David Ehle writes: 

> Sam, can you or anyone else think of any way that Courier IMAP could be
> upset by having a " or a ' in the password? The same accounts and
> passwords work fine with other IMAP clients such as Pine, Netscape and
> Outlook/OE.

No, not for passwords.  Only for userids, with some authentication modules.  
I don't recall offhand the nitty-gritty details, but I think that its 
feasible that authmysql and authpgsql might throw out quotes and apostrophes 
in the userid string, since that has to form an sql statement, and 
apostrophes or quotes could be used to inject hostile SQL. 

-- 
Sam 


_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to