IIS and HTTP authentication

This commit is contained in:
Marc Delisle
2003-08-10 20:41:08 +00:00
parent 678cfa2693
commit c354643805
2 changed files with 8 additions and 1 deletions

View File

@@ -8,6 +8,7 @@ $Source$
2003-08-10 Marc Delisle <lem9@users.sourceforge.net>
* server_status.php3: bug 786331, a 100,00% not internationalized,
and align values for "More status variables"
* libraries/grab_globals.lib.php3: probable fix for IIS HTTP auth bug
2003-08-09 Marc Delisle <lem9@users.sourceforge.net>
* libraries/auth/cookie.auth.lib.php3: Cookies required message

View File

@@ -63,6 +63,9 @@ if (!defined('PMA_GRAB_GLOBALS_INCLUDED')) {
if (isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])) {
$HTTP_ACCEPT_LANGUAGE = $_SERVER['HTTP_ACCEPT_LANGUAGE'];
}
if (isset($_SERVER['HTTP_AUTHORIZATION'])) {
$HTTP_AUTHORIZATION = $_SERVER['HTTP_AUTHORIZATION'];
}
} else if (!empty($HTTP_SERVER_VARS)) {
if (isset($HTTP_SERVER_VARS['PHP_SELF'])) {
$PHP_SELF = $HTTP_SERVER_VARS['PHP_SELF'];
@@ -70,9 +73,12 @@ if (!defined('PMA_GRAB_GLOBALS_INCLUDED')) {
if (isset($HTTP_SERVER_VARS['HTTP_ACCEPT_LANGUAGE'])) {
$HTTP_ACCEPT_LANGUAGE = $HTTP_SERVER_VARS['HTTP_ACCEPT_LANGUAGE'];
}
if (isset($HTTP_SERVER_VARS['HTTP_AUTHORIZATION'])) {
$HTTP_AUTHORIZATION = $HTTP_SERVER_VARS['HTTP_AUTHORIZATION'];
}
} // end if
// Securety fix: disallow accessing serious server files via "?goto="
// Security fix: disallow accessing serious server files via "?goto="
if (isset($goto) && strpos(' ' . $goto, '/') > 0 && substr($goto, 0, 2) != './') {
unset($goto);
} // end if