Hi,

        I've been looking into using MySQL instead of CDB for VPopMail, but I 
noticed that the MySQL username and password were stored in the 
binaries.  This is a significant problem for me, since any user could do 
`strings vchkpw` and find the username/password to connect to MySQL.

        I realize that I can setup a username/password that only has access to the 
VPopMail data, but even that is too much access, IMHO.

        Are there plans to store this information in a config file that can be set 
to only be read by the VPopMail user/group?

thanks,
-dougl

____________________________________________________________

Doug Ledbetter -- Hagen Software, Inc.
[EMAIL PROTECTED]


Reply via email to