$_SERVER['PHP_AUTH_USER'] empty

Question

EDIT: Problem isn't with PHP, I was using cURL wrong. Updated question to show problem I'm having with XHR.

Summary: Can't get username to PHP using XHR:

var xhr = Ti.Network.createHTTPClient();
xhr.timeout = 1000000;
xhr.open("GET","http://myapi.com/test", false, 'user', 'pass');
xhr.send();

And in my PHP script, I'm trying to access the username with this:

<?php print $_SERVER['PHP_AUTH_USER']; ?>

No matter what I try it's always empty.

Is there some PHP setting that I need to configure?

More info: PHP Version 5.2.13, Apache, MAMP

Did you try sending the WWW-Authenticate header? See the example at php.net/manual/en/features.http-auth.php — Mark Eirich
– Mark Eirich, Commented Feb 18, 2011 at 2:27
Have you checked to see if $_SERVER['HTTP_AUTHORIZATION'] is being set? — Mark Eirich
– Mark Eirich, Commented Feb 18, 2011 at 2:34
You also have tried a normal request, to verify that your XHR is working at all, right? I don't see you calling xhr.send() — Mark Eirich
– Mark Eirich, Commented Feb 18, 2011 at 2:49
Closing out this question for a better version here: stackoverflow.com/questions/5037405/… — Ian McIntyre Silber
– Ian McIntyre Silber, Commented Feb 18, 2011 at 3:50

Mark Eirich · Accepted Answer · 2011-02-18 03:17:29Z

2

<script src="http://www.webtoolkit.info/djs/webtoolkit.base64.js"></script>
<script>
var xhr = Ti.Network.createHTTPClient();
xhr.timeout = 1000000;
xhr.onreadystatechange = function() {
    if (xhr.readyState != 4) return;
    alert('Server said: '+xhr.responseText);
};
xhr.open('GET', 'http://myapi.com/test', false);
xhr.setRequestHeader('Authorization', 'Basic ' + Base64.encode('user:pass') );
xhr.send('');
</script>

(For the sake of courtesy, you should download webtoolkit.base64.js and serve it from your own server.)

Keep in mind that you can't do cross-domain requests with XHR; your JavaScript and PHP have to be served from the same domain.

answered Feb 18, 2011 at 3:17

Mark Eirich

10.1k2 gold badges27 silver badges27 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

shasi kanth Over a year ago

$_SERVER['PHP_AUTH_USER'] can be empty if you are running php as CGI. Refer besthostratings.com/articles/http-auth-php-cgi.html

Mark Eirich Over a year ago

@dskanth: Yeah, I also saw that in the comments in the PHP docs. But apparently that wasn't the problem in this case. Personally, I think using Basic Auth is usually a poor strategy - a security risk, and generally causes extra headaches here and there.

Collectives™ on Stack Overflow

$_SERVER['PHP_AUTH_USER'] empty

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related