php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #65941 SBS Incorrectly Includes Data when Content Type: multipart/form-data
Submitted: 2013-10-21 18:07 UTC Modified: -
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:0 (0.0%)
Same OS:0 (0.0%)
From: tim at timlytle dot net Assigned:
Status: Open Package: oauth (PECL)
PHP Version: Irrelevant OS:
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: tim at timlytle dot net
New email:
PHP Version: OS:

 

 [2013-10-21 18:07 UTC] tim at timlytle dot net
Description:
------------
Only POST requests with a content-type of 'application/x-www-form-urlencoded' should include the  POST parameters in the SMS according to the oAuth documentation: http://oauth.net/core/1.0a/#anchor13

However, on requests with a content-type of 'multipart/form-data' the OAuthProvider outputs a debug SBS *including* all parameters except files. 




Test script:
---------------
//without this, SBS won't match the client's
if($contentType !== 'application/x-www-form-urlencoded'){
    foreach($_POST as $name => $value){
        $provider->setParam($name, null); //don't include
    }
}


Patches

Pull Requests

 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri Nov 22 04:01:28 2024 UTC