note 47566 added to features.http-auth
| From: | andrewofengland at osu1 dot php dot net | Date: | Sat, 20 Nov 2004 17:19:30 +0000 |
| Subject: | note 47566 added to features.http-auth | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-80803@lists.php.net to get a copy of this message | ||
h1suzuki at hotmail dot com's note about redirecting people using authentication to https is
misguided. By the time you get to the point where Header() is executed the password has already been
sent in plaintext and the system could be comprimised.
----
Manual Page -- http://www.php.net/manual/en/features.http-auth.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+47566
Delete -- http://master.php.net/manage/user-notes.php?action=delete+47566&report=yes
Reason: bad code -- http://master.php.net/manage/user-notes.php?action=delete+47566&report=yes&reason=bad+code
Reason: spam -- http://master.php.net/manage/user-notes.php?action=delete+47566&report=yes&reason=spam
Reason: useless example -- http://master.php.net/manage/user-notes.php?action=delete+47566&report=yes&reason=useless+example
Reason: contains commercial links -- http://master.php.net/manage/user-notes.php?action=delete+47566&report=yes&reason=contains+commercial+links
Reason: useless note -- http://master.php.net/manage/user-notes.php?action=delete+47566&report=yes&reason=useless+note
Reject -- http://master.php.net/manage/user-notes.php?action=reject+47566&report=yes
Search -- http://master.php.net/manage/user-notes.php