[horde] nic and jonah available without logging in

Jan Schneider jan at horde.org
Thu Nov 15 05:34:21 PST 2001


Zitat von m.ibarra at cdcixis-na.com:

> 1.  I would like to have horde provide me with a screen that 
>     does not even have any of the horde components visible.
>     I feel that this is too much info to give out to someone who
>     may be attempting to hack into the box.

Not sure what you mean. The login screen, the Horde frameset, ...?
 
> 2. I've modified horde/config/registry.php to ensure that allow_guests
>     is set to false and show is set to true, however for some reason I
>     can still click on either "nic" or "jonah" and get to those
> screens.
>     In the case of jonah, this is harmless (still haven't gotten it to
>     work :-) but in the case of nic, it allows anyone to use my machine
>     to scan other networks.

Fixed in cvs.

Jan.

:::::::::::::::::::::::::::::::::::::::: 
AMMMa AG - discover your knowledge
:::::::::::::::::::::::::::
Detmolder Str. 25-33 :: D-33604 Bielefeld
fon +49.521.96878-0 :: fax  +49.521.96878-20
http://www.ammma.de
::::::::::::::::::::::::::::::::::::::::::::::




More information about the horde mailing list