Tickets :: Comment on [#9058] IMP ACL - ACL capability may not be available until after login.

* Your Email Address
* Spam protection	Enter the letters below: . ..__.. .. .\ / \|_/ \| \|\|_/ \|_/ >< \| \\|__\\| \\| \/ \
Comment	>> Hi, >> tested the your diff from git(cvs) >> it works now, but my tests show that acls of folders named i.e with - >> like test-1 etc cant be displayed, not sure if it ever worked, any idea? >> Regards > > Ok i found the bug, > a folder named test-1 must be quoted > ( whatever ist the problem to quote all folders ? ) > > the workaround (problem ) is > in rfc2086.php > > the preg_match \W is not save ( save here means working or not ) to > use in any setup cause it depends to the servers config > therefor it should be avoided ( google for that ) > > > [^A-Za-z0-9] should match any symbol not a letter or number > so it might be a workaround > > i am no php hacker and i dont know if these brakes other functions or > security anyway > but it should not be a big thing for horde coders to review and fix this bug > so the ticket is definite not resolved yet ( unless it has no or > minor connect to the starting bug thread ) > > > > /** > * Attempts to retrieve the existing ACL for a folder from the current > * IMAP server. > * > * NB: if Auth_SASL is not installed this function will send the users > * password to the IMAP server as plain text!! > * > * @param string folder The folder to get the ACL for. > * > * @return array A hash containing information on the ACL. > * <pre> > * Array ( > * user => Array ( > * right => 1 > * ) > * ) > * </pre> > / > function getACL($folder) > { > / Quote the folder string if it contains non alpha-numeric > characters. */ > > // if (preg_match('/\W/',$folder)) { > if (preg_match('[^A-Za-z0-9]',$folder)) { > > $folder = '"' . $folder . '"'; > } > >
Attachment
Watch this ticket

Saved Queries