Opened 13 years ago

Closed 13 years ago

#404 closed defect (invalid)

superadmin account is not checked on virusses/etc...

Reported by: maarten@… Owned by: rjl
Priority: high Milestone:
Component: General Version: 1.0.1
Severity: major Keywords:
Cc:

Description

suppose we have a mail domain maia-test.com , and you fill in the

internal-init.php with myself@… , then go to login.php?super=register and you log in with that account, you make the @ maia-test.com domain and reset credentials to user admin with another password.

you then have the default domain and the maia-test.com domain. you have 3 users, 2 domains and admin.

Even though the email of the admin account is separate, it has no way to let it check for virus/spam/etc...

Change History (2)

comment:1 Changed 13 years ago by dmorton

  • Resolution set to invalid
  • Status changed from new to closed

? yes it does... it can check its own, or you can go to admin->users->

find users and impersonate the domain accounts.

On a side note, What is it that is not clear on the page to post a new ticket?

Support questions should go first to the mailing lists where more people can help. This ticket system is for *code* management.

comment:2 Changed 13 years ago by dmorton

  • Milestone 1.0.3 deleted
Note: See TracTickets for help on using tickets.