From:             [EMAIL PROTECTED]
Operating system: Redhat 6.2
PHP version:      4.3.0
PHP Bug Type:     Scripting Engine problem
Bug description:  $REMOTE_USER does not exist after a POST-request

In PHP 4.3.0 in safe mode the $PHP_AUTH_* variables do not exist anymore.
It is recommended to use $REMOTE_USER instead.

The suggestion that $REMOTE_USER still works and can be used in Safe mode
is only party true. I noticed that this variable is filled with the
username supplied by the external basic auth mechanism (.htaccess) unless
you are in a script which has been called by a <form action=XXX
method="post">.
With method="get" it works OK.

I need the $REMOTE_USER to lookup users from the database and find their
ID in the DB. The method="get" option is a workaround, but this does not
work in upload scripts, which has to use "post".

Is this a new bug?
-- 
Edit bug report at http://bugs.php.net/?id=21620&edit=1
-- 
Try a CVS snapshot:         http://bugs.php.net/fix.php?id=21620&r=trysnapshot
Fixed in CVS:               http://bugs.php.net/fix.php?id=21620&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=21620&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=21620&r=needtrace
Try newer version:          http://bugs.php.net/fix.php?id=21620&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=21620&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=21620&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=21620&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=21620&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=21620&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=21620&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=21620&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=21620&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=21620&r=gnused

Reply via email to