From: Moriyoshi Koizumi <moriyoshi@php.net>
Date: Sat, 21 Dec 2002 21:52:41 +0000 (+0000)
Subject: MFH: Made auth information inaccessible under safe mode
X-Git-Tag: php-4.3.0~39
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=6e2cd3fcfe5bc7ca93d88fcda681af16590b9602;p=php

MFH: Made auth information inaccessible under safe mode
---

diff --git a/sapi/apache2filter/sapi_apache2.c b/sapi/apache2filter/sapi_apache2.c
index 052863d345..09b5ce7b22 100644
--- a/sapi/apache2filter/sapi_apache2.c
+++ b/sapi/apache2filter/sapi_apache2.c
@@ -369,8 +369,13 @@ static void php_apache_request_ctor(ap_filter_t *f, php_struct *ctx TSRMLS_DC)
 	apr_table_unset(f->r->headers_out, "Expires");
 	apr_table_unset(f->r->headers_out, "ETag");
 	apr_table_unset(f->r->headers_in, "Connection");
-	auth = apr_table_get(f->r->headers_in, "Authorization");
-	php_handle_auth_data(auth TSRMLS_CC);
+	if (!PG(safe_mode)) {
+		auth = apr_table_get(f->r->headers_in, "Authorization");
+		php_handle_auth_data(auth TSRMLS_CC);
+	} else {
+		SG(request_info).auth_user = NULL;
+		SG(request_info).auth_password = NULL;
+	}
 
 	php_request_startup(TSRMLS_C);
 }