http://trac.roundcube.net/ticket/1486386
What do you think about that. We're storing username and mail_host in users table and then checking both. This is problematic. I assume that it's done this way because in some environments username is a login not email address, but maybe (in rcube_user::query) instead of
SELECT * FROM users WHERE mail_host=? AND username=?
we should use
SELECT * FROM users WHERE username=?
when username is an email address.