Merge pull request #166 from tillkruess/master

security fix for domainfactory password plugin driver
pull/167/head
Aleksander Machniak 11 years ago
commit e7881f058a

@ -29,11 +29,11 @@ class rcube_domainfactory_password
CURLOPT_RETURNTRANSFER => true, CURLOPT_RETURNTRANSFER => true,
CURLOPT_URL => 'https://ssl.df.eu/chmail.php', CURLOPT_URL => 'https://ssl.df.eu/chmail.php',
CURLOPT_POST => true, CURLOPT_POST => true,
CURLOPT_POSTFIELDS => array( CURLOPT_POSTFIELDS => http_build_query(array(
'login' => $rcmail->user->get_username(), 'login' => $rcmail->user->get_username(),
'pwd' => $curpass, 'pwd' => $curpass,
'action' => 'change' 'action' => 'change'
) ))
)); ));
if ($result = curl_exec($ch)) { if ($result = curl_exec($ch)) {

Loading…
Cancel
Save