Okay,
Here it goes:
I am using Squirrelmail 1.4.20.
Let's say: I have a domain: mysite.com
And my username is: testu...@mysite.com, password is: testpass123.
If i will try to login with a username such as: üü�...@mysite.com (a random
unicode username) with a VALID password: testpass123, Squirrelmail still
logs in, frames load, (normally it should say: Login failed) but gives some
errors:

LIST "" "INBOX.Sent"
Error in IMAP command received by server.

And it creates a file under squirrelmail/data/
üü�...@mysite.com.pref

Shortly, it appears that, if a unicode username is given (even though
unicode usernames are not valid) Squirrelmail does not check to verify it,
it ONLY checks if the password is valid or not, and if it is, forces to
login, but later of course IMAP server refuses the login.

Using Squirrelmail 1.4.20, Postfix 2.9, courier-imap-4.1.1.
------------------------------------------------------------------------------
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to