Re: Re: #20461 [Opn->Bgs]: Unable to access $PHP_AUTH_USER or $PHP_AUTH_PW
| From: | Rasmus Lerdorf | Date: | Mon, 18 Nov 2002 06:34:23 +0000 |
| Subject: | Re: Re: #20461 [Opn->Bgs]: Unable to access $PHP_AUTH_USER or $PHP_AUTH_PW | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-91215@lists.php.net to get a copy of this message | ||
On Mon, 18 Nov 2002, Derick Rethans wrote:
> On Sun, 17 Nov 2002, Rasmus Lerdorf wrote:
>
> > I'm still not overly convinced that this isn't a restriction that should
> > only kick in when safe_mode or open_basedir is active. This change is
> > going to break working code and it is not a security fix on non-shared
> > servers.
>
> True, but it was clearly documented that it shouldn't work. Do we really
> have to make a feature out of every bug? I'd say no...
But why do you assume that the documentation was right and the code was
wrong and not the other way around?