Re: Security problem?

That wouldn't make much sense to me.  Plenty of other IM programs allow 
you to send messages and other stuff without having the person in their 
roster.  ICQ for one i know allows it.  Besides, you have the option to 
"block messages from people not in my roster" under the options/messages 
configuration.

Paul

Peter Millard wrote:

>Steven Millington wrote:
>  
>
>>>I'm looking at the Exodus client and have come across this problem.  If you
>>>add someone to your roster, while they are still pending and have not been
>>>accepted by the remote person you can still send them files and chat
>>>requests.
>>>
>>>I'm looking for a way to find out if they have been accepted in
>>>RosterWindow.pas
>>>
>>>      
>>>
>
>Just to be clear, this is your interpretation of "security", but this is more of
>a policy decision you would like to implement. You want to make changes to the
>code to force folks to be subscribed before they can chat or send files?
>
>What I'd recommend is that you change the global functions like StartChat() in
>ChatWin.pas to enforce this. You'd want to fetch the TJabberRosteritem from the
>main roster by doing:
>        ritem = MainSession.Roster.Find(jid);
>then checking the subscription on that roster item:
>        if (ritem.subscription = 'to') or (ritem.subscription='both') then ....
>
>Hope this helps.
>
>pgm.
>
>_______________________________________________
>Exodus mailing list
>[email protected]
>http://mail.jabber.org/mailman/listinfo/exodus
>
>
>  
>