From 7504f2f5d23c6ea1c9991c2e80a5b352a8693a5f Mon Sep 17 00:00:00 2001 From: Denis Vlasenko Date: Fri, 13 Jun 2008 13:20:38 +0000 Subject: [PATCH] httpd: fix authentication --- networking/httpd.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/networking/httpd.c b/networking/httpd.c index 382893bfb..9b4b7172d 100644 --- a/networking/httpd.c +++ b/networking/httpd.c @@ -2045,9 +2045,10 @@ static void handle_incoming_and_exit(const len_and_sockaddr *fromAddr) #if ENABLE_FEATURE_HTTPD_BASIC_AUTH /* Case: no "Authorization:" was seen, but page does require passwd. * Check that with dummy user:pass */ - if ((authorized < 0) && check_user_passwd(urlcopy, ":") == 0) { + if (authorized < 0) + authorized = check_user_passwd(urlcopy, ":"); + if (!authorized) send_headers_and_exit(HTTP_UNAUTHORIZED); - } #endif if (found_moved_temporarily) { -- 2.25.1