I just tested this, and it appears that register_globals don't even need to be on to change the password. I'm not sure why that's in the instructions any more.

Thanks for bringing this up. We're looking into it.

--
-Eric 'shubes'

keith smith wrote:

That's doable!  Thanks!

------------------------
Keith Smith

--- On *Thu, 8/5/10, Eric Shubert /<[email protected]>/* wrote:


    From: Eric Shubert <[email protected]>
    Subject: Re: Qmail on CentOS
    To: [email protected]
    Date: Thursday, August 5, 2010, 12:49 PM

    Now that I look a little closer, the instructions say to set
    register_globals On only to initially set the admin password. Right
    after that it says to turn it back off.

    I'm sure that QMT will have a proper fix for this in due time.

    keith smith wrote:
     >
     > Thanks!
     >
     > ------------------------
     > Keith Smith
     >
     > --- On *Thu, 8/5/10, Eric Shubert /<[email protected]
    </mc/[email protected]>>/* wrote:
     >
     >
     >     From: Eric Shubert <[email protected]
    </mc/[email protected]>>
     >     Subject: Re: Qmail on CentOS
     >     To: [email protected]
    </mc/[email protected]>
     >     Date: Thursday, August 5, 2010, 12:38 PM
     >
     >     That wiki page should be updated. I've been running with
     >     register_globals off since I don't know when. No problem.
     >
     >     keith smith wrote:
     >      >
     >      > I was looking at
> http://wiki.qmailtoaster.com/index.php/CentOS_5_QmailToaster_Install
     >     and saw this line:
     >      >
     >      > Edit /etc/php.ini and set register_globals = On
     >      >
     >      > Setting register_globals to ON is a security issue.  Also
     >     starting in version 6 (IIRC) of PHP, register_globals will
     >     permanently set to off and will be removed all together.
     >      >
     >      > http://php.net/manual/en/security.globals.php
     >      >
     >      > If it is still a requirement to set register_globals = On,
    then i
     >     would not be able to use the Qmail Toster.
     >      >
     >      > ------------------------
     >      > Keith Smith
     >      >
     >      > --- On *Thu, 8/5/10, Eric Shubert /<[email protected]
    </mc/[email protected]>
     >     </mc/[email protected]
    </mc/[email protected]>>>/* wrote:
     >      >
     >      >
     >      >     From: Eric Shubert <[email protected]
    </mc/[email protected]>
     >     </mc/[email protected] </mc/[email protected]>>>
     >      >     Subject: Re: Qmail on CentOS
     >      >     To: [email protected]
    </mc/[email protected]>
     >     </mc/[email protected]
    </mc/[email protected]>>
     >      >     Date: Thursday, August 5, 2010, 12:10 PM
     >      >
     >      >     keith smith wrote:
     >      >      > Hi,
     >      >      >
     >      >      > I have a backup server that I want to also run as a
    backup
     >     mail
     >      >     server.  It is running Qmail.  Running a mail server
    is all
     >     new to me.
     >      >      >
     >      >      > What is the best way to get started.  Book, Man
    Page,...?
     >      >      >
     >      >      > Bind, Mail, and Apache to a lesser degree have kept
    me from
     >      >     running a web server from the command line.   I've
    been able
     >     to get
     >      >     by with Apache however I know I need to learn a bunch
    more.
     >      >      >
     >      >      > Any help is much appreciated.
     >      >      >
     >      >      > ------------------------
     >      >      > Keith Smith
     >      >      >
     >      >      >
     >      >
     >      >     http://www.qmailtoaster.com
     >      >     http://wiki.qmailtoaster.com
     >      >
     >      >     I've been running qmail-toaster for years, and am
    active in the
     >      >     community. I know that qmail has its drawbacks, but
    QMT far
     >      >     outweighs them. Do check it out.
     >      >
     >      >     If anyone's interested, I could do a presentation at a
     >     meeting about
     >      >     QMT. You can build one from scratch in nearly that
    amount of time
     >      >     (once you know what to do, of course).
     >      >
     >      >     -- -Eric 'shubes'
     >      >
     >      >     ---------------------------------------------------
     >      >     PLUG-discuss mailing list -
     >     [email protected]
    </mc/[email protected]>
     >     </mc/[email protected]
    </mc/[email protected]>>
     >      >     </mc/[email protected]
    </mc/[email protected]>
     >     </mc/[email protected]
    </mc/[email protected]>>>
     >      >     To subscribe, unsubscribe, or to change your mail
    settings:
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
     >      >
     >      >
     >
     >
     >     -- -Eric 'shubes'
     >
     >     ---------------------------------------------------
     >     PLUG-discuss mailing list -
    [email protected]
    </mc/[email protected]>
     >     </mc/[email protected]
    </mc/[email protected]>>
     >     To subscribe, unsubscribe, or to change your mail settings:
     >     http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
     >
     >

    ---------------------------------------------------
    PLUG-discuss mailing list - [email protected]
    </mc/[email protected]>
    To subscribe, unsubscribe, or to change your mail settings:
    http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss



---------------------------------------------------
PLUG-discuss mailing list - [email protected]
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

Reply via email to