[change_sqlpass] improper password escape

Brought to you by: jangliss, jervfors, kink, pdontthink

#216 [change_sqlpass] improper password escape

Status: open

Owner: nobody

Labels: None

Priority: 5

Updated: 2011-05-19

Created: 2011-05-19

Creator:

Private: No

Change_sqlpass escape the passwords before encrypting them. But this is only appropriate when a DB function is used for password encryption.

With a PHP encryption, escaping indeed changes the password.

The following patch escapes the password only when a DB function is used.

Anonymous - 2011-05-19

selective-db-escape.patch

If you would like to refer to this comment somewhere else in this project, copy and paste the following link: