[turba] delete Problem and horde session kill!

Thomas Berger tberger at rz.uni-leipzig.de
Fri Jun 20 09:01:53 UTC 2008


Hello,

i use the horde addressbook and have insert a test book with 300 entrys.
The import is ok, but when i delete all entrys - crash turba with the
following log message(s):

/var/log/message
================

suhosin[27437]: ALERT - configured request variable limit exceeded -  
dropped variable 'objectkeys[]' (attacker '<ip address>', file  
'/srv/www/htdocs/horde/turba/browse.php')

or

suhosin[822]: ALERT - configured request variable limit exceeded -  
dropped variable 'targetAddressbook' (attacker '<ip address>', file  
'/srv/www/htdocs/horde/turba/browse.php')

or

suhosin[822]: ALERT - configured request variable limit exceeded -  
dropped variable 'Horde' (attacker '<ip address>', file  
'/srv/www/htdocs/horde/turba/browse.php')

or

suhosin[822]: ALERT - configured request variable limit exceeded -  
dropped variable 'targetNew' (attacker '<ip address>', file  
'/srv/www/htdocs/horde/turba/browse.php')

or

suhosin[2743]: ALERT - configured request variable limit exceeded -  
dropped variable 'sortby' (attacker '<ip address>', file  
'/srv/www/htdocs/horde/turba/browse.php')

.....

/apache/error_log
=================

[error] [client <ip adress>] ALERT - configured request variable limit  
exceeded - dropped variable 'sortby' (attacker '<ip address>', file  
'/srv/www/htdocs/horde/turba/browse.php'), referer:  
https://.../horde/turba/browse.php?sortby=&sortdir=&key=&page=Z&show=all

...

horde.log
=========

HORDE [debug] [] Guest user does not have READ permission for turba  
[on line 770 of "/srv/www/htdocs/horde/lib/Horde/Registry.php"]



Please help me.
Thank you and

Best recards
Thomas

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.




More information about the turba mailing list