Here it goes:
I am using Squirrelmail 1.4.20.
Let's say: I have a domain: mysite.com
And my username is: testuser@xxxxxxxxxx, password is: testpass123.
If i will try to login with a username such as: üüüü@mysite.com (a random unicode username) with a VALID password: testpass123, Squirrelmail still logs in, frames load, (normally it should say: Login failed) but gives some errors:
LIST "" "INBOX.Sent"
Error in IMAP command received by server.
And it creates a file under squirrelmail/data/
üüüü@mysite.com.pref
Shortly, it appears that, if a unicode username is given (even though unicode usernames are not valid) Squirrelmail does not check to verify it, it ONLY checks if the password is valid or not, and if it is, forces to login, but later of course IMAP server refuses the login.
Using Squirrelmail 1.4.20, Postfix 2.9, courier-imap-4.1.1.
------------------------------------------------------------------------------
----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
