Revision: 1853
          http://mrbs.svn.sourceforge.net/mrbs/?rev=1853&view=rev
Author:   jberanek
Date:     2011-07-22 21:33:38 +0000 (Fri, 22 Jul 2011)

Log Message:
-----------
Fixed auth_ext authentication for users or passwords that contain
a $ character followed by a number. Tracked down via a discussion
on the mailing list.

Modified Paths:
--------------
    mrbs/trunk/web/auth_ext.inc

Modified: mrbs/trunk/web/auth_ext.inc
===================================================================
--- mrbs/trunk/web/auth_ext.inc 2011-07-19 22:48:40 UTC (rev 1852)
+++ mrbs/trunk/web/auth_ext.inc 2011-07-22 21:33:38 UTC (rev 1853)
@@ -72,8 +72,8 @@
    
   // Generate the command line
   $cmd = $auth["prog"] . ' ' . $auth["params"];
-  $cmd = preg_replace('/#USERNAME#/',escapeshellarg($user),$cmd);
-  $cmd = preg_replace('/#PASSWORD#/',escapeshellarg($pass),$cmd);
+  $cmd = str_replace('#USERNAME#', escapeshellarg($user), $cmd);
+  $cmd = str_replace('#PASSWORD#', escapeshellarg($pass), $cmd);
    
   // Run the program
   exec($cmd, $output, $ret);


This was sent by the SourceForge.net collaborative development platform, the 
world's largest Open Source development site.

------------------------------------------------------------------------------
10 Tips for Better Web Security
Learn 10 ways to better secure your business today. Topics covered include:
Web security, SSL, hacker attacks & Denial of Service (DoS), private keys,
security Microsoft Exchange, secure Instant Messaging, and much more.
http://www.accelacomm.com/jaw/sfnl/114/51426210/
_______________________________________________
Mrbs-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mrbs-commits

Reply via email to