uhttpd: cope with DES crypted passwd entries by not relying on a leading dollar sign to indicate a cipher

SVN-Revision: 28886
This commit is contained in:
Jo-Philipp Wich
2011-11-09 18:55:28 +00:00
parent d9aa1e3c1b
commit 44da6400cd
2 changed files with 3 additions and 6 deletions

View File

@@ -782,12 +782,9 @@ int uh_auth_check(
/* found a realm matching the username */
if( realm )
{
/* is a crypt passwd */
if( realm->pass[0] == '$' )
pass = crypt(pass, realm->pass);
/* check user pass */
if( !strcmp(pass, realm->pass) )
if (!strcmp(pass, realm->pass) ||
!strcmp(crypt(pass, realm->pass), realm->pass))
return 1;
}
}