Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-10538

Special character are not correctly parsed for SMTP protocol

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.0.9
    • Fix Version/s: 3.0.11-RC1
    • Component/s: ACP
    • Labels:
      None
    • Environment:
      PHP 5.2.3, MySQL 5.1.3, Firefox 8.0

      Description

      If you use a spacial character in the password of your mailbox (like ' ; *) or other (not tested) phpbb will not record it correctly in the database, and when mail function is called on the forum you will get an error like (in the error log)(this an example with a GmailBox):

      Erreur d'e-mail
      » EMAIL/SMTP
      /memberlist.php
      
      Un problème est survenu lors de l'envoi de l'e-mail à la ligne 1434. Réponse: 535 5.7.1 http://mail.google.com/support/bin/answer.py?answer=14257 dw6sm23841642wib.12
      .
      Backtrace
      
      Connecting to ssl://smtp.gmail.com:465
      LINE: 1021 <- 220 mx.google.com ESMTP dw6sm23841642wib.12
      
      # EHLO web241.720.ha.ovh.net
      LINE: 1293 <- 250-mx.google.com at your service, [213.251.189.205]
      
      LINE: 1293 <- 250-SIZE 35882577
      
      LINE: 1293 <- 250-8BITMIME
      
      LINE: 1293 <- 250-AUTH LOGIN PLAIN XOAUTH
      
      LINE: 1293 <- 250 ENHANCEDSTATUSCODES
      
      # AUTH LOGIN
      LINE: 1422 <- 334 VXNlcm5hbWU6
      
      # Omitting sensitive information
      LINE: 1428 <- 334 UGFzc3dvcmQ6
      
      # Omitting sensitive information
      LINE: 1434 <- 535-5.7.1 Username and Password not accepted. Learn more at
      
      LINE: 1434 <- 535 5.7.1 http://mail.google.com/support/bin/answer.py?answer=14257 dw6sm23841642wib.12
      

      Because my password content a special character phpbb was not record it correctly...

      Password entered in the ACP:

      mypassword44"<

      Password recorded in the database (edit my post for see the real character because the browser will transform it on real character):

      mypassword44&quot;&lt;

      So we are not able to connect to our mailbox if your password contains this special character...

        Attachments

          Activity

            People

            • Assignee:
              bantu bantu
              Reporter:
              Geolim4 Geolim4
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: