Opened 3 years ago

Closed 3 years ago

#1486591 closed Bugs (fixed)

Roundcube opens even if IMAP authentication failures.

Reported by: epinter Owned by:
Priority: 3 Milestone: 0.4-beta
Component: Security Version: git-master
Severity: major Keywords:
Cc:

Description

After the upgrade from r3386 to 3440, roundcube always open if I type a wrong username or password (I don't see any email message).

Change History (4)

comment:1 Changed 3 years ago by epinter

this solves the problem.

--- rcube_imap.php.1 2010-03-26 18:03:22.000000000 -0300
+++ rcube_imap.php 2010-03-29 16:02:12.900674869 -0300
@@ -144,7 +144,7 @@

'message' => $this->conn->error), true, false);

}


  • return $this->conn ? true : false;

+ return $this->conn->connected()? true : false;

}

comment:2 follow-up: Changed 3 years ago by Lazlo

  • Component changed from IMAP connection to Security issue
  • Milestone changed from later to 0.4-beta
  • Priority changed from 5 to 3
  • Severity changed from normal to major
  • Version changed from 0.3.1 to svn-trunk

I can confirm this, it only happens if the username does exist.
No e-mails are loaded because the IMAP connection failed, but database addressbook is accessible and all data is there.

comment:3 in reply to: ↑ 2 Changed 3 years ago by epinter

For me, it happens if the user exists or not.

comment:4 Changed 3 years ago by alec

  • Resolution set to fixed
  • Status changed from new to closed

Fixed in [94a6c642].

Note: See TracTickets for help on using tickets.