non-PHP webmail

Jim Popovitch · External Since: May 19, 2007 Posts: 9

Whats a good, non-PHP based, client webmail application for about 50
user accounts?

Thx,

-Jim P.

--
To UNSUBSCRIBE, email to debian-isp-REQUEST RemoveThis @lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster RemoveThis @lists.debian.org

Thomas Goirand · External Since: Apr 09, 2005 Posts: 161

Jim Popovitch wrote:
> Whats a good, non-PHP based, client webmail application for about 50
> user accounts?
>
> Thx,
>
> -Jim P.

What's wrong with PHP?

Thomas

--
To UNSUBSCRIBE, email to debian-isp-REQUEST.RemoveThis@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster.RemoveThis@lists.debian.org

William Dode · External Since: Jul 29, 2007 Posts: 2

On 29-07-2007, Thomas Goirand wrote:
> Jim Popovitch wrote:
>> Whats a good, non-PHP based, client webmail application for about 50
>> user accounts?
>>
>> Thx,
>>
>> -Jim P.
>
> What's wrong with PHP?

For example when you don't need php for anything else on the server it's
a pity to have to follow something that you don't use, just for this.
I'm in this situation and would like to see a python webmail...

--
William Dodé - http://flibuste.net
Développeur informatique indépendant

--
To UNSUBSCRIBE, email to debian-isp-REQUEST.TakeThisOut@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster.TakeThisOut@lists.debian.org

Bernd Schuhmacher · External Since: Jan 11, 2007 Posts: 5

Hi
Jim Popovitch schrieb:
> Whats a good, non-PHP based, client webmail application for about 50
> user accounts?
I habe used neomail on some servers. It uses perl.
Another webmail I now of ist Personal Python FWebmail, which I never
used myself.

Bernd

--
Bernd Schuhmacher Tel.: +49 06848/72144
Donaustraße 4 Fax: +49 06848/72145
66424 Homburg Mobil: +49 171/8314351
Email: bernd.TakeThisOut@schuhmacher-net.de
Homepage: http://schuhmacher-net.de/~bernd
ICQ#: 54401288
MSN: bernd.TakeThisOut@schuhmacher-net.de
_____________________________________________________________________
Auf ihrem Rueckweg sangen sie eine Reihe wohlklingender und
beschaulicher Lieder ueber Frieden, Gerechtigkeit, Moral, Bildung,
Sport, Familienleben und die Vernichtung aller anderen Lebensformen.
Das Leben, das Universum und der ganze Rest
Douglas Adams
_____________________________________________________________________

--
To UNSUBSCRIBE, email to debian-isp-REQUEST.TakeThisOut@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster.TakeThisOut@lists.debian.org

William Dode · External Since: Jul 29, 2007 Posts: 2

On 29-07-2007, Roberto C Sánchez wrote:
>
> --JWEK1jqKZ6MHAcjA
> Content-Type: text/plain; charset=iso-8859-1
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
>
> On Sun, Jul 29, 2007 at 03:44:35PM +0800, Thomas Goirand wrote:
>> Jim Popovitch wrote:
>> > Whats a good, non-PHP based, client webmail application for about 50
>> > user accounts?
>> >=20
>> > Thx,
>> >=20
>> > -Jim P.
>>=20
>> What's wrong with PHP?
>>=20
> Umm, what's *not* wrong with it?

Just that there are webmail based on it Wink

--
William Dodé - http://flibuste.net
Développeur informatique indépendant

--
To UNSUBSCRIBE, email to debian-isp-REQUEST DeleteThis @lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster DeleteThis @lists.debian.org

Jim Popovitch · External Since: May 19, 2007 Posts: 9

On Sun, 2007-07-29 at 15:44 +0800, Thomas Goirand wrote:
> Jim Popovitch wrote:
> > Whats a good, non-PHP based, client webmail application for about 50
> > user accounts?
> >
> > Thx,
> >
> > -Jim P.
>
> What's wrong with PHP?

Based on server logs, PHP still seems to be a very highly targeted
attack vector. Considering that it's impossible for me to have
up-to-date information on every possible security hole out there, it
only seems prudent to avoid utilizing software that others consider such
a highly valued target. This isn't security by obscurity, it's security
by common sense.

-Jim P.

--
To UNSUBSCRIBE, email to debian-isp-REQUEST RemoveThis @lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster RemoveThis @lists.debian.org

Seth Mattinen · External Since: Dec 10, 2004 Posts: 10

Jim Popovitch wrote:
> On Sun, 2007-07-29 at 15:44 +0800, Thomas Goirand wrote:
>> Jim Popovitch wrote:
>>> Whats a good, non-PHP based, client webmail application for about 50
>>> user accounts?
>>>
>>> Thx,
>>>
>>> -Jim P.
>> What's wrong with PHP?
>
> Based on server logs, PHP still seems to be a very highly targeted
> attack vector. Considering that it's impossible for me to have
> up-to-date information on every possible security hole out there, it
> only seems prudent to avoid utilizing software that others consider such
> a highly valued target. This isn't security by obscurity, it's security
> by common sense.
>

PHP's problems are typically caused by horrible programming practice -
such as using variables from user input and assuming PHP will make the
input safe. Based on server logs, Windows still seems to be a very
highly targeted attack vector too. So why make a comment about PHP like
that?

