diff options
| author | Aleksander Machniak <alec@alec.pl> | 2014-02-13 08:02:45 +0100 |
|---|---|---|
| committer | Aleksander Machniak <alec@alec.pl> | 2014-02-13 08:02:45 +0100 |
| commit | 524e382669dc195e5427f6d914320f6c4415429e (patch) | |
| tree | 7b1831d5eb7e9a8f96cbb69a98044ea48bb63493 | |
| parent | 9a0900e4a100fe93517573be1a1286992b6a2620 (diff) | |
| parent | aba993da6afe0668af1863e58061886c6c996e96 (diff) | |
Merge pull request #168 from tillkruess/master
another security fix for domainfactory password plugin driver
| -rw-r--r-- | plugins/password/drivers/domainfactory.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/plugins/password/drivers/domainfactory.php b/plugins/password/drivers/domainfactory.php index 4dbf4b799..62d9bfce2 100644 --- a/plugins/password/drivers/domainfactory.php +++ b/plugins/password/drivers/domainfactory.php @@ -51,7 +51,7 @@ class rcube_domainfactory_password // change password $ch = curl_copy_handle($ch); - curl_setopt($ch, CURLOPT_POSTFIELDS, $postfields); + curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postfields)); if ($result = curl_exec($ch)) { // has the password been changed? |