/tmp/horde_32001.log

[chief]

I was just checking my VPS via the wonderful VPSInfo PHP script and I noticed [that] logfile in /tmp. I opened it and it's a logfile of logins via horde [webmail]. Is that right? It seems insecure since it lists all e-mail addresses that logged in and when. What is this doing in /tmp? Any ideas?

Seems logging started on the 26th at 12:26pm.

Thanks,
Chief.

[Robert]

That's normal. That's where horde writes it to on a couple of dedicated servers. It's either just putting it there because of the php's default location for temporary files, or that's where horde's programmers wrote it to go.

Either way, this is something that would have to be addressed by Horde's developers if they agree it's something that's urgent. Personally if you're giving SSH access out, etc I would not be worried about the horde log file.

[chief]

Thanks, guess I am just being paranoid. And no, I don't give out SSH access to my VPS, just me.