[Tickets #8388] Re: Kronolith webdav user at xy.de gets userxy.de

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/8388
------------------------------------------------------------------------------
  Ticket             | 8388
  Updated By         | justheadaches at googlemail.com
  Summary            | Kronolith webdav user at xy.de gets userxy.de
  Queue              | Kronolith
  Version            | 2.3.1
  Type               | Bug
  State              | Feedback
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


justheadaches at googlemail.com (2009-06-28 18:23) wrote:

as you can see the password and username are lost?!?

but the question is now, where the hack are the credentials gone :D

mysql.log
               1191 Query       SELECT password FROM users WHERE email = ''
                    1191 Init DB     mail
                    1191 Query       SELECT * FROM users WHERE email =  
'' AND password = ENCRYPT(NULL,"aa")


what file could I look for ? im quite new to horde :(