From d5c2d76b7e873ab05f179c32b1140743e3e672e0 Mon Sep 17 00:00:00 2001 From: Jan Pazdziora Date: Wed, 8 Jan 2014 03:12:20 -0500 Subject: If the REMOTE_USER environment variable is set, trust it. --- app.cgi | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/app.cgi b/app.cgi index d80755b..2cd143a 100755 --- a/app.cgi +++ b/app.cgi @@ -60,7 +60,9 @@ sub login { my $login = $q->param('login'); my $password = $q->param('password'); my $error = ''; - if (defined $login) { + if (defined $ENV{REMOTE_USER}) { + $login = $ENV{REMOTE_USER}; + } elsif (defined $login) { my $re = qr/^[-a-zA-Z0-9_.]+$/; if ($login eq '' or not $login =~ $re) { $error = '

Login has to be nonempty, full characters

'; -- cgit