Don't check headers, simply verify user first, server second.

This commit is contained in:
Miles Lott 2001-08-27 09:40:16 +00:00
parent a52878e3b3
commit 878aae8025

View File

@ -34,19 +34,13 @@
$auth = base64_decode(trim($tmp));
list($sessionid,$kp3) = split(':',$auth);
if($HTTP_SERVER_VARS['HTTP_X_PHPGW_SERVER'])
{
if($GLOBALS['phpgw']->session->verify_server($sessionid,$kp3))
{
$server->authed = True;
}
}
else
{
if($GLOBALS['phpgw']->session->verify($sessionid,$kp3))
{
$server->authed = True;
}
elseif($GLOBALS['phpgw']->session->verify_server($sessionid,$kp3))
{
$server->authed = True;
}
}