[phpldapadmin] [ phpldapadmin-Bugs-2981355 ] rawurldecode killing complex passwords

Bugs item #2981355, was opened at 2010-04-03 10:16
Message generated for change (Comment added) made by wurley
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=2981355&group_id=61828

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: 1.2.x
>Status: Closed
>Resolution: Fixed
Priority: 7
Private: No
Submitted By: William (w_allison)
Assigned to: Nobody/Anonymous (nobody)
Summary: rawurldecode killing complex passwords

Initial Comment:
The get_request function in lib/functions.php uses rawurldecode to process form variables. If a password contains the percent (%) sign followed by two alphanumeric characters the function will return an invalid password.

You can see this in the debug output very clearly:

[0.000]          common(0214-001): : Application (1.2.0.5) initialised and starting with (a:11:{s:3:"cmd";s:5:"login";s:9:"server_id";s:1:"1";s:5:"login";s:7:"theUser";s:10:"login_pass";s:15:"th>%65<password";s:6:"submit";s:12:"Authenti
[0.001]         ds_ldap(0249-017): ldap::login: Entered (theUser|th>e<password|user)


----------------------------------------------------------------------

>Comment By: Deon George (wurley)
Date: 2011-04-26 10:11

Message:
Thanks for the bug report.

I've just committed a fix to git to address this #2cf20fc

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=2981355&group_id=61828

------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/