php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #51921 CURLOPT_USERPWD bogus when use without username
Submitted: 2010-05-26 13:51 UTC Modified: 2010-05-27 02:02 UTC
From: over at silversurfer7 dot de Assigned:
Status: Not a bug Package: cURL related
PHP Version: 5.2.13 OS: Debian 5.0 64bit
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: over at silversurfer7 dot de
New email:
PHP Version: OS:

 

 [2010-05-26 13:51 UTC] over at silversurfer7 dot de
Description:
------------
When using CURLOPT_USERPWD within a cURL request u have to provide both username AND password to work properly.

I had a problem with accessing pages with Basicauth and NO username, just a Password.

curl then calculates the base64 wrong.

As workaround i have to calculate the base64 manually and provide it to curl via the headers option

Test script:
---------------
$curl = curl_init('http://localhost');
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
curl_setopt($curl, CURLOPT_USERPWD, ':password'); // no username
curl_setopt($curl, CURLOPT_VERBOSE, true);
$response = curl_exec($curl);
curl_close($curl);

Expected result:
----------------
something like this in the request headers:

"Authorization: Basic OnRlc3Q="

Actual result:
--------------
"Authorization: Basic Og=="

(only the ":")

Patches

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2010-05-27 02:02 UTC] degeberg@php.net
-Status: Open +Status: Bogus
 [2010-05-27 02:02 UTC] degeberg@php.net
That would be an issue with libcurl then. PHP's curl extension just passes the options to libcurl.

See: http://svn.php.net/viewvc/php/php-src/trunk/ext/curl/interface.c?view=markup#l1707
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sun Sep 08 23:01:28 2024 UTC