Chris Hilts zei:
>> In functions/smtp.php (version 1.2.8), line 596 in the sendSMTP function
>> says:
>> fputs($smtpConnection, "AUTH LOGIN\r\n")
>> Clearly, SM (at least version 1.2.8) is hard-coded to use AUTH LOGIN
>
> Simply put, when I was writing the auth code in 1.3.3 I was not aware that
> a mechanism called "plain" exists. I referred to "plain" as meaning
> plaintext, ie. the IMAP4rev1 login command SquirrelMail always used. In
> the next few days, I will be looking at the situation and making changes
> to clarify things.
>
> I suspect I will end up renaming "plain" to "login" before 1.4.0-rc2.
> Depending upon how Marc and Erin feel about it, I will add support for the
> real "plain" method (RFC2595) in either 1.4.0-rc2 or 1.5.0.
If you can take a look at it that would be great.
Can you also take a look at the quoteIMAP function because in some cases we
are not allowed to send usernames / password as quoted string, instead we
should use literals.
Probably the only check you have to do is looking for <"> in the usernames and
passwords and if it exists send the string as literal and wait for the command
continuation request <+> and proceed with sending the literal.
Better is use the reg expresion:
if (preg_match('/[\r\n"\\x00-0x7f]/', $string)) {
/* send as literal */
} else {
...
}
Marc Groot Koerkamp.
-----------------------------------------
International Tender Services (ITS) B.V.
Burg. Kerssemakersstraat 32-b
8101 AN Raalte
Tel.nr.: 0572-362240
Faxnr.: 0572-362245
***************************disclaimer***************************
De informatie verzonden met dit e-mailbericht is uitsluitend bestemd voor de
geadresseerde. Gebruik van deze informatie door anderen dan de geadresseerde is
verboden. Openbaarmaking, vermenigvuldiging, verspreiding en/of verstrekking van deze
informatie aan derden is niet toegestaan. International Tender Services (ITS) B.V.
staat niet in voor de juiste en volledige overbrenging van de inhoud van een verzonden
e-mail, noch voor tijdige ontvangst daarvan. International Tender Services (ITS) B.V.
attendeert erop dat de vertrouwelijkheid van informatie verzonden per e-mail niet
gewaarborgd is.
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
