php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #30220 trans_sid doesn't add PHPSESSID to javascript function windows.open()
Submitted: 2004-09-24 14:52 UTC Modified: 2004-09-28 15:59 UTC
Votes:3
Avg. Score:3.3 ± 1.2
Reproduced:1 of 2 (50.0%)
Same Version:0 (0.0%)
Same OS:0 (0.0%)
From: sambukkaa at hotmail dot com Assigned:
Status: Wont fix Package: Session related
PHP Version: 5.0.1 OS: win2k Advanced
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: sambukkaa at hotmail dot com
New email:
PHP Version: OS:

 

 [2004-09-24 14:52 UTC] sambukkaa at hotmail dot com
Description:
------------
in php.ini file
When trans_sid=1

The url rewriter doesn't recognize the javascript function windows.open();

if for example a popup function such as :

pop=open("somepage.php","window","toolbar=no,width=800,height=800");to transfere the session id, one has to add it manually like this:

pop=open("somepage.php?PHPSESSID=<?=session_id()>","window","toolbar=no,width=800,height=800");}

Yes, there is an option in php.ini file named "url_rewriter.tags" and as default it looks like this:

url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=,fieldset="

Unfortunately, there is nothing in documentations about how to add the javascript function "open" into it.
I have tried many keywords such as open, windows.open .... and none helped :(

It is not a bug this is only something missing in PHP 5.0.1.
This option was automatically working on versions ...3.32 I belive but please don't take me by words.

I was sure that this function works so I have never suspected it.
I have wasted 2 weeks to find it out.

This report is similar but bot identical to the bug report #22111: URL rewriter and Javascript
but function "windows.open" was not mentioned.


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-09-28 15:59 UTC] iliaa@php.net
Javascirpt is not supported as far as the  addition of session ids to urls goes.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Fri May 09 15:01:27 2025 UTC