Forum GLPI-Project

geoalbi

Member

From: Romania

Registered: 2012-12-18

Posts: 182

Mailbox authentication in mailcollector.class.php

Authentication using imap_open() in mailcollector.class.php fails when the password contains special characters (had problems with >  ).

See patch:

--- a/inc/mailcollector.class.php       Thu Mar 14 22:26:56 2013 +0200
+++ b/inc/mailcollector.class.php       Sat Apr 13 18:02:12 2013 +0300
@@ -830,7 +830,7 @@
     ///Connect To the Mail Box
    function connect() {
       $this->marubox = @imap_open($this->fields['host'], $this->fields['login'],
-                                  Toolbox::decrypt($this->fields['passwd'],GLPIKEY), CL_EXPUNGE);
+        Toolbox::unclean_cross_side_scripting_deep(Toolbox::decrypt($this->fields['passwd'],GLPIKEY)), CL_EXPUNGE);
    }

Last edited by geoalbi (2013-04-15 11:28:16)

MoYo

GLPI - Lead

From: Poitiers

Registered: 2004-09-13

Posts: 14,513

Website

Re: Mailbox authentication in mailcollector.class.php

Thanks for the report.
I will integrate this patch

---

MoYo - Julien Dombre - Association INDEPNET
Contribute to GLPI :    Support     Contribute     References     Freshmeat

MoYo

GLPI - Lead

From: Poitiers

Registered: 2004-09-13

Posts: 14,513

Website

Re: Mailbox authentication in mailcollector.class.php

https://forge.indepnet.net/issues/4310

---

MoYo - Julien Dombre - Association INDEPNET
Contribute to GLPI :    Support     Contribute     References     Freshmeat

MoYo

GLPI - Lead

From: Poitiers

Registered: 2004-09-13

Posts: 14,513

Website

Re: Mailbox authentication in mailcollector.class.php

proposed patch : https://forge.indepnet.net/projects/glp … ions/20763

---

MoYo - Julien Dombre - Association INDEPNET
Contribute to GLPI :    Support     Contribute     References     Freshmeat