php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #6123 Transparent Session ID (SID) miss substitution.
Submitted: 2000-08-12 09:38 UTC Modified: 2000-08-12 09:41 UTC
From: geoff at zone12 dot com Assigned:
Status: Closed Package: Session related
PHP Version: 4.0.1pl2 OS: Linux 2.2.10
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: geoff at zone12 dot com
New email:
PHP Version: OS:

 

 [2000-08-12 09:38 UTC] geoff at zone12 dot com 
the code:
<A HREF="/contact/info.php?ID=<? print "1"; ?>"> blah </A>
is morphed into:
<A HREF="/contact/info.php?ID=&PHPSESSID=d420a697e7b1a7af11007fac138a49a61"> blah </A>

On line 167 of "url_scanner.re" the pattern matching thing stops after it sees the second quote.. could this be what's happening?  (I guess the code's being substituted before the php stuff is removed.)

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-08-12 09:41 UTC] sterling@php.net 
Fixed in CVS.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Sun May 11 05:01:28 2025 UTC