~mdw / sgt / agedu / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dcf1fcc) | patch
If we're in HTTP Basic authentication mode, it's vital to return 401
authorsimon <simon@cda61777-01e9-0310-a592-d414129be87e>
Wed, 5 Nov 2008 08:02:44 +0000 (08:02 +0000)
committersimon <simon@cda61777-01e9-0310-a592-d414129be87e>
Wed, 5 Nov 2008 08:02:44 +0000 (08:02 +0000)
commit5a830bf80878bd1521a71017ce19882caa755d80
tree50b6ea84acc45c4bea814e9f5bc3d1d333611c7atree | snapshot (tar.gz zip)
parentdcf1fcc0405ed9d74f73a2cde910aa0ce95bd777commit | diff
If we're in HTTP Basic authentication mode, it's vital to return 401
for _any_ failed authentication, because that's what causes the
browser to give you a repeat password prompt. If we ever return 403,
the browser will _remember_ your wrong password, and give you 403
again the next time without letting you have a chance to
reauthenticate.

git-svn-id: svn://svn.tartarus.org/sgt/agedu@8280 cda61777-01e9-0310-a592-d414129be87e
httpd.c diff | blob | blame | history
Simon Tatham's `agedu' utility; import of svn://svn.tartarus.org/sgt/agedu