Re: Squirrelmail is too security conscious

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



These are the two possibilities.  It appears that the cookie is
expiring too quickly in the separate popup compose window.  The main
SM page in the browser remains connected.

/usr/local/www/squirrelmail/plugins/compatibility/includes/1.5.2/global.php

  // reject tokens that are too old
   //
   if (empty($max_token_age_days)) $max_token_age_days = 30;
   $old_token_date = $now - ($max_token_age_days * 86400);
   if ($timestamp < $old_token_date)
   {
      if (!$show_error) return FALSE;
      logout_error(_("The current page request appears to have
originated from an untrusted source."));
      exit;
   }


/usr/local/www/squirrelmail/functions/strings.php

   // reject tokens that are too old
   //
   if (empty($max_token_age_days)) $max_token_age_days = 2;
   $old_token_date = $now - ($max_token_age_days * 86400);
   if ($timestamp < $old_token_date)
   {
      if (!$show_error) return FALSE;
      logout_error(_("S The current page request appears to have
originated from an untrusted source."));
      exit;
   }

/usr/local/www/squirrelmail/po/squirrelmail.pot

This is a translation file where the error message string is used as a
key.
-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB@xxxxxxxxxxxxx
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3



-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users



[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux