php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #78864 php built-in server is not passing GET parameter properly if content is larger.
Submitted: 2019-11-23 11:47 UTC Modified: 2020-08-02 04:22 UTC
Votes:2
Avg. Score:4.5 ± 0.5
Reproduced:2 of 2 (100.0%)
Same Version:2 (100.0%)
Same OS:1 (50.0%)
From: mayursk7 at gmail dot com Assigned: cmb (profile)
Status: No Feedback Package: Built-in web server
PHP Version: 7.3Git-2019-11-23 (Git) OS: Windows
Private report: No CVE-ID: None
Have you experienced this issue?
Rate the importance of this bug to you:

 [2019-11-23 11:47 UTC] mayursk7 at gmail dot com
Description:
------------
Working version:
$ php -v
PHP 7.3.9 (cli) (built: Aug 28 2019 09:28:48) ( ZTS MSVC15 (Visual C++ 2017) x64
 )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.3.9, Copyright (c) 1998-2018 Zend Technologies

Error version:
$ php -v
PHP 7.3.10 (cli) (built: Sep 24 2019 11:59:22) ( ZTS MSVC15 (Visual C++ 2017) x6
4 )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.3.10, Copyright (c) 1998-2018 Zend Technologies

result is not always same for $_GET on each refresh.
$ php -S localhost:8080/ -t public

