[php-maint] Bug#717267: Truncates http passwords on the first semicolon

[Andras Korn]

Package: php5-curl
Version: 5.5.0+dfsg-15
Severity: normal

Hi,

when assembling the Authorization: Basic header, php's curl extension only
includes the password up to (but not including) the first semicolon
character.

Verified using a sniffer.

The password is correctly passed in using a construct like

curl_setopt($ch, CURLOPT_USERPWD, $login . ":" . $pass);

Best regards,

Andras

-- 
      The trouble with political humor is that so many jokes are elected.