From 7a981eba15321276fdf3fa91dccf457b3a0d19d0 Mon Sep 17 00:00:00 2001 From: Ralf Becker Date: Thu, 25 Oct 2012 12:51:28 +0000 Subject: [PATCH] using pseudo-sessionid for ownCloud remote.php url too, as we otherwise generate lots of new sessions --- phpgwapi/inc/class.egw_session.inc.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/phpgwapi/inc/class.egw_session.inc.php b/phpgwapi/inc/class.egw_session.inc.php index 3918552849..f5ab6af9c8 100644 --- a/phpgwapi/inc/class.egw_session.inc.php +++ b/phpgwapi/inc/class.egw_session.inc.php @@ -783,7 +783,7 @@ class egw_session // for WebDAV and GroupDAV we use a pseudo sessionid created from md5(user:passwd) // --> allows this stateless protocolls which use basic auth to use sessions! if (isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['PHP_AUTH_PW']) && - in_array(basename($_SERVER['SCRIPT_NAME']),array('webdav.php','groupdav.php'))) + in_array(basename($_SERVER['SCRIPT_NAME']),array('webdav.php','groupdav.php','remote.php'))) { // we generate a pseudo-sessionid from the basic auth credentials $sessionid = md5($_SERVER['PHP_AUTH_USER'].':'.$_SERVER['PHP_AUTH_PW'].':'.$_SERVER['HTTP_HOST'].':'. @@ -791,7 +791,7 @@ class egw_session } // same for digest auth elseif (isset($_SERVER['PHP_AUTH_DIGEST']) && - in_array(basename($_SERVER['SCRIPT_NAME']),array('webdav.php','groupdav.php'))) + in_array(basename($_SERVER['SCRIPT_NAME']),array('webdav.php','groupdav.php','remote.php'))) { // we generate a pseudo-sessionid from the digest username, realm and nounce // can't use full $_SERVER['PHP_AUTH_DIGEST'], as it changes (contains eg. the url)