[Phplib-users] changes to snapshot local.inc

[Rob H. <rob...@ws...>]

Gian -
  Made to following changes to local.inc.  The first to all auths, the
second to Example_challange_crypt_auth

function auth_validatelogin() {

After the:

  $this->auth["uname"] = $HTTP_POST_VARS["username"];        ## This
provides access for "loginform.ihtml"

I added

  if ($this->auth["uname"] == '') {return false;}

because there is no point in doing the db lookup if there is no uname

and moved the:

    $expected_response = md5("$HTTP_POST_VARS[username]:$pass:$challenge");

to one line before the:

    if ($expected_response != $HTTP_POST_VARS["response"]) {

because there is no point in doing the md5 sum if it is not to be used.

Rob Hutton
Web Safe
www.wsafe.com

**********************************************************************

Introducing Symantec Client Security - Integrated Anti-Virus,
Firewall, and Intrusion Detection for the Client.

Learn more:
http://enterprisesecurity.symantec.com/symes238.cfm?JID=2&PID=11624271

View our Symantec Client Security Demo:
http://enterprisesecurity.symantec.com/symes238.cfm?JID=3&PID=11624271

Download the Symantec Client Security Fact Sheet:
http://enterprisesecurity.symantec.com/symes238.cfm?JID=4&PID=11624271

Download the Symantec Client Security Brochure:
http://enterprisesecurity.symantec.com/symes238.cfm?JID=5&PID=11624271