[Phpgroupware-tracker] [bug #5974] Non alphanumeric strings in email account passwords cause 'Session Halted' and apparent config corruption.

[nobody]

=================== BUG #5974: FULL BUG SNAPSHOT ===================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=5974&group_id=509

Submitted by: None                    Project: phpGroupWare                 
Submitted on: Tue 10/14/2003 at 20:52
Category:  email                      Bug Group:  0.9.14 release            
Severity:  5 - Major                  Priority:  None                       
Resolution:  None                     Assigned to:  None                    
Status:  Open                         Component Version:  BZIP2             
Platform Version:  None               Reproducibility:  None                

Summary:  Non alphanumeric strings in email account passwords cause 'Session 
Halted' and apparent config corruption.

Original Submission:  Select Preferences -> Email -> Extra Email Accounts.
Create an account with ;' as the password...
Hit Submit...

Database error: Invalid SQL: insert into phpgw_preferences 
(preference_owner,preference_value) values 
('4','a:3:{s:6:"common";a:6:{s:9:"maxmatchs";s:2:"15";s:5:"theme";s:7:"default";s:12:"template_set";s:16:"linux-at-work.de";s:10:"dateformat";s:5:"m/d/Y";s:10:"timeformat";s:2:"12";s:4:"lang";s:2:"en";}s:8:"calendar";a:1:{s:15:"defaultcalendar";s:5:"month";}s:5:"email";a:1:{s:11:"ex_accounts";a:1:{i:1;a:19:{s:18:"ex_account_enabled";s:4:"True";s:8:"fullname";s:12:"Test
 
Account";s:9:"email_sig";s:0:"";s:15:"default_sorting";s:7:"new_old";s:6:"layout";s:1:"2";s:10:"icon_theme";s:3:"evo";s:9:"icon_size";s:2:"24";s:11:"button_type";s:4:"both";s:17:"trash_folder_name";s:5:"Trash";s:16:"sent_folder_name";s:4:"Sent";s:18:"addressbook_choice";s:4:"orig";s:25:"js_addressbook_screensize";s:3:"700";s:6:"userid";s:12:"Test.Account";s:6:"passwd";s:2:";'";s:7:"address";s:27:"address@hidden";s:11:"mail_server";s:18:"test.test.test.com";s:16:"mail_server_type";s:4:"imap";s:16:"imap_server_type";s:5:"Cyrus";s:11:"mail_folder";s:0:"";}}}}')
 MySQL Error: 1064 (You have an error in your SQL syntax near 
'address";s:27:"address@hidden";s:11:"mail_server";s:18:"test.test.t' at line 1)
 
File: /usr/share/phpgroupware/phpgwapi/inc/class.preferences.inc.php
Line: 225

Session halted. 

Now all of your other email accounts will have stopped working too :)





No Followups Have Been Posted


CC list is empty


No files currently attached


For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=5974&group_id=509

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/