|  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #22473 ISAPI Secure Server Variables not available?
Submitted: 2003-02-28 06:29 UTC Modified: 2003-03-07 12:59 UTC
From: e9025902 at stud2 dot tuwien dot ac dot at Assigned:
Status: Closed Package: IIS related
PHP Version: 4.3.1 OS: Windows 2000 Server
Private report: No CVE-ID: None
 [2003-02-28 06:29 UTC] e9025902 at stud2 dot tuwien dot ac dot at
When I use the CGI version of PHP 4.3.1 the Secure Server Variables are available (e.g CERT_SUBJECT, CERT_SERIALNUMBER, ...). 

When I use the ISAPI version they are shown with 
php_info in the ISAPI section, but they are not in $_SERVER or $_ENV.

Is this a bug, a feature or a wrong php.ini?

maybe someone could have a look at php4isapi.c because there I found static char *isapi_secure_server_variable_names[]



Add a Patch

Pull Requests

Add a Pull Request


AllCommentsChangesGit/SVN commitsRelated reports
 [2003-03-03 20:25 UTC]
Sorry, but your problem does not imply a bug in PHP itself.  For a
list of more appropriate places to ask for help using PHP, please
visit as this bug system is not the
appropriate forum for asking support questions. 

Thank you for your interest in PHP.

Please ask this kind of questions on the mailing lists..
This is not a support forum.

 [2003-03-04 03:24 UTC] e9025902 at stud2 dot tuwien dot ac dot at
I'm sorry, but I don't understand why something that worked
all right in PHP 4.0.2 and is not working since 4.0.6 (possibly earlier) is not considered a bug.

When I look into php4isapi.c in PHP 4.0.2 all server variables names are in 

static char *isapi_server_variables[] 

and in PHP 4.0.6 (and later) they are split into two arrays

static char *ispapi_server_variable_names[]
static char *ispapi_secure_server_variable_names[]

The later variables are missing!

php_info() shows that they are here using static void php_info_isapi(ZEND_MODULE_INFO_FUNC_ARGS)

In my opinion this means, that they can be accessed, but are not put into the PHP variables.

I had a look at the php-windows mailing list, and there's a guy with excactly the same problem who got some answers, but none of that worked!

 [2003-03-04 09:18 UTC]
My bad, I misread your original report a bit, sorry about that.

Anyway, could you possibly try and find out in what
version it really broke..?

 [2003-03-05 04:03 UTC] e9025902 at stud2 dot tuwien dot ac dot at
Hi again!

Thanks a lot for you efforts.

I checked all versions from 4.0.2 to 4.0.6 and it broke with version 4.0.5

This seems to be the version which introduced 
static char *isapi_secure_server_variable_names[]

I can send you all the php_infos from my testing if
this helps

 [2003-03-07 12:59 UTC]
Thanks for the patch. It's now in CVS.

PHP Copyright © 2001-2023 The PHP Group
All rights reserved.
Last updated: Tue Sep 26 17:01:25 2023 UTC