[sork] patch: customsql option and other goodies
Chuck Hagenbuch
chuck at horde.org
Wed May 12 18:43:55 PDT 2004
Quoting Jan Schneider <jan at horde.org>:
> I only committed the keep local part of the patch for now. The password
> isn't really requested for security reasons, it's only necessary for some
> drivers. Thus it doesn't make much sense to me to disable it in the
> configuration. I think the driver should return if it needs a password at
> all. Additionally we could add a configuration setting for those drivers
> that need a password to disable the password field. In these cases the
> drivers would return "i don't need a password" and use the Horde password
> instead.
I think it would be a reasonable configuration option to require the current
password to be entered, to ease session hijacking issues.
-chuck
--
"Regard my poor demoralized mule!" - Juan Valdez
More information about the sork
mailing list