Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

My SMTP authentication can be bypassed by sending an unknown user name and an empty password. What is wrong with this condition in a PLAIN authenticator?

authentication bypassed condition password plain SMTP unknown user wrong
0
10 Posted

My SMTP authentication can be bypassed by sending an unknown user name and an empty password. What is wrong with this condition in a PLAIN authenticator?

0 CommentsAdd a Comment

2 Answers

0
10

server_condition = ${if eq{$2} {${lookup mysql{SELECT password FROM \ accounts WHERE username=’${local_part:$1}’} } }{1}{0}}

0 CommentsAdd a Comment
0

server_condition = ${if eq{$2} {${lookup mysql{SELECT password FROM \ accounts WHERE username=’${local_part:$1}’}}}{1}{0}}

0 CommentsAdd a Comment

Related Questions

What is your question?

*Sadly, we had to bring back ads too. Hopefully more targeted.

Experts123