[Vtigercrm-developers] vTiger mulitple vulnerabilities

[Tim Smith]

There are two options:
1. Fix the security flaws
2. Notify the user that their system has the security flaw during install

#2 is only valid if you can detect that all the required security settings
are enabled.  I guess you could make a request to read the log and notify
the user if you were able to.  This check could also be done at login time
when the administrator logs in.

Personally, I'd rather see the security flaws fixed.

Tim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20060901/12d94fdf/attachment-0004.html