From cc3cb6e99cd6bff4ac8394f32beea3059a042b84 Mon Sep 17 00:00:00 2001 From: Klaus-Uwe Mitterer Date: Mon, 9 Oct 2017 09:21:54 +0200 Subject: [PATCH] How did that not ever cause any issues? --- auth.php | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/auth.php b/auth.php index 171d9be..db6fada 100644 --- a/auth.php +++ b/auth.php @@ -15,14 +15,14 @@ $realm = 'GPS Tracker'; if (empty($_SERVER['PHP_AUTH_DIGEST'])) { header('HTTP/1.1 401 Unauthorized'); header('WWW-Authenticate: Digest realm="'.$realm. - '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); die('Authentication failed.'); } if (!($data = http_digest_parse($_SERVER['PHP_AUTH_DIGEST']))) { header('HTTP/1.1 401 Unauthorized'); - header('WWW-Authenticate: Digest realm="'.$realm. '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); + header('WWW-Authenticate: Digest realm="'.$realm. + '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); die ('Authentication failed.'); } @@ -32,7 +32,8 @@ $result = $conn->query($sql); if ($result->num_rows != 1) { header('HTTP/1.1 401 Unauthorized'); - header('WWW-Authenticate: Digest realm="'.$realm. '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); + header('WWW-Authenticate: Digest realm="'.$realm. + '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); die('Authentication failed.'); } @@ -43,7 +44,8 @@ $valid_response = md5($A1.':'.$data['nonce'].':'.$data['nc'].':'.$data['cnonce'] if ($data['response'] != $valid_response) { header('HTTP/1.1 401 Unauthorized'); - header('WWW-Authenticate: Digest realm="'.$realm. '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); + header('WWW-Authenticate: Digest realm="'.$realm. + '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); die('Authentication failed.'); }