php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #6119 session key placed in URL in wrong location
Submitted: 2000-08-12 03:03 UTC Modified: 2000-08-12 03:09 UTC
From: dmspink at aria dot uklinux dot net Assigned:
Status: Closed Package: Session related
PHP Version: 4.0.1pl2 OS: Linux
Private report: No CVE-ID: None
 [2000-08-12 03:03 UTC] dmspink at aria dot uklinux dot net
When the anchor reference is generated on the fly from a variable and --enable-trans-sid is used to append the session key to the end of the URL, its placed in the wrong location. Example script below:

           ---------------------------------
<?session_start();?>
<a href="test.php">click here1</a>
<a href="<? echo 'test.php' ?>">click here2</a>
           ---------------------------------

click here1 has the URL
http://xxxxxxx/test.php?PHPSESSKEY=xxxxxx...xxxx

but for click here2 the second link the URL is
http://xxxxxxxx/?PHPSESSKEY=xxxxxxx..xxxxtest.php

Thanks
Mark

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-08-12 03:09 UTC] sterling@php.net
fixed in CVS.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri Apr 19 00:01:29 2024 UTC