Posted by Bent Stigsen on 12/05/26 11:26

Bernard Higonnet wrote:
[snip]
> There is a "AuthUserFile" option in the config file. This I know because
> it's there, and because it does ask for a password and that works as it
> should. I thought by posting the server-info this would be better than
> showing the config file lines, but server-info doesn't show the file,
> perhaps because showing it is bad from a security point of view...?

Ok, it makes sense that it should work since the request gets passed
along to the PHP-interpreter.

Just to confirm that PHP gets the information it needs, try:
<?php
print_r(apache_request_headers());
?>

Verify the presence and content of the Authorization-header. Its
content should be something like "Basic Zm9vOmZvby4u", where the
gibberish is base64 encoded "user:pass".


/Bent

[Back to original message]