Re: preferences of a user modified with preferences of another user (on 2 different computers)

2009/3/27 Annie Brugallé <[email protected]>:
>
> Last weekend, a customer (USER1) reported that, when he sent an email to
> another person, the "From" field was the email of another user (USER2).
>
> I verified his configuration and I saw that his preferences
> (.../data/userId.pref) were changed : he had the preferences of USER2.
> These two users don't know each other. They were on different computers.
>
> We have :
>
> System redhat Enterprise 4
> Squirrelmail 1.4.17
> plugins : avelsieve, newmail, quota_usage, quicksave, compatibility
>
> imap server: Cyrus imapd 2.2.12-9
> smtp server: postfix 2.2.10-1.2.1.el4_7
> web server: Apache 2.0.52-41.ent.2
>
> browser (of the user who sent the mail with the wrong "From" field) :
> Firefox 3(he don't remember if he worked on Linux or windows. )

I find it slightly harder to trust users who don't remember their
computer O/S.  You have to be really sure the two users didn't - even
temporarily - log in using the same computer.

> It's the only problem reported since the installation of this version of
> squirrelMail : 9 DEC. 2008 and I don't know how I could reproduce it.

Then it's going to be very hard to help.  The only thing I can think
of is the issue we dealt with some time ago regarding deleted sessions
with the name "deleted" that were causing some problems, but again, I
do believe that was fixed.  Beside looking at the user pref files,
you'll also want to try to figure out what session files belong to the
users and take a look at those (probably too late now).

Otherwise, thanks for reporting this - maybe it will help lay a
groundwork for tracking such an issue down if others experience it
too.

> Here are all te informations I collected  on our server :
>
> the modification date of the file : USER1.pref was:  Sat, 21 Mar 2009
> 15:26 (full name, email address and reply_to where modified)
>
> Here are the logs for  USER1 for this day :

<snip>

Web logs are going to be more useful that IMAP ones.

> USER2 is nearly allways connected to SquirrelMail, he doesn't use
> another mail client.
>
> I know that I haven't a lot of informations about his problem for you
> but I wanted to confirm that this problem of informations merged between
> 2 users on 2 different computers may happen with squirrelMail 1.4.17

------------------------------------------------------------------------------
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel