mirror of
https://github.com/php/php-src.git
synced 2026-04-28 18:53:33 +02:00
This made no sense before. Hide Authorization in getallheaders() but
display it from phpinfo()? Ouch! @ Hide Authorization header from phpinfo() output in safe_mode (Rasmus)
This commit is contained in:
@@ -278,7 +278,7 @@ PHP_MINFO_FUNCTION(apache)
|
||||
env_arr = table_elts(r->headers_in);
|
||||
env = (table_entry *)env_arr->elts;
|
||||
for (i = 0; i < env_arr->nelts; ++i) {
|
||||
if (env[i].key) {
|
||||
if (env[i].key && (!PG(safe_mode) || (PG(safe_mode) && strncasecmp(env[i].key, "authorization", 13)))) {
|
||||
php_info_print_table_row(2, env[i].key, env[i].val);
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user