php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #67428 header('Location: foo') will override a 308-399 response code
Submitted: 2014-06-12 22:55 UTC Modified: 2014-06-13 00:43 UTC
From: aharvey@php.net Assigned: aharvey (profile)
Status: Closed Package: HTTP related
PHP Version: 5.4.29 OS: Irrelevant
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: aharvey@php.net
New email:
PHP Version: OS:

 

 [2014-06-12 22:55 UTC] aharvey@php.net
Description:
------------
header('Location: foo') overrides the response code if it isn't 201 or 301-307, inclusive. With 308 Permanent Redirect now being added to HTTP 1.1, this is overly restrictive. We should prevent changing the response code for any 3xx response code.

Test script:
---------------
<?php

header('HTTP/1.1 308 Permanent Redirect');
header('Location: http://foo.bar');

?>

Expected result:
----------------
HTTP/1.1 308 Permanent Redirect
Host: localhost:8000
Connection: close
X-Powered-By: PHP/5.5.13-dev
Location: http://foo.bar
Content-type: text/html

Actual result:
--------------
HTTP/1.1 302 Found
Host: localhost:8000
Connection: close
X-Powered-By: PHP/5.5.13-dev
Location: http://foo.bar
Content-type: text/html

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-06-12 22:55 UTC] aharvey@php.net
-Assigned To: +Assigned To: aharvey
 [2014-06-13 00:43 UTC] aharvey@php.net
-Status: Assigned +Status: Closed
 [2014-06-13 00:43 UTC] aharvey@php.net
The fix for this bug has been committed.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.


 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu Dec 26 12:01:30 2024 UTC