Download | Plain Text | Line Numbers


diff -Naur php-5.4.6.orig/sapi/cgi/cgi_main.c php-5.4.6/sapi/cgi/cgi_main.c
--- php-5.4.6.orig/sapi/cgi/cgi_main.c	2012-08-15 06:26:05.000000000 +0200
+++ php-5.4.6/sapi/cgi/cgi_main.c	2012-10-03 16:29:50.000000000 +0200
@@ -1419,6 +1419,8 @@
 
 		/* The CGI RFC allows servers to pass on unvalidated Authorization data */
 		auth = CGI_GETENV("HTTP_AUTHORIZATION");
+		if (auth == NULL)
+			auth = CGI_GETENV("Authorization");
 		php_handle_auth_data(auth TSRMLS_CC);
 	}
 }
diff -Naur php-5.4.6.orig/sapi/fpm/fpm/fpm_main.c php-5.4.6/sapi/fpm/fpm/fpm_main.c
--- php-5.4.6.orig/sapi/fpm/fpm/fpm_main.c	2012-08-15 06:26:05.000000000 +0200
+++ php-5.4.6/sapi/fpm/fpm/fpm_main.c	2012-10-03 16:30:06.000000000 +0200
@@ -1358,6 +1358,8 @@
 
 		/* The CGI RFC allows servers to pass on unvalidated Authorization data */
 		auth = sapi_cgibin_getenv("HTTP_AUTHORIZATION", sizeof("HTTP_AUTHORIZATION") - 1 TSRMLS_CC);
+		if (auth == NULL)
+			auth = sapi_cgibin_getenv("Authorization", sizeof("Authorization") - 1 TSRMLS_CC);
 		php_handle_auth_data(auth TSRMLS_CC);
 	}