Sorry to interject this, but that comment smacks of ignorance to me.

~Seth

--
To UNSUBSCRIBE, email to debian-isp-REQUEST.DeleteThis@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster.DeleteThis@lists.debian.org

Marcin Owsiany · External Since: Jan 26, 2005 Posts: 151

On Sun, Jul 29, 2007 at 08:45:10AM -0700, Seth Mattinen wrote:
> PHP's problems are typically caused by horrible programming practice -
> such as using variables from user input and assuming PHP will make the
> input safe.

However this in turn could parially be blamed on PHP's design
encouraging such programming for years...

--
Marcin Owsiany <porridge RemoveThis @debian.org> http://marcin.owsiany.pl/
GnuPG: 1024D/60F41216 FE67 DA2D 0ACA FC5E 3F75 D6F6 3A0D 8AA0 60F4 1216

--
To UNSUBSCRIBE, email to debian-isp-REQUEST RemoveThis @lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster RemoveThis @lists.debian.org

Jim Popovitch · External Since: May 19, 2007 Posts: 9

On Sun, 2007-07-29 at 08:45 -0700, Seth Mattinen wrote:
> PHP's problems are typically caused by horrible programming practice -
> such as using variables from user input and assuming PHP will make the
> input safe.

Correct, at least according to the reports I have seen. If I installed
a PHP application then I would need to have greater knowledge than I
care to of the new application as well as the underlying PHP components.
I want a webmail application that's as easy to install/maintain/secure
as SSH. I want a webmail application that doesn't necessitate that I
scrutinize and sanitize the developer's code.

> Based on server logs, Windows still seems to be a very
> highly targeted attack vector too. So why make a comment about PHP like
> that?

Since this is a Debian list I presumed that I didn't say it also need to
be non-Windows. For the record, I'm also not interested in it being
insecure, untrustworthy, outdated, unsupported, unavailable, extremely
costly, or subject to repeated failure.

> Sorry to interject this, but that comment smacks of ignorance to me.

Good point. Ignorance is defined as "the condition of being uneducated,
unaware, or uninformed". That accurately defines my knowledge of PHP.
I don't know all the ins and outs of PHP security, and I don't care to.
Thus my reason for asking for a non-PHP recommendation.

-Jim P.

--
To UNSUBSCRIBE, email to debian-isp-REQUEST RemoveThis @lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster RemoveThis @lists.debian.org

andrew holway · External Since: Jul 30, 2007 Posts: 2

On 29/07/07, Roberto C. Sánchez <roberto.DeleteThis@connexer.com> wrote:
> On Sun, Jul 29, 2007 at 08:45:10AM -0700, Seth Mattinen wrote:
> >
> > PHP's problems are typically caused by horrible programming practice -
>
> Except that such horrible programming practice is *promoted* by the
> language and its developers? I mean, register_globals?!?!

Which, since I think V4 has been default off. It is still used to
great effect on intranets and non web applications.

>
> > such as using variables from user input and assuming PHP will make the
> > input safe. Based on server logs, Windows still seems to be a very
> > highly targeted attack vector too. So why make a comment about PHP like
> > that?
> >
> > Sorry to interject this, but that comment smacks of ignorance to me.
> >
> There is nothing ignorant about his remark.

I have found php to be bombproof(especially on debian) as long as the
security updates are kept up. I think this is the same for everything
tho.

But I don't think this was meant to a language war

So Im going to suggest Neomail (perl).

Cheers,

Andy

>
> Regards,
>
> -Roberto
>
> --
> Roberto C. Sánchez
> http://people.connexer.com/~roberto
> http://www.connexer.com
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFGrNcv5SXWIKfIlGQRAgFPAKCvwjB91+o75eMcYBrq/FBJB/CoiQCgzCB1
> ghHOhRSCmP1ccgZzH0j46OE=
> =h/DW
> -----END PGP SIGNATURE-----
>
>

NN_il_Confusionario · External Since: Dec 27, 2006 Posts: 4

On Mon, Jul 30, 2007 at 11:36:41AM +0200, Christian Schoepplein wrote:
> On Mo, Jul 30, 2007 at 10:23:16 +0100, andrew holway wrote:
> >So Im going to suggest Neomail (perl).
> See openwebmail, its a project based on NeoMai:
> http://www.openwebmail.org

http://ftp-master.debian.org/removals.txt

[Date: Tue, 3 May 2005 16:18:03 -0400] [ftpmaster: Jeroen van Wolffelaar]
Removed the following packages from unstable:

openwebmail | 2.41-10 | source, all
Closed bugs: 301561

------------------- Reason -------------------
RoQA; riddled with security holes
----------------------------------------------

--
Chi usa software non libero avvelena anche te. Digli di smettere.
Informatica=arsenico: minime dosi in rari casi patologici, altrimenti letale.
Informatica=bomba: intelligente solo per gli stupidi che ci credono.

--
To UNSUBSCRIBE, email to debian-isp-REQUEST DeleteThis @lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster DeleteThis @lists.debian.org