vchkpw/qmailadmin security issues
I noted two things about vchkpw/qmailadmin that might merit fixing in the next release of vpopmail: 1. When you add a new pop user using qmailadmin, the "Successfully Added" message that appears on the page includes the new user's password in large plain text. Not only a "shoulder-hugger" problem but I suppose this could also end up in the browser's page cache. 2. When vchkpw has trouble authenticating a user against the default password cdb file, it writes a log message that includes the username *and* the password in plain text. Also not a good idea, IMHO. Barry Dwyer
porblem with mysql and vpopmail
i ahve problem with vpopmail with mysql when iam making make iam getting following errors any body help please In file included from vauth.c:33: vmysql.h:23: parse error before `MYSQL_SERVER' vmysql.h:59: parse error before `LARGE_INSERT' vauth.c: In function `vauth_open': vauth.c:56: `is_open' undeclared (first use in this function) vauth.c:56: (Each undeclared identifier is reported only once vauth.c:56: for each function it appears in.) vauth.c:61: `MYSQL_SERVER' undeclared (first use in this function) vauth.c:61: `MYSQL_USER' undeclared (first use in this function) vauth.c:61: `MYSQL_PASSWD' undeclared (first use in this function) vauth.c: In function `vauth_adddomain_size': vauth.c:99: `LARGE_SITE' undeclared (first use in this function) vauth.c:100: warning: implicit declaration of function `vauth_munch_domain' vauth.c:100: warning: assignment makes pointer from integer without a cast vauth.c:102: `LARGE_TABLE_LAYOUT' undeclared (first use in this function) vauth.c:105: `SMALL_TABLE_LAYOUT' undeclared (first use in this function) vauth.c: In function `vauth_adduser_size': vauth.c:147: warning: assignment makes pointer from integer without a cast vauth.c:148: `LARGE_SITE' undeclared (first use in this function) vauth.c:167: `LARGE_INSERT' undeclared (first use in this function) vauth.c:170: `SMALL_INSERT' undeclared (first use in this function) vauth.c: In function `vauth_getpw_size': vauth.c:215: warning: assignment makes pointer from integer without a cast vauth.c:220: `LARGE_SITE' undeclared (first use in this function) vauth.c:221: `LARGE_SELECT' undeclared (first use in this function) vauth.c:223: `SMALL_SELECT' undeclared (first use in this function) vauth.c: In function `vauth_deldomain_size': vauth.c:274: warning: assignment makes pointer from integer without a cast vauth.c:276: `LARGE_SITE' undeclared (first use in this function) vauth.c: In function `vauth_deluser_size': vauth.c:303: `LARGE_SITE' undeclared (first use in this function) vauth.c:307: warning: assignment makes pointer from integer without a cast vauth.c: In function `vauth_setquota_size': vauth.c:337: `LARGE_SITE' undeclared (first use in this function) vauth.c:338: warning: assignment makes pointer from integer without a cast vauth.c: In function `vauth_vpasswd_size': vauth.c:377: `LARGE_SITE' undeclared (first use in this function) vauth.c:378: warning: assignment makes pointer from integer without a cast vauth.c: In function `vauth_getall_size': vauth.c:410: `LARGE_SITE' undeclared (first use in this function) vauth.c:411: warning: assignment makes pointer from integer without a cast vauth.c:418: `LARGE_GETALL' undeclared (first use in this function) vauth.c:420: `SMALL_GETALL' undeclared (first use in this function) thanks
