Hi,

apache 2.2.16
php 5.3.3 *with suhosin*
horde 4.0.3
imp 5.0.3

In my syslog, I have a lot of this message:
suhosin[2446]: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'view' (attacker 'XXX.XXX.XXX.XXX', file '.../services/ajax.php')
And the search in dimp never respond !

It is the '\0' delimiter char of MAILBOX_PREFIX defined in imp/lib/Search.php which is triggered by suhosin. I suggest you to replace '\0' by '+'. On my server it seems to be ok.

Olivier

<<attachment: olivier.vcf>>

-- 
IMP mailing list
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

Reply via email to