php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #1699 Header adds extra info to auth realm.
Submitted: 1999-07-12 21:14 UTC Modified: 1999-07-12 21:18 UTC
From: matt at cowboyz dot com Assigned:
Status: Closed Package: Misbehaving function
PHP Version: 3.0.9 OS: Slackware Linux 3.6
Private report: No CVE-ID: None
View Developer Edit
 [1999-07-12 21:14 UTC] matt at cowboyz dot com 
When "php3_safe_mode = On" is set, and you do something like this:

Header("HTTP/1.0 401 Unauthorized");
Header("WWW-Authenticate: Basic realm=\"Test\"");

Your realm gets reported as "1000 Test".  If you disable php3_safe_mode, this won't happen.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [1999-07-12 21:18 UTC] jim at cvs dot php dot net 
This is a feature, to prevent page authors from hijacking
each others realms when safe_mode is enabled. The extra
info is the owner of the page.
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Sat Oct 10 04:00:01 2026 UTC