On Jun 1, 2004, at 3:13 AM, Franck wrote:
I've take out $HOTE and i've changing permission on :
- -rw-r--r--   1 vpopmail vchkpw   39 May 11 11:07 vpopmail.mysql

Make sure you only do that during testing, and then change it back to 640 when you're done. Leaving that file world-readable gives anyone with access to your server a chance to learn the MySQL username and password used for your vpopmail tables. Could be a very bad thing.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/



Reply via email to