[wp-trac] [WordPress Trac] #7244: Disable POP auth when APOP fail

[WordPress Trac]

#7244: Disable POP auth when APOP fail
-------------------------+--------------------------------------------------
 Reporter:  lilyfan      |       Owner:  anonymous
     Type:  enhancement  |      Status:  new      
 Priority:  normal       |   Milestone:  2.6      
Component:  General      |     Version:  2.3      
 Severity:  normal       |    Keywords:  has-patch
-------------------------+--------------------------------------------------
 If APOP authentication is failed, class-pop3.php tries normal POP auth
 (USER/PASS).
 When a server only accepts APOP authentication, the second process should
 be fail for sure.
 It is nonsence and harmful, because the error message of first process
 (APOP) is over-written by second try (POP).

 To solve the desmiss of APOP fail message, it is neccesary to disable
 normal POP authentication.
 I propose a new class variable $ALLOWLOGIN to decide it.

 Additonaly, $ALLOWAPOP is useless because it is no problem to fix it TRUE.
 (Removing this variable is not included in the patch)

-- 
Ticket URL: <http://trac.wordpress.org/ticket/7244>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software