Subject: [2.5.0 QUICKFIX] Anonymous not in any class

From: Gregory A Lundberg <[email-masked]>
Date: Mon, 23 Aug 1999 18:17:03 -0400

Under certain conditions it was possible for an anonymous user to log in
even though no class had been defined for anonymous users.  This patch
corrects the error.

The patch is available online from

      ftp://ftp.wu-ftpd.org/pub/wu-ftpd/quickfixes/apply_to_2.5.0/

under the name

      not.in.class.patch

Online resources, including the latest version of the daemon, are available
through:
 
      http://www.wu-ftpd.org/

-- 

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email-masked]
Kettering, OH 45409-1615 USA    1-800-809-2195
Index: src/access.c
===================================================================
RCS file: /cvsroot/wu-ftpd-stable/src/access.c,v
retrieving revision 1.7
diff -c -r1.7 access.c
*** src/access.c	1999/05/27 14:49:26	1.7
--- src/access.c	1999/08/23 22:08:13
***************
*** 771,777 ****
                  hostmatch(ARG[which],remoteaddr,remotehost))
                  return (1);
  
!             if (guest && strcasestr(ARG1, "guest") && hostmatch(ARG[which],remoteaddr,remotehost))
                  return (1);
  
              if (!guest && !anonymous && strcasestr(ARG1, "real") &&
--- 771,777 ----
                  hostmatch(ARG[which],remoteaddr,remotehost))
                  return (1);
  
!             if (guest && !anonymous && strcasestr(ARG1, "guest") && hostmatch(ARG[which],remoteaddr,remotehost))
                  return (1);
  
              if (!guest && !anonymous && strcasestr(ARG1, "real") &&