Re: squirrelmail-users Digest, Vol 2, Issue 12

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 11 Jul 2006 08:04:04 -0700
squirrelmail-users-request@xxxxxxxxxxxxxxxxxxxxx wrote:

> Send squirrelmail-users mailing list submissions to
> 	squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
> or, via email, send a message with subject or body 'help' to
> 	squirrelmail-users-request@xxxxxxxxxxxxxxxxxxxxx
> 
> You can reach the person managing the list at
> 	squirrelmail-users-owner@xxxxxxxxxxxxxxxxxxxxx
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of squirrelmail-users digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: "Remain Secure After Login" check box (Paul Lesniewski)
>    2. Attachment size? (Ralf Hildebrandt)
>    3. Re: Attachment size? (Rainer Sokoll)
>    4. Re: Attachment size? (Ralf Hildebrandt)
>    5. Re: Attachment size? (Chris Hilts)
>    6. [Fwd: Re: Testing and honesty] - From Debian mailing list
>       (Brent Clark)
>    7. Re: [Fwd: Re: Testing and honesty] - From Debian mailing list
>       (Chris Hilts)
>    8. sm prepending "$default_folder_prefix" to every page -	frames
>       not working. (wizard)
>    9. timeout issue (charlie derr)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Tue, 11 Jul 2006 01:39:20 -0700
> From: "Paul Lesniewski" <paul@xxxxxxxxxxxxxxxx>
> Subject: Re:  "Remain Secure After Login" check box
> To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> Message-ID:
> 	<58191e420607110139v5da9f3e2i5eee513638b8bdc7@xxxxxxxxxxxxxx>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> 
> On 7/8/06, james edwards <lists.james.edwards@xxxxxxxxx> wrote:
> >  Looks like you need to install or enable this plugin --
> >
> >
> > >
> > > http://www.squirrelmail.org/plugin_view.php?id=108
> > >
> > > Version 2.2 introduced a feature that sounds suspiciously like what you
> > > were using previously --
> > >         "Added checkbox to secure screen that allows user to decide to
> > > stay in SSL after login or not"
> > >
> > > --
> > > Marc
> >
> >
> >
> > Cool thanks. I installed as indicated in the INSTALL doc &  ran conf.pl to
> > add it to the list of
> > available plugins. That broke squirrelmail:
> >
> > [client x.x198.59.128.182] PHP Warning:
> > main(../plugins/compatibility/functions.php) [<a
> > href='function.main'>function.main</a>]: failed to open stream: No such file
> > or directory in
> > /usr/share/squirrelmail/plugins/show_ssl_link/functions.php
> > on line 20
> > [client x.x.128.182] PHP Warning:  main() [<a
> > href='function.include'>function.include</a>]: Failed opening
> > '../plugins/compatibility/functions.php' for inclusion
> > (include_path='.:/usr/share/pear') in
> > /usr/share/squirrelmail/plugins/show_ssl_link/functions.php
> > on line 20
> > [client x.x.128.182] PHP Fatal error:  Call to undefined function
> > compatibility_sqsession_register() in
> > /usr/share/squirrelmail/plugins/show_ssl_link/functions.php
> > on line 40
> >
> >
> > Hmmm, ../plugins/compatibility/ dir did not exist so I created it and cp'ed
> > functions.php
> > to it. No dice. I ran conf.pl and backed things out & squirrelmail now works
> > (but no ssl_link).
> > Any ideas ? This is  squirrelmail-1.4.6-7.el4.centos4.
> 
> Yeah, read the requirements on the web page.  You need compatibility
> plugin, v 1.x.  There's even a link to it right up top of the plugin
> details page.... how can you miss it?
> 
