summaryrefslogtreecommitdiff
path: root/plugins/http_authentication/http_authentication.php
diff options
context:
space:
mode:
authorAleksander Machniak <alec@alec.pl>2013-11-08 01:52:35 -0800
committerAleksander Machniak <alec@alec.pl>2013-11-08 01:52:35 -0800
commita96a22cc3e671181bee753c174ab134541ad3844 (patch)
tree64fcb9d69fea588d1b35efa49b010d9062489c4f /plugins/http_authentication/http_authentication.php
parent29b2937f7bc16ed3312eaacc204ede8f19083e82 (diff)
parent35533c362218f556c7f7a1bea3a62702ca1359c6 (diff)
Merge pull request #141 from rasky/http_without_pwd
Allow HTTP authentication without password.
Diffstat (limited to 'plugins/http_authentication/http_authentication.php')
-rw-r--r--plugins/http_authentication/http_authentication.php10
1 files changed, 6 insertions, 4 deletions
diff --git a/plugins/http_authentication/http_authentication.php b/plugins/http_authentication/http_authentication.php
index d86e1791c..83f29c84f 100644
--- a/plugins/http_authentication/http_authentication.php
+++ b/plugins/http_authentication/http_authentication.php
@@ -29,7 +29,7 @@ class http_authentication extends rcube_plugin
function startup($args)
{
- if (!empty($_SERVER['PHP_AUTH_USER']) && !empty($_SERVER['PHP_AUTH_PW'])) {
+ if (!empty($_SERVER['PHP_AUTH_USER'])) {
$rcmail = rcmail::get_instance();
$rcmail->add_shutdown_function(array('http_authentication', 'shutdown'));
@@ -38,7 +38,8 @@ class http_authentication extends rcube_plugin
$args['action'] = 'login';
}
// Set user password in session (see shutdown() method for more info)
- else if (!empty($_SESSION['user_id']) && empty($_SESSION['password'])) {
+ else if (!empty($_SESSION['user_id']) && empty($_SESSION['password'])
+ && !empty($_SERVER['PHP_AUTH_PW'])) {
$_SESSION['password'] = $rcmail->encrypt($_SERVER['PHP_AUTH_PW']);
}
}
@@ -61,9 +62,10 @@ class http_authentication extends rcube_plugin
return $args;
}
- if (!empty($_SERVER['PHP_AUTH_USER']) && !empty($_SERVER['PHP_AUTH_PW'])) {
+ if (!empty($_SERVER['PHP_AUTH_USER'])) {
$args['user'] = $_SERVER['PHP_AUTH_USER'];
- $args['pass'] = $_SERVER['PHP_AUTH_PW'];
+ if (!empty($_SERVER['PHP_AUTH_PW']))
+ $args['pass'] = $_SERVER['PHP_AUTH_PW'];
}
$args['cookiecheck'] = false;