Fix to prevent query containing username and password from being displayed if imap...

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@5498 7612ce4b-ef26-0410-bec9-ea0150e637f0

diff --git a/functions/imap_general.php b/functions/imap_general.php
index 921598b364073207ff316402460b3b37bfd7283b..17671284c7173093e7adb175b4a1ad648cd398b8 100755 (executable)
--- a/functions/imap_general.php
+++ b/functions/imap_general.php
@@ -302,7 +302,10 @@ function sqimap_error_box($title, $query = '', $message_title = '', $message = '
     set_up_language($squirrelmail_language);
     require_once(SM_PATH . 'functions/display_messages.php');
     $string = "<font color=$color[2]><b>\n" . $title . "</b><br>\n";
     set_up_language($squirrelmail_language);
     require_once(SM_PATH . 'functions/display_messages.php');
     $string = "<font color=$color[2]><b>\n" . $title . "</b><br>\n";

-    if ($query != '')
+    $cmd = explode(' ',$query);
+    $cmd= strtolower($cmd[0]);
+
+    if ($query != '' &&  $cmd != 'login')

         $string .= _("Query:") . ' ' . htmlspecialchars($query) . '<br>';
     if ($message_title != '')
         $string .= $message_title;
         $string .= _("Query:") . ' ' . htmlspecialchars($query) . '<br>';
     if ($message_title != '')
         $string .= $message_title;