[imp] backslashes in passwords (again)
Adrian Hosey
alh at warhound.org
Wed Aug 20 14:52:27 PDT 2003
I still have some people with backslashes in their password who can't
login. I found this line in imp/lib/IMP.php:
152: Auth::setAuth($imp['uniquser'], array('password' => $_POST['pass']));
So that's going to be bypassing Horde::getFormData() and if
magic_quotes_gpc is on, $_POST['pass'] will be something like "foo\\bar"
when the password is really "foo\bar".
I tried changing that to
Auth::setAuth($imp['uniquser'], array('password' => Horde::getFormData('pass')));
and that seems to have done the trick. Am I understanding things
correctly? Is this a good idea? What are the implications of that change?
Thanks,
- A
--
"When I'm in command, every mission is a suicide mission!"
More information about the imp
mailing list