--- lighttpd-1.3.13.orig/src/http_auth.c	2005-06-06 14:10:02.000000000 +0100
+++ lighttpd-1.3.13/src/http_auth.c	2005-06-06 14:12:52.000000000 +0100
@@ -313,6 +313,11 @@
 	req = ((data_array *)(p->conf.auth_require->data[i]))->value;
 
 	require = (data_string *)array_get_element(req, "require");
+
+	/* valid-user */
+
+	if (0 == strcmp(require->value->ptr, "valid-user"))
+		return 0;
 	
 	/* user=name1|group=name3|host=name4 */
 	
@@ -339,6 +344,11 @@
 		}
 		
 		/* from r to r + r_len is a rule */
+
+		if (0 == strncmp(r, "valid-user", r_len)) {
+			log_error_write(srv, __FILE__, __LINE__, "s", "valid-user cannot be combined with other require rules");
+			return -1;
+		}
 		
 		/* search for = in the rules */
 		if (NULL == (eq = strchr(r, '='))) {