IIS and HTTP authentication
This commit is contained in:
@@ -8,6 +8,7 @@ $Source$
|
|||||||
2003-08-10 Marc Delisle <lem9@users.sourceforge.net>
|
2003-08-10 Marc Delisle <lem9@users.sourceforge.net>
|
||||||
* server_status.php3: bug 786331, a 100,00% not internationalized,
|
* server_status.php3: bug 786331, a 100,00% not internationalized,
|
||||||
and align values for "More status variables"
|
and align values for "More status variables"
|
||||||
|
* libraries/grab_globals.lib.php3: probable fix for IIS HTTP auth bug
|
||||||
|
|
||||||
2003-08-09 Marc Delisle <lem9@users.sourceforge.net>
|
2003-08-09 Marc Delisle <lem9@users.sourceforge.net>
|
||||||
* libraries/auth/cookie.auth.lib.php3: Cookies required message
|
* libraries/auth/cookie.auth.lib.php3: Cookies required message
|
||||||
|
@@ -63,6 +63,9 @@ if (!defined('PMA_GRAB_GLOBALS_INCLUDED')) {
|
|||||||
if (isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])) {
|
if (isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])) {
|
||||||
$HTTP_ACCEPT_LANGUAGE = $_SERVER['HTTP_ACCEPT_LANGUAGE'];
|
$HTTP_ACCEPT_LANGUAGE = $_SERVER['HTTP_ACCEPT_LANGUAGE'];
|
||||||
}
|
}
|
||||||
|
if (isset($_SERVER['HTTP_AUTHORIZATION'])) {
|
||||||
|
$HTTP_AUTHORIZATION = $_SERVER['HTTP_AUTHORIZATION'];
|
||||||
|
}
|
||||||
} else if (!empty($HTTP_SERVER_VARS)) {
|
} else if (!empty($HTTP_SERVER_VARS)) {
|
||||||
if (isset($HTTP_SERVER_VARS['PHP_SELF'])) {
|
if (isset($HTTP_SERVER_VARS['PHP_SELF'])) {
|
||||||
$PHP_SELF = $HTTP_SERVER_VARS['PHP_SELF'];
|
$PHP_SELF = $HTTP_SERVER_VARS['PHP_SELF'];
|
||||||
@@ -70,9 +73,12 @@ if (!defined('PMA_GRAB_GLOBALS_INCLUDED')) {
|
|||||||
if (isset($HTTP_SERVER_VARS['HTTP_ACCEPT_LANGUAGE'])) {
|
if (isset($HTTP_SERVER_VARS['HTTP_ACCEPT_LANGUAGE'])) {
|
||||||
$HTTP_ACCEPT_LANGUAGE = $HTTP_SERVER_VARS['HTTP_ACCEPT_LANGUAGE'];
|
$HTTP_ACCEPT_LANGUAGE = $HTTP_SERVER_VARS['HTTP_ACCEPT_LANGUAGE'];
|
||||||
}
|
}
|
||||||
|
if (isset($HTTP_SERVER_VARS['HTTP_AUTHORIZATION'])) {
|
||||||
|
$HTTP_AUTHORIZATION = $HTTP_SERVER_VARS['HTTP_AUTHORIZATION'];
|
||||||
|
}
|
||||||
} // end if
|
} // end if
|
||||||
|
|
||||||
// Securety fix: disallow accessing serious server files via "?goto="
|
// Security fix: disallow accessing serious server files via "?goto="
|
||||||
if (isset($goto) && strpos(' ' . $goto, '/') > 0 && substr($goto, 0, 2) != './') {
|
if (isset($goto) && strpos(' ' . $goto, '/') > 0 && substr($goto, 0, 2) != './') {
|
||||||
unset($goto);
|
unset($goto);
|
||||||
} // end if
|
} // end if
|
||||||
|
Reference in New Issue
Block a user