Dereku/snappymail
1
0
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2026-07-13 03:27:39 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

v2.9.1a forgot to encrypt sProxyAuthPassword

Browse source
This commit is contained in:
djmaze 2021-11-12 10:09:08 +01:00
parent f2c6900ea8
commit f14ebc6578
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
snappymail/v/0.0.0/app/libraries/RainLoop/Model/AdditionalAccount.php
View file

@ -38,7 +38,8 @@ class AdditionalAccount extends Account
{ {
$sHash = $oMainAccount->CryptKey(); $sHash = $oMainAccount->CryptKey();
$aData = $this->jsonSerialize(); $aData = $this->jsonSerialize();
$aData[3] = \SnappyMail\Crypt::EncryptUrlSafe($aData[3], $sHash); $aData[3] = \SnappyMail\Crypt::EncryptUrlSafe($aData[3], $sHash); // sPassword
$aData[6] = \SnappyMail\Crypt::EncryptUrlSafe($aData[6], $sHash); // sProxyAuthPassword
$aData[] = \hash_hmac('sha1', $aData[3], $sHash); $aData[] = \hash_hmac('sha1', $aData[3], $sHash);
return $aData; return $aData;
} }
@ -55,6 +56,7 @@ class AdditionalAccount extends Account
$sParentEmail = \array_pop($aAccountHash); $sParentEmail = \array_pop($aAccountHash);
if ($sPasswordHMAC && $sPasswordHMAC === \hash_hmac('sha1', $aAccountHash[3], $sHash)) { if ($sPasswordHMAC && $sPasswordHMAC === \hash_hmac('sha1', $aAccountHash[3], $sHash)) {
$aAccountHash[3] = \SnappyMail\Crypt::DecryptUrlSafe($aAccountHash[3], $sHash); $aAccountHash[3] = \SnappyMail\Crypt::DecryptUrlSafe($aAccountHash[3], $sHash);
$aAccountHash[6] = \SnappyMail\Crypt::DecryptUrlSafe($aAccountHash[6], $sHash);
} }
$oAccount = parent::NewInstanceFromTokenArray($oActions, $aAccountHash, $bThrowExceptionOnFalse); $oAccount = parent::NewInstanceFromTokenArray($oActions, $aAccountHash, $bThrowExceptionOnFalse);
if ($oAccount) { if ($oAccount) {