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Tue, 11 Jul 2006 12:49:43 +0200
> From: Ralf Hildebrandt <Ralf.Hildebrandt@xxxxxxxxxx>
> Subject:  Attachment size?
> To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> Message-ID: <20060711104943.GD6511@xxxxxxxxxx>
> Content-Type: text/plain; charset=iso-8859-1
> 
> Where can I globally set the attachment size?
> 
> Right now, I see this in the compose window:
> (max. 8 M)
> 
> and the respective code is:
> compose.php:            $maxsize = '(max.&nbsp;' . show_readable_size( min( $sizes ) ) . ')';
> 
> -- 
> Ralf Hildebrandt (i.A. des IT-Zentrums)         Ralf.Hildebrandt@xxxxxxxxxx
> Charite - Universit?tsmedizin Berlin            Tel.  +49 (0)30-450 570-155
> Gemeinsame Einrichtung von FU- und HU-Berlin    Fax.  +49 (0)30-450 570-962
> IT-Zentrum Standort CBF                 send no mail to spamtrap@xxxxxxxxxx
> 
> 
> 
> ------------------------------
> 
> Message: 3
> Date: Tue, 11 Jul 2006 12:52:58 +0200
> From: Rainer Sokoll <R.Sokoll@xxxxxxxxxxxx>
> Subject: Re:  Attachment size?
> To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> Message-ID: <20060711105258.GM180@xxxxxxxxxxxxxxxxxxxxxxx>
> Content-Type: text/plain; charset=us-ascii
> 
> On Tue, Jul 11, 2006 at 12:49:43PM +0200, Ralf Hildebrandt wrote:
> 
> > Where can I globally set the attachment size?
> 
> In php.ini (max_upload_size, IIRC)
> 
> Rainer
> 
> 
> 
> ------------------------------
> 
> Message: 4
> Date: Tue, 11 Jul 2006 14:24:17 +0200
> From: Ralf Hildebrandt <Ralf.Hildebrandt@xxxxxxxxxx>
> Subject: Re:  Attachment size?
> To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> Message-ID: <20060711122417.GB6511@xxxxxxxxxx>
> Content-Type: text/plain; charset=iso-8859-1
> 
> * Rainer Sokoll <R.Sokoll@xxxxxxxxxxxx>:
> > On Tue, Jul 11, 2006 at 12:49:43PM +0200, Ralf Hildebrandt wrote:
> > 
> > > Where can I globally set the attachment size?
> > 
> > In php.ini (max_upload_size, IIRC)
> 
> Yes, that's set to
> 
> file_uploads = On
> upload_max_filesize = 16M
> 
> so why does SM show 8M then?
> 
> -- 
> Ralf Hildebrandt (i.A. des IT-Zentrums)         Ralf.Hildebrandt@xxxxxxxxxx
> Charite - Universit?tsmedizin Berlin            Tel.  +49 (0)30-450 570-155
> Gemeinsame Einrichtung von FU- und HU-Berlin    Fax.  +49 (0)30-450 570-962
> IT-Zentrum Standort CBF                 send no mail to spamtrap@xxxxxxxxxx
> 
> 
> 
> ------------------------------
> 
> Message: 5
> Date: Tue, 11 Jul 2006 08:28:05 -0400
> From: Chris Hilts <tassium@xxxxxxxxxxxxxxxx>
> Subject: Re:  Attachment size?
> To: Ralf Hildebrandt <Ralf.Hildebrandt@xxxxxxxxxx>
> Cc: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> Message-ID: <44B39955.3080900@xxxxxxxxxxxxxxxx>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> > file_uploads = On
> > upload_max_filesize = 16M
> > 
> > so why does SM show 8M then?
> 
> http://www.squirrelmail.org/wiki/AttachmentSize
> 
> 
> - --
> Chris Hilts
> tassium@xxxxxxxxxxxxxxxx
> Say it with flowers -- Send them a triffid!
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.4 (MingW32)
> 
> iD8DBQFEs5lU98ixrK2vMtARApmtAJ0T2Qs+CkNzGjg6sXzgwTa7DMAYtQCfTJsK
> pxahGjiie4ohCZswB4SH9KA=
> =NHU9
> -----END PGP SIGNATURE-----
> 
> 
> 
> ------------------------------
> 
> Message: 6
> Date: Tue, 11 Jul 2006 15:11:59 +0200
> From: Brent Clark <bclark@xxxxxxxxxxxxxxx>
> Subject:  [Fwd: Re: Testing and honesty] - From Debian
