Re: Squirrelmail is too security conscious
"James B. Byrne via squirrelmail-users" <[email protected]>
| Newsgroups | gmane.mail.squirrelmail.user |
|---|---|
| Message-ID | <[email protected]> |
On Wed, October 31, 2018 13:17, James B. Byrne via squirrelmail-users
wrote:
> These are the two possibilities. It appears that the cookie is
> expiring too quickly in the separate popup compose window. The main
> SM page in the browser remains connected.
>
This is where the error is caught.
>
>
> /usr/local/www/squirrelmail/functions/strings.php
>
> // reject tokens that are too old
> //
> if (empty($max_token_age_days)) $max_token_age_days = 2;
> $old_token_date = $now - ($max_token_age_days * 86400);
> if ($timestamp < $old_token_date)
> {
> if (!$show_error) return FALSE;
> logout_error(_("S The current page request appears to have
> originated from an untrusted source."));
> exit;
> }
--
*** e-Mail is NOT a SECURE channel ***
Do NOT transmit sensitive data via e-Mail
Do NOT open attachments nor follow links sent by e-Mail
James B. Byrne mailto:[email protected]
Harte & Lyne Limited http://www.harte-lyne.ca
9 Brockley Drive vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada L8E 3C3
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users