note 17224 added to features.http-auth

Incidentally, $PHP_AUTH_USER and $PHP_AUTH_PW ARE escaped for ' and " (replaced by \' and \") just like form vars, so using addslashes() is not necessary. In fact, I believe you'd need to use stripslashes() if you were using a flat file or .htpasswd to authenticate your users rather than a database. -- http://www.php.net/manual/en/features.http-auth.php http://master.php.net/manage/user-notes.php?action=edit+17224 http://master.php.net/manage/user-notes.php?action=delete+17224 http://master.php.net/manage/user-notes.php?action=reject+17224