mirror of
https://github.com/apache/httpd.git
synced 2025-08-08 15:02:10 +03:00
Trivial change to reporting an error when an identity spoof is
encountered with respect to FakeBasicAuth. Submitted by: Greg Stein git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100941 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
@@ -880,8 +880,8 @@ int ssl_hook_UserCheck(request_rec *r)
|
||||
password = auth_line;
|
||||
|
||||
if ((username[0] == '/') && strEQ(password, "password")) {
|
||||
ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server,
|
||||
"Encountered FakeBasicAuth spoof: %s", username);
|
||||
ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r,
|
||||
"Encountered FakeBasicAuth spoof: %s", username);
|
||||
return HTTP_FORBIDDEN;
|
||||
}
|
||||
}
|
||||
|
Reference in New Issue
Block a user