[imp] Security of IMP

Brent J. Nordquist bjn@horde.org
Wed, 7 Mar 2001 09:39:44 -0600 (CST)


On Wed, 7 Mar 2001, Sebastian Segeth <sebastian.segeth@FernUni-Hagen.de> wrote:

> how can i test if my imp is secure?

Wow, that's a big question.  :-)

Start with making sure you have the latest version of Horde/IMP (1.2.4 and
2.2.4).  Follow the suggestions in imp/docs/SECURITY.  Make sure local
users can't read your config/*.php3 files, and that the web server won't
serve them.

Try to break things, and tell us if you find anything.  :-)

-- 
Brent J. Nordquist <bjn@horde.org>
Yahoo!: Brent_Nordquist / AIM: BrentJNordquist / ICQ: 76158942