From 34e6526c958f3a0143a2cf5c8f1b9be29ebd65ef Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Wed, 30 Apr 2014 03:08:28 -0400 Subject: [PATCH] Fix invalid host validation on login (#1489841) --- program/include/rcmail.php | 32 ++++++++++---------------------- 1 files changed, 10 insertions(+), 22 deletions(-) diff --git a/program/include/rcmail.php b/program/include/rcmail.php index bf22913..f0afc6b 100644 --- a/program/include/rcmail.php +++ b/program/include/rcmail.php @@ -497,30 +497,18 @@ $username_domain = $this->config->get('username_domain'); $login_lc = $this->config->get('login_lc', 2); - if (!$host) { - $host = $default_host; - } - - // Validate that selected host is in the list of configured hosts - if (is_array($default_host)) { - $allowed = false; - - foreach ($default_host as $key => $host_allowed) { - if (!is_numeric($key)) { - $host_allowed = $key; - } - if ($host == $host_allowed) { - $allowed = true; - break; - } + // host is validated in rcmail::autoselect_host(), so here + // we'll only handle unset host (if possible) + if (!$host && !empty($default_host)) { + if (is_array($default_host)) { + list($key, $val) = each($default_host); + $host = is_numeric($key) ? $val : $key; + } + else { + $host = $default_host; } - if (!$allowed) { - $host = null; - } - } - else if (!empty($default_host) && $host != rcube_utils::parse_host($default_host)) { - $host = null; + $host = rcube_utils::parse_host($host); } if (!$host) { -- Gitblit v1.9.1