cvs: php4 /sapi/apache php_apache.c
| From: | Rasmus Lerdorf | Date: | Sun, 21 Oct 2001 00:03:55 +0000 |
| Subject: | cvs: php4 /sapi/apache php_apache.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-7881@lists.php.net to get a copy of this message | ||
rasmus Sat Oct 20 20:03:55 2001 EDT
Modified files:
/php4/sapi/apache php_apache.c
Log:
This made no sense before. Hide Authorization in getallheaders() but
display it from phpinfo()? Ouch!
@ Hide Authorization header from phpinfo() output in safe_mode (Rasmus)
Index: php4/sapi/apache/php_apache.c
diff -u php4/sapi/apache/php_apache.c:1.51 php4/sapi/apache/php_apache.c:1.52
--- php4/sapi/apache/php_apache.c:1.51 Fri Oct 12 03:50:52 2001
+++ php4/sapi/apache/php_apache.c Sat Oct 20 20:03:55 2001
@@ -17,7 +17,7 @@
| David Sklar <sklar@student.net> |
+----------------------------------------------------------------------+
*/
-/* $Id: php_apache.c,v 1.51 2001/10/12 07:50:52 thies Exp $ */
+/* $Id: php_apache.c,v 1.52 2001/10/21 00:03:55 rasmus Exp $ */
#define NO_REGEX_EXTRA_H
@@ -278,7 +278,7 @@
env_arr = table_elts(r->headers_in);
env = (table_entry *)env_arr->elts;
for (i = 0; i < env_arr->nelts; ++i) {
- if (env[i].key) {
+ if (env[i].key && (!PG(safe_mode) || (PG(safe_mode) && strncasecmp(env[i].key,
"authorization", 13)))) {
php_info_print_table_row(2, env[i].key, env[i].val);
}
}