How to read custom Headers of incoming HTTP POST

[rocksolidhq]

Hey All,

i'm receiving some data from a remote source and they are passing on custom Headers with their HTTP POST data.

eg.
Host😃OMAIN.COM
Auth-MID:700000200109
Auth-TID:002
Auth-User:USER01
Auth-Password😛ASSW0RD
Stateless-Transaction:true
Header-Record:false

It seems easy enough to pull the standard header values like Host but i cannot seem to get at the custom ones.

Can anyone tell me how i would get them?

$SERVER['HTTP_HOST'] retrieves "DOMAIN.COM" but $SERVER['Auth-MID'] retrieves nothing.

thanks in advance,
dean

[NogDog]

If running under Apache, you could see if they show up in [man]apache_get_headers/man, perhaps.

[rocksolidhq]

Hey NogDog,

Oh yeah, i forgot to mention the environment IIS6.0 with PHP 5.2.1.

Any chance there's an equivalent for IIS?

thanks,
dean

[HalfaBee]

Not sure if this helps, but it might.

http://au2.php.net/manual/en/book.http.php

[rocksolidhq]

Hey HalfaBee,

i even looked there but it seemed a bit much. Thanks, i think you are onto something. i see the function HttpRequest::getHeaders() which looks like it should do the trick. i have installed the PECL and activated it but still i am stumped.

The problem is that i cannot find any reference on how to use it save the bit below.

branches/dev/core/net/HttpRequest.class.php
r372 r468 322322323323324 324 325 326 327 328 329 330325331326332
$headers = HttpRequest::getHeaders();
$headers = array_change_key_case($headers, CASE_LOWER);
return (array_key_exists('x-requested-with', $headers));
if (array_key_exists('x-requested-with', $headers))
return TRUE;
if (is_array($FILES)) {
$params = array_change_key_case($POST, CASE_LOWER);
return (array_key_exists('x-requested-with', $params));
}
return FALSE;
}

i have tried just

$headers = HttpRequest::getHeaders();
print $headers[1];

and several variations but it not only returns nothing. it causes the script to fail. How the devil do i use this thing?

any thoughts?

thanks,
dean

[Weedpacket]

What else is there in $SERVER? print_r() and see. Notice that the Host header is in HTTP_HOST, and similar namespacing tweaks are applied to the other standard headers (because, after all, what would happen if someone sent a custom "Document-root" header?). So a Stateless-Transaction header would be in $SERVER['HTTP_STATELESS_TRANSACTION'].

On the strength of this guess I just tried this out (on Apache, admittedly):
Server:

<?php print_r($_SERVER); ?>

Client:

<?php
$fp = fsockopen("localhost", 80, $errno, $errstr, 30);
if (!$fp) {
    echo "$errstr ($errno)<br />\n";
} else {
    $out = "GET /test.php HTTP/1.1\r\n";
    $out .= "Host: www.example.com\r\n";
	$out .= "Mumble: foo\r\n";
    $out .= "Connection: Close\r\n\r\n";

fwrite($fp, $out);
while (!feof($fp)) {
    echo fgets($fp, 128);
}
fclose($fp);
}
?>

And the result included the lines

    [HTTP_HOST] => www.example.com
    [HTTP_MUMBLE] => foo
    [HTTP_CONNECTION] => Close

[rocksolidhq]

Hey Weedpacket,

it took me a few reads but now i see what you are getting at. I should be looking for HTTP_AUTH-MID rather than Auth-MID.

Let me give that a try and see what happens.

i'll let you know,
thanks,
dean

[Weedpacket]

More likely HTTP_AUTH_MID, but like I said, if it's in the $_SERVER array at all you'll find it with print_r().

[rocksolidhq]

Hey Weedpacket,

AHA!! Brilliant! It seems i'm a bit slow on the uptake but now i get it. It took me a few minutes to figure out how to capture the print_r output to a variable so that i can dump it to a capture file but i've got it now and i'm sure that this will solve my problem

Once again thanks a million.

For those searching i captured the $_SERVER array in a nice string variable with the following:

$headerString = print_r($_SERVER, true); //the "true" tells print_r to return the output instead of displaying it.

thanks,
dean