Download | Plain Text | No Line Numbers 

  1. diff -Naur php-5.4.6.orig/sapi/cgi/cgi_main.c php-5.4.6/sapi/cgi/cgi_main.c
  2. --- php-5.4.6.orig/sapi/cgi/cgi_main.c	2012-08-15 06:26:05.000000000 +0200
  3. +++ php-5.4.6/sapi/cgi/cgi_main.c	2012-10-03 16:29:50.000000000 +0200
  4. @@ -1419,6 +1419,8 @@
  5.  
  6.  		/* The CGI RFC allows servers to pass on unvalidated Authorization data */
  7.  		auth = CGI_GETENV("HTTP_AUTHORIZATION");
  8. +		if (auth == NULL)
  9. +			auth = CGI_GETENV("Authorization");
  10.  		php_handle_auth_data(auth TSRMLS_CC);
  11.  	}
  12.  }
  13. diff -Naur php-5.4.6.orig/sapi/fpm/fpm/fpm_main.c php-5.4.6/sapi/fpm/fpm/fpm_main.c
  14. --- php-5.4.6.orig/sapi/fpm/fpm/fpm_main.c	2012-08-15 06:26:05.000000000 +0200
  15. +++ php-5.4.6/sapi/fpm/fpm/fpm_main.c	2012-10-03 16:30:06.000000000 +0200
  16. @@ -1358,6 +1358,8 @@
  17.  
  18.  		/* The CGI RFC allows servers to pass on unvalidated Authorization data */
  19.  		auth = sapi_cgibin_getenv("HTTP_AUTHORIZATION", sizeof("HTTP_AUTHORIZATION") - 1 TSRMLS_CC);
  20. +		if (auth == NULL)
  21. +			auth = sapi_cgibin_getenv("Authorization", sizeof("Authorization") - 1 TSRMLS_CC);
  22.  		php_handle_auth_data(auth TSRMLS_CC);
  23.  	}
  24.  
  25.