php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #43633 backslashes in session save path are not escaped in error message
Submitted: 2007-12-19 07:02 UTC Modified: 2008-01-29 00:10 UTC
From: php-qa at sebastianmendel dot de Assigned:
Status: Not a bug Package: Session related
PHP Version: 5.3CVS-2007-12-19 (snap) OS: Windows
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: php-qa at sebastianmendel dot de
New email:
PHP Version: OS:

 

 [2007-12-19 07:02 UTC] php-qa at sebastianmendel dot de 
Description:
------------
backslashes in the session.save_path are not properly escaped when printed out in an error message

Reproduce code:
---------------
php.ini:

session.save_path = "C:\temp"

continue a session without valid session file

Expected result:
----------------
session_start() : open(C:\temp\sess_ifj79uququ2tu2gnhu8ol2cs81, O_RDWR) failed: Invalid argument (22)

Actual result:
--------------
session_start() : open(C: emp\sess_ifj79uququ2tu2gnhu8ol2cs81, O_RDWR) failed: Invalid argument (22)

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2008-01-29 00:10 UTC] tony2001@php.net 
Printing "C:\" doesn't require any escaping.
It's you who needs to escape the slashes when you enter them in your php.ini.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Tue Jul 22 13:00:02 2025 UTC