gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-05-20 08:31:26 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

no need to check for password, but check for ip, guest login and disabled accounts (Closes #250)

Browse Source
This commit is contained in:
Uwe Steinmann 2017-03-21 11:35:39 +01:00
parent aba80e542d
commit ca9b3cb245
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
webdav/webdav.php
View File

@ -138,7 +138,14 @@ class HTTP_WebDAV_Server_SeedDMS extends HTTP_WebDAV_Server
if(!$userobj) if(!$userobj)
return false; return false;
if(md5($pass) != $userobj->getPwd())
if(($userobj->getID() == $settings->_guestID) && (!$settings->_enableGuestLogin))
return false;
if($userobj->isDisabled())
return false;
if($userobj->isAdmin() && ($_SERVER['REMOTE_ADDR'] != $settings->_adminIP ) && ( $settings->_adminIP != ""))
return false; return false;
$this->user = $userobj; $this->user = $userobj;