original Message -------- > Subject: Re: Testing and honesty > Resent-Date: Tue, 11 Jul 2006 07:49:46 -0500 (CDT) > Resent-From: debian-user@xxxxxxxxxxxxxxxx > Date: Tue, 11 Jul 2006 09:49:11 -0300 > From: Andre Carezia <andre@xxxxxxxxxxxxxx> > To: debian-user@xxxxxxxxxxxxxxxx > References: <200607081609.k68G9dtn018636@xxxxxxxxxxxxxxxxxxxx> <44AFF574.6030005@xxxxxxxxxxxxxxxxxxxxx> <20060708224402.GA8575@xxxxxxxxxxxxxx> <44B0FFB7.9090509@xxxxxxxxxxxxxx> <20060709132819.GA4804@xxxxxxxxxxxxx> > > Dave Ewart escreveu: > > >> Maybe you should think about using better software (squirrelmail and > >> bind are not secure enough for public servers, anyway :-)) > > > > Can you provide some evidence to back up that remark? > > Sure. > > Squirrelmail is written in PHP, a fast-development language not designed > with security in mind: > http://www.sklar.com/page/article/owasp-top-ten > > Squirrelmail vulnerabilities: > http://secunia.com/product/288/ > > BIND flaws: > http://www.lurhq.com/dnscache.pdf > http://www.isotf.org/news/DNS-Amplification-Attacks.pdf > http://cr.yp.to/djbdns/blurb/security.html > http://cr.yp.to/djbdns/guarantee.html > > []s, > > -- > Andr? Carezia > Eng. de Telecomunica??es > Carezia Consultoria - www.carezia.srv.br > > > > > ------------------------------ > > Message: 7 > Date: Tue, 11 Jul 2006 09:18:50 -0400 > From: Chris Hilts <tassium@xxxxxxxxxxxxxxxx> > Subject: Re: [Fwd: Re: Testing and honesty] - From Debian > mailing list > To: Brent Clark <bclark@xxxxxxxxxxxxxxx> > Cc: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > Message-ID: <44B3A53A.9030104@xxxxxxxxxxxxxxxx> > Content-Type: text/plain; charset=ISO-8859-1 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Brent Clark wrote: > > Hi all > > Howdy. > > > Was a interesting read. > > I didn't find it very interesting - yet another person spouting off > about PHP. It's cool to do that currently, see the threads on Bugtraq. > > SquirrelMail has had occasional vulnerabilities, as all software does. > As bugs are discovered, they are fixed. Promptly. > > - -- > Chris Hilts > tassium@xxxxxxxxxxxxxxxx > Say it with flowers -- Send them a triffid! > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.4 (MingW32) > > iD8DBQFEs6U698ixrK2vMtARAt0NAJwI0a3gXDgT2uGHIfsKT6gzJhIZIwCglZI9 > P4vxWGB3wKeDyk5AzaJ7gms= > =1vXk > -----END PGP SIGNATURE----- > > > > ------------------------------ > > Message: 8 > Date: Tue, 11 Jul 2006 10:15:39 -0400 > From: "wizard" <wizard10000@xxxxxxxxxxxx> > Subject: sm prepending "$default_folder_prefix" to every > page - frames not working. > To: <squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx> > Message-ID: <200607111415.k6BEFitg091473@xxxxxxxxxxxxxxxxxxxxxxxx> > Content-Type: text/plain; charset="UTF-8" > > Running Fedora Core 5, sendmail and cyrus. Apache 2.2 and php 5. > SM was installed as rpm from the FC5 repository. Squirrelmail > version 1.4.7-2.fc5 same problem at my site...except we're using dovecot. > > This morning squirrelmail started prepending $default_folder_prefix > = ''; to every page and although i can log in and send and receive > mail and all folders are working the framed pages aren't working. Can't log onto squirrelmail at all...no changes on this end expect the update to 1.4.7-2.fc5.....worked until earlier this morning with no problems > I can access the left and right panes by typing in the URL, though - > here's a snippet of html source from the login page: > > ========== > > $default_folder_prefix = ''; > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> > > <html> > > <head> > > ========== > > SM's been working fine for a couple years. Last time SM worked > properly was about 5am - a login about an hour later (and all > subsequent logins) show the prepended $default_folder_prefix = ''; > and frames don't work, but the mail works fine. > > thanks in advance - > James > > > > ------------------------------ > > Message: 9 > Date: Tue, 11 Jul 2006 11:03:55 -0400 > From: charlie derr <cderr@xxxxxxxxxxxxxxx> > Subject: timeout issue > To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > Message-ID: <44B3BDDB.10203@xxxxxxxxxxxxxxx> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > We're trying to move from an older version of squirrelmail to a more current one but are having some trouble with a timeout for people who > have several thousand messages in their inbox (those people can login to the older squirrelmail without a problem). Both instances are > contacting the same imap mail server. > > The problem is with squirrelmail-1.4.6-7.el4 on RHEL4 and what happens is that the left pane loads ok after login, but there is never any > content shown in the larger right hand pane. There is no error message returned to the browser, only an empty page (some browsers show an > empty file named right_main.php and ask if you want to download/open it) after about 15 seconds. > > For users with only a couple hundred messages things work fine. > > > On our older installation of squirrelmail, when a user's mailbox grows too large, the user recieves a (somewhat cryptic) error about > exceeding a 30 second timeout -- but no similar error is returned for the new server (and the big problem is that the threshhold seems to be > a much smaller inbox). > > > I've searched archives and source code for some way to increase the timeout value, but haven't yet found it. I have a vague memory of a > post from several months ago (not even sure it was on this list) about someone who claimed to have raised a default timeout from 30 seconds > to 300 seconds. This person said s/he had no trouble (other than the several minute delay) with loading inboxes with huge mailboxes as long > as enough memory had been allocated in php.ini and the imap server was fast enough. > > > I would love to know how to troubleshoot/solve this issue. > > thanks very much in advance, > ~c > > > > ------------------------------ > > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > > > ------------------------------ > > -- > squirrelmail-users mailing list > List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users > http://squirrelmail.org/cvs > > End of squirrelmail-users Digest, Vol 2, Issue 12 > ************************************************* -- James Genus Jr. 207-633-9600 jgenus@xxxxxxxxxxx ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users