[imp] backslashes in passwords (again)
    Adrian Hosey 
    alh at warhound.org
       
    Wed Aug 20 14:52:27 PDT 2003
    
    
  
I still have some people with backslashes in their password who can't
login. I found this line in imp/lib/IMP.php:
152: Auth::setAuth($imp['uniquser'], array('password' => $_POST['pass']));
So that's going to be bypassing Horde::getFormData() and if
magic_quotes_gpc is on, $_POST['pass'] will be something like "foo\\bar"
when the password is really "foo\bar".
I tried changing that to 
Auth::setAuth($imp['uniquser'], array('password' => Horde::getFormData('pass')));
and that seems to have done the trick. Am I understanding things
correctly? Is this a good idea? What are the implications of that change?
Thanks,
 - A
-- 
"When I'm in command, every mission is a suicide mission!"
    
    
More information about the imp
mailing list