Yes, documentation says : "If safe mode is enabled, the uid of the script is added to the realm part of the WWW-Authenticate header. " and second : "The HTTP Authentication hooks in PHP are only available when it is running as an Apache module and is hence not available in the CGI version" and also : "Also note that until PHP 4.3.3, HTTP Authentication did not work using Microsoft's IIS server with the CGI version of PHP due to a limitation of IIS ..." This seems to be a minor bug in PHP concept... PHP Authentication (Basic) works when : 1. PHP is running as apache module 2. safe_mode=off or safe_mode=on, but external authentication in Apache is disabled ("PHP uses the presence of an AuthType directive to determine whether external authentication is in effect") At this time I do not now, how to help you ? Try report it to bugs ? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php