ID: 10464
User Update by: [EMAIL PROTECTED]
Old-Status: Open
Status: Closed
Bug Type: Apache related
Description: PHP_AUTH_PW is not set altough PHP_AUTH_USER is

I figured out that our webmaster took special care
for passwords - we have AFS here and AFS passwords are
often used to authenticate Web stuff.

Therefore he somehow deletes PHO_AUTH_PW before my script
gets executed.

Sorry for the wrong bug - the real bug is that I need to
be able to tell PHP not to reveal passwords already used
by Apache for some kind of authentication.

(This is bug #8827).

Previous Comments:
---------------------------------------------------------------------------

[2001-04-24 03:55:10] [EMAIL PROTECTED]
Update: register_globals is turned on.
(see
http://www-usercgi.tu-chemnitz.de/~tisc/authtest.php3
for output of phpinfo() after authentication.)



---------------------------------------------------------------------------

[2001-04-24 03:49:16] [EMAIL PROTECTED]
The, why is PHP_AUTH_USER set at all?

---------------------------------------------------------------------------

[2001-04-23 17:00:27] [EMAIL PROTECTED]
Sound like you don't have register_globals turned on in your php.ini.

- Colin

---------------------------------------------------------------------------

[2001-04-23 15:26:09] [EMAIL PROTECTED]
I tried to authenticate via PHP. It worked with PHP3.
After tracing back and forth, I found that the global
variable PHP_AUTH_PW is not set or empty.
HTTP_SERVER_VARS["HTTP_AUTH_PW"] still contains the
right value.

I do not write to that variable (I checked with grep...)

See http://www-usercgi.tu-chemnitz.de/~tisc/authtest.php3 
for a demonstration.

HTH! Tino.

---------------------------------------------------------------------------


Full Bug description available at: http://bugs.php.net/?id=10464


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to