diff options
| author | alecpl <alec@alec.pl> | 2008-05-05 06:48:39 +0000 |
|---|---|---|
| committer | alecpl <alec@alec.pl> | 2008-05-05 06:48:39 +0000 |
| commit | b61965256e2a7e2e01ccb1b7f42820545a6ae11b (patch) | |
| tree | 399010c799fa8975d27dfe405df2dab1b3ab0c71 /installer | |
| parent | c5cc386da4d2a8a3fb11254127fb36c11bdc326a (diff) | |
Installer: encode special characters in DB username/password (#1485042)
Diffstat (limited to 'installer')
| -rw-r--r-- | installer/rcube_install.php | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/installer/rcube_install.php b/installer/rcube_install.php index c4704a3a8..024046755 100644 --- a/installer/rcube_install.php +++ b/installer/rcube_install.php @@ -137,7 +137,9 @@ class rcube_install if ($_POST['_dbtype'] == 'sqlite') $value = sprintf('%s://%s?mode=0646', $_POST['_dbtype'], $_POST['_dbname']{0} == '/' ? '/' . $_POST['_dbname'] : $_POST['_dbname']); else - $value = sprintf('%s://%s:%s@%s/%s', $_POST['_dbtype'], $_POST['_dbuser'], $_POST['_dbpass'], $_POST['_dbhost'], $_POST['_dbname']); + $value = sprintf('%s://%s:%s@%s/%s', $_POST['_dbtype'], + rawurlencode($_POST['_dbuser']), rawurlencode($_POST['_dbpass']), + $_POST['_dbhost'], $_POST['_dbname']); } else if ($prop == 'smtp_auth_type' && $value == '0') { $value = ''; |