> 	mailing list
> To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> Message-ID: <44B3A39F.4040605@xxxxxxxxxxxxxxx>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> 
> Hi all
> 
> This thread was on the Debian mailing list.
> 
> Was a interesting read.
> 
> Kind Regards
> Brent Clark
> 
> P.s This forwarding is not intended to offend anyone, just something I thought was interesting and might too interest someone.
> ------------------------------------------------------------------------------
> 
> 
> 
> -------- Original Message --------
> Subject: Re: Testing and honesty
> Resent-Date: Tue, 11 Jul 2006 07:49:46 -0500 (CDT)
> Resent-From: debian-user@xxxxxxxxxxxxxxxx
> Date: Tue, 11 Jul 2006 09:49:11 -0300
> From: Andre Carezia <andre@xxxxxxxxxxxxxx>
> To: debian-user@xxxxxxxxxxxxxxxx
> References: <200607081609.k68G9dtn018636@xxxxxxxxxxxxxxxxxxxx> <44AFF574.6030005@xxxxxxxxxxxxxxxxxxxxx> <20060708224402.GA8575@xxxxxxxxxxxxxx> <44B0FFB7.9090509@xxxxxxxxxxxxxx> <20060709132819.GA4804@xxxxxxxxxxxxx>
> 
> Dave Ewart escreveu:
> 
> >> Maybe you should think about using better software (squirrelmail and
> >> bind are not secure enough for public servers, anyway :-))
> > 
> > Can you provide some evidence to back up that remark?
> 
> Sure.
> 
> Squirrelmail is written in PHP, a fast-development language not designed
> with security in mind:
> http://www.sklar.com/page/article/owasp-top-ten
> 
> Squirrelmail vulnerabilities:
> http://secunia.com/product/288/
> 
> BIND flaws:
> http://www.lurhq.com/dnscache.pdf
> http://www.isotf.org/news/DNS-Amplification-Attacks.pdf
> http://cr.yp.to/djbdns/blurb/security.html
> http://cr.yp.to/djbdns/guarantee.html
> 
> []s,
> 
> -- 
> Andr? Carezia
> Eng. de Telecomunica??es
> Carezia Consultoria - www.carezia.srv.br
> 
> 
> 
> 
> ------------------------------
> 
> Message: 7
> Date: Tue, 11 Jul 2006 09:18:50 -0400
> From: Chris Hilts <tassium@xxxxxxxxxxxxxxxx>
> Subject: Re:  [Fwd: Re: Testing and honesty] - From Debian
> 	mailing list
> To: Brent Clark <bclark@xxxxxxxxxxxxxxx>
> Cc: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> Message-ID: <44B3A53A.9030104@xxxxxxxxxxxxxxxx>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Brent Clark wrote:
> > Hi all
> 
> Howdy.
> 
> > Was a interesting read.
> 
> I didn't find it very interesting - yet another person spouting off
> about PHP.  It's cool to do that currently, see the threads on Bugtraq.
> 
> SquirrelMail has had occasional vulnerabilities, as all software does.
> As bugs are discovered, they are fixed.  Promptly.
> 
> - --
> Chris Hilts
> tassium@xxxxxxxxxxxxxxxx
> Say it with flowers -- Send them a triffid!
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.4 (MingW32)
> 
> iD8DBQFEs6U698ixrK2vMtARAt0NAJwI0a3gXDgT2uGHIfsKT6gzJhIZIwCglZI9
> P4vxWGB3wKeDyk5AzaJ7gms=
> =1vXk
> -----END PGP SIGNATURE-----
> 
> 
> 
> ------------------------------
> 
> Message: 8
> Date: Tue, 11 Jul 2006 10:15:39 -0400
> From: "wizard" <wizard10000@xxxxxxxxxxxx>
> Subject:  sm prepending "$default_folder_prefix" to every
> 	page -	frames not working.
> To: <squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx>
> Message-ID: <200607111415.k6BEFitg091473@xxxxxxxxxxxxxxxxxxxxxxxx>
> Content-Type: text/plain; charset="UTF-8"
> 
> Running Fedora Core 5, sendmail and cyrus.  Apache 2.2 and php 5.  
> SM was installed as rpm from the FC5 repository.  Squirrelmail 
> version 1.4.7-2.fc5

