[imp] backslashes in passwords (again)

Adrian Hosey alh at warhound.org
Wed Aug 20 14:52:27 PDT 2003


I still have some people with backslashes in their password who can't
login. I found this line in imp/lib/IMP.php:

152: Auth::setAuth($imp['uniquser'], array('password' => $_POST['pass']));

So that's going to be bypassing Horde::getFormData() and if
magic_quotes_gpc is on, $_POST['pass'] will be something like "foo\\bar"
when the password is really "foo\bar".

I tried changing that to 

Auth::setAuth($imp['uniquser'], array('password' => Horde::getFormData('pass')));

and that seems to have done the trick. Am I understanding things
correctly? Is this a good idea? What are the implications of that change?

Thanks,

 - A

-- 
"When I'm in command, every mission is a suicide mission!"



More information about the imp mailing list