On Sat, 11 May 2002 21:21:27 -0400, you wrote:
>Trying to get accustomed to PHP 4.2.0 and PHP's preference for
>register_globals off, I have register_globals off.
>
>However, when I try to use $PHP_AUTH_USER and $PHP_AUTH_PW, my script fails
>(attempting to validate username and password credectials against MySQL...no
>error message and my login failure message does not show up, even after
>three unsuccessful challenge responses.
>
>When I set register_globals on, I am successful in gaining authorization
>(ie, the header('WWW-Auth....' is correct, the script works, the MySQL
>connection works and the query works).
>
>How, then do I define th $PHP_AUTH_USER and $PHP_AUTH_PW variables up front
>with register_globals off?They are in the $_SERVER superglobal. Change your references to them to... $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW'] You might want to read up on what register_globals actually does since it's clear that you don't fully understand it yet: http://www.php.net/manual/en/security.registerglobals.php -- Stuart -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