same problem at my site...except we're using dovecot.
> 
> This morning squirrelmail started prepending $default_folder_prefix	
> 	= ''; to every page and although i can log in and send and receive 
> mail and all folders are working the framed pages aren't working.  

Can't log onto squirrelmail at all...no changes on this end expect the update
to 1.4.7-2.fc5.....worked until earlier this morning with no problems

> I can access the left and right panes by typing in the URL, though -
>  here's a snippet of html source from the login page:
> 
> ==========
> 
> $default_folder_prefix		= '';
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
> 
> <html>
> 
> <head>
> 
> ==========
> 
> SM's been working fine for a couple years.  Last time SM worked 
> properly was about 5am - a login about an hour later (and all 
> subsequent logins) show the prepended $default_folder_prefix		= ''; 
> and frames don't work, but the mail works fine.
> 
> thanks in advance -
> 

James


> 
> 
> 
> ------------------------------
> 
> Message: 9
> Date: Tue, 11 Jul 2006 11:03:55 -0400
> From: charlie derr <cderr@xxxxxxxxxxxxxxx>
> Subject:  timeout issue
> To: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> Message-ID: <44B3BDDB.10203@xxxxxxxxxxxxxxx>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> 
> We're trying to move from an older version of squirrelmail to a more current one but are having some trouble with a timeout for people who 
> have several thousand messages in their inbox (those people can login to the older squirrelmail without a problem).  Both instances are 
> contacting the same imap mail server.
> 
> The problem is with squirrelmail-1.4.6-7.el4 on RHEL4 and what happens is that the left pane loads ok after login, but there is never any 
> content shown in the larger right hand pane.  There is no error message returned to the browser, only an empty page (some browsers show an 
> empty file named right_main.php and ask if you want to download/open it) after about 15 seconds.
> 
> For users with only a couple hundred messages things work fine.
> 
> 
> On our older installation of squirrelmail, when a user's mailbox grows too large, the user recieves a (somewhat cryptic) error about 
> exceeding a 30 second timeout -- but no similar error is returned for the new server (and the big problem is that the threshhold seems to be 
>   a much smaller inbox).
> 
> 
> I've searched archives and source code for some way to increase the timeout value, but haven't yet found it.  I have a vague memory of a 
> post from several months ago (not even sure it was on this list) about someone who claimed to have raised a default timeout from 30 seconds 
> to 300 seconds.  This person said s/he had no trouble (other than the several minute delay) with loading inboxes with huge mailboxes as long 
> as enough memory had been allocated in php.ini and the imap server was fast enough.
> 
> 
> I would love to know how to troubleshoot/solve this issue.
> 
> 	thanks very much in advance,
> 		~c
> 
> 
> 
> ------------------------------
> 
> 
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> 
> 
> ------------------------------
> 
> --
> squirrelmail-users mailing list
> List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
> http://squirrelmail.org/cvs
> 
> End of squirrelmail-users Digest, Vol 2, Issue 12
> *************************************************


-- 
James Genus Jr.
207-633-9600
jgenus@xxxxxxxxxxx


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--
squirrelmail-users mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux