Jon,
Thanks! I did a grep on each plugin directory for "base64_decode" and found nothing. Good news. Thanks again, Ken On Sat, 1 Aug 2009, Jon Angliss wrote: > SquirrelMail Email List wrote: >> Jon, >> >> Thanks for your hard work. Is there a way to check our code that is on our >> servers so we can check to see if we do have "Compromised" code. If it is >> compromised we need to have our users change passwords. > > Absolutely. If you check the setup.php file of the mentioned > plugins, you will see something like: > > eval(base64_decode( > > This is followed by a base64 encoded string, which contains several > PHP commands to disable error handling, then send an email. > > -- > Jon Angliss > <j...@squirrelmail.org> > > ------------------------------------------------------------------------------ > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day > trial. Simplify your report design, integration and deployment - and focus on > what you do best, core application coding. Discover what's new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > ----- > squirrelmail-plugins mailing list > Posting guidelines: http://squirrelmail.org/postingguidelines > List address: squirrelmail-plug...@lists.sourceforge.net > List archives: http://news.gmane.org/gmane.mail.squirrelmail.plugins > List info (subscribe/unsubscribe/change options): > https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins > ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@lists.sourceforge.net List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
