Incorrect syntas used when generating the account prefix for the htpasswd file.

[anonymous]

When using htpasswd as the authentication file, the prefix is incorrectly determined. Line 119 in htfile.py is incorrect:

return user + ':'

should be

return '%s:' %(user)

which is similar to how the prefix for htdigest is determined.

[Noah Kantrowitz]

How exactly are these different. I could see an issue if it wasn't certain that user was a string, but I can see no way this would happen. If nothing else it would raise a TypeError, so it isn't a security bug. The current method is probably slighly more effcient (not that it much matters) as it avoids the string formatting call. If you have more of a reason this is incorrect, please append this ticket.