Fix legacy auth access check

DavidePrincipi · DavidePrincipi · commit d4e6988b673c · 2019-08-09T17:29:50.000+02:00
The access was always granted with legacy_auth enabled
diff --git a/porthos/root/srv/porthos/script/auth.php b/porthos/root/srv/porthos/script/auth.php
@@ -55,6 +55,7 @@
 if($config['legacy_auth']) {
     $valid_credentials = $valid_credentials || $_SERVER['PHP_AUTH_USER'] ===  $_SERVER['PHP_AUTH_PW'];
 }
+$valid_credentials = $valid_credentials && ($access['tier_id'] !== FALSE);
 
 if($access['tier_id'] < 0) {
     $hash = 0;

Original file line number	Diff line number	Diff line change
`@@ -55,6 +55,7 @@`
`55`	`55`	`if($config['legacy_auth']) {`
`56`	`56`	`$valid_credentials = $valid_credentials \|\| $_SERVER['PHP_AUTH_USER'] === $_SERVER['PHP_AUTH_PW'];`
`57`	`57`	`}`
	`58`	`+$valid_credentials = $valid_credentials && ($access['tier_id'] !== FALSE);`
`58`	`59`
`59`	`60`	`if($access['tier_id'] < 0) {`
`60`	`61`	`$hash = 0;`