I.1.0- HTTP Server Variables

Created by Brendan Doss.
Last Updated by Sarah Welna.

Public Categorized as Appendix I.

Not yet tagged

I.2.0- Language Codes Supported by Microsoft Internet Explorer 4/5 >>

HTTP Server Variables

Variable	Meaning
ALL_HTTP	Complete set of HTTP Headers. In this variable, the headers have been capitalized and prefixed with HTTP_.
ALL_RAW	Complete set of HTTP Headers. Similar to ALL_HTTP, but the header names are left unchanged.
APPL_MD_PATH	Path in the Metabase for the web application (the Metabase contains the IIS4 configuration).
APPL_PHYSICAL_PATH	Physical path of the web application, i.e. the location on disk.
AUTH_PASSWORD	User's password, if the user has been authenticated using Basic Authentication.
AUTH_TYPE	Authentication type, if the user has been authenticated. Set to Basic for Basic Authentication or NTLM for Windows NT Challenge/Response Authentication.
AUTH_USER	User's name, if the user has been authenticated.
CERT_COOKIE	Unique identifier for client certificate.
CERT_FLAGS	Flags: bit 0 is set if client certificate is present; bit 1 is set if the certificate authority that issued the certificate is not recognized.
CERT_ISSUER	Certificate issuer, from the Issuer field in the client certificate.
CERT_KEYSIZE	Number of bits used to encrypt the secure channel session.
CERT_SECRETKEYSIZE	Number of bits in the server certificate's private key.

Variable	Meaning
CERT_SERIALNUMBER	Serial number of certificate allocated by issuer.
CERT_SERVER_ISSUER	Certificate issuer, from the Issuer field in the server certificate.
CERT_SERVER_SUBJECT	Certificate owner, from the Subject field in the server certificate.
CERT_SUBJECT	Certificate owner, from the Subject field in the client certificate.
CONTENT_LENGTH	Number of bytes sent by the client.
CONTENT_TYPE	Type of data in HTTP Request.
GATEWAY_INTERFACE	Version of the CGI gateway specification implemented.
HTTP_headername	See "HTTP Headers" below
HTTPS	ON if a secure channel is used; OFF otherwise
HTTPS_KEYSIZE	Number of bits used to encrypt the secure channel session.
HTTPS_SECRETKEYSIZE	Number of bits in the server certificate's private key.
HTTPS_SERVER_ISSUER	Certificate issuer, from the Issuer field in the server certificate.
HTTPS_SERVER_SUBJECT	Certificate owner, from the Subject field in the server certificate.
INSTANCE_ID	Identifies the instance of the web server in the Metabase.
INSTANCE_META_PATH	Path in the Metabase for the IIS instance.
LOCAL_ADDR	IP address on the server that received the HTTP request.
LOGON_USER	User's Windows NT account name, if the user has been authenticated.
PATH_INFO	The part of the URL after the server name but before any query string.
PATH_TRANSLATED	Value of PATH_INFO with any virtual path converted to a physical directory name.
QUERY_STRING	Information following the question mark (?) in the URL string.
REMOTE_ADDR	IP address of the client that issued the HTTP request.
REMOTE_HOST	Hostname (if known) of the client that issued the HTTP request.

Variable	Meaning
REMOTE_USER	User's name, if the user has been authenticated. This will be the name released from the client and will not be affected by any ISAPI authentication filters.
REQUEST_METHOD	Type of HTTP Request, defines how the payload is carried, i.e. GET, POST or PUT
SCRIPT_NAME	Virtual pathname to the script or application being executed.
SERVER_NAME	Hostname or IP address of server.
SERVER_PORT	TCP/IP port number on the server that received the HTTP request.
SERVER_PORT_SECURE	Set to 1 if the HTTP Request is on an encrypted port; otherwise set to 0.
SERVER_PROTOCOL	Protocol name and version (usually HTTP/1.1) that the software on the server and the client are using to satisfy the information request.
SERVER_SOFTWARE	Name and version of the server software that is handling the information request.
URL	The part of the URL after the server name but before any query string.

HTTP Headers

The HTTP Request includes a number of items on information about the request and the capabilities of the client; these items are name / value pairs and are known as HTTP Headers. Any of the HTTP Headers that are not parsed into one of the variables listed above can be obtained using the server variable name HTTP_headername, where headername is the name of the header item. Commonly used examples are:

Variable	Meaning
HTTP_ACCEPT	List of the MIME data types that the client can accept.
HTTP_ACCEPT_ENCODING	List of encoding types that the by client can accept.
HTTP_ACCEPT_LANGUAGE	List of the human languages that the client prefers
HTTP_CONNECTION	Type of connection
HTTP_USER_AGENT	Client software information, usually consisting of the browser version, plus the operating system, plus the browser type
HTTP_REFERER	URL of the page containing the link used to get to this page
HTTP_COOKIE	Cookies sent from the client's browser