PHP :: Bug #44030 :: Lack of validation of input parameters

Bug #44030

Lack of validation of input parameters

Submitted:

2008-02-03 09:46 UTC

Modified:

2008-03-19 11:47 UTC

Votes:	1
Avg. Score:	5.0 ± 0.0
Reproduced:	1 of 1 (100.0%)
Same Version:	1 (100.0%)
Same OS:	1 (100.0%)

From:

weirdan at gmail dot com

Assigned:

bjori (profile)

Status:

Closed

Package:

Website problem

PHP Version:

Irrelevant

OS:

Irrelevant

Private report:

CVE-ID:

None

View Developer Edit

[2008-02-03 09:46 UTC] weirdan at gmail dot com

Description:
------------
When visiting http://www.php.net/results.php?q[]=1&l=ru&p=wholesite it throws errors (because 'q' GET param was passed as array):

Warning: urlencode() expects parameter 1 to be string, array given in /home/local/Web/sites/www.php.net/results.php on line 18

Warning: Cannot modify header information - headers already sent by (output started at /home/local/Web/sites/www.php.net/results.php:18) in /home/local/Web/sites/www.php.net/include/layout.inc on line 81

Warning: Cannot modify header information - headers already sent by (output started at /home/local/Web/sites/www.php.net/results.php:18) in /home/local/Web/sites/www.php.net/include/layout.inc on line 82

Reproduce code:
---------------
Visit the provided link.

Expected result:
----------------
No errors shown. Perhaps something along the lines of 'Internal error' is shown, footer is present.

Actual result:
--------------
Errors are shown. Footer is not present.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

[2008-03-19 11:47 UTC] bjori@php.net

This bug has been fixed in CVS. Since the websites are not directly
updated from the CVS server, the fix might need some time to spread
across the globe to all mirror sites, including PHP.net itself.

Thank you for the report, and for helping us make PHP.net better.

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2026 The PHP Group All rights reserved.	Last updated: Fri Jun 19 06:00:02 2026 UTC