Fwd: Re: [imp] IMP 3.1 Delete error in message view?

Eddie Urenda eurenda@cts.ucla.edu
Tue, 17 Sep 2002 00:40:46 -0700 (PDT)


  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

---------------------- multipart/mixed attachment
On Fri, 13 Sep 2002, Chuck Hagenbuch wrote:

> Quoting Chuck Hagenbuch <chuck@horde.org>:
> 
> > This fixes the behavior that we were experiencing.  Would this break
> > future upgrades?  We could not tell from the CVS code where this piece of
> > code went, and we want to make sure that applying this patch won't break
> > anything else.
> 
> Yes, it would be a pain in future upgrades.

We applied the patch because it fixed a problem that we were experiencing,
that nobody else seemed to be having.  We are more concerned with opening
any security holes in IMP by the introduction of this patch, that
upgrading.  Upgrading usually takes form in PHP replacing existing PHP
code.


> > Would this be the appropriate way to fix this?

Can you see any blatant security holes or something we might be breaking
by applying this patch? 

-Eddie


---------------------- multipart/mixed attachment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---------------------- multipart/mixed attachment--