Re: Authentication with register_globals OFF

On Sat, 11 May 2002 21:21:27 -0400, you wrote: >Trying to get accustomed to PHP 4.2.0 and PHP's preference for >register_globals off, I have register_globals off. > >However, when I try to use $PHP_AUTH_USER and $PHP_AUTH_PW, my script fails >(attempting to validate username and password credectials against MySQL...no >error message and my login failure message does not show up, even after >three unsuccessful challenge responses. > >When I set register_globals on, I am successful in gaining authorization >(ie, the header('WWW-Auth....' is correct, the script works, the MySQL >connection works and the query works). > >How, then do I define th $PHP_AUTH_USER and $PHP_AUTH_PW variables up front >with register_globals off? They are in the $_SERVER superglobal. Change your references to them to... $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW'] You might want to read up on what register_globals actually does since it's clear that you don't fully understand it yet: http://www.php.net/manual/en/security.registerglobals.php -- Stuart