xoopscube/legacy — pull request #5 by suin (2012-07-22 14:28:48+00:00)
Title: [users] Support emails having plus symbol at lost password

[users] Lost password feature doesn't support emails which has a plus(+) symbol

## Reproduction steps

1. Add a new user with email containing "+" like `suinyeze+foobar@gmail.com`.
2. Go to "Lost your Password" page.
3. Type the email address and submit email reset request.
4. Then you get email which title like "New Password Request at XOOPS Cube Site"
5. Open the email and clike new password get URL.

## Expected Result

The redirect message says "Send password."

## Actual Result

The redirect message says "Email transmission failed. Please contact site administrator."

## The Factor

* Email addresses can contain "+" such as Gmail.
* "+" is understood as `space` in URL.
* XOOPS doesn't excapse "+" in query string.
* So XOOPS try to look up such an email `foo bar@example.com` in the database, if it get `foo+bar@example.com` in query string.

## Solution

Escape `+` to `"%2B`