re: bozo .htpasswd exposure

> Found this a little while back:  Bozo will expose .htpasswd files.

indeed.  infact, the whole checking of special files has been
broken for a while.  i suspect some part of the librarification
allowed some failure modes to return success or continue, and,
the .htpasswd file itself is not protected if not compiled in
(the other special files are, regardless of whether they're
actually used by this bozo compile.)

i have fixed for a bunch of problems in a tree i'm testing.

thanks again!  we will issue an SA for this problem.


.mrg