Author: gonzalo
Date: 2005-02-28 19:34:23 -0500 (Mon, 28 Feb 2005)
New Revision: 41299

Modified:
   branches/mono-1-0/mcs/class/System.Web/System.Web.Security/ChangeLog
   
branches/mono-1-0/mcs/class/System.Web/System.Web.Security/FormsAuthenticationModule.cs
Log:
undo r39948. See bugzilla #73073.

Modified: branches/mono-1-0/mcs/class/System.Web/System.Web.Security/ChangeLog
===================================================================
--- branches/mono-1-0/mcs/class/System.Web/System.Web.Security/ChangeLog        
2005-03-01 00:33:29 UTC (rev 41298)
+++ branches/mono-1-0/mcs/class/System.Web/System.Web.Security/ChangeLog        
2005-03-01 00:34:23 UTC (rev 41299)
@@ -9,11 +9,6 @@
        password in SHA1 and MD5. Thanks to Tadas Dailyda.
        Lock on a static object instead of typeof(FormsAuthentication).
 
-2005-02-01 Gonzalo Paniagua Javier <[EMAIL PROTECTED]>
-
-       * FormsAuthenticationModule.cs: allow accessing other files in the
-       directory where the login page is. Fixes bug #71871.
-
 2004-08-23 Gonzalo Paniagua Javier <[EMAIL PROTECTED]>
 
        * FormsAuthentication.cs: patch by Jim Pease to fix the date on renewal.

Modified: 
branches/mono-1-0/mcs/class/System.Web/System.Web.Security/FormsAuthenticationModule.cs
===================================================================
--- 
branches/mono-1-0/mcs/class/System.Web/System.Web.Security/FormsAuthenticationModule.cs
     2005-03-01 00:33:29 UTC (rev 41298)
+++ 
branches/mono-1-0/mcs/class/System.Web/System.Web.Security/FormsAuthenticationModule.cs
     2005-03-01 00:34:23 UTC (rev 41299)
@@ -29,7 +29,6 @@
 //
 
 using System;
-using System.IO;
 using System.Security.Principal;
 using System.Text;
 using System.Web;
@@ -50,13 +49,6 @@
                        app.EndRequest += new EventHandler (OnEndRequest);
                }
 
-               bool CheckIfSkip (string loginPath, string requestPath)
-               {
-                       string realLogin = Path.GetDirectoryName (loginPath);
-                       string realRequest = Path.GetDirectoryName 
(requestPath);
-                       return (realLogin == realRequest);
-               }
-
                void OnAuthenticateRequest (object sender, EventArgs args)
                {
                        HttpApplication app = (HttpApplication) sender;
@@ -73,8 +65,6 @@
                        string reqPath = context.Request.PhysicalPath;
                        string loginPath = context.Request.MapPath (loginPage);
                        context.SkipAuthorization = (reqPath == loginPath);
-                       if (context.SkipAuthorization == false && loginPath != 
null && loginPath != "")
-                               context.SkipAuthorization = CheckIfSkip 
(loginPath, reqPath);
                        
                        FormsAuthenticationEventArgs formArgs = new 
FormsAuthenticationEventArgs (context);
                        if (Authenticate != null)

_______________________________________________
Mono-patches maillist  -  [email protected]
http://lists.ximian.com/mailman/listinfo/mono-patches

Reply via email to