[phpGroupWare-developers] header/config passwords containing quotes badly managed when magic_quotes

[Olivier Berger]

Hi.

I just filed the following report :
https://savannah.gnu.org/bugs/?func=detailitem&item_id=23949

I think that when magic_quotes are on, setup/config password cannot
contain quotes (either single or double), or one wouldn't connect...

Apparently, there's a stripslashes on the value contained in the header
file, but not on what's in the _POST array (get_var won't do it).

Hope this helps.

Best regards,

P.S.: this may be what was experienced in a Debian bug report :
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=491650 but there may be
other problems too. Waiting for more details.
-- 
Olivier BERGER <address@hidden>
http://www-public.it-sudparis.eu/~berger_o/ - OpenPGP-Id: 1024D/6B829EEC
Ingénieur Recherche - Dept INF
Institut TELECOM, SudParis (http://www.it-sudparis.eu/), Evry (France)