[imp] Found Something A Bit Distressing...

[Jan Schneider]

Zitat von Jim Hale <jim-ml@halemail.dyndns.org>:

> I got bored at work and tried to hit my Email site. Instead of having it
> go to 
> IMP, I had it go to Horde which showed me a login box at the top and the
> cutesy 
> little buttons at the bottom. Just for grins and giggles I clicked 
> on 'Administration' - it went into an http directory showing user.php and
> a 
> folder called css. When I clicked on the CSS folder, it brought up the
> options 
> to modify the Cascading Style sheets. Keep in mind that I'm not logged by
> ANY 
> account listed on the machine.
> 
> Why would it do this?

Because this file and the admin directory itself had no tests for 
administration rights. They were removed in the meantime.

Jan.

--
http://www.horde.org - The Horde Project
http://www.ammma.de - discover your knowledge
http://www.tip4all.de - Deine private Tippgemeinschaft