php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #43007 php unable to handle correctly comma separated cookie values
Submitted: 2007-10-17 15:56 UTC Modified: 2007-10-23 09:39 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:1 (100.0%)
From: unlucio at gmail dot com Assigned:
Status: Not a bug Package: Feature/Change Request
PHP Version: 5.2.4 OS: Linux
Private report: No CVE-ID: None
 [2007-10-17 15:56 UTC] unlucio at gmail dot com
Description:
------------
hello,
for some reason I'm experiencing pretty much the same reported here: http://bugs.php.net/bug.php?id=32827 with cellphone like the BlackBerry, ecc.

Am I missing something?

thx for help
lucio


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2007-10-17 17:55 UTC] unlucio at gmail dot com
More over,
Same thing seams to happen for those devices that use ";" (semicolons) 
instead of "; " (semicolons plus space).
Kind of very bothering thing, since when one of those happens the result is 
everything between an empty session or multiple sessions been created (empty 
or filled) for the same device.
This is actually tricky, as long as u have just the sessionID as only value 
in you cookie everything works fine. The odd things starts to happen once u 
add more then one cookie value.
For instance, dealing with regular cookies leads to the usual:
Cookie: PHPSESSID=s1buavh0oa80dggt6i646nl084; test=ok
Array
(
    [PHPSESSID] => s1buavh0oa80dggt6i646nl084
    [test] => ok
)

this is what happening with the other separators:
Cookie: PHPSESSID=a4qmclqmck8kok2gj26vblmj72, test=ok,
Array
(
    [PHPSESSID] => a4qmclqmck8kok2gj26vblmj72, test=ok
)

which is just silly ;P

Most important:
I hope there is a patch for this somewhere, we cannot afford to use a cvs or 
development version since we're in a production environment :(

thx for help
lucio
 [2007-10-23 09:39 UTC] jani@php.net
See bug #32111

Bug #32827 was reported to _revert_ the bad fix for allowing comma as cookie separator. You're missing the part "Read RECOMMENDED, BUT NOT REQUIRED." in it.. :)

Please report the problem to the manufacturers of these devices, they're the ones interpreting the "standard" wrong.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Mon Jul 21 11:00:02 2025 UTC