1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
--- a/src/web_client.c.orig
+++ b/src/web_client.c
@@ -302,7 +302,7 @@
buffer_strcat_htmlescape(w->response.data, webfilename);
return 404;
}
-
+#if 0
// check if the file is owned by expected user
if(stat.st_uid != web_files_uid()) {
error("%llu: File '%s' is owned by user %u (expected user %u). Access Denied.", w->id, webfilename, stat.st_uid, web_files_uid());
@@ -320,7 +320,7 @@
buffer_strcat_htmlescape(w->response.data, webfilename);
return 403;
}
-
+#endif
if((stat.st_mode & S_IFMT) == S_IFDIR) {
snprintfz(webfilename, FILENAME_MAX, "%s/index.html", filename);
return mysendfile(w, webfilename);
|