example link: http://localhost:8080/query?q=WlhsS2JXRlhWbk5hU0UxcFQyeHphV0ZIT1RCYVYzZHBURU5LZVZsWVVuQmliV05wVEVOS2FtRkhWbXBoTVRsd1ltbEpjMGx0VG05YVYwNXlXREk1TVdSRFNYTkpiVTV3WkVocmFVeERTbXBpTTFaMVpFaEtOVWxwZDJsalNFcDJaRzFzYTFwWVNXbE1RMHA1WWpJNWRGZ3pUbXhaV0VwcVlVZFdla2xwZDJsaVYyeDFXRE5DZVdGWFRteEphWGRwV1ROS2JGbFlVbXhhUmpsb1pFTktaRXhEU21waU1uZ3hZbGMxVGxsWVFXbFBibk5wWVZkUmFVOXBTbk5oU0UxMVlWZFJhVXhEU205aU0xSnNZa05KTmtsdFozVmliVVowV2xOSmMwbHVTbWhrUjJ4MVdubEpOa2x0WjNWamJVWXdZVmMxYmtscGQybGpTRXAyWkcxc2ExcFlTV2xQYVVwNlkwTTFkVmxYTVd4SmFYZHBXVEpzTUdWVFNUWkpiVTR3VEcwMWFHSlhWV2xNUTBwcVlqTldkV1JJU2pWSmFtOXBXVE5TZVdWVE5YVlpWekZzU1dsM2FWa3lhR3haTW5SbVlWYzBhVTlwU205aFV6VnFZVWRXYW1FeE9YQmlhVWx6U1cxT2IxcFhUbkpZTWpreFpFTkpOa2x0YUhCTWJVNXZXbGRPY2xneU9URmtRMGx6U1cwMWRsZ3lPVzFZTTBwMllqSXhla2xxYjJsaFIydDFZbTA1Wm1JeVdtWmpiVGwyWWxoTmFVeERTbWhhU0ZaelpFWTVhbUl6Vm5Wa1EwazJTVzFvY0V4dFJtdGtWM2d3WTNsSmMwbHRUbTloVjNocldESk9kbVJYTlRCSmFtOXBZVWRyZFZreWFIQmlSMUo1V2xjMGFVeERTblJoVnpWbVkwaEtjRmt5VldsUGFVcDBZVmMwYjJKSVNucE1ia0o1WVZkT2JFdFRTWE5KYlRGb1pVWTVkMk50YkdwYVUwazJTVzB4YUdWRGFITmpiazExWTBoS2NGa3lWWEJKYVhkcFkyMDVkbUpXT1hwYVYwWjVXVEpvYkdONVNUWkphMDVRVmxVMVZVdEZVa3BWTVZKS1ZHdE9WVXRIZUhsamVUVjVZakk1ZEZnelVqVmpSMVptWVZkUmNFdFRTWE5KYlU1NVdsZEdNRnBYVW1aWldGRnBUMmxLYzJGSVRYVlpNMHBzV1ZoU2JGcEdPV2hrUTBvNVRFTktiV0ZYZURCYVdFcDZTV3B3TjBsdFRubGFWMFl3V2xkU1psbFlVV2xQYVVscFRFTktiMkl6VW14aVEwazJTV2xKYzBsdVNtaGtSMngxV25sSk5rbHBTWE5KYlU1dldsZE9jbGd5YkhWSmFtOXBTV2wzYVZreWFHeFpNblJtWWpOV01FbHFiMmxKYVhkcFdUSnNNR1ZUU1RaSmFVbHpTVzFPZG1SWE5UQmpibXRwVDJsSmFVeERTbmRqYlRreVlWZFNiR05wU1RaSmFVbHpTVzVLZG1JeU1XWmpNbFpvWTIxT2IxcFlUV2xQYVVscFRFTktkR0ZYTldaalNFcHdXVEpWYVU5cFNXbG1VM2RwWTBkR2JscFRTVFpOVTNkcFlWaFNiR0pWVG5aa1Z6VXdTV3B2ZUUxRGQybGlNMHByV2xoSmFVOXNkRGRKYlZwd1dsZDRhMGxxYjJsaVIyaDZURzFzYTBscGQybGFSMng1U1dwdmFWSkZWbFJSZVVvNVdGTjNhVnBIUmpCYVZWcHdXbGQ0YTJONVNUWlhlVXBxWVVkV2FtRXhPWEJpYVVselNXMU9iMXBYVG5KWU1qa3haRU5KYzBsdFRubGFWMFl3V2xkU1psbFlVV2xZVTNkcFpFZEdhV0pIVm5wSmFuQmlaWGxLZFZsWE1XeEphbTlwWWtjNWJsZ3lhSFprUjFaeldETk9iRmxZU21waFEwbHpTVzFHYzJGWFJucEphbTlwWWtkb2VrbHVNSE5sZVVwMVdWY3hiRWxxYjJsaVJ6bHVXRE5DZVdJelduQmFSMVo1U1dsM2FWbFhlSEJaV0UxcFQybEtjMk5EU1hOSmJYQjJZVmMxWm1SSWJIZGFVMGsyU1cxd2RtRlhOR2xNUTBwMlltbEpOa2x0ZUc5amVUVnpZakprWm1OSVNuWmtiV3hyV2xoS1ptRlhVVGxpU0VGMVlWZFJhV1pUZURkSmJUVm9ZbGRWYVU5cFNucGFXRW95WVZkT2JGZ3pRbmxpTTFwd1drZFdlVWxwZDJsWlYzaHdXVmhOYVU5cFNucGpRMGx6U1cxd2RtRlhOV1prU0d4M1dsTkpOa2x0Y0haaFZ6UnBURU5LZG1KcFNUWkpiazUzVEcxc2ExQlhlSGRNYms1M1dESnNhMGx1TUhObGVVcDFXVmN4YkVscWIybGhSemt3V2xkM2FVeERTbWhpUjJ4b1kzbEpOa2x0WjJsTVEwcHhZakpzZFZnelVqVmpSMVZwVDJsS2NXSXliSFZKYVhkcFlqSTBhVTlwU205TWJXeHJVRmQ0YjJONU5XOWlNMUpzWWtZNWNGcERTamxNU0hOcFltMUdkRnBUU1RaSmJXaDJaRWRXYzFneWJIVmFiVGhwVEVOS2FHSkhiR2hqZVVrMlNXMW9jRWxwZDJsaGJUbHdZbXc1TUdWWVFteEphbTlwWVcwNWNHSnBTWE5KYlRsMVNXcHZhV0ZIYTNWaVJ6bHVXRE5DZVdJelduQmFSMVo1V0RKc2ExQlhlRzlqZVRWellqSmtabU5JU25aa2JXeHJXbGhLWm1GWFVXbG1VM2czU1cwMWFHSlhWV2xQYVVwcVlWaFNOVWxwZDJsWlYzaHdXVmhOYVU5cFNtcGtRMGx6U1cxd2RtRlhOV1prU0d4M1dsTkpOa2x0Y0haaFZ6UnBURU5LZG1KcFNUWkpiVTR3VEcxc2ExQlhhSEJNYlU1d1pFaHNabUZYVVdsbVUzZzNTVzAxYUdKWFZXbFBhVXBxWWpOV2RXUklTalZKYVhkcFdWZDRjRmxZVFdsUGFVcHFaRWhLTlVscGQybGhiVGx3WW13NU1HVllRbXhKYW05cFlXMDVjR0pwU1hOSmJUbDFTV3B2YVZrelVubGxVelZ3WXpJNE9XRkhhM1ZaTWpreFltNVNlV1ZXT1hCak1qaHBabE40TjBsdE5XaGlWMVZwVDJsS2MySXlaR1pqYlRsMllsWTVlbHBYUm5sWk1tZHBURU5LYUdKSGJHaGplVWsyU1cxNGVXTjVTWE5KYlhCMllWYzFabVJJYkhkYVUwazJTVzE0YkZwdVVXZGhiVGx3WW1sSmMwbHRPWFZKYW05cFlraEtla3h0YUhaa1IxWnpXRE5PYkZsWVNtcGhSamx3V2tReGMyRklUWFZoVjFGcFpsWXdjMGx0WkhsaU0xWjNTV3B3WWtsdGVHOWplVFZ3V2tOS1pFeERTbTFrVjNoelpFZFdOR1JEU1RaWGVVcHZZak5TYkdKRFNtUk1RMHBxWWpOV2RXUkZXbkJhVjNoclNXcHZhV0pIYUhwTWJXeHJTVzR3UFE9PQ==

Test script:
---------------
<?php

print_r($_GET);

Expected result:
----------------
Array
(
    [q] => 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
)

Actual result:
--------------
Array
(
    [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] => =
)

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2019-11-23 11:53 UTC] rockingnibin at gmail dot com
I have experienced the same problem in my slim project. I'm using php 7.3.10
 [2019-11-23 13:10 UTC] cmb@php.net
I cannot reproduce this; neither with PHP 7.3.10 ZTS x64, nor with
the current HEAD of the PHP-7.3 branch.
 [2020-07-20 15:54 UTC] cmb@php.net
-Status: Open +Status: Feedback -Assigned To: +Assigned To: cmb
 [2020-07-20 15:54 UTC] cmb@php.net
Is this still reproducible for anybody with any of the actively
supported PHP versions[1]?

[1] <https://www.php.net/supported-versions.php>
 [2020-08-02 04:22 UTC] php-bugs at lists dot php dot net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.
 
PHP Copyright © 2001-2021 The PHP Group
All rights reserved.
Last updated: Mon May 10 22:01:24 2021 UTC