From b61965256e2a7e2e01ccb1b7f42820545a6ae11b Mon Sep 17 00:00:00 2001 From: alecpl Date: Mon, 5 May 2008 06:48:39 +0000 Subject: Installer: encode special characters in DB username/password (#1485042) --- installer/rcube_install.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'installer') diff --git a/installer/rcube_install.php b/installer/rcube_install.php index c4704a3a8..024046755 100644 --- a/installer/rcube_install.php +++ b/installer/rcube_install.php @@ -137,7 +137,9 @@ class rcube_install if ($_POST['_dbtype'] == 'sqlite') $value = sprintf('%s://%s?mode=0646', $_POST['_dbtype'], $_POST['_dbname']{0} == '/' ? '/' . $_POST['_dbname'] : $_POST['_dbname']); else - $value = sprintf('%s://%s:%s@%s/%s', $_POST['_dbtype'], $_POST['_dbuser'], $_POST['_dbpass'], $_POST['_dbhost'], $_POST['_dbname']); + $value = sprintf('%s://%s:%s@%s/%s', $_POST['_dbtype'], + rawurlencode($_POST['_dbuser']), rawurlencode($_POST['_dbpass']), + $_POST['_dbhost'], $_POST['_dbname']); } else if ($prop == 'smtp_auth_type' && $value == '0') { $value = ''; -- cgit v1.2.3