--- docman.php 2001/12/14 17:28:06 1.49
+++ docman.php 2001/12/15 20:33:37 1.50
@@ -174,7 +174,22 @@
= date($gblDateFmt) ?> -
= date($gblTimeFmt) ?> -
= $gblUserName ?>
- [logout]
+
+ [= $url_title ?>]
Document Manager = $gblVersion ?>, based on ANYPORTAL(php) Site Manager
@@ -950,6 +965,8 @@
$title = "(401 Unauthorized)" ;
$text = "No trespassing !" ;
+
+ global $PHP_AUTH_USER,$PHP_AUTH_PW,$gblPw,$relogin;
StartHTML($title,$text) ;
EndHTML() ;
@@ -1243,9 +1260,24 @@
Error("Configuration error","Can't find user handling module at $gblIncDir/$gblUsers.php ! Please fix $fsScriptDir/.docman.conf");
}
+ // if no password, or empty password logout
+ if (
+ isset($PHP_AUTH_USER) && (
+ !isset($relogin) || (
+ isset($relogin) && $relogin != md5($PHP_AUTH_USER.$PHP_AUTH_PW)
+ )
+ ) && (
+ $PHP_AUTH_PW == "" || !isset($PHP_AUTH_PW)
+ )
+ ) {
+ StartHTML("Logout completed","Your login credentials has been erased") ;
+ EndHTML() ;
+ exit ;
+ }
+
// authentication failure
if ( md5($PHP_AUTH_USER.$PHP_AUTH_PW) != $gblPw ||
- isset($relogin) && $gblPw == $relogin ) {
+ isset($relogin) && $gblPw == $relogin) {
header("WWW-authenticate: basic realm=\"$HTTP_HOST\"") ;
header("HTTP/1.0 401 Unauthorized") ;
NoEntry() ;