PHP5.0.0 - Basic Auth completely broken (Apache1)
| From: | Stefan Esser | Date: | Wed, 14 Jul 2004 09:57:41 +0000 |
| Subject: | PHP5.0.0 - Basic Auth completely broken (Apache1) | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-11223@lists.php.net to get a copy of this message | ||
Hi,
unfourtunately the security patch for 5.0.0 was broken in one Apache1 specific part. Basic auth does not detect that username+password was given.
PHP 4.3.x is not affected because that patch did not go into it (yet).
Stefan