Incorrect HttpRequest->isXMLHttpRequest value in apache 2.4 #6010

pobidowski · 2014-03-20T13:10:06Z

According to http://stackoverflow.com/questions/18185366/header-names-with-underscores-ignored-in-php-5-5-1-apache-2-4-6 header "X_REQUESTED_HTTP" in Apache 2.4 is not available in $_SERVER variable. Therefore, the isXMLHttpRequest method from \Zend\Http\Request returns false which is incorrect value.

Ocramius · 2014-03-20T13:22:23Z

@pobidowski is there any replacement for it?

pobidowski · 2014-03-20T13:30:19Z

@Ocramius Yes, php function "apache_request_headers();" contains value of this header under key "X_REQUESTED_HTTP"

Martin-P · 2014-03-20T14:36:03Z

header "X_REQUESTED_HTTP" in Apache 2.4 is not available in $_SERVER variable

Zend\Http\Request does not use X_REQUESTED_HTTP. It uses X_REQUESTED_WITH, see file. Furthermore I use Apache 2.4.4 here and all works fine when I check if a request is an XMLHttpRequest:

if ($this->getRequest()->isXmlHttpRequest()) {
    // do stuff
}

To make sure this is not because of mod_access_compat module, I deactivated that module and restarted Apache. Still everything works fine.

pobidowski · 2014-03-20T15:08:47Z

Sorry, I mean "X_REQUESTED_WITH". I have Apache 2.4.6 (only mod_rewrite enabled) and it does not work properly.

Martin-P · 2014-03-22T16:02:41Z

I did some testing with Apache 2.4.9 and think this info can be useful.

The feature that is mentioned in the topic on Stack Overflow is about custom headers and does not seem to affect X_REQUESTED_WITH. When using apache_request_headers(), the header name is not uppercase X_REQUESTED_WITH with underscores, but mixed case: X-Requested-With with dashes. If it is really all uppercase with underscores in your situation this is also an inconsistancy.

$_SERVER variable

When using a custom header with name CUSTOM-HEADER-WITH-DASHES, the header can be found under HTTP_CUSTOM_HEADER_WITH_DASHES
When using a custom header with name CUSTOM_HEADER_WITH_UNDERSCORES it gets dropped, because of the underscores
Key HTTP_X_REQUESTED_WITH contains the value XMLHttpRequest

apache_request_headers()

When using a custom header with name CUSTOM-HEADER-WITH-DASHES, the header can be found under the exact same name: CUSTOM-HEADER-WITH-DASHES
When using a custom header with name CUSTOM_HEADER_WITH_UNDERSCORES, the header can be found under the exact same name: CUSTOM_HEADER_WITH_UNDERSCORES.
Key X-Requested-With contains the value XMLHttpRequest

Test script:

<?php
if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) and 'XMLHttpRequest' == $_SERVER['HTTP_X_REQUESTED_WITH']) {
    var_dump($_SERVER);
    echo '<hr />';
    var_dump(apache_request_headers());
    exit;
}
?>
<!doctype html>

<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <title>Apache ENV test</title>
    <script src="http://code.jquery.com/jquery-latest.min.js"></script>
    <script>
    //<![CDATA[
    $(function () {
        $('button').click(function () {
            $.ajax({
                type      : 'GET',
                url       :  '<?php echo htmlspecialchars($_SERVER['REQUEST_URI']); ?>',
                beforeSend: function (xhr) {
                    xhr.setRequestHeader('CUSTOM-HEADER-WITH-DASHES', 'Value for header with dashes');
                    xhr.setRequestHeader('CUSTOM_HEADER_WITH_UNDERSCORES', 'Value for header with underscores');
                },
                success   : function(data) {
                    $('#ajax-result').html(data);
                }
            });
        });
    });
    //]]>
    </script>
  </head>

  <body>
    <button>Click me!</button>
    <hr />
    <div id="ajax-result"></div>
  </body>
</html>

pobidowski · 2014-03-22T19:51:25Z

Thanks for Your explanation. It seems that I send this header with wrong name (uppercase with underscore version). It works fine until I have tested it on Apache 2.4.6.

GeeH · 2016-06-27T17:03:51Z

This issue has been closed as part of the bug migration program as outlined here - http://framework.zend.com/blog/2016-04-11-issue-closures.html

Ocramius added bug labels Apr 3, 2014

GeeH added the To Be Closed label Mar 5, 2016

GeeH closed this as completed Jun 27, 2016

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Incorrect HttpRequest->isXMLHttpRequest value in apache 2.4 #6010

Incorrect HttpRequest->isXMLHttpRequest value in apache 2.4 #6010

pobidowski commented Mar 20, 2014

Ocramius commented Mar 20, 2014

pobidowski commented Mar 20, 2014

Martin-P commented Mar 20, 2014

pobidowski commented Mar 20, 2014

Martin-P commented Mar 22, 2014

pobidowski commented Mar 22, 2014

GeeH commented Jun 27, 2016

Incorrect HttpRequest->isXMLHttpRequest value in apache 2.4 #6010

Incorrect HttpRequest->isXMLHttpRequest value in apache 2.4 #6010

Comments

pobidowski commented Mar 20, 2014

Ocramius commented Mar 20, 2014

pobidowski commented Mar 20, 2014

Martin-P commented Mar 20, 2014

pobidowski commented Mar 20, 2014

Martin-P commented Mar 22, 2014

pobidowski commented Mar 22, 2014

GeeH commented Jun 27, 2016