#23232 [NEW]: safe_mode does not honor PHP_AUTH_* in apache2

From: Date: Wed, 16 Apr 2003 02:22:15 +0000
Subject: #23232 [NEW]: safe_mode does not honor PHP_AUTH_* in apache2
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-37730@lists.php.net to get a copy of this message 
From:             raul at dias dot com dot br
Operating system: Linux
PHP version:      4.3.2RC1
PHP Bug Type:     Apache2 related
Bug description:  safe_mode does not honor PHP_AUTH_* in apache2

When safe_mode is on PHP_AUTH_USER and PHP_AUTH_PW should set
to NULL only if there is an external authentication.

If there is no external authentication these variables should 
NOT be set to NULL.

In APACHE 1.x code this is done by checking the authtype(r) 
variable, which means that there is an authentication set in
either httpd.conf or a .htaccess file.

In APACHE 2.x code, there is no such checking.
If safe_mode is on those variables are NULLed without any
other type of checking for an external authentication.

I am not sure if this is a BUG or a "FEATURE", but because
of the lack of information about this in the code or 
documentation, I am assuming this is a bug.


I am still not familiar with APACHE 2.x API or all 
its features to suggest the best way to fix this or patch it.


-- 
Edit bug report at http://bugs.php.net/?id=23232&edit=1
-- 
Try a CVS snapshot:         http://bugs.php.net/fix.php?id=23232&r=trysnapshot
Fixed in CVS:               http://bugs.php.net/fix.php?id=23232&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=23232&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=23232&r=needtrace
Try newer version:          http://bugs.php.net/fix.php?id=23232&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=23232&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=23232&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=23232&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=23232&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=23232&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=23232&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=23232&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=23232&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=23232&r=gnused

Thread (8 messages)

« previous php.bugs (#37730) next »