>>> Instead of removing the username value, we replaced it by the email
>>> value.
>>>
>>> Just edit the file
>>> /usr/share/squirrelmail/class/deliver/Deliver.class.php
>>> and replace the line    $header[] = "        (SquirrelMail
>>> authenticated
>>> user $username)" . $rn;
>>> by                             $header[] = '         (SquirrelMail
>>> authenticated user ' .
>>> $rfc822_header->getAddr_s('from',',',true) . ')'. $rn;
>>
>> username can't be forged. email can be. If you have left default
>> identity
>> settings and users can set their email addresses, you as admin can be
>> screwed. SquirrelMail allows modifying email addresses by default.
>
> Good point,
>
> We also denied identity changes from user
>
> You need to execute the following:
> /usr/share/squirrelmail/config/conf.pl
> general options + allow editing of identity + reply 'no' to the next two
> questions

Reply 'no' only to the first question. Second one allows setting name and
some users might like an option that allows to control displayed name.

-- 
Tomas


-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
--
squirrelmail-users mailing list
Posting Guidelines: 
http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines
List Address: [EMAIL PROTECTED]
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to