new security patch problem
| From: | K.S. TANG | Date: | Fri, 13 May 2005 16:49:02 +0000 |
| Subject: | new security patch problem | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-215151@lists.php.net to get a copy of this message | ||
Thanks you, There is no ['PHP_AUTH_USER'] nor ['PHP_AUTH_PW'] in var_dum()
I've asked the server administrator, He said he has installed a php security
patch two days ago.
Could anyone tell me how to config the php server so that ['PHP_AUTH_USER']
and ['PHP_AUTH_PW'] can be access or avaliable to me and the web browser
????
Thanks a lot
K.S.
"Richard Lynch" <ceo@l-i-e.com>
???????:39401.67.184.124.249.1115965892.squirrel@www.l-i-e.com...
> On Thu, May 12, 2005 9:27 am, K.S. TANG said:
>> I have a page using the Basic HTTP Authentication and works well before.
>> But this night, the server seems to not receiving any $_SERVER pass in
>> from
>> Web browsers.
>>
>> if ( (!isset($_SERVER['PHP_AUTH_USER'])) ||
>> ($_SERVER['PHP_AUTH_USER']
>> !=
>> "netop") || ($_SERVER['PHP_AUTH_PW'] != "cti63") ) {
>> header('WWW-Authenticate: Basic realm="Please enter User Name and
>> Password:"');
>> header('HTTP/1.0 401 Unauthorized');
>> echo 'Authentication error!!';
>
> var_dump($_SERVER);
>
>> exit;
>> }
>>
>> I've trial to put this on another server, it doesn't work too !! (but it
>> works before also).
>>
>> I've trial to use the most simple code from php.net
>>
>> if (!isset($_SERVER['PHP_AUTH_USER'])) {
>> header('WWW-Authenticate: Basic realm="My Realm"');
>> header('HTTP/1.0 401 Unauthorized');
>> echo 'Text to send if user hits Cancel button';
>
> var_dump($_SERVER);
>
>> exit;
>> } else {
>> echo "<p>Hello {$_SERVER['PHP_AUTH_USER']}.</p>";
>> echo "<p>You entered {$_SERVER['PHP_AUTH_PW']} as your
>> password.</p>";
>> }
>>
>> But it doesn't work too. The browser ask for the user name and password
>> for
>> three times and than echo the line "Text to send if user hits......."
>>
>> Please !!! Please help me.
>> Thanks a lot.
>>
>> --
>> PHP General Mailing List (http://www.php.net/)
>> To unsubscribe, visit: http://www.php.net/unsub.php
>>
>>
>
>
> --
> Like Music?
> http://l-i-e.com/artists.htm