Modified example for mod_rewrite to not add Authorization header if it is not set in the request

This commit is contained in:
Even André Fiskvik 2012-05-22 14:38:37 +02:00
parent 517ae43fe9
commit 0935964b29

View File

@ -44,11 +44,13 @@ class ServerBag extends ParameterBag
} else { } else {
/* /*
* php-cgi under Apache does not pass HTTP Basic user/pass to PHP by default * php-cgi under Apache does not pass HTTP Basic user/pass to PHP by default
* For this workaround to work, add this line to your .htaccess file: * For this workaround to work, add these lines to your .htaccess file:
* RewriteCond %{HTTP:Authorization} ^(.+)$
* RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] * RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
* *
* A sample .htaccess file: * A sample .htaccess file:
* RewriteEngine On * RewriteEngine On
* RewriteCond %{HTTP:Authorization} ^(.+)$
* RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] * RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
* RewriteCond %{REQUEST_FILENAME} !-f * RewriteCond %{REQUEST_FILENAME} !-f
* RewriteRule ^(.*)$ app.php [QSA,L] * RewriteRule ^(.*)$ app.php [QSA,L]