Changeset 292

Timestamp:

02/13/07 17:18:58 (4 years ago)

Author:

bart

Message:

Check if those array indices are set before testing them in control.php

Location:

eaccelerator/trunk

Files:

• ChangeLog (modified) (1 diff)
• control.php (modified) (1 diff)

eaccelerator/trunk/ChangeLog

@@ -7 +7 @@
         * Cleanup: Removed some commented out code, changed some debug statements,
             reordered some conditional includes to reduce ifdef statements
+        * Check if those array indices are set before testing them in control.php
 
 2007-01-29  Bart Vanbrabant <bart.vanbrabant at zoeloelip.be>

eaccelerator/trunk/control.php

@@ -55 +55 @@
 
 // Authenticate before proceeding
-if ($auth && ($_SERVER['PHP_AUTH_USER'] != $user || $_SERVER['PHP_AUTH_PW'] != $pw)) {
+if ($auth && (!isset($_SERVER['PHP_AUTH_USER']) || !isset($_SERVER['PHP_AUTH_PW']) ||
+        $_SERVER['PHP_AUTH_USER'] != $user || $_SERVER['PHP_AUTH_PW'] != $pw)) {
     header('WWW-Authenticate: Basic realm="eAccelerator control panel"');
     header('HTTP/1.0 401 Unauthorized');