php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #74892 Url Rewriting (trans_sid) not working on urls that start with #
Submitted: 2017-07-10 14:30 UTC Modified: 2018-04-12 15:57 UTC
From: drchuck at gmail dot com Assigned: cmb (profile)
Status: Closed Package: Session related
PHP Version: 7.1.7 OS: Mac OS/X
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: drchuck at gmail dot com
New email:
PHP Version: OS:

 

 [2017-07-10 14:30 UTC] drchuck at gmail dot com
Description:
------------
When there is a URL that starts with "#" in an anchor tag, PHP 7.1.1 still adds the PHPSESSID parameter like this:

<p><a href="index.php?PHPSESSID=a17309afea8f2791078fc046cce5fa56">Click This Anchor Tag!</a></p>
<p><a href="#place/?PHPSESSID=a17309afea8f2791078fc046cce5fa56">Internal link</a></p>
<p>Our Session ID is: a17309afea8f2791078fc046cce5fa56</p>
<p>Our PHP Version is: 7.1.1</p>

Test script:
---------------
<?php
    ini_set('session.use_cookies', '0');
    ini_set('session.use_only_cookies',0);
    ini_set('session.use_trans_sid',1);
    session_start();
?>
<p><a href="index.php">Click This Anchor Tag!</a></p>
<p><a href="#place">Internal link</a></p>
<p>Our Session ID is: <?= session_id() ?></p>
<p>Our PHP Version is: <?= phpversion() ?></p>

Expected result:
----------------
<p><a href="index.php?PHPSESSID=aec2a7538bfe295d6a6c9ff70c42f8eb">Click This Anchor Tag!</a></p>
<p><a href="#place">Internal link</a></p>
<p>Our Session ID is: aec2a7538bfe295d6a6c9ff70c42f8eb</p>
<p>Our PHP Version is: 5.6.28</p>

This is the output from the script on 5.6.28.  Note that '#place" does not get the session applied.

Actual result:
--------------
<p><a href="index.php?PHPSESSID=a17309afea8f2791078fc046cce5fa56">Click This Anchor Tag!</a></p>
<p><a href="#place/?PHPSESSID=a17309afea8f2791078fc046cce5fa56">Internal link</a></p>
<p>Our Session ID is: a17309afea8f2791078fc046cce5fa56</p>
<p>Our PHP Version is: 7.1.1</p>

This is the output from 7.1.1 (sorry I don't have easy access to 7.1.7)

Patches

Pull Requests

Pull requests:

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2017-07-10 15:18 UTC] requinix@php.net
-Status: Open +Status: Verified
 [2017-07-10 15:18 UTC] requinix@php.net
Affects 7.1+ https://3v4l.org/U96sK
 [2017-07-11 18:54 UTC] andrew dot nester dot dev at gmail dot com
Thanks for reporting the issue! I've just sent PR fixing this.
 [2017-07-18 19:23 UTC] nikic@php.net
Automatic comment on behalf of andrew.nester.dev@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=6c32d271d238a18cfc19d98877cdead1ab38f417
Log: Fixed #74892 - Fixed URL rewriting for urls started with #
 [2017-07-18 19:23 UTC] nikic@php.net
-Status: Verified +Status: Closed
 [2018-03-23 08:17 UTC] requinix@php.net
-Status: Closed +Status: Re-Opened
 [2018-03-23 08:17 UTC] requinix@php.net
Fixed in 7.1 but present in 7.2. https://3v4l.org/U96sK
 [2018-03-25 22:01 UTC] cmb@php.net
Apparently, merging upward[1] went wrong.

[1] <http://git.php.net/?p=php-src.git;a=commit;h=9cd82df0bbb1f9a1407ffb749292576be1b91c07>
 [2018-04-12 15:52 UTC] cmb@php.net
Automatic comment on behalf of andrew.nester.dev@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=68296c4055642940503c57d850f00e07a1b64618
Log: Fixed #74892 - Fixed URL rewriting for urls started with #
 [2018-04-12 15:52 UTC] cmb@php.net
-Status: Re-Opened +Status: Closed
 [2018-04-12 15:57 UTC] cmb@php.net
-Assigned To: +Assigned To: cmb
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sun Oct 27 16:01:27 2024 UTC