X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=src%2FSecurity%2FBasicAuth.php;h=070c6500d3582a7104c66650193359e5ec34bb31;hb=a1ee75eba7a4d712adfbcdf578e4aca94789be6a;hp=b76073e8b328f1dbccf2388d6e16fe8e01958551;hpb=fa2c8cad9d4419182d3c72115d4f67cb1971ca13;p=friendica.git diff --git a/src/Security/BasicAuth.php b/src/Security/BasicAuth.php index b76073e8b3..070c6500d3 100644 --- a/src/Security/BasicAuth.php +++ b/src/Security/BasicAuth.php @@ -124,7 +124,7 @@ class BasicAuth // workaround for HTTP-auth in CGI mode if (!empty($_SERVER['REDIRECT_REMOTE_USER'])) { $userpass = base64_decode(substr($_SERVER["REDIRECT_REMOTE_USER"], 6)); - if (strlen($userpass)) { + if (!empty($userpass) && strpos($userpass, ':')) { list($name, $password) = explode(':', $userpass); $_SERVER['PHP_AUTH_USER'] = $name; $_SERVER['PHP_AUTH_PW'] = $password;