php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #13115 .htaccess password secured Script is run twice
Submitted: 2001-09-03 15:18 UTC Modified: 2001-09-03 17:24 UTC
From: matthias-php at kopolt dot de Assigned:
Status: Not a bug Package: Apache related
PHP Version: 4.0.4pl1 OS: RedHat Linux 7.1
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: matthias-php at kopolt dot de
New email:
PHP Version: OS:

 

 [2001-09-03 15:18 UTC] matthias-php at kopolt dot de 
given: a directory secured with http basic authentication and only accessible by using username and password supplied in a password and a group file. The Access.Logfile shows 2 requests for the same page, with the first being denied by 401 and the second with a correct reply (200)
The PHP script runs twice, with the first Output being garbaged.

Reproduced on Standard Redhat rpm installation as well as on specific compilation. Always as php-apache-module

here 2 Lines from the log

1.1.1.1 - - [03/Sep/2001:19:02:54 +0000] "POST /_admin_/phpQLAdmin/domain_add.php HTTP/1.0" 401 397 "http://myserver/_admin_/phpQLAdmin/home.php" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
1.1.1.1 - admin [03/Sep/2001:19:02:55 +0000] "POST /_admin_/phpQLAdmin/domain_add.php HTTP/1.0" 200 352 "http://myserver/_admin_/phpQLAdmin/home.php" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-09-03 15:31 UTC] mfischer@php.net 
That's how it is supposed to work. The browser accesses the page, get's a not authorized error (401), and, if the user has already entered the authentication incredents, requests the page again with the auth data; else you will be prompted for them and then the page is requested again.

Not a PHP bug, bogusified.

- Markus
 [2001-09-03 16:50 UTC] matthias-php at kopolt dot de 
ok, sorry! remove this report!!
My script code was indeed executed twice but as a result of having the script doing a "apachectl restart" in an invoked "sudo shellscript".
authentication is fine, and killing one's own PID resulted in the Browser reloading the page and reexecuting the first part of the script without being logged twice (the interupted request probably).
sorry
 [2001-09-03 17:24 UTC] mfischer@php.net 
Bogusified (again?) on user request.

- Markus
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed Feb 05 08:01:30 2025 UTC