search

QnapClub / Plugmedia

Free alternative to Multimedia Station on Qnap NAS
http://plugmedia.qnapclub.fr
8 stars 0 forks source link

Wrong authentication when cgi_auth.cgi not set #52

Closed toffee closed 12 years ago

toffee commented 12 years ago

In class Session (from file web/system/libraries/Session.php) the method checkPasswordCgiAuth should return false (eg. no authenticated) when getting error from accessing cgi_auth.cgi URL.

After line

log_message('debug', "Erreur Curl : " . curl_error($ch));

should insert

curl_close($ch);
return false;

In current implementation, when cgi_auth.cgi URL is not set (or wrong set) any user is successfully authenticated and marked as embedded (that means that at next syncUsers function call this user will be deleted).