Re: Percent sign password problem

Tomas Kuliavas <[email protected]>
Newsgroups gmane.mail.squirrelmail.devel
Message-ID <[email protected]>

Ignacio Agulló wrote:
> 
>       No, not that.  I just realized what I should have from the start  
> - seems that Alzheimer is getting me.  It's just URL encoding.  I even  
> had a PHP script in order to check this kind of thing.  This is not  
> the percent sign problem, but the any sign problem except for hyphen,  
> dot and low line.
> 
>       Seems that the users at my work don't like using symbols in  
> their passwords, because if they did this problem would have arisen  
> long ago.
> 
>       Well, anyway.  This isn't a problem for SquirrelMail users.   
> This is only a problem when using a dual mail service which involves  
> SquirrelMail and POP3.
> 

What happens, if you set password with percent sign in QmailAdmin?

If you use default vpopmail configuration, you can see plain text passwords
in password database. Are passwords with percent sign urlencoded?

Remember that your passwords should be limited to plain ASCII. No Spanish
symbols with diacritic marks, no euros or any other fancy characters outside
of ASCII range. SquirrelMail uses IMAP LOGIN authentication by default and
it is limited to ASCII. CRAM-MD5 and Digest-MD5 should work with 8bit
passwords, but their rarely tested for that and might have problems handling
charset differences.

-- 
Tomas
-- 
View this message in context: http://old.nabble.com/Percent-sign-password-problem-tp26896328p26957467.html
Sent from the squirrelmail-devel mailing list archive at Nabble.com.


------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.