SquirrelMail Email List wrote:
> Jon,
> 
> Thanks for your hard work. Is there a way to check our code that is on our 
> servers so we can check to see if we do have "Compromised" code. If it is 
> compromised we need to have our users change passwords.

Absolutely.  If you check the setup.php file of the mentioned
plugins, you will see something like:

  eval(base64_decode(

This is followed by a base64 encoded string, which contains several
PHP commands to disable error handling, then send an email.

-- 
Jon Angliss
<[email protected]>

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to