Merge pull request #168 from tillkruess/master

another security fix for domainfactory password plugin driver
11 years ago · 524e382669
parent 9a0900e4a1 aba993da6a
commit 524e382669
1 changed files with 1 additions and 1 deletions
--- a/plugins/password/drivers/domainfactory.php
+++ b/plugins/password/drivers/domainfactory.php
@ -51,7 +51,7 @@ class rcube_domainfactory_password

 				// change password
 				$ch = curl_copy_handle($ch);
-				curl_setopt($ch, CURLOPT_POSTFIELDS, $postfields);
+				curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postfields));
 				if ($result = curl_exec($ch)) {

 					// has the password been changed?