Validate ACL identifiers

... e.g. to prevent cyrus imap issues
pull/6465/head
Aleksander Machniak 6 years ago
parent fefbd00cd6
commit a4de40566d

@ -494,6 +494,13 @@ class acl extends rcube_plugin
if (!strpos($user, '@') && ($realm = $this->get_realm())) {
$user .= '@' . rcube_utils::idn_to_ascii(preg_replace('/^@/', '', $realm));
}
// Make sure it's valid email address to prevent from "disappearing folder"
// issue in Cyrus IMAP e.g. when the acl user identifier contains spaces inside.
if (strpos($user, '@') && !rcube_utils::check_email($user, false)) {
$user = null;
}
$username = $user;
}

Loading…
Cancel
Save