bugphpGroupWare - Bugs: bug #5974, Non alphanumeric strings in email...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #5974: Non alphanumeric strings in email account passwords cause 'Session Halted' and apparent config corruption.

Submitted by:  None
Submitted on:  Wed 15 Oct 2003 12:52:56 AM UTC  
 
Item Group: 0.9.14 releaseCategory: email
Severity: 3 - NormalPriority: 5 - Normal
Status: NonePrivacy: Public
Assigned to: NoneOpen/Closed: Open
Component Version: BZIP2Operating System: None
Reproducibility: NonePlanned Release: None
Fixed Release: 

Wed 15 Oct 2003 12:52:56 AM UTC, original submission:

Select Preferences -> Email -> Extra Email Accounts.
Create an account with ;' as the password...
Hit Submit...

Database error: Invalid SQL: insert into phpgw_preferences (preference_owner,preference_value) values ('4','a:3:{s:6:"common";a:6:{s:9:"maxmatchs";s:2:"15";s:5:"theme";s:7:"default";s:12:"template_set";s:16:"linux-at-work.de";s:10:"dateformat";s:5:"m/d/Y";s:10:"timeformat";s:2:"12";s:4:"lang";s:2:"en";}s:8:"calendar";a:1:{s:15:"defaultcalendar";s:5:"month";}s:5:"email";a:1:{s:11:"ex_accounts";a:1:{i:1;a:19:{s:18:"ex_account_enabled";s:4:"True";s:8:"fullname";s:12:"Test Account";s:9:"email_sig";s:0:"";s:15:"default_sorting";s:7:"new_old";s:6:"layout";s:1:"2";s:10:"icon_theme";s:3:"evo";s:9:"icon_size";s:2:"24";s:11:"button_type";s:4:"both";s:17:"trash_folder_name";s:5:"Trash";s:16:"sent_folder_name";s:4:"Sent";s:18:"addressbook_choice";s:4:"orig";s:25:"js_addressbook_screensize";s:3:"700";s:6:"userid";s:12:"Test.Account";s:6:"passwd";s:2:";'";s:7:"address";s:27:"test.account@testdomain.org";s:11:"mail_server";s:18:"test.test.test.com";s:16:"mail_server_type";s:4:"imap";s:16:"imap_server_type";s:5:"Cyrus";s:11:"mail_folder";s:0:"";}}}}')
MySQL Error: 1064 (You have an error in your SQL syntax near 'address";s:27:"test.account@testdomain.org";s:11:"mail_server";s:18:"test.test.t' at line 1)

File: /usr/share/phpgroupware/phpgwapi/inc/class.preferences.inc.php
Line: 225

Session halted.

Now all of your other email accounts will have stopped working too :)

Anonymous

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

No Changes Have Been Made to This Item

Back to the top


Powered by Savane 3.1-cleanup1