Aucune version du paquet courier-authmysql n'est disponible, mais il existe dans la base
de données. Cela signifie en général que le paquet est manquant, qu'il est devenu obsolète
ou qu'il n'est disponible que sur une autre source
Cependant les paquets suivants le remplacent :
courier-authlib-mysql
bypass open_basedir protections when creating domains. Reported by
jerome.
This required changing basedir_prot's behavior so that it creates the
protection even if the symlink doesn't exist, which might create extra
files that are not necessary, but "better be safe than sorry". We
could also fix this in a subsequent release.
Most parameters different from the factory default are now set for the
whole /var/alternc, apart from those very notable exceptions, which
are not set by Alternc anymore:
* precision = 12 ; The number of significant digits displayed in floating point numbers.
* y2k_compliance = On ; Enforce year 2000 compliance (will cause problems with non-compliant browsers)
* safe_mode_allowed_env_vars = PHP_,LANG,LC_
* highlight.*
* max_input_time = 60 ; Maximum amount of time each script may spend parsing request data
* log_errors_max_len = 1024 ; Do not log repeated messages. Repeated errors must occur in same file on same
* ignore_repeated_errors = Off ; line until ignore_repeated_source is set true. * ignore_repeated_source = Off
* report_memleaks = On
* warn_plus_overloading = Off
* register_globals = On ; enfin!
* default_charset = "iso-8859-1" (see #381)
* upload_max_filesize = 5M ; left to admin's discretion
* default_socket_timeout = 60
* mysql.*
* pgsql.*
* sybase.*
* dbx.*
* session.*
* mssql.*
* extension=mysql.so ; we assume the php-mysql packages does this properly
The cgi/ subdir was never really changed, afaict.
convertabsolute()
utiliser seulement convertabsolute() pour verifier les fichiers dans
CreateFile... le fix de sécurité de nahuel ([1738]) empêchait toute
création de fichier.
ainsi, tout fichier passé au travers du filtre convertabsolute() va le
rendre sain pour le browser
temporarly turn off (by redirecting them) a user's subdomains (all of them)
temporarly, because a SQL dump is showed to allow the admin to restore the
previous state.
experimental, because the SQL dump should probably be hidden from the admin and
that this whole thing should probably be called something else than
"deactivate" and might be better somewhere else than in adm_list.php.
harsh, because there could be other ways to deal with evil users. this is the
best solution I have found for accounts that are victims of spambots.
franck