From 55ad2dd65f285fa343aed0c8211d78535e59e943 Mon Sep 17 00:00:00 2001 From: Eric Lippmann Date: Thu, 30 Jul 2015 13:59:47 +0200 Subject: [PATCH] Don't fail if password contains a colon on basic auth refs #9660 --- library/Icinga/Authentication/Auth.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/library/Icinga/Authentication/Auth.php b/library/Icinga/Authentication/Auth.php index 0cddf1441..8ff11b091 100644 --- a/library/Icinga/Authentication/Auth.php +++ b/library/Icinga/Authentication/Auth.php @@ -292,7 +292,7 @@ class Auth } $authorization = substr($header, strlen('Basic ')); $credentials = base64_decode($authorization); - $credentials = array_filter(explode(':', $credentials)); + $credentials = array_filter(explode(':', $credentials, 2)); if (count($credentials) !== 2) { // Deny empty username and/or password $this->challengeHttp();