Re: [Mod-fcgid-users] basic authentication in php is not passed through mod_fcgid

2008-07-13 Thread Christian Seiler
Hi! >> And if you don't run your virtual hosts as a spearate user, even with >> suexec there is a very small vulnerability window to grab the >> authentication data. That's why I understand the Apache people for not >> passing the Authorization header by default. > > There is not such a small win

Re: [Mod-fcgid-users] basic authentication in php is not passed through mod_fcgid

2008-07-11 Thread Gabriel Barazer
On 07/12/2008 12:14:21 AM +0200, Christian Seiler <[EMAIL PROTECTED]> wrote: > Hi, > >> I compile my server binaries and never rely on pre-compiled versions; I >> _never_ imagined using Apache without suexec which IMHO is a complete >> nonsense and should be a default behavior. Finally I never

Re: [Mod-fcgid-users] basic authentication in php is not passed through mod_fcgid

2008-07-11 Thread Christian Seiler
Hi, > I compile my server binaries and never rely on pre-compiled versions; I > _never_ imagined using Apache without suexec which IMHO is a complete > nonsense and should be a default behavior. Finally I never imagined > running any virtualhost with the Apache user. That way, running Apache >

Re: [Mod-fcgid-users] basic authentication in php is not passed through mod_fcgid

2008-07-11 Thread Gabriel Barazer
Hi On 07/11/2008 11:10:56 PM +0200, Christian Seiler <[EMAIL PROTECTED]> wrote: >> I have an application that I'd like to switch to mod_fcgid, but >> unfortunately it doesn't work as I wanted it to. the (php) application >> uses basic authentication (not in apache but in php) but the entered

Re: [Mod-fcgid-users] basic authentication in php is not passed through mod_fcgid

2008-07-11 Thread Christian Seiler
Hi! > I have an application that I'd like to switch to mod_fcgid, but > unfortunately it doesn't work as I wanted it to. the (php) application > uses basic authentication (not in apache but in php) but the entered > information is definitely not sent down to the application with > mod_fcgi

Re: [Mod-fcgid-users] basic authentication in php is not passed through mod_fcgid

2008-07-11 Thread Sam Morris
On Fri, 2008-07-11 at 20:16 +0200, Wolfgang Hennerbichler wrote: > Hi people, > > I have an application that I'd like to switch to mod_fcgid, but > unfortunately it doesn't work as I wanted it to. the (php) application > uses basic authentication (not in apache but in php) but the entered >

[Mod-fcgid-users] basic authentication in php is not passed through mod_fcgid

2008-07-11 Thread Wolfgang Hennerbichler
Hi people, I have an application that I'd like to switch to mod_fcgid, but unfortunately it doesn't work as I wanted it to. the (php) application uses basic authentication (not in apache but in php) but the entered information is definitely not sent down to the application with mod_fcgid.