diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2014-07-19 10:17:24 +0200 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2014-07-19 10:17:24 +0200 |
| commit | 1c16d012ab34b8965c1b6d558e534a471f40d518 (patch) | |
| tree | 8b3ab445b73fe76f7180419512395a1c855bc868 /lib/base.php | |
| parent | bfd59bddf416dd43a77c67202ae1d57ab5a95b4a (diff) | |
| download | nextcloud-server-1c16d012ab34b8965c1b6d558e534a471f40d518.tar.gz nextcloud-server-1c16d012ab34b8965c1b6d558e534a471f40d518.zip | |
Remove uneeded `strip_tags`
This `strip_tags` seems to be completely unneeded and will cause problems with passwords containing stripped characters. (e.g. `<` or `>`)
Needs https://github.com/owncloud/core/pull/9735 to be merged first.
Diffstat (limited to 'lib/base.php')
| -rw-r--r-- | lib/base.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/base.php b/lib/base.php index 24381611001..730cee5231d 100644 --- a/lib/base.php +++ b/lib/base.php @@ -807,8 +807,8 @@ class OC { foreach ($vars as $var) { if (isset($_SERVER[$var]) && preg_match('/Basic\s+(.*)$/i', $_SERVER[$var], $matches)) { list($name, $password) = explode(':', base64_decode($matches[1]), 2); - $_SERVER['PHP_AUTH_USER'] = strip_tags($name); - $_SERVER['PHP_AUTH_PW'] = strip_tags($password); + $_SERVER['PHP_AUTH_USER'] = $name; + $_SERVER['PHP_AUTH_PW'] = $password; break; } } |