php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #47934 SOAP server ignores enumeration restrictions in WSDL
Submitted: 2009-04-09 09:36 UTC Modified: -
Votes:25
Avg. Score:4.5 ± 0.7
Reproduced:23 of 23 (100.0%)
Same Version:6 (26.1%)
Same OS:2 (8.7%)
From: funky2step at gmail dot com Assigned:
Status: Open Package: SOAP related
PHP Version: 5.2.9 OS: RHEL 5.3
Private report: No CVE-ID: None
 [2009-04-09 09:36 UTC] funky2step at gmail dot com
Description:
------------
The WSDL types section contains a simpleType with restriction block and several enumerations.
When a request is made however, these enumerations are ignored and any value is allowed to be passed.

Reproduce code:
---------------
http://pastebin.com/f6a307852

The fetch_type element is the one causing problems.

Expected result:
----------------
Expect a SOAP error when data type is not one of the enumerations.

Actual result:
--------------
Server produces valid response no matter what the data value is for the fetch_type element.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2010-11-18 16:50 UTC] will at phpfever dot com
Can you provide your WSDL with the definitions themselves?
 [2011-09-01 13:16 UTC] bouloukg at yahoo dot com
hi, i have the same problem! Does any body knows how can i get simpleType with 
restriction block and several enumerations with php soap extensions?
 [2014-01-23 15:39 UTC] remo dot laubacher at gmail dot com
There's a patch for this issue, haven't tested it though: https://bugs.php.net/bug.php?id=55503
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sat Dec 07 13:01:27 2024 UTC