Bug #7774 Updated: PHP_AUTH_USER and PHP_AUTH_PW are set when using external authentication.

ID: 7774 Updated by: jmoore Reported By: sbg@it.uts.edu.au Old-Status: Open Status: Closed Bug Type: *Configuration Issues PHP Version: 4.0.3pl1 Assigned To: Comments: THis is now the expected behaviour, use safemode to disable it. There is very little we can do about this other than to remove all PHP_AUTH_* from PHP. - James Previous Comments: --------------------------------------------------------------------------- [2000-11-12 21:33:10] sbg@it.uts.edu.au *** Server Version: Apache/1.3.14 (Unix) PHP/4.0.3pl1 PHP/3.0.9 mod_perl/1.24_01 *** PHP configure line: CC=gcc ./configure --prefix=/opt/Apache/PHP --with-config-file-path=/opt/Apache/PHP/php.ini --with-apxs=$APXS --with-config-file=/opt/Apache/conf --with-mysql --with-zlib --with-imap=$NETPREFIX/local/build/packages/imap/imap-4.2/c-client --enable-debug=no --enable-track-vars=yes --enable-bcmath=yes --enable-memory-limit=yes --enable-versioning --with-pgsql=/opt/PostgreSQL ; *** php.ini is empty. *** php4.conf included in Apache/conf/httpd.conf: LoadModule php4_module libexec/libphp4.so AddModule mod_php4.c AddType application/x-httpd-php .php AddType application/x-httpd-php .php4 AddType application/x-httpd-php-source .phps <IfModule !mod_php3.c> AddType application/x-httpd-php .php3 </IfModule> php_flag track_vars on php_flag magic_quotes_gpc off *** authentication config from Apache/conf/httpd.conf: <Directory /home/*> Options Includes Indexes FollowSymLinks ExecCGI AllowOverride All AuthSystem On AuthSystemAuthorative On AuthType Basic AuthName "your MCS account" <Limit GET PUT POST DELETE CONNECT OPTIONS> require valid-user </Limit> </Directory> *** php4 script that demonstrates the problem: <?php echo phpinfo(); ?> --------------------------------------------------------------------------- ATTENTION! Do NOT reply to this email! To reply, use the web interface found at http://bugs.php.net/?id=7774&edit=2