fix: Updated http-auth to work with nginx http auth #6102 (#6174)

This commit is contained in:
Neil Lathwood
2017-03-12 12:54:59 +00:00
committed by Tony Murray
parent 1d243c40c7
commit e2962adac8
2 changed files with 4 additions and 2 deletions

View File

@@ -46,6 +46,8 @@ if (isset($_POST['username']) && isset($_POST['password'])) {
$_SESSION['password'] = $_GET['password'];
} elseif (isset($_SERVER['REMOTE_USER'])) {
$_SESSION['username'] = $_SERVER['REMOTE_USER'];
} elseif (isset($_SERVER['PHP_AUTH_USER'])) {
$_SESSION['username'] = $_SERVER['PHP_AUTH_USER'];
}
if (!isset($config['auth_mechanism'])) {

View File

@@ -11,8 +11,8 @@ function authenticate($username, $password)
{
global $config;
if (isset($_SERVER['REMOTE_USER'])) {
$_SESSION['username'] = mres($_SERVER['REMOTE_USER']);
if (isset($_SERVER['REMOTE_USER']) || isset($_SERVER['PHP_AUTH_USER'])) {
$_SESSION['username'] = mres($_SERVER['REMOTE_USER']) ?: mres($_SERVER['PHP_AUTH_USER']);
$row = @dbFetchRow('SELECT username FROM `users` WHERE `username`=?', array($_SESSION['username']));
if (isset($row['username']) && $row['username'] == $_SESSION['username']) {