Hi, all

I am using SquiirelMail.

I have tried something with the login and found that if one signs in with a different letter-case for example:

  • "userid" instead of "UserID"
then this person is able to login, but without the display preferences and other option settings that he/she had set earlier.  Instead, the user will witness the default settings.
 
I do not know why? why the user can log-in with different letter-case of log-in name and see all his/her email there but without the previously preferences settings.
 
How to solve it? Is it a security hole?
 
Thank you.


Do you Yahoo!?
Friends. Fun. Try the all-new Yahoo! Messenger

Reply via email to