Re: [PHP] Authorization header is missing from apache_request_headers() array

2005-03-21 Thread LacaK
Richard Lynch wrote: I could be *WAY* wrong, but I thought nobody ever bothered with Digest Auth because, e. It's not better/safer than HTTP Auth? "HTTP Basic Authorization" send login:password in clear text (only base64 encoded) so it can be 'eavesdropped' in "HTTP Digest Authorization" p

Re: [PHP] Authorization header is missing from apache_request_headers() array

2005-03-21 Thread Richard Lynch
On Fri, March 18, 2005 6:24 am, LacaK said: > When I try to use "HTTP Digest Authorization" using code like : > > Header( "HTTP/1.0 401 Unauthorized"); > Header( "WWW-Authenticate: Digest realm=\"www.myrealm.com\", > opaque=\"opaque\", nonce=\"nonce\", stale=\"false\", qop=\"auth\""); > > brows

[PHP] Authorization header is missing from apache_request_headers() array

2005-03-20 Thread LacaK
Hello, When I try to use "HTTP Digest Authorization" using code like : Header( "HTTP/1.0 401 Unauthorized"); Header( "WWW-Authenticate: Digest realm=\"www.myrealm.com\", opaque=\"opaque\", nonce=\"nonce\", stale=\"false\", qop=\"auth\""); browser returns in HTTP request Authorization header