From: Martin Zobel-Helas <zobel@debian.org>
Date: Sun, 15 Dec 2013 10:06:54 +0000 (+0100)
Subject: don't escape authtoken
X-Git-Tag: release-0.3.40~46
X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fuserdir-ldap-cgi.git;a=commitdiff_plain;h=93f39f9573613a5161a99557f8293bbdf7a435dd

don't escape authtoken

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
---

diff --git a/search.cgi b/search.cgi
index dc9f948..fade2a7 100755
--- a/search.cgi
+++ b/search.cgi
@@ -18,7 +18,7 @@ my %config = &Util::ReadConfigFile;
 
 my $query = new CGI;
 my $id = uri_escape($query->param('id'));
-my $authtoken = uri_escape($query->param('authtoken'));
+my $authtoken = $query->param('authtoken');
 my $password = &Util::CheckAuthToken($authtoken);
 my $dosearch = uri_escape($query->param('dosearch'));
 my $searchdn = uri_escape($query->param('searchdn'));