diff --git a/src/Boot.php b/src/Boot.php
index <HASH>..<HASH> 100755
--- a/src/Boot.php
+++ b/src/Boot.php
@@ -146,7 +146,10 @@ if (empty($_SESSION['__session_name_validated'])) {
 
 // Http auth for PHP-CGI mode
 if (isset($_SERVER['HTTP_AUTHORIZATION']) && !isset($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW'])) {
-    list($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']) = explode(':', base64_decode(substr($_SERVER['HTTP_AUTHORIZATION'], 6)));
+    $tmp = explode(':', base64_decode(substr($_SERVER['HTTP_AUTHORIZATION'], 6)));
+    if (isset($tmp[1])) {
+        list($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']) = explode(':', base64_decode(substr($_SERVER['HTTP_AUTHORIZATION'], 6)));
+    }
 }
 
 // Ini with required keys
HTTP auth for PHP-CGI fix for servers without it