Hello Daniel,
On Monday, March 10, 2003, Daniel M. Drucker wrote...

>>> Even with register_globals off, I am still having this issue of
>>> people (on DIFFERENT computers, who have NEVER used the same
>>> computer) getting each other's preferences.

>> I've still got no idea how you're managing this. Do you have a lot
>> of users? What kind of userbase hits the system all at once?

> I only have about ten (10) users.

Hrm...

>>> Is it possible it has something to do with the ".pref" file that
>>> gets created in the data directory if $username doesn't get
>>> properly set?

>> How so? All that'd end up happening is PHP would try reading the
>> file ".pref"... instead of "$username.pref"... Check the data dir,
>> see if you have a file called ".pref"... Otherwise I doubt this is
>> your problem. What I'd be interested in knowing is what kind of
>> load your servers get. Do users report problems of seeing other
>> peoples mailboxes?

> Yes, there was indeed a ".pref" file - that's what prompted me to
> look for the pref-writing code in the first place.

Ahhh... well... that check is a little... er... wrong anyway... so
I'll go put in a nicer check that kicks the user out. But the username
should be set as validate.php is called before that, and that often
sets up the username, along with the i18n.php stuff as that is used to
setup the languages.

I'll put in a logout there if the username is unset.

> One more thing - on my system (SM 1.2.11, phpinfo() at
> http://3e.org/test/ ), if I turn register_globals off, as soon as I
> hit 'Options', my user.pref file will be replaced with the contents
> of default_pref. (I've always had it turned on, though, when my
> problem was occuring - turning it off just made things worse.)

I run with register_globals set to Off all the time... Are you running
any plugins that aren't happy with register_globals being Off?

-- 
Jonathan Angliss
([EMAIL PROTECTED])



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to