php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #20418 transient SID sends a wrong ampersand(&)
Submitted: 2002-11-13 22:09 UTC Modified: 2002-11-13 22:13 UTC
From: imacat at mail dot imacat dot idv dot tw Assigned:
Status: Not a bug Package: Session related
PHP Version: 4.3.0-pre2 OS: Linux
Private report: No CVE-ID: None
 [2002-11-13 22:09 UTC] imacat at mail dot imacat dot idv dot tw
Dear PHP group,

    I found a problem with transient SID.  When I use transient SID with a link like this:

<a href="test.php?no=23&amp;lang=en">Test Link</a>

    It sends this to the client:

<a href="test.php?no=23&amp;lang=en&PHPSESSID=ef70c06edde2294bdec74ae0fa421828">Test LInk</a>

    The ampersand(&) is sent as "&" instead of "&amp;" here.  According to HTML 4.01/XHTML 1.1 (http://www.w3.org/), amersands(&) should always be send as "&amp;" instead of "&" for the XML parser to work correctly.  The latter result (&) cannot pass the W3C HTML validator (http://validator.w3.org/), and thus I cannot check the rest of my HTML.

    I'm testing with PHP 4.3.0pre2.  Can you fix this in the next release?  Thanks.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-11-13 22:13 UTC] sniper@php.net
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php


See php.ini for "arg_separator.output" directive.
 [2002-11-13 22:21 UTC] imacat at mail dot imacat dot idv dot tw
Dear PHP group,

    Oh... :p  I'm terribly sorry for this.  I have only checked the settings in the "session" section, and searched the PHP bug database in with the keyword "transient SID".  Sorry for the unnecessary bothering and thank you for taking time on this.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Tue Jul 22 20:00:03 2025 UTC