php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #6119 session key placed in URL in wrong location
Submitted: 2000-08-12 03:03 UTC Modified: 2000-08-12 03:09 UTC
From: dmspink at aria dot uklinux dot net Assigned:
Status: Closed Package: Session related
PHP Version: 4.0.1pl2 OS: Linux
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: dmspink at aria dot uklinux dot net
New email:
PHP Version: OS:

 

 [2000-08-12 03:03 UTC] dmspink at aria dot uklinux dot net
When the anchor reference is generated on the fly from a variable and --enable-trans-sid is used to append the session key to the end of the URL, its placed in the wrong location. Example script below:

           ---------------------------------
<?session_start();?>
<a href="test.php">click here1</a>
<a href="<? echo 'test.php' ?>">click here2</a>
           ---------------------------------

click here1 has the URL
http://xxxxxxx/test.php?PHPSESSKEY=xxxxxx...xxxx

but for click here2 the second link the URL is
http://xxxxxxxx/?PHPSESSKEY=xxxxxxx..xxxxtest.php

Thanks
Mark

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-08-12 03:09 UTC] sterling@php.net
fixed in CVS.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Sun May 11 23:01:27 2025 UTC