prevent unwanted code execution via CURLOPT_POSTFIELDS

Till Krüss

2014-02-10 01014a20b92904db6cbc0a39c0f081257243c0c6

prevent unwanted code execution via CURLOPT_POSTFIELDS

 plugins/password/drivers/domainfactory.php

@@ -29,11 +29,11 @@
                CURLOPT_RETURNTRANSFER => true,
                CURLOPT_URL => 'https://ssl.df.eu/chmail.php',
                CURLOPT_POST => true,
                CURLOPT_POSTFIELDS => array(
                CURLOPT_POSTFIELDS => http_build_query(array(
                    'login' => $rcmail->user->get_username(),
                    'pwd' => $curpass,
                    'action' => 'change'
                )
                ))
            ));

            if ($result = curl_exec($ch)) {