Authorization header is missing from apache_request_headers() array
| From: | LacaK | Date: | Fri, 18 Mar 2005 14:24:23 +0000 |
| Subject: | Authorization header is missing from apache_request_headers() array | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-211146@lists.php.net to get a copy of this message | ||
Hello,
When I try to use "HTTP Digest Authorization" using code like :
Header( "HTTP/1.0 401 Unauthorized");
Header( "WWW-Authenticate: Digest realm=\"www.myrealm.com\",
opaque=\"opaque\", nonce=\"nonce\", stale=\"false\",
qop=\"auth\"");
browser returns in HTTP request Authorization header like this one :
Digest username="lacak", realm="www.myrealm.com", qop="auth",
algorithm="MD5", uri="/devel/phpinfo.php",
nonce="5e8ac9b033001458fc5380d8a88325a2", nc=00000004,
cnonce="c9495e4af19fa6b08eb045f32e6ced79",
response="fbd8f86b45334202b2cac380f29d9706"
When PHP runs as apache module with safe_mode=off
I can read this header using apache_request_headers() function
But when safe_mode=On,
then apache_request_headers() returns no Authorization (this is documented
behavior)
Is this bug or exists other way how access Authorization header ?
Can anyone help ?
How to report this to php developers, to fix this problem ?
Thank you
LacaK.