Hello Roman, yes if safe_mode=on then Authorization header is hidden from phpinfo() and apache_request_headers(), but variables $_SERVER["PHP_AUTH_USER"] and "PHP_AUTH_PW" are set , when Basic authorization is used ! (it works in my configuration of Apache and PHP) Problem may be in Apache . When directory (where requested file is) is protected by Apache authentication, then $_SERVER variables are not set. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php