sqmail not accepting passwords with UTF-8 characters.

Brought to you by: jangliss, jervfors, kink, pdontthink

#2816 sqmail not accepting passwords with UTF-8 characters.

Milestone: Produces PHP errors

Status: closed-out-of-date

Owner: nobody

Labels: None

Priority: 5

Updated: 2022-05-26

Created: 2014-01-21

Creator: Jared Wright

Private: No

sqmail version: 1.4.18

When a user creates a password for their account containing UTF-8 characters they are unable to log into squirrel mail as it expects only ISO-8859-1 strings.

This can be fixed by running the password through a utf8_decode in the login script.

Discussion

Paul Lesniewski - 2014-01-26

status: open --> closed-out-of-date
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Paul Lesniewski - 2014-01-26

1.4.18 was released in 2009. Start by installing a current version (preferably 1.4.23SVN snapshot), set default charset to utf-8 and ask again if still having issues.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

naptastic - 2014-05-23

I'm able to reproduce this on a cPanel server running SVN revision 14346 (which is what cPanel is currently providing.) I don't have access to a mail server that isn't running cPanel for more detailed testing.

Inside cPanel, I set my email password to ͶͲΓΔΛΞΠΦΨΩЛЖШЯתثشكي then log in. The other mail clients will work, but Squirrelmail shows a blank page.

Is it possible this is fixed in a newer revision, and we just need to update?

Thanks,

David Nielson
Integration Developer, cPanel

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Paul Lesniewski - 2022-05-26
  
  Just to clarify, yes, a newer version should fix this. Your patch also seems to not be for SquirrelMail, but for the login_auth plugin (although you don't state that specifically) and it removes login functionality with literals which are specifically more well suited for things like non-ASCII passwords -- this leads me to believe your system is doing something odd or your stored passwords are not in the format you think they are. Note you can also use SASL PLAIN authentication which could help you avoid charset problems.
  
  If you ever get a blank page, please enable PHP logging and look at your logs and report the errors you find so we can help you better.
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

naptastic - 2014-05-28

Hello again,

We've patched the version of Squirrelmail that we're shipping to resolve this issue. Please find the patch attached. If you have any questions, please feel free to email integration@cpanel.net .

Thanks,

David Nielson
Integration Developer, cPanel

squirrelmail-auth-case-73369.patch

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.