Re: [SM-USERS] Squirrelmail is too security conscious

Wed, 31 Oct 2018 11:43:16 -0700 


On Wed, October 31, 2018 13:17, James B. Byrne via squirrelmail-users
wrote:
> These are the two possibilities.  It appears that the cookie is
> expiring too quickly in the separate popup compose window.  The main
> SM page in the browser remains connected.
>
This is where the error is caught.

>
>
> /usr/local/www/squirrelmail/functions/strings.php
>
>    // reject tokens that are too old
>    //
>    if (empty($max_token_age_days)) $max_token_age_days = 2;
>    $old_token_date = $now - ($max_token_age_days * 86400);
>    if ($timestamp < $old_token_date)
>    {
>       if (!$show_error) return FALSE;
>       logout_error(_("S The current page request appears to have
> originated from an untrusted source."));
>       exit;
>    }

-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:[email protected]
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3



-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users






















					Reply via email to