From b61965256e2a7e2e01ccb1b7f42820545a6ae11b Mon Sep 17 00:00:00 2001
From: alecpl <alec@alec.pl>
Date: Mon, 05 May 2008 02:48:39 -0400
Subject: [PATCH] Installer: encode special characters in DB username/password (#1485042)
---
installer/rcube_install.php | 4 +++-
1 files changed, 3 insertions(+), 1 deletions(-)
diff --git a/installer/rcube_install.php b/installer/rcube_install.php
index c4704a3..0240467 100644
--- a/installer/rcube_install.php
+++ b/installer/rcube_install.php
@@ -137,7 +137,9 @@
if ($_POST['_dbtype'] == 'sqlite')
$value = sprintf('%s://%s?mode=0646', $_POST['_dbtype'], $_POST['_dbname']{0} == '/' ? '/' . $_POST['_dbname'] : $_POST['_dbname']);
else
- $value = sprintf('%s://%s:%s@%s/%s', $_POST['_dbtype'], $_POST['_dbuser'], $_POST['_dbpass'], $_POST['_dbhost'], $_POST['_dbname']);
+ $value = sprintf('%s://%s:%s@%s/%s', $_POST['_dbtype'],
+ rawurlencode($_POST['_dbuser']), rawurlencode($_POST['_dbpass']),
+ $_POST['_dbhost'], $_POST['_dbname']);
}
else if ($prop == 'smtp_auth_type' && $value == '0') {
$value = '';
--
Gitblit v1.9.1