X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=config%2Fconfig_default.php;h=4d73465436d9117b612b3574fbf91bee390335fb;hb=43751c9d4d34ff705a461b2bdb8c8ffc83bf5efd;hp=398716cb9932ca8537bb7f8bd433e1022da66999;hpb=48adf5d6104b4b38f8c75a596c4646629507bff6;p=squirrelmail.git diff --git a/config/config_default.php b/config/config_default.php index 398716cb..4d734654 100644 --- a/config/config_default.php +++ b/config/config_default.php @@ -10,6 +10,11 @@ * conf.pl if at all possible. That is the easiest and cleanest way * to configure. * + * Note on SECURITY: some options require putting a password in this file. + * Please make sure that you adapt its permissions appropriately to avoid + * passwords being leaked to e.g. other system users. Take extra care when + * the webserver is shared with untrusted users. + * * @copyright © 2000-2006 The SquirrelMail Project Team * @license http://opensource.org/licenses/gpl-license.php GNU Public License * @version $Id$ @@ -184,7 +189,7 @@ $sendmail_path = '/usr/sbin/sendmail'; * which does not support -t and -i arguments, set variable to empty string * or use arguments suitable for your mailer. * @global string $sendmail_args - * @since 1.5.1 + * @since 1.5.1 and 1.4.8 */ $sendmail_args = '-i -t'; @@ -262,6 +267,28 @@ $use_smtp_tls = 0; */ $smtp_auth_mech = 'none'; +/** + * Custom SMTP authentication username + * + * IMAP username is used if variable is set to empty string. + * Variable is included in main configuration file only from 1.5.2 version. + * Older versions stored it in config_local.php. + * @global string $smtp_sitewide_user + * @since 1.5.0 + */ +$smtp_sitewide_user = ''; + +/** + * Custom SMTP authentication password + * + * IMAP password is used if $smtp_sitewide_user global is set to empty string. + * Variable is included in main configuration file only from 1.5.2 version. + * Older versions stored it in config_local.php. + * @global string $smtp_sitewide_pass + * @since 1.5.0 + */ +$smtp_sitewide_pass = ''; + /** * IMAP authentication mechanism * @@ -469,7 +496,7 @@ $noselect_fix_enable = false; * * @global string $data_dir */ -$data_dir = '/var/local/squirrelmail/data'; +$data_dir = '/var/local/squirrelmail/data/'; /** * Attachments directory @@ -488,7 +515,7 @@ $data_dir = '/var/local/squirrelmail/data'; * + It should probably be another directory than data_dir. * @global string $attachment_dir */ -$attachment_dir = $data_dir; +$attachment_dir = '/var/local/squirrelmail/attach/'; /** * Hash level used for data directory. @@ -832,7 +859,8 @@ $templateset_default = 0; $aTemplateSet[0]['PATH'] = SM_PATH . 'templates/default/'; $aTemplateSet[0]['NAME'] = 'Default template'; - +$aTemplateSet[1]['PATH'] = SM_PATH . 'templates/default_advanced/'; +$aTemplateSet[1]['NAME'] = 'Advanced template'; /** * Default interface font size. @@ -872,6 +900,9 @@ $fontsets['tahoma'] = 'tahoma,sans-serif'; * 'name' => 'Netcenter Member Directory', * 'base' => 'ou=member_directory,o=netcenter.com' * ); + * + * NOTE: please see security note at the top of this file when + * entering a password. */ // Add your ldap server options here @@ -908,6 +939,24 @@ $abook_global_file_writeable = false; */ $abook_global_file_listing = true; +/** + * Controls file based address book entry size + * + * This setting controls space allocated to file based address book records. + * End users will be unable to save address book entry, if total entry size + * (quoted address book fields + 4 delimiters + linefeed) exceeds allowed + * address book length size. + * + * Same setting is applied to personal and global file based address books. + * + * It is strongly recommended to keep default setting value. Change it only + * if you really want to store address book entries that are bigger than two + * kilobytes (2048). + * @global integer $abook_file_line_length + * @since 1.5.2 + */ +$abook_file_line_length = 2048; + /** * MOTD * @@ -942,6 +991,9 @@ $motd = ""; * The DSN is in the format: mysql://user:pass@hostname/dbname * The table is the name of the table to use within the * specified database. + * + * NOTE: please see security note at the top of this file when + * entering a password. */ $addrbook_dsn = ''; $addrbook_table = 'address'; @@ -1028,7 +1080,7 @@ $squirrelmail_default_language = 'en_US'; * This option controls what character set is used when sending * mail and when sending HTML to the browser. Option works only * with US English (en_US) translation. Other translations use - * charsets that are set in functions/i18n.php. + * charsets that are set in translation settings. * * @global string $default_charset */ @@ -1089,16 +1141,30 @@ $lossy_encoding = false; */ $time_zone_type = 0; -/*** Tweaks ***/ /** - * Advanced DHTML tree control + * Location base + * + * This is used to build the URL to the SquirrelMail location. + * It should contain only the protocol and hostname/port parts + * of the URL; the full path will be appended automatically. * - * Use experimental DHTML folder listing - * @global bool $advanced_tree - * @since 1.5.0 + * If not specified or empty, it will be autodetected. + * + * Examples: + * http://webmail.example.org + * http://webmail.example.com:8080 + * https://webmail.example.com:6691 + * + * To be clear: do not include any of the path elements, so if + * SquirrelMail is at http://www.example.net/web/mail/src/login.php, you + * write: http://www.example.net + * + * @global string $config_location_base + * @since 1.5.2 and 1.4.8 */ -$advanced_tree = false; +$config_location_base = ''; +/*** Tweaks ***/ /** * Iframe sandbox code control * @@ -1174,17 +1240,3 @@ $no_list_for_subscribe = false; * @global integer $config_use_color */ $config_use_color = 2; - -/** - * This option includes special configuration options - */ -@include SM_PATH . 'config/config_local.php'; - -/** - * Make sure there are no characters after the PHP closing - * tag below (including newline characters and whitespace). - * Otherwise, that character will cause the headers to be - * sent and regular output to begin, which will majorly screw - * things up when we try to send more headers later. - */ -?> \ No newline at end of file