Project

General

Profile

Actions

Bug #2947

closed

Why read data prior to authorization

Added by saraliu almost 5 years ago. Updated almost 5 years ago.

Status:
Invalid
Priority:
Normal
Category:
mod_auth
Target version:
ASK QUESTIONS IN Forums:

Description

There is a issue that happened in our test.

We want to upload a file(40M) to our device,we using post method,we found the web server will read the request and file first,when file read over,then do authorization(mod_auth.c),Why read file prior to authorization check?Does this have some specials reason?

Could we read request header first and then do auth check,if auth successfully,let CGI to read the file data,but if auth failed no need read file?

Thanks.

Actions #1

Updated by gstrauss almost 5 years ago

  • Status changed from New to Invalid

Hi. "How do I?" That sounds like a question. Please ask questions in the Forums.

Actions #2

Updated by saraliu almost 5 years ago

I have post this issue in the forums,Thanks

https://redmine.lighttpd.net/boards/2/topics/8568

Actions

Also available in: Atom