Re: [squid-users] Url-encoded passwords - Solved!

From: Henrik Nordström <henrik_at_henriknordstrom.net>
Date: Thu, 10 Jun 2010 22:31:27 +0200

tor 2010-06-10 klockan 17:26 +0200 skrev Luciano Mannucci:

> ftpSendPass() function in ftp.c this way:
>
> static void
> ftpSendPass(FtpStateData * ftpState)
> {
> char *my_str_ptr;
> my_str_ptr = xstrdup(ftpState->password);
> rfc1738_unescape(my_str_ptr);
> /*
> snprintf(cbuf, 1024, "PASS %s\r\n", ftpState->password);
> */

Then your client is sending the data doubly-escaped.

Squid is already urldecoding the login & password once when populating
ftpState.

Regards
Henrik
Received on Thu Jun 10 2010 - 20:31:30 MDT

This archive was generated by hypermail 2.2.0 : Fri Jun 11 2010 - 12:00:02 MDT