Re: Squirrelmail is too security conscious

These are the two possibilities.  It appears that the cookie is
expiring too quickly in the separate popup compose window.  The main
SM page in the browser remains connected.

/usr/local/www/squirrelmail/plugins/compatibility/includes/1.5.2/global.php

  // reject tokens that are too old
   //
   if (empty($max_token_age_days)) $max_token_age_days = 30;
   $old_token_date = $now - ($max_token_age_days * 86400);
   if ($timestamp < $old_token_date)
   {
      if (!$show_error) return FALSE;
      logout_error(_("The current page request appears to have
originated from an untrusted source."));
      exit;
   }


/usr/local/www/squirrelmail/functions/strings.php

   // reject tokens that are too old
   //
   if (empty($max_token_age_days)) $max_token_age_days = 2;
   $old_token_date = $now - ($max_token_age_days * 86400);
   if ($timestamp < $old_token_date)
   {
      if (!$show_error) return FALSE;
      logout_error(_("S The current page request appears to have
originated from an untrusted source."));
      exit;
   }

/usr/local/www/squirrelmail/po/squirrelmail.pot

This is a translation file where the error message string is used as a
key.
-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:[email protected]
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3



-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users