php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #22149 No Trans-SID in Link when TAB is used between args
Submitted: 2003-02-10 10:38 UTC Modified: 2003-02-12 08:59 UTC
From: realthargor at gmx dot net Assigned: iliaa
Status: Closed Package: Session related
PHP Version: 4.3.1-dev OS: all
Private report: No CVE-ID:
 [2003-02-10 10:38 UTC] realthargor at gmx dot net
Source(space between href and class):
echo "<a href=\"test\" class=\"menue\">Test</a>";
Output:
echo "<a href=\"test?SID=*******\" class=\"menue\">Test</a>";

Source(with tab instead of space):
echo "<a href=\"test\"	class=\"menue\">Test</a>";
Output:
echo "<a href=\"test\"	class=\"menue\">Test</a>";

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2003-02-10 10:40 UTC] realthargor at gmx dot net
ups phpcode in output
looks like this:

<a href="test?SID=*******" class="menue">Test</a>

<a href="test"	class="menue">Test</a>
 [2003-02-10 11:15 UTC] sniper@php.net
Verified with PHP 4.3.1-dev using this script:

<?php 
   
session_start();
echo "<a href=\"test\"	class=\"menue\">Test</a>"; 

?>

A tab before 'class' text causes this output:

<a href="test"	class="menue"?PHPSESSID=0e1fc02d43f57b9ecdad5b5e100f8375>Test</a>

 [2003-02-10 11:15 UTC] sniper@php.net
updated version.

 [2003-02-12 08:59 UTC] iliaa@php.net
This bug has been fixed in CVS.

In case this was a PHP problem, snapshots of the sources are packaged
every three hours; this change will be in the next snapshot. You can
grab the snapshot at http://snaps.php.net/.
 
In case this was a documentation problem, the fix will show up soon at
http://www.php.net/manual/.

In case this was a PHP.net website problem, the change will show
up on the PHP.net site and on the mirror sites in short time.
 
Thank you for the report, and for helping us make PHP better.


 
PHP Copyright © 2001-2014 The PHP Group
All rights reserved.
Last updated: Fri Apr 18 10:03:03 2014 UTC