Apache strips down “Authorization” header

Discussion in 'ISPConfig 3 Priority Support' started by aldo, Aug 21, 2021 at 3:41 PM.

  1. aldo

    aldo Member HowtoForge Supporter

    I noticed that PHP global variables PHP_AUTH_USER, PHP_AUTH_PW, HTTP_AUTHORIZATION were not set while were specified in the HTTP GET / POST.
    I added:
    SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
    in ISPConfig 3 -> Website -> Options -> Apache Directives
    and it seems solved.
    Is that the right way?
    Why was the "Authorization" removed?

Share This Page