[wp-trac] [WordPress Trac] #47245: Site Health Check: Fails for sites with basic auth and php-fpm

[WordPress Trac]

#47245: Site Health Check: Fails for sites with basic auth and php-fpm
--------------------------+-----------------------------
 Reporter:  stephankn     |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  5.2
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Situation is PHP running as CGI (for HTTP/2) and admin interface is
 protected by basic auth.

 Authentication is not possible, as the password is not available in the
 environment:

 https://core.trac.wordpress.org/browser/trunk/src/wp-admin/includes/class-
 wp-site-health-auto-updates.php?rev=45275#L100

 the reported conclusion "A plugin has prevented updates by disabling
 wp_version_check()" is wrong.

 Code should check at least AUTH_TYPE for "Basic" or GATEWAY_INTERFACE for
 "CGI/1.1" to output a proper message. Providing a link to the site-check
 URL with the instruction to click ans look for the result "yes" in the
 browser would have also helped.

 maybe this check could be done on client-side by javascript in the
 browser?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47245>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform