--- php-5.3.2.orig/sapi/cgi/cgi_main.c 2007-01-29 20:36:01.000000000 +0100 +++ sapi/cgi/cgi_main.c 2007-04-15 15:02:31.000000000 +0200 @@ -1350,6 +1350,8 @@ /* The CGI RFC allows servers to pass on unvalidated Authorization data */ auth = sapi_cgibin_getenv("HTTP_AUTHORIZATION", sizeof("HTTP_AUTHORIZATION")-1 TSRMLS_CC); + if (auth == NULL) + auth = sapi_cgibin_getenv("Authorization", sizeof("Authorization")-1 TSRMLS_CC); php_handle_auth_data(auth TSRMLS_CC); } }