[dev] horde/lib/Auth/yahoo.php security problem

Chuck Hagenbuch chuck at horde.org
Thu Aug 28 08:06:33 PDT 2003


Quoting Vijay Mahrra <vijay.mahrra at es.easynet.net>:

> using any of the above userIDs with the correct password for 'vmahrra' will
> log me in.  So perhaps the yahoo auth ought to be modified further to
> actually 'chop-off' the domain part altogether when auth'ing or something?

Try what I just committed.

-chuck

--
Charles Hagenbuch, <chuck at horde.org>
They're just looking at a wall of meat.


More information about the dev mailing list