Hi,

It seems to be the case but this is not documented anywhere on
php.net. Instead
http://php.net/manual/en/function.apache-request-headers.php say "You
can also get at the value of the common CGI variables by reading them
from the environment".

This comment http://www.php.net/manual/en/reserved.variables.server.php#87195
from 2008 concurs. Zend and Symphony both seems to be happy to read
even X- custom headers from SERVER without bothering with
apace_request_headers() or anything like that.

I have tried to read some SAPI code and while most of them are a bit
obscure, to the best of my understanding at least nsapi.c copies every
request header (ok, there are very few exceptions, but certainly
doesnt care about custom ones).

So... is this official enough that I can amend the
reserved.variables.server.php and the
function.apache-request-headers.php pages stating that every HTTP
header including custom ones can be found In SERVER  (with the odd
security exceptions)?

Thanks

Karoly Negyesi

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to