mirror of
https://github.com/php/php-src.git
synced 2026-04-24 08:28:26 +02:00
Security Fix broken! Destroyed Basic auth. Blame: me
4.3.x not affected
This commit is contained in:
@@ -485,7 +485,7 @@ static void init_request_info(TSRMLS_D)
|
||||
tmp = uudecode(r->pool, authorization);
|
||||
SG(request_info).auth_user = NULL;
|
||||
tmp_user = getword_nulls_nc(r->pool, &tmp, ':');
|
||||
if (SG(request_info).auth_user) {
|
||||
if (tmp_user) {
|
||||
r->connection->user = pstrdup(r->connection->pool, tmp_user);
|
||||
r->connection->ap_auth_type = "Basic";
|
||||
SG(request_info).auth_user = estrdup(tmp_user);
|
||||
|
||||
Reference in New Issue
Block a user