>> Even with register_globals off, I am still having this issue of
>> people (on DIFFERENT computers, who have NEVER used the same
>> computer) getting each other's preferences.
>
> I've still got no idea how you're managing this. Do you have a lot of
> users? What kind of userbase hits the system all at once?

I only have about ten (10) users.

>> Is it possible it has something to do with the ".pref" file that gets
>> created in the data directory if $username doesn't get properly set?

> How so? All that'd end up happening is PHP would try reading the file
> ".pref"... instead of "$username.pref"... Check the data dir, see if you
> have a file called ".pref"... Otherwise I doubt this is your
> problem. What I'd be interested in knowing is what kind of load your
> servers get. Do users report problems of seeing other peoples
> mailboxes?

Yes, there was indeed a ".pref" file - that's what prompted me to look for
the pref-writing code in the first place.

I made the following change in load_prefs:

// $username = ( !isset($username) ? '' : $username );
if (!isset($username)) die(); // added this line

And, I removed the existing .pref file, touched a new, zero-length one,
and chmod'd it to 000.

Either the change or the chmodding seems to have fixed the problem.

One more thing - on my system (SM 1.2.11, phpinfo() at http://3e.org/test/
), if I turn register_globals off, as soon as I hit 'Options', my
user.pref file will be replaced with the contents of default_pref. (I've
always had it turned on, though, when my problem was occuring - turning it
off just made things worse.)

Daniel Drucker




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to