@- Fixed bug with Apache which let PHP_AUTH_* variables to be set when

@  external basic auth mechanism was used. (Jani)

Fixes bugs: #16653, #14534, #14370

sapi/apache/mod_php4.c

@@ -403,7 +403,7 @@ static void init_request_info(TSRMLS_D)
 		authorization = table_get(r->headers_in, "Authorization");
 	}
 	if (authorization
-/*		&& !auth_type(r) */
+		&& !auth_type(r)
 		&& !strcasecmp(getword(r->pool, &authorization, ' '), "Basic")) {
 		tmp = uudecode(r->pool, authorization);
 		SG(request_info).auth_user = getword_nulls_nc(r->pool, &tmp, ':');