When Basic
is used for the Authorization
header, the authentication information is username:password
in Base64 encoding.
PHP only sets the PHP_AUTH_USER
and PHP_AUTH_PW
fields from the Authorization
field. The HTTP_X_USERNAME
and HTTP_X_PASSWORD
fields relate to the X-Username
and X-Password
headers (not) sent by the client, ie. PHP sets them if it gets them with the request.