Re: apache2 + mod_fastcgi + php4 + http_auth
Benjamin Billian <[email protected]>
| Newsgroups | gmane.comp.web.fastcgi.devel |
|---|---|
| Message-ID | <[email protected]> |
Prchal Erich schrieb:
> See server/util_script.c:
> AP_DECLARE(void) ap_add_common_vars(request_rec *r)
> ....
> /*
> * You really don't want to disable this check, since it
leaves you
> * wide open to CGIs stealing passwords and people viewing them
> * in the environment with "ps -e". But, if you must...
> */
> #ifndef SECURITY_HOLE_PASS_AUTHORIZATION
> else if (!strcasecmp(hdrs[i].key, "Authorization")
> || !strcasecmp(hdrs[i].key, "Proxy-Authorization")) {
> continue;
> }
> #endif
I recompiled mod_fastcgi with -DSECURITY_HOLE_PASS_AUTHORIZATION but it
still doesn't work. PHP seems to get no authorization info.
benjamin
___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/