Skip to content

M
mongoose
Commit a57f2cf7 authored by Arnout Vandecappelle (Essensium/Mind)'s avatar Arnout Vandecappelle (Essensium/Mind)
Browse files
Options

Do authentication before trying NEW_REQUEST callback.

parent a9b6eb18
Show whitespace changes
Inline Side-by-side
Showing with 3 additions and 3 deletions
mongoose.c
View file @ a57f2cf7
...@@ -3227,10 +3227,10 @@ static void handle_request(struct mg_connection *conn) { ...@@ -3227,10 +3227,10 @@ static void handle_request(struct mg_connection *conn) {
convert_uri_to_file_name(conn, ri->uri, path, sizeof(path)); convert_uri_to_file_name(conn, ri->uri, path, sizeof(path));
DEBUG_TRACE(("%s", ri->uri)); DEBUG_TRACE(("%s", ri->uri));
if (call_user(conn, MG_NEW_REQUEST) != NULL) { if (!check_authorization(conn, path)) {
// Do nothing, callback has served the request
} else if (!check_authorization(conn, path)) {
send_authorization_request(conn); send_authorization_request(conn);
} else if (call_user(conn, MG_NEW_REQUEST) != NULL) {
// Do nothing, callback has served the request
} else if (strstr(path, PASSWORDS_FILE_NAME)) { } else if (strstr(path, PASSWORDS_FILE_NAME)) {
// Do not allow to view passwords files // Do not allow to view passwords files
send_http_error(conn, 403, "Forbidden", "Access Forbidden"); send_http_error(conn, 403, "Forbidden", "Access Forbidden");
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment