on 7/20/01 2:35 PM, Evren Yurtesen at [EMAIL PROTECTED] spake:

> Hi,
> 
> I am using .qmailadmin-limits file but there is a bug which lets people to
> add unlimited users to the database. The bug is that if in internet
> explorer in the Internet Options->Temporary Files->Settings  set
> the refresh policy to NEVER then you still get into the new user creation
> web page since its in the cache of internet explorer and the page still
> registers new users!
> 
> How can we fix this bug?

qmailadmin checks the limits in adduser(), NOT addusernow(), which it
should.  Try this:

In user.c, around line 290, insert:

        count_users();
        load_limits();

        if ( MaxPopAccounts != -1 && CurPopAccounts >= MaxPopAccounts ) {
                fprintf(actout, "<h2>%s %d</h2>\n", get_html_text("199"),
                        MaxPopAccounts);
                show_menu();
                vclose();
                exit(0);
        }


Let me know if this solves the problem.  While mine compiled and works, I
don't have IE handy to test your environment.  If it works for you, I'll add
it to my dev version of qmailadmin 0.60.

Cheers,

Bill Shupp

Reply via email to