aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMeik Sievertsen <acydburn@phpbb.com>2009-01-27 09:23:54 +0000
committerMeik Sievertsen <acydburn@phpbb.com>2009-01-27 09:23:54 +0000
commit26b69ccafe7df8c9e12d929f4f8a0635975b0cdb (patch)
tree1a34a91ab0f9af2b08602b6740fe8456cf38316e
parent49f0ab0ccd1475be2ccd0661714628f40a370efd (diff)
downloadforums-26b69ccafe7df8c9e12d929f4f8a0635975b0cdb.tar
forums-26b69ccafe7df8c9e12d929f4f8a0635975b0cdb.tar.gz
forums-26b69ccafe7df8c9e12d929f4f8a0635975b0cdb.tar.bz2
forums-26b69ccafe7df8c9e12d929f4f8a0635975b0cdb.tar.xz
forums-26b69ccafe7df8c9e12d929f4f8a0635975b0cdb.zip
Fix guest/bot session problems with apache authentication plugin (Bug #41085)
git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9306 89ea8834-ac86-4346-8a33-228a782c2dd0
-rw-r--r--phpBB/docs/CHANGELOG.html3
-rw-r--r--phpBB/includes/auth/auth_apache.php14
2 files changed, 15 insertions, 2 deletions
diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html
index fa05bdd3b8..b6ddd59e96 100644
--- a/phpBB/docs/CHANGELOG.html
+++ b/phpBB/docs/CHANGELOG.html
@@ -91,8 +91,9 @@
<li>[Fix] Posts incremented for multiple approval of the same topic (Bug #40495 - Patch by TerraFrost)</li>
<li>[Fix] Missing end " in quote bb tag deletes text (Bug #40565 - Patch by TerraFrost)</li>
<li>[Fix] Friend/foe system displays posts made by foes while composing (Bug #40325 - Patch by TerraFrost and Highway of Life)</li>
- <li>[Fix] Missing read permission from calls to phpbb_chmod()</li>
+ <li>[Fix] Added missing read permission information for some phpbb_chmod() calls</li>
<li>[Fix] Correctly display future dates (Bug #38755)</li>
+ <li>[Fix] Fix guest/bot session problems with apache authentication plugin (Bug #41085)</li>
<li>[Change] Allow download of conflicting file for later reference in automatic updater</li>
<li>[Change] Default difference view is now 'inline' instead of 'side by side'</li>
<li>[Change] Added new option for merging differences to conflicting files in automatic updater</li>
diff --git a/phpBB/includes/auth/auth_apache.php b/phpBB/includes/auth/auth_apache.php
index 80ac81ed46..f6d5f418d0 100644
--- a/phpBB/includes/auth/auth_apache.php
+++ b/phpBB/includes/auth/auth_apache.php
@@ -104,7 +104,7 @@ function login_apache(&$username, &$password)
'user_row' => $row,
);
}
-
+
// Successful login...
return array(
'status' => LOGIN_SUCCESS,
@@ -227,6 +227,18 @@ function user_row_apache($username, $password)
*/
function validate_session_apache(&$user)
{
+ // We only need to check authenticated users. For anonymous user as well as bots the session of course did not expire.
+ if ($user['user_id'] == ANONYMOUS)
+ {
+ return true;
+ }
+
+ // Checking for a bot is a bit mroe complicated... but we are able to check this with the user type (anonymous has the same as bots)
+ if ($user['user_type'] == USER_IGNORE)
+ {
+ return true;
+ }
+
if (!isset($_SERVER['PHP_AUTH_USER']))
{
return false;