Opened 7 years ago

Closed 7 years ago

#1483886 closed Bugs (fixed)

Roundcube doesn't work when password contains escape character "\"

Reported by: cheungpat Owned by: thomasb
Priority: 9 Milestone: 0.1-rc1
Component: IMAP connection Version: 0.1-beta
Severity: normal Keywords:
Cc:

Description

If the password contains a escape character "\", Roundcube does not allow me to login and display the "Login failed." message. The error log entry was,

[13-Jul-2006 01:39:12 +0800] IMAP Error: Authentication failed (LOGIN):<br>"a001 NO Login failed." in on line

After changing the password to something without the escape character, Roundcube works again.

Change History (7)

comment:1 Changed 7 years ago by yesman82

  • Priority changed from 5 to 9

It doesn't even accept dieresises (german "umlauts") like "ä" "ö" "ü"

comment:2 Changed 7 years ago by jpingle

I was able to reproduce this using a test account with a password of "test\2" - However if I escape it in the password box, i.e. "test
2" then it proceeds to login successfully. I suppose the underlying question is whether or not you should be allowed to enter escape characters in the password field, or whether '\' should always be treated as only a '\' and never as a special character.

comment:3 Changed 7 years ago by cheungpat

In my environment the IMAP server is Courier and it uses my UNIX password. I don't have any problem with my password except logging into Roundcube. I also have SquirrelMail? and it doesn't have problem accepting the single escape character.

I think if some IMAP server treats '\' literally, Roundcube should correctly handle this.

comment:4 Changed 7 years ago by Scr34m

IMAP specification http://www.ietf.org/rfc/rfc2060.txt,

From RPC:

  • password ::= astring
  • astring ::= atom / string
  • atom - An atom consists of one or more non-special characters.

comment:5 Changed 7 years ago by thomasb

  • Milestone set to 0.1-rc1
  • Owner set to thomasb
  • Status changed from new to assigned

comment:6 Changed 7 years ago by patrys

RC should use quoted format - escaped specials enclosed in double quotes.

comment:7 Changed 7 years ago by thomasb

  • Resolution set to fixed
  • Status changed from assigned to closed

Fixed in [0a020cac]

Note: See TracTickets for help on using tickets.