php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #52477 Loss of session data.
Submitted: 2010-07-29 00:36 UTC Modified: 2010-12-03 17:26 UTC
From: esvinson at gmail dot com Assigned:
Status: Not a bug Package: Session related
PHP Version: 5.2.14 OS: Windows 2003/XP
Private report: No CVE-ID: None
 [2010-07-29 00:36 UTC] esvinson at gmail dot com
Description:
------------
A session variable can be created containing a '!', but the entire session is destroyed when the system tries to write the session file.

Test script:
---------------
<?php
session_start();
$_SESSION['as!df'] = array("test 123");
// print_r on _SESSION here shows expected result.
session_write_close();
session_start();
echo "<pre>".print_r($_SESSION,true)."</pre>";


Expected result:
----------------
Array
(
    [as!df] => Array
        (
            [0] => test 123
        )

)


Actual result:
--------------
Array
(
)


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2010-12-03 17:26 UTC] jani@php.net
-Status: Open +Status: Bogus
 [2010-12-03 17:26 UTC] jani@php.net
As long as register_globals can be enabled, this is not possible since ! is not allowed in variable names.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Wed May 29 06:01:32 2024 UTC