access: do not use + character for the auth code (HTTP deescaping), issue #5274

diff --git a/src/access.c b/src/access.c
index 1210a9d4979e2dda3a38cd0104f752548af98ac1..ba73c700d3533a10d8758212fd064133efb32142 100644 (file)
--- a/src/access.c
+++ b/src/access.c
@@ -1961,7 +1961,7 @@ static void
 passwd_entry_new_auth(passwd_entry_t *pw)
 {
   static const char table[] =
-    "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-";
+    "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-.";
   uint8_t buf[20], *in;
   char id[42], *dst;
   unsigned int bits;