php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #1699 Header adds extra info to auth realm.
Submitted: 1999-07-12 21:14 UTC Modified: 1999-07-12 21:18 UTC
From: matt at cowboyz dot com Assigned:
Status: Closed Package: Misbehaving function
PHP Version: 3.0.9 OS: Slackware Linux 3.6
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: matt at cowboyz dot com
New email:
PHP Version: OS:

 

 [1999-07-12 21:14 UTC] matt at cowboyz dot com 
When "php3_safe_mode = On" is set, and you do something like this:

Header("HTTP/1.0 401 Unauthorized");
Header("WWW-Authenticate: Basic realm=\"Test\"");

Your realm gets reported as "1000 Test".  If you disable php3_safe_mode, this won't happen.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [1999-07-12 21:18 UTC] jim at cvs dot php dot net 
This is a feature, to prevent page authors from hijacking
each others realms when safe_mode is enabled. The extra
info is the owner of the page.
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Sat Oct 10 07:00:01 2026 UTC