diff -Naur php-5.4.6.orig/sapi/cgi/cgi_main.c php-5.4.6/sapi/cgi/cgi_main.c --- php-5.4.6.orig/sapi/cgi/cgi_main.c 2012-08-15 06:26:05.000000000 +0200 +++ php-5.4.6/sapi/cgi/cgi_main.c 2012-10-03 16:29:50.000000000 +0200 @@ -1419,6 +1419,8 @@ /* The CGI RFC allows servers to pass on unvalidated Authorization data */ auth = CGI_GETENV("HTTP_AUTHORIZATION"); + if (auth == NULL) + auth = CGI_GETENV("Authorization"); php_handle_auth_data(auth TSRMLS_CC); } } diff -Naur php-5.4.6.orig/sapi/fpm/fpm/fpm_main.c php-5.4.6/sapi/fpm/fpm/fpm_main.c --- php-5.4.6.orig/sapi/fpm/fpm/fpm_main.c 2012-08-15 06:26:05.000000000 +0200 +++ php-5.4.6/sapi/fpm/fpm/fpm_main.c 2012-10-03 16:30:06.000000000 +0200 @@ -1358,6 +1358,8 @@ /* The CGI RFC allows servers to pass on unvalidated Authorization data */ auth = sapi_cgibin_getenv("HTTP_AUTHORIZATION", sizeof("HTTP_AUTHORIZATION") - 1 TSRMLS_CC); + if (auth == NULL) + auth = sapi_cgibin_getenv("Authorization", sizeof("Authorization") - 1 TSRMLS_CC); php_handle_auth_data(auth TSRMLS_CC); }