#7244 closed enhancement (wontfix)
Disable POP auth when APOP fail
Reported by: |
|
Owned by: | |
---|---|---|---|
Milestone: | Priority: | normal | |
Severity: | normal | Version: | 2.3 |
Component: | Keywords: | has-patch needs-testing reporter-feedback | |
Focuses: | Cc: |
Description
If APOP authentication is failed, class-pop3.php tries normal POP auth (USER/PASS).
When a server only accepts APOP authentication, the second process should be fail for sure.
It is nonsence and harmful, because the error message of first process (APOP) is over-written by second try (POP).
To solve the desmiss of APOP fail message, it is neccesary to disable normal POP authentication.
I propose a new class variable $ALLOWLOGIN to decide it.
Additonaly, $ALLOWAPOP is useless because it is no problem to fix it TRUE. (Removing this variable is not included in the patch)
Attachments (2)
Change History (14)
#7
@
14 years ago
- Keywords needs-testing reporter-feedback added; commit removed
mmm... @lilyfan: why change?
if( (!$count) || ($count == -1) )
#8
@
14 years ago
- Milestone changed from 2.8 to 2.9
Moving to 2.9 as we are in beta now and I don't want to risk changes in this area at this time.
Note: See
TracTickets for help on using
tickets.
Patch for wp-includes/class-pop3.php