Merge pull request #166 from tillkruess/master

security fix for domainfactory password plugin driver
pull/167/head
Aleksander Machniak 11 years ago
commit e7881f058a

@ -29,11 +29,11 @@ class rcube_domainfactory_password
CURLOPT_RETURNTRANSFER => true,
CURLOPT_URL => 'https://ssl.df.eu/chmail.php',
CURLOPT_POST => true,
CURLOPT_POSTFIELDS => array(
CURLOPT_POSTFIELDS => http_build_query(array(
'login' => $rcmail->user->get_username(),
'pwd' => $curpass,
'action' => 'change'
)
))
));
if ($result = curl_exec($ch)) {

Loading…
Cancel
Save