Browse Source

case insensitive match for secdownload md5 token (#1710)

git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2251 152afb58-edef-0310-8abb-c4023f1b3aa9
svn/tags/lighttpd-1.4.20
Stefan Bühler 14 years ago
parent
commit
41868422f3
  1. 1
      NEWS
  2. 2
      src/mod_secure_download.c

1
NEWS

@ -36,6 +36,7 @@ NEWS
* [tests] fixed tests needing php running (if not running on port 1026, search php in env[PHP] or /usr/bin/php-cgi)
* fixed typo in mod_accesslog (#1699)
* replaced buffer_{append,copy}_string with the _len variant where possible (#1732) (thx crypt)
* case insensitive match for secdownload md5 token (#1710)
- 1.4.19 - 2008-03-10

2
src/mod_secure_download.c

@ -268,7 +268,7 @@ URIHANDLER_FUNC(mod_secdownload_uri_handler) {
buffer_copy_string_hex(p->md5, (char *)HA1, 16);
if (0 != strncmp(md5_str, p->md5->ptr, 32)) {
if (0 != strncasecmp(md5_str, p->md5->ptr, 32)) {
con->http_status = 403;
log_error_write(srv, __FILE__, __LINE__, "sss",

Loading…
Cancel
Save