Opened 7 years ago
Closed 7 years ago
#1483886 closed Bugs (fixed)
Roundcube doesn't work when password contains escape character "\"
| Reported by: | cheungpat | Owned by: | thomasb |
|---|---|---|---|
| Priority: | 9 | Milestone: | 0.1-rc1 |
| Component: | IMAP connection | Version: | 0.1-beta |
| Severity: | normal | Keywords: | |
| Cc: |
Description
If the password contains a escape character "\", Roundcube does not allow me to login and display the "Login failed." message. The error log entry was,
[13-Jul-2006 01:39:12 +0800] IMAP Error: Authentication failed (LOGIN):<br>"a001 NO Login failed." in on line
After changing the password to something without the escape character, Roundcube works again.
Change History (7)
comment:1 Changed 7 years ago by yesman82
- Priority changed from 5 to 9
comment:2 Changed 7 years ago by jpingle
I was able to reproduce this using a test account with a password of "test\2" - However if I escape it in the password box, i.e. "test
2" then it proceeds to login successfully. I suppose the underlying question is whether or not you should be allowed to enter escape characters in the password field, or whether '\' should always be treated as only a '\' and never as a special character.
comment:3 Changed 7 years ago by cheungpat
In my environment the IMAP server is Courier and it uses my UNIX password. I don't have any problem with my password except logging into Roundcube. I also have SquirrelMail? and it doesn't have problem accepting the single escape character.
I think if some IMAP server treats '\' literally, Roundcube should correctly handle this.
comment:4 Changed 7 years ago by Scr34m
IMAP specification http://www.ietf.org/rfc/rfc2060.txt,
From RPC:
- password ::= astring
- astring ::= atom / string
- atom - An atom consists of one or more non-special characters.
comment:5 Changed 7 years ago by thomasb
- Milestone set to 0.1-rc1
- Owner set to thomasb
- Status changed from new to assigned
comment:6 Changed 7 years ago by patrys
RC should use quoted format - escaped specials enclosed in double quotes.
comment:7 Changed 7 years ago by thomasb
- Resolution set to fixed
- Status changed from assigned to closed
Fixed in [0a020cac]

It doesn't even accept dieresises (german "umlauts") like "ä" "ö" "ü"