From a6bf2bcbf4c9ad9289b0daca886de861b25f3c15 Mon Sep 17 00:00:00 2001
From: Alex Skalozub <pieceofsummer@gmail.com>
Date: Sun, 29 Jun 2014 00:03:52 +0400
Subject: [PATCH] Should also disallow PROPFIND as well

---
 mongoose.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mongoose.c b/mongoose.c
index 066e92432..fc755fdc1 100644
--- a/mongoose.c
+++ b/mongoose.c
@@ -4266,10 +4266,10 @@ static void open_local_endpoint(struct connection *conn, int skip_user) {
     close_local_endpoint(conn);
 #endif
 #ifndef MONGOOSE_NO_DAV
-  } else if (!strcmp(conn->mg_conn.request_method, "PROPFIND")) {
-    handle_propfind(conn, path, &st, exists);
   } else if (must_hide_file(conn, path)) {
     send_http_error(conn, 404, NULL);
+  } else if (!strcmp(conn->mg_conn.request_method, "PROPFIND")) {
+    handle_propfind(conn, path, &st, exists);
   } else if (!strcmp(conn->mg_conn.request_method, "MKCOL")) {
     handle_mkcol(conn, path);
   } else if (!strcmp(conn->mg_conn.request_method, "DELETE")) {
-- 
GitLab