[EMAIL PROTECTED] wrote:
impossible. read the squirrelspel file:

 * For the simplicity's sake we'll put all text into a file in
 * attachment_dir directory, then cat it and pipe it to
 * sqspell_command.  There are other ways to do it, including popen(),
 * but it's unidirectional and no fun at all.
 *
 * The name of the file is an md5 hash of the message itself plus
 * microtime. This prevents symlink attacks. The loop is here to
 * further enhance this feature, and make sure we don't overwrite
 * someone else's data, although the possibility of this happening is
 * QUITE remote.

Well, not *quite* impossible, as there is still the possibility of race conditions, just very, very, very very unlikely. :)


I need to rewrite this to use tempnam(), as starting with version 4.0.3 it actually creates the file in a safe manner. This way race conditions will be truly impossible.

(puts it on his list of things to do)

By the way, as pspell libs are unavailable on Windows, I think I'll be keeping the way spellchecker works for a while, reversing my previous desire to switch it to pspell entirely.

Regards,
--
Konstantin ("Icon") Riabitsev
Duke Physics Systems Admin, RHCE
www.duke.edu/~icon/pubkey.asc



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to