[CentOS] SquirrelMail Prefs Deleted

Tue Feb 10 03:38:22 UTC 2009
John Hinton <webmaster at ew3d.com>

Sahil Tandon wrote:
> On Mon, 09 Feb 2009, John Hinton wrote:
>
>   
>> FYI. I just had all of the squirrelmail prefs for all the users on one 
>> of my servers disappear. I have never had anything like this happen ever 
>> before. I'm in the process of finding the needle in the haystack of logs 
>> to try to get a handle on this. I'm sending this to the list as a heads 
>> up. Seems like Squirrelmail is not doing so good here over the last few 
>> months.
>>     
>
> Please provide evidence before implicating SquirrelMail. 
>
>   
Right. Sorry. The thing is I looked in the prefs directory and it was 
totally empty. I forgot that these files were all owned by apache. The 
real trouble was a header injection through a cms. Really nasty of them 
to bother with dumping SM prefs. That the worst damage I've found so far 
after getting stuff cleaned up.... or sort of cleaned up. Unfortunately, 
since I do the standard SM install, the prefs are in the user 
directories which are backed up and I hadn't thought to backup SM prefs. 
Fortunately, we don't have a lot of users that rely on SM.

I made a bad immediate call. It was done in case others wanted to backup 
the prefs in case it was actually SM.

Now to figure out a best way to create new prefs files for the scads of 
users on this server. :(

John Hinton