php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #14466 No _POST/_GET vars with filename matching
Submitted: 2001-12-12 14:41 UTC Modified: 2001-12-12 15:42 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:0 (0.0%)
From: hostmaster at sparklit dot com Assigned:
Status: Closed Package: Apache related
PHP Version: 4.1.0 OS: Red Hat Linux 7.0
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: hostmaster at sparklit dot com
New email:
PHP Version: OS:

 

 [2001-12-12 14:41 UTC] hostmaster at sparklit dot com
The Post and Get arrays do not get populated when the  filename in the URL does not have the extension. (Apache allows us to access files without their extension)

If we access a file as:

http://server.com/file.php?foo=bar

Then foo=bar will be set in _GET. however, if we access the same file as:

http://server.com/file?foo=bar

Then _GET will be an empty array. Same is true for _POST.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-12-12 14:53 UTC] sander@php.net
Confirmed on Windows 2000/Apache 1.3.22 with both 4.1.0 and a recent (10-dec) 4.2.0-dev build...
You need mod_negotiation enabled in Apache to use the multiview option, which performs this extension-guessing (http://httpd.apache.org/docs/content-negotiation.html).

Should we mark this bug as critical? IMO, we should, we can't encourage users to use $_GET and $_POST if they're useless via multiviews.
 [2001-12-12 15:16 UTC] hostmaster at sparklit dot com
This bug is very critical as most applications will not work
without access to POST and GET variable.
They variable are also not accessible in $HTTP_GET_VARS and $HTTP_POST_VARS (which are always empty arrays).


 [2001-12-12 15:22 UTC] derick@php.net
Did this work with version prior to 4.1.0?

Derick
 [2001-12-12 15:42 UTC] derick@php.net
It's an apache bug:

http://bugs.apache.org/index.cgi/full/8582

closing
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sun May 05 07:01:32 2024 UTC