Steve Winn -> Douglas Connor wrote:
 SW> Re: Important Updates

 >> Steve Winn -> All wrote:
 SW>>> I released two important updates today - both fixing the same
 >> bug. VA
 SW>>> v3.11.080823 and VCleanDB v2.0.080823. The problem occurred while
 SW>>> cleaning a
 SW>>> deleted user's email. The databaases SNTEMAIL and ONELINE would
 >> becom
 SW>>> corrupted and posed a security issue since it was possible users
 >> coul
 SW>>> emails other users had sent.

 SW>>> I recommend that you delete SNTEMAIL.* and ONELINE.* from your DB
 >> dir
 SW>>> after you update.

 SW>>> VCleanDB has also been converted into a console application. A
 >> new op
 SW>>> (/COMPACT) has been added to compact databases which will improve
 >> acc
 SW>>> speed.

 SW>>> Steve
 >> Hey wow Steve
 >> I got 3 updates quite close togather
 >> Hey I hope you got all the bugs out 

 SW> Yeah after the first release I found another bug and killed it.

 SW> The first bug was obvious once I looked into it and had been present for
 SW> quite
 SW> some time. The routine to cleanup user's email after you delete a user
 SW> wasn't
 SW> changing databases (it was always using the email database). So the
 SW> SNTEMAIL
 SW> and ONELINE would become corrupt because the BIN files would be from
 SW> EMAIL.BIN.
 SW> So if a user was deleted either using VADV32 or VCleanDB this would
 SW> happen. The
 SW> bad part was if you goto the sent emails in VADV-PHP or VMail then it was
 SW> possible that content from other users emails would be shown.

 SW> The second bug was trivial but needed to be fixed due to the new /COMPACT
 SW> option. It was just a case of a CRLF being added to the BIN files after
 SW> each
 SW> time a deleted user was scanned. So the EMAIL, SNTEMAIL and ONELINE
 SW> databases
 SW> could have grown a few hundred bytes during the scan. This didn't cause 
any
 SW> issues but when /COMPACT was performed it would fix it and show the
 SW> discrepency
 SW> in the log so it was a false positive.

Cool !
(Trying to understand all you wrote) 

--- Thunderbird 2.0.0.16 (X11/20080724)
 * Origin: <The Harbinger Jamnntpd news://vtdl.net> (63:63/1)
 � Synchronet � Killed in Action BBS  at kiabbs.org
--- SBBSecho 2.11-Win32
 * Origin: Killed in Action BBS at kiabbs.org (63:63/103)