Re: [PHP4BETA] The realm code in WWW-Auth
| From: | Jim Winstead | Date: | Wed, 12 May 1999 18:10:10 +0000 |
| Subject: | Re: [PHP4BETA] The realm code in WWW-Auth | ||
| References: | 1 | Groups: | php.version4 |
| Request: | Send a blank email to php-version4+get-810@lists.php.net to get a copy of this message | ||
In "safe mode" the uid of the "current user" gets prepended so that
two people running scripts on the same safe-mode-enabled server
can't hijack each others realms (which could allow password stealing).
Jim
On May 12, Zeev Suraski wrote:
> Rasmus - can you explain the PHP 3.0 code that plays with the realm part of
> the WWW-Authenticate header? Why not just send it as-is?
>
> Zeev
> --
> Zeev Suraski <zeev@zend.com> http://www.zend.com/
> For a PGP public key, finger bourbon@netvision.net.il
>
>
> --
> PHP 4 Beta
>
>
--
PHP 4 Beta