Changeset 1370

Timestamp:

09/30/08 05:16:09 (2 months ago)

Author:

wichert

Message:

Protect the status page with authentication (The LibHTTPD API is a bit silly here)

Files:

• trunk/wifidog/src/http.c (modified) (1 diff)

trunk/wifidog/src/http.c

@@ -138 +138 @@
-http_callback_status(httpd *webserver, request *r)
-{
+        const s_config *config = config_get_config();
-        char * status = NULL;
-        char *buf;
+
+        if (config->httpdusername && 
+                        (strcmp(config->httpdusername, r->request.authUser) ||
+                         strcmp(config->httpdpassword, r->request.authPassword))) {
+                debug(LOG_INFO, "Status page requested, forcing authentication");
+                httpdForceAuthenticate(r, config->httpdrealm);
+                return;
+        }
+
-        status = get_status_text();
-        safe_asprintf(&buf, "<pre>%s</pre>", status);