From: Denis Vlasenko Date: Fri, 13 Jun 2008 13:20:38 +0000 (-0000) Subject: httpd: fix authentication X-Git-Tag: 1_11_0~77 X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=7504f2f5d23c6ea1c9991c2e80a5b352a8693a5f;p=oweals%2Fbusybox.git httpd: fix authentication --- diff --git a/networking/httpd.c b/networking/httpd.c index 382893bfb..9b4b7172d 100644 --- a/networking/httpd.c +++ b/networking/httpd.c @@ -2045,9 +2045,10 @@ static void handle_incoming_and_exit(const len_and_sockaddr *fromAddr) #if ENABLE_FEATURE_HTTPD_BASIC_AUTH /* Case: no "Authorization:" was seen, but page does require passwd. * Check that with dummy user:pass */ - if ((authorized < 0) && check_user_passwd(urlcopy, ":") == 0) { + if (authorized < 0) + authorized = check_user_passwd(urlcopy, ":"); + if (!authorized) send_headers_and_exit(HTTP_UNAUTHORIZED); - } #endif if (found_moved_temporarily) {