# HG changeset patch # User Igor Sysoev # Date 1235403078 0 # Node ID fd4ee75c6eee700050069f8a45a0f79a8942bf05 # Parent 7764f0fdd2a47e75c26287aad30dcb42c7ad6d94 name/password were ignored after odd empty lines diff --git a/src/http/modules/ngx_http_auth_basic_module.c b/src/http/modules/ngx_http_auth_basic_module.c --- a/src/http/modules/ngx_http_auth_basic_module.c +++ b/src/http/modules/ngx_http_auth_basic_module.c @@ -176,9 +176,16 @@ ngx_http_auth_basic_handler(ngx_http_req switch (state) { case sw_login: - if (login == 0 && buf[i] == '#') { - state = sw_skip; - break; + if (login == 0) { + + if (buf[i] == '#' || buf[i] == CR) { + state = sw_skip; + break; + } + + if (buf[i] == LF) { + break; + } } if (buf[i] != r->headers_in.user.data[login]) {