(cp 3da45eaba) fixes #2460 switch api auth header to X-PIWIGO-API

Replaces usage of the Authorization header with X-PIWIGO-API for API key authentication. This improves consistency and may address issues with standard Authorization header handling.
This commit is contained in:
Linty
2025-12-01 18:13:34 +01:00
parent 111cb62b0f
commit edc255d727
3 changed files with 5 additions and 5 deletions
+3 -3
View File
@@ -59,12 +59,12 @@ if (isset($_GET['auth']))
// HTTP_AUTHORIZATION api_key
if (
defined('IN_WS')
and isset($_SERVER['HTTP_AUTHORIZATION'])
and !empty($_SERVER['HTTP_AUTHORIZATION'])
and isset($_SERVER['HTTP_X_PIWIGO_API'])
and !empty($_SERVER['HTTP_X_PIWIGO_API'])
and isset($_REQUEST['method'])
)
{
$auth_header = pwg_db_real_escape_string($_SERVER['HTTP_AUTHORIZATION']) ?? null;
$auth_header = pwg_db_real_escape_string($_SERVER['HTTP_X_PIWIGO_API']) ?? null;
if ($auth_header)
{