[PHP-WIN] PHP/HTTP authentication with register_globals = Off

[Stéphane Vinsot]

Hi,

i'm trying to switch to a "register_globals = Off" model to improve the
security of my site.

The problem is that when using this parameter, i can't logon anymore. The
following script always ask for my user name and password. it seems that
$PHP_AUTH_USER is not set.
What is the way to go around this if i use this option ?

thanks

Stephane Vinsot
PS: Authentication code
<?php
  if(!isset($PHP_AUTH_USER)) {
    Header("WWW-Authenticate: Basic realm=\"my realm\"");
    Header("HTTP/1.0 401 Unauthorized");
    echo "Acces denied\n";
    exit;
  } else {
    echo "Hello $PHP_AUTH_USER.<P>";
    echo "You entered the password $PHP_AUTH_PW.<P>";
  }

?>




-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]