On Sat, May 1, 2010 at 6:04 AM, Andreas Gerdd <kryptosnet@xxxxxxxxx> wrote: > Okay, > Here it goes: > I am using Squirrelmail 1.4.20. > Let's say: I have a domain: mysite.com > And my username is: testuser@xxxxxxxxxx, password is: testpass123. > If i will try to login with a username such as: üüüü@mysite.com (a random > unicode username) with a VALID password: testpass123, Squirrelmail still > logs in, frames load, (normally it should say: Login failed) but gives some > errors: > > LIST "" "INBOX.Sent" > Error in IMAP command received by server. > > And it creates a file under squirrelmail/data/ > üüüü@mysite.com.pref > > Shortly, it appears that, if a unicode username is given (even though > unicode usernames are not valid) Squirrelmail does not check to verify it, > it ONLY checks if the password is valid or not, and if it is, forces to > login, but later of course IMAP server refuses the login. > > Using Squirrelmail 1.4.20, Postfix 2.9, courier-imap-4.1.1. Yes, it's a problem with literal style logins. SquirrelMail appears to log the user in, but in fact, the user is never logged in (IMAP login fails) and can't do anything in SquirrelMail. But it should be fixed - see the attached patch. -- Paul Lesniewski SquirrelMail Team Please support Open Source Software by donating to SquirrelMail! http://squirrelmail.org/donate_paul_lesniewski.php
Attachment:
squirrelmail-8bit-login.diff
Description: Binary data
------------------------------------------------------------------------------
----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
