summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authoralecpl <alec@alec.pl>2008-05-05 06:48:39 +0000
committeralecpl <alec@alec.pl>2008-05-05 06:48:39 +0000
commitb61965256e2a7e2e01ccb1b7f42820545a6ae11b (patch)
tree399010c799fa8975d27dfe405df2dab1b3ab0c71
parentc5cc386da4d2a8a3fb11254127fb36c11bdc326a (diff)
Installer: encode special characters in DB username/password (#1485042)
-rw-r--r--CHANGELOG4
-rw-r--r--installer/rcube_install.php4
2 files changed, 7 insertions, 1 deletions
diff --git a/CHANGELOG b/CHANGELOG
index 5417a987f..038478325 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,6 +1,10 @@
CHANGELOG RoundCube Webmail
---------------------------
+2008/05/05 (alec)
+----------
+- Installer: encode special characters in DB username/password (#1485042)
+
2008/05/02 (alec)
----------
- Updated MDB2 package to version 2.5.0b1
diff --git a/installer/rcube_install.php b/installer/rcube_install.php
index c4704a3a8..024046755 100644
--- a/installer/rcube_install.php
+++ b/installer/rcube_install.php
@@ -137,7 +137,9 @@ class rcube_install
if ($_POST['_dbtype'] == 'sqlite')
$value = sprintf('%s://%s?mode=0646', $_POST['_dbtype'], $_POST['_dbname']{0} == '/' ? '/' . $_POST['_dbname'] : $_POST['_dbname']);
else
- $value = sprintf('%s://%s:%s@%s/%s', $_POST['_dbtype'], $_POST['_dbuser'], $_POST['_dbpass'], $_POST['_dbhost'], $_POST['_dbname']);
+ $value = sprintf('%s://%s:%s@%s/%s', $_POST['_dbtype'],
+ rawurlencode($_POST['_dbuser']), rawurlencode($_POST['_dbpass']),
+ $_POST['_dbhost'], $_POST['_dbname']);
}
else if ($prop == 'smtp_auth_type' && $value == '0') {
$value = '';