case insensitive match for secdownload md5 token (#1710)

git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2251 152afb58-edef-0310-8abb-c4023f1b3aa9
15 years ago · 41868422f3
parent 52861d77df
commit 41868422f3
2 changed files with 2 additions and 1 deletions
--- a/1
+++ b/1
@ -36,6 +36,7 @@ NEWS
  * [tests] fixed tests needing php running (if not running on port 1026, search php in env[PHP] or /usr/bin/php-cgi)
  * fixed typo in mod_accesslog (#1699)
  * replaced buffer_{append,copy}_string with the _len variant where possible (#1732) (thx crypt)
+  * case insensitive match for secdownload md5 token (#1710)

 - 1.4.19 - 2008-03-10

--- a/src/mod_secure_download.c
+++ b/src/mod_secure_download.c
@ -268,7 +268,7 @@ URIHANDLER_FUNC(mod_secdownload_uri_handler) {

 	buffer_copy_string_hex(p->md5, (char *)HA1, 16);

-	if (0 != strncmp(md5_str, p->md5->ptr, 32)) {
+	if (0 != strncasecmp(md5_str, p->md5->ptr, 32)) {
 		con->http_status = 403;

 		log_error_write(srv, __FILE__, __LINE__, "sss",