[sork] patch: customsql option and other goodies

Chuck Hagenbuch chuck at horde.org
Wed May 12 18:43:55 PDT 2004


Quoting Jan Schneider <jan at horde.org>:

> I only committed the keep local part of the patch for now. The password
> isn't really requested for security reasons, it's only necessary for some
> drivers. Thus it doesn't make much sense to me to disable it in the
> configuration. I think the driver should return if it needs a password at
> all. Additionally we could add a configuration setting for those drivers
> that need a password to disable the password field. In these cases the
> drivers would return "i don't need a password" and use the Horde password
> instead.

I think it would be a reasonable configuration option to require the current
password to be entered, to ease session hijacking issues.

-chuck

--
"Regard my poor demoralized mule!" - Juan Valdez


More information about the sork mailing list