summaryrefslogtreecommitdiff
path: root/plugins/password
diff options
context:
space:
mode:
authorAleksander Machniak <alec@alec.pl>2014-02-13 08:02:45 +0100
committerAleksander Machniak <alec@alec.pl>2014-02-13 08:02:45 +0100
commit524e382669dc195e5427f6d914320f6c4415429e (patch)
tree7b1831d5eb7e9a8f96cbb69a98044ea48bb63493 /plugins/password
parent9a0900e4a100fe93517573be1a1286992b6a2620 (diff)
parentaba993da6afe0668af1863e58061886c6c996e96 (diff)
Merge pull request #168 from tillkruess/master
another security fix for domainfactory password plugin driver
Diffstat (limited to 'plugins/password')
-rw-r--r--plugins/password/drivers/domainfactory.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/plugins/password/drivers/domainfactory.php b/plugins/password/drivers/domainfactory.php
index 4dbf4b799..62d9bfce2 100644
--- a/plugins/password/drivers/domainfactory.php
+++ b/plugins/password/drivers/domainfactory.php
@@ -51,7 +51,7 @@ class rcube_domainfactory_password
// change password
$ch = curl_copy_handle($ch);
- curl_setopt($ch, CURLOPT_POSTFIELDS, $postfields);
+ curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postfields));
if ($result = curl_exec($ch)) {
// has the password been changed?