add missing check for unencrypted passwords

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

diff --git a/auth.c b/auth.c
index e1b157518886264b330ee5254e58a3c1fcd0e4a3..0c4872fe3ed8077e5838d72f9f4c285680a97623 100644 (file)
--- a/auth.c
+++ b/auth.c
@@ -118,7 +118,9 @@ bool uh_auth_check(struct client *cl, struct path_info *pi)
        if (!req->realm)
                return true;
 
-       if (user_match && !strcmp(crypt(pass, realm->pass), realm->pass))
+       if (user_match &&
+           (!strcmp(pass, realm->pass) ||
+            !strcmp(crypt(pass, realm->pass), realm->pass)))
                return true;
 
        uh_http_header(cl, 401, "Authorization Required");