Hello Thomas,

Please accept our heartfelt appreciation of this beautiful piece of software.

We are planning to set up RC for our internal mail system. Win 2003, Apache, MySql, Hmail, 0.1 RC1. Running on hardened XAMPP.

I have set up the preview pane. It is seen that it is possible to redirect the preview pane "watermark.html" to a file within the server, probably outside the mail folder. We are planning to use this pane to host a Mail FAQ page and also to broadcast system-wide messages. Folder outside the mail root is chosen so that uploading rights can be given to any arbitrary person. It seems to be possible to redirect this to an external page also.

Is there any security breach issue involved if this is implemented this way?

Regards

kmn