#21620 [NEW]: $REMOTE_USER does not exist after a POST-request

From: mklerx@eid.nl Operating system: Redhat 6.2 PHP version: 4.3.0 PHP Bug Type: Scripting Engine problem Bug description: $REMOTE_USER does not exist after a POST-request In PHP 4.3.0 in safe mode the $PHP_AUTH_* variables do not exist anymore. It is recommended to use $REMOTE_USER instead. The suggestion that $REMOTE_USER still works and can be used in Safe mode is only party true. I noticed that this variable is filled with the username supplied by the external basic auth mechanism (.htaccess) unless you are in a script which has been called by a <form action=XXX method="post">. With method="get" it works OK. I need the $REMOTE_USER to lookup users from the database and find their ID in the DB. The method="get" option is a workaround, but this does not work in upload scripts, which has to use "post". Is this a new bug? -- Edit bug report at http://bugs.php.net/?id=21620&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=21620&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=21620&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=21620&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=21620&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=21620&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=21620&r=support Expected behavior: http://bugs.php.net/fix.php?id=21620&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=21620&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=21620&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=21620&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=21620&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=21620&r=dst IIS Stability: http://bugs.php.net/fix.php?id=21620&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=21620&r=gnused