Robin Smidsrød wrote:
> Okay guys, got a tricky problem to figure out. Hope you can shed some
> light on this issue.
> 
> I've read the document at
> http://www.squirrelmail.org/wiki/en_US/SolvingProblems and searched the
> mailinglist for similar problems, and I haven't found anything quite
> like this.
> 
> A user on my ([EMAIL PROTECTED]) is trying to send a mail to another user on
> my server ([EMAIL PROTECTED]), and for some reason, all the data about the
> sender seems to be copied from the recipient or something. The problem
> happens from time to time, but they can't narrow it down to what exactly
> triggers it and thus are unable to reproduce "on-demand". Do you have a
> clue where to start looking and what to fix?
> 
> Here's a copy of one of the faulty email headers.
> 
> Return-Path: <[EMAIL PROTECTED]>
> X-Original-To: [EMAIL PROTECTED]
> Delivered-To: [EMAIL PROTECTED]
> Received: from localhost (localhost [127.0.0.1])
>    by mail.smidsrod.no (Postfix) with ESMTP id 627F198B7F4
>    for <[EMAIL PROTECTED]>; Tue,  9 Aug 2005 14:58:28 +0200 (CEST)
> Received: from mail.smidsrod.no ([127.0.0.1])
> by localhost (sc [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
> id 20031-03 for <[EMAIL PROTECTED]>; Tue,  9 Aug 2005 14:58:28
> +0200 (CEST)
> Received: from mail.smidsrod.no (localhost [127.0.0.1])
>    by mail.smidsrod.no (Postfix) with ESMTP id DF40498C699
>    for <[EMAIL PROTECTED]>; Tue,  9 Aug 2005 14:58:27 +0200 (CEST)
> Received: from 193.71.38.142
>        (SquirrelMail authenticated user [EMAIL PROTECTED])
>        by mail.smidsrod.no with HTTP;
>        Tue, 9 Aug 2005 14:58:27 +0200 (CEST)
> Message-ID: <[EMAIL PROTECTED]>
> Date: Tue, 9 Aug 2005 14:58:27 +0200 (CEST)
> Subject: legg i handlekurv?
> From: "Jan-Erik Sandberg" <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Reply-To: [EMAIL PROTECTED]
> User-Agent: SquirrelMail/1.4.5
> MIME-Version: 1.0
> Content-Type: text/plain;charset=iso-8859-1
> Content-Transfer-Encoding: 8bit
> X-Priority: 3 (Normal)
> Importance: Normal
> X-Virus-Scanned: amavisd-new at smidsrod.no
> 
> As you can see, [EMAIL PROTECTED] is the logged-in user, but her user
> information isn't in the email except for in the "SquirrelMail
> authenticated user [EMAIL PROTECTED]". PS: I've obfuscated the
> email-addresses to at least give them some protection against
> spam-harvesters. The funny thing is that [EMAIL PROTECTED] has the problem
> too. So it seems to be some kind of connection between the two
> addresses. None of the other users on the server has this problem.
> 
> Could this be related to some sort of XSS, cookie login, proxy problems?
> What part of the code could be the culprit? None of the users have
> changed their personal details, and the address is taken from the login
> (use full addresses as IMAP login).

The only thing I can think of is that these two users had logged in to
their accounts using the same computer at one time.  If their sessions
crossed on that day, then one user's prefs may have been accidentally
copied to the other's.  Verify by either looking at the user pref files
for both users (wherever your data directory is) or by reviewing the
problematic account's Options-->Personal Prefs.

If that's not the problem, then I'm a bit stumped - might even be a
problem outside of SM...?

> I'm not using mySQL for the user information backend (using regular flat
> file) and it's running on Apache2 on Gentoo. IMAP-server is Courier-IMAP.
> 
> PS: Please keep the CC on reply, as it's the user with the problem, and
> he might be able to give some input when needed.
> 
> Regards,
> Robin Smidsrød

-- 

Open Guild, LLC
http://openguild.net/
Software.Systems.Solutions


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
--
squirrelmail-users mailing list
Posting Guidelines: 
http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines
List Address: [email protected]
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id)95
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to