Re: [PHP4BETA] The realm code in WWW-Auth
| From: | Zeev Suraski | Date: | Wed, 12 May 1999 20:40:28 +0000 |
| Subject: | Re: [PHP4BETA] The realm code in WWW-Auth | ||
| References: | 1 2 | Groups: | php.version4 |
| Request: | Send a blank email to php-version4+get-818@lists.php.net to get a copy of this message | ||
At 20:10 12/05/99 , Jim Winstead wrote:
In "safe mode" the uid of the "current user" gets prepended so that two people running scripts on the same safe-mode-enabled server can't hijack each others realms (which could allow password stealing).Aha. Well, we'd have to support that in the implementation of PHP's header() function, because SAPI would have no knowledge about safe mode. Zeev -- Zeev Suraski <zeev@zend.com> http://www.zend.com/ For a PGP public key, finger bourbon@netvision.net.il -- PHP 4 Beta