title: PHP CURLOPT_HTTPHEADER won't send "Authorization"
body: <p>As a minimal test case, with PHP Version 5.6.31, cURL 7.54.0 :</p>
  
  <pre><code>&lt;?php
  
  $headers = array('Authorization: B', 'c : d');
  $ch = curl_init("https://ipandheaders.com");
  curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
  curl_setopt($ch, CURLOPT_VERBOSE, true);
  curl_exec($ch);
  curl_close ($ch);
  
  ?&gt;
  </code></pre>
  
  <p>That site reflects the headers sent:</p>
  
  <pre><code>Accept: */*
  C: d
  Host: ipandheaders.com
  </code></pre>
  
  <p>If I deliberately misspell it as:</p>
  
  <pre><code>$headers = array('Authorizationx: B', 'c : d');
  </code></pre>
  
  <p>The result is</p>
  
  <pre><code>Accept: */*
  Authorizationx: B
  C: d
  Host: ipandheaders.com
  </code></pre>
  
  <p>or</p>
  
  <pre><code>$headers = array('Authorizatio: B', 'c : d');
  </code></pre>
  
  <p>gives</p>
  
  <pre><code>Accept: */*
  Authorizatio: B
  C: d
  Host: ipandheaders.com
  </code></pre>
  
  <p>Using a more realistic header (with a fake token)</p>
  
  <pre><code>$headers = array('Authorization: Bearer JHG56HJGOJ8JH876F', 'c : d');
  </code></pre>
  
  <p>doesn't help.</p>
  
  <pre><code>Accept: */*
  C: d
  Host: ipandheaders.com
  </code></pre>
  
  <p>The error log shows no errors. </p>
  
  <p>My approach seems to have worked here:
  <a href="https://stackoverflow.com/questions/12331224/how-to-include-authorization-header-in-curl-post-http-request-in-php">How to include Authorization header in cURL POST HTTP Request in PHP?</a>
  But that was 5 years ago. Has something changed?</p>
  
  <p>I tried POSTing</p>
  
  <pre><code>curl_setopt($ch, CURLOPT_POST, 1);
  </code></pre>
  
  <p>but get a 403 Forbidden error for some seemingly unrelated reason, so I don't know the outcome with POST.</p>
  
  <p>Does PHP only allow an Authorization header in a POST? I can do what I want with Python 'request' using GET without problem.</p>
  
  <p>If PHP's cURL extension is deliberately suppressing any Authorization header, I don't see that revealed at <a href="http://php.net/manual/en/function.curl-setopt.php" rel="nofollow noreferrer">http://php.net/manual/en/function.curl-setopt.php</a> though a comment there by <em>tychay</em> seems to say that is so.</p>