Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:55301
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain negyesi.net from 209.85.216.170 cause and error)
MIME-Version: 1.0
Date: Wed, 7 Sep 2011 23:49:23 -0700
Message-ID: <CAOfzkkxYakK5p3bqZ5Z5wr-yxy+xga=1H+ZLpgT0Qo6euNRrhw@mail.gmail.com>
To: internals@lists.php.net
Content-Type: text/plain; charset=ISO-8859-1
Subject: Are all HTTP headers registered in SERVER?
From: karoly@negyesi.net (Karoly Negyesi)

Hi,

It seems to be the case but this is not documented anywhere on
php.net. Instead
http://php.net/manual/en/function.apache-request-headers.php say "You
can also get at the value of the common CGI variables by reading them
from the environment".

This comment http://www.php.net/manual/en/reserved.variables.server.php#87195
from 2008 concurs. Zend and Symphony both seems to be happy to read
even X- custom headers from SERVER without bothering with
apace_request_headers() or anything like that.

I have tried to read some SAPI code and while most of them are a bit
obscure, to the best of my understanding at least nsapi.c copies every
request header (ok, there are very few exceptions, but certainly
doesnt care about custom ones).

So... is this official enough that I can amend the
reserved.variables.server.php and the
function.apache-request-headers.php pages stating that every HTTP
header including custom ones can be found In SERVER  (with the odd
security exceptions)?

Thanks

Karoly Negyesi