Fixes zetacomponents#51: User names and passwords need to be escaped …

…if they contain spaces
ezpublishlegacy · Feb 13, 2019 · b92ef11 · b92ef11
1 parent ecd3c92
commit b92ef11
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/transports/imap/imap_transport.php b/src/transports/imap/imap_transport.php
@@ -543,7 +543,9 @@ public function authenticate( $user, $password )
         }
 
         $tag = $this->getNextTag();
-        $this->connection->sendData( "{$tag} LOGIN {$user} {$password}" );
+        $user = addcslashes($user, '\"');
+        $password = addcslashes($password, '\"');
+        $this->connection->sendData( "{$tag} LOGIN \"{$user}\" \"{$password}\"" );
         $response = trim( $this->connection->getLine() );
         // hack for gmail, to fix issue #15837: imap.google.com (google gmail) changed IMAP response
         if ( $this->serverType === self::SERVER_GIMAP && strpos( $response, "* CAPABILITY" ) === 0 )