Return an http auth error, when a client sends in an invalid auth user, even when http auth is not required.

2010-03-26 18:51:01 +00:00 · 2010-03-26 18:51:01 +00:00 · 60009227f7
parent 766cf99f21
commit 60009227f7
1 changed files with 1 additions and 1 deletions
--- a/lib/apiauth.php
+++ b/lib/apiauth.php
@ -267,7 +267,7 @@ class ApiAuthAction extends ApiAction

            $this->access = self::READ_WRITE;

-            if (empty($this->auth_user) && $required) {
+            if (empty($this->auth_user) && ($required || isset($_SERVER['PHP_AUTH_USER']))) {

                // basic authentication failed