--- loncom/auth/lontokacc.pm 2004/05/11 06:49:58 1.10 +++ loncom/auth/lontokacc.pm 2005/02/05 22:20:56 1.11 @@ -1,7 +1,7 @@ # The LearningOnline Network # Access Handler for User File Transfers # -# $Id: lontokacc.pm,v 1.10 2004/05/11 06:49:58 albertel Exp $ +# $Id: lontokacc.pm,v 1.11 2005/02/05 22:20:56 albertel Exp $ # # Copyright Michigan State University Board of Trustees # @@ -36,14 +36,7 @@ use Apache::File(); sub handler { my $r = shift; - my $reqhost = $r->get_remote_host(REMOTE_DOUBLE_REV); - if (!$reqhost && $r->get_remote_host(REMOTE_NOLOOKUP) eq $r->get_server_name()) { - $reqhost = $r->get_server_name(); - } - unless ($reqhost) { - $r->log_reason("Spoof request from ". $reqhost); - return FORBIDDEN; - } + my $reqhost = $r->get_remote_host(REMOTE_HOST); if ($reqhost eq 'localhost.localdomain') { return OK; } @@ -56,10 +49,11 @@ sub handler { return FORBIDDEN; } while ($readline=<$fh>) { - my ($id,$domain,$role,$name,$ip)=split(/:/,$readline); - if ($name =~ /$reqhost/i) { - return OK; - } + $readline=~s/\s*$//; + my ($id,$domain,$role,$name)=split(/:/,$readline); + if ($name =~ /\Q$reqhost\E/i) { + return OK; + } } }