cvs: php-bugs-web /include cvs-auth.inc
| From: | Philip Olson | Date: | Thu, 20 Nov 2008 17:17:13 +0000 |
| Subject: | cvs: php-bugs-web /include cvs-auth.inc | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-3100@lists.php.net to get a copy of this message | ||
philip Thu Nov 20 17:17:13 2008 UTC
Modified files:
/php-bugs-web/include cvs-auth.inc
Log:
Improve is_cvs_user()
# Thank Hannes for allowing : in passwords ;)
http://cvs.php.net/viewvc.cgi/php-bugs-web/include/cvs-auth.inc?r1=1.3&r2=1.4&diff_format=u
Index: php-bugs-web/include/cvs-auth.inc
diff -u php-bugs-web/include/cvs-auth.inc:1.3 php-bugs-web/include/cvs-auth.inc:1.4
--- php-bugs-web/include/cvs-auth.inc:1.3 Thu Nov 20 01:19:23 2008
+++ php-bugs-web/include/cvs-auth.inc Thu Nov 20 17:17:12 2008
@@ -1,5 +1,5 @@
<?php
-/* $Id: cvs-auth.inc,v 1.3 2008/11/20 01:19:23 philip Exp $ */
+/* $Id: cvs-auth.inc,v 1.4 2008/11/20 17:17:12 philip Exp $ */
$ignore_password = false;
$passwd_file = "/repository/CVSROOT/passwd";
@@ -34,14 +34,14 @@
return false;
}
-function is_cvs_user ($MC) {
+function is_cvs_user () {
- if (empty($MC)) {
+ if (empty($_COOKIE['MAGIC_COOKIE'])) {
return false;
}
// 0 = username, 1 = password
- $c = explode(':', base64_decode($MC));
+ $c = explode(':', base64_decode($_COOKIE['MAGIC_COOKIE']), 2);
if (!verify_password($c[0], $c[1])) {
return false;