Re: SQMTRASH being used in place of password (1.4.13)

On Jun 25, 2008, at 2:59 AM, Paul Lesniewski wrote:

> You mean signout.php, right?

/sigh .  yep.  Guess the ppm of C8 H10 N4 O2 in my system was low  
enough to effect higher brain functions :)
>
>
>> So it looks like they are logging in correctly.  It starts to load,
>> gets through right_main and then somehow the browser issues a request
>> for signoff.php,
>
> I don't recall anywhere in the code that there is any automatic
> redirection to signout.php.  The user has to click the signout link,
> although I have reproduced something similar once when doing debugging
> of a not-yet-finished plugin that was incorrectly coded so that the
> "right_frame" parameter was set to signout, but anyway, unless you are
> running custom/broken code, that's probably unrelated.  Do note,
> however, that some older SM versions had package compromises - if you
> are running one such package, you should immediately start testing
> your upgrade.


Yep that is the current plan of action.  Redoing the install and all  
the plugins, checking them one by one. We just found it odd that it  
started all of the sudden with no changes on our part.

-Patrick

--
Patrick Muldoon
Network/Software Engineer
INOC (http://www.inoc.net)
PGPKEY (http://www.inoc.net/~doon)
Key ID: 0x370D752C

Me no internet, only janitor, me just wax floors.


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel