a user told me he have setup a mail password with a special sign which is used or reserved for PHP ....
like ; or '
than he changed the old password again
fex:
cTf5kkxad; (old)
cTf5kkx99 (new)
and now he say he was able to login with both passwords ???
Tested and can't confirm. Where has the user changed his password? In roundcube or imscp interface?
i'm still waiting for his answer ..
I guess he changed first in Roundcube and then in IMSCP ....
It is possible ... he send me to different passwords for one mail account and I was able to login with both !
I'm still waiting for response because of the question how and where he set-up the passwords.
Question:
Only possible to login on roundcube with both passwords? Or also possible to connect to IMAP server with external client such as outlook with both passwords? It's not the same thing. In first case, it's surely because the old password data has not been removed from the roundcube database. In the second case, this become more critical...
I have checked in kmail POP3/SMTP with both passwords and I was able to send and receive ...
Did you have an Idea for a quick fix?
Re;
You are using Dovecot or Courier?
Also please, what is the result of the following command:
Of course, you must replace user@domain.tld by your data.
courier is installed