Hello, my PHP is running as Apache module. if safe_mode=on function apache_request_headers() does not return Authorization headers so there is no possibilty to validate "HTTP Digest Authorization ..." if safe_mode=off all wotks OK. I send to browser : Header( "HTTP/1.0 401 Unauthorized"); Header( "WWW-Authenticate: Digest realm=\"www.myrealm.sk\", opaque=\"{$opaque}\", nonce=\"{$nonce}\", stale=\"{$stale}\", qop=\"auth\""); browser respond with HTTP header : Authorization: Digest ..... which is OK, but this header is not included in apache_request_headers() I thing, that is a bug ... or can anyone help ? Thank you LacaK. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php