|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits
[2005-10-21 11:28 UTC] lacak at users dot sourceforge dot net
[2017-01-20 20:42 UTC] heiglandreas@php.net
-Status: Open
+Status: Feedback
-Package: Feature/Change Request
+Package: *General Issues
[2017-01-20 20:42 UTC] heiglandreas@php.net
[2017-01-29 04:22 UTC] php-bugs at lists dot php dot net
|
|||||||||||||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Wed Oct 29 20:00:01 2025 UTC |
Description: ------------ in PHP 5.1 was introduced (in manual) new server variable $_SERVER["PHP_AUTH_DIGEST"]. But when i try use it, it seems not be initialized or set. Today PHP_AUTH_DIGEST variable contains authentication string send by browser. Like this : 'Digest username="pokus", realm="www.realm.sk-0", qop="auth", algorithm="MD5", ...' My feature request is change it to associative array : ("explode" string into array like this :) PHP_AUTH_DIGEST['username']='pokus' PHP_AUTH_DIGEST['realm']='www.realm.sk-0' PHP_AUTH_DIGEST['qop']='auth' ... I think, that it is more user friendly solution. Thank you very much. Reproduce code: --------------- <?php //phpinfo(); //exit; if (isset($_SERVER["AUTH_TYPE"]) || isset($_SERVER["PHP_AUTH_USER"])) { echo "Case 1:<br />"; echo $_SERVER["AUTH_TYPE"].":".$_SERVER["PHP_AUTH_USER"].":".$_SERVER["PHP_AUTH_PW"]; //print_r(apache_request_headers()); phpinfo(); exit; } if (isset($_SERVER["PHP_AUTH_DIGEST"])) { echo "Case 2 (PHP_AUTH_DIGEST):<br />"; echo $_SERVER["AUTH_TYPE"].":".$_SERVER["PHP_AUTH_DIGEST"]; //print_r(apache_request_headers()); phpinfo(); exit; } if (!empty($_SERVER["REMOTE_IDENT"])) { echo "Case 3:<br />"; echo $_SERVER["REMOTE_IDENT"]; //print_r(apache_request_headers()); phpinfo(); exit; } if (isset($_SERVER["HTTP_AUTHORIZATION"])) { echo "Case 4 (HTTP_AUTHORIZATION):<br />"; echo "HTTP_AUTHORIZATION: ".$_SERVER["HTTP_AUTHORIZATION"]; //print_r(apache_request_headers()); phpinfo(); exit; } if (!empty($_SERVER["Authorization"])) { echo "Case 5 (Authorization):<br />"; echo $_SERVER["Authorization"]; print_r(apache_request_headers()); phpinfo(); exit; } if (function_exists('apache_request_headers')) { $headers=apache_request_headers(); if (isset($headers["Authorization"])) { echo "Case 6:<br />"; echo $headers["Authorization"]; print_r(apache_request_headers()); phpinfo(); exit; } } Header( "HTTP/1.0 401 Unauthorized"); Header( "WWW-Authenticate: Digest realm=\"www.realm.sk\", opaque=\"opaque\", nonce=\"nonce\", stale=\"false\", qop=\"auth\""); Header( "WWW-Authenticate: Basic realm=\"www.realm.sk\"", false); echo "K pr?stupu je potrebn? zada? platn? login a heslo\n"; print_r(getallheaders()); exit; ?> Expected result: ---------------- Case 2 Actual result: -------------- Case 6 (if safe_mode=off) else recursive query for user name and password.