kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Remove the use of register_globals. This hasn't been needed since 1.2.8.

Browse source 
This just tightens up on security a bit more.

Note anyone using plugins may have to check if all their plugins will work
with register_globals off.

(I've been using this on a local squirrelmail box with 1.2.9 for over a
month with no issues)
This commit is contained in:
chris 2002-12-31 10:49:30 +00:00
parent aa4e5dd60d
commit 578fb3f484
1 changed files with 1 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
mail/squirrelmail/files/squirrelmail.conf.dist
View file

@ -1,4 +1,4 @@
# $NetBSD: squirrelmail.conf.dist,v 1.3 2002/01/07 11:49:45 jlam Exp $
# $NetBSD: squirrelmail.conf.dist,v 1.4 2002/12/31 10:49:30 chris Exp $
#
# SquirrelMail configuration file fragment for Apache
@ -7,14 +7,6 @@
</IfModule>
<Directory "@SMDIR@">
#
# Currently, SquirrelMail requires that "register_globals" be turned on
# to function properly. If mod_php4.so is not loaded, then this flag
# must be set in php.ini.
#
<IfModule mod_php4.c>
php_flag register_globals on
</IfModule>
Options Indexes MultiViews
AllowOverride None
Order allow,deny