php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #78864 php built-in server is not passing GET parameter properly if content is larger.
Submitted: 2019-11-23 11:47 UTC Modified: 2019-11-23 13:10 UTC
Votes:2
Avg. Score:4.5 ± 0.5
Reproduced:2 of 2 (100.0%)
Same Version:2 (100.0%)
Same OS:1 (50.0%)
From: mayursk7 at gmail dot com Assigned:
Status: Open Package: Built-in web server
PHP Version: 7.3Git-2019-11-23 (Git) OS: Windows
Private report: No CVE-ID: None
Have you experienced this issue?
Rate the importance of this bug to you:

 [2019-11-23 11:47 UTC] mayursk7 at gmail dot com
Description:
------------
Working version:
$ php -v
PHP 7.3.9 (cli) (built: Aug 28 2019 09:28:48) ( ZTS MSVC15 (Visual C++ 2017) x64
 )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.3.9, Copyright (c) 1998-2018 Zend Technologies

Error version:
$ php -v
PHP 7.3.10 (cli) (built: Sep 24 2019 11:59:22) ( ZTS MSVC15 (Visual C++ 2017) x6
4 )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.3.10, Copyright (c) 1998-2018 Zend Technologies

result is not always same for $_GET on each refresh.
$ php -S localhost:8080/ -t public

example link: http://localhost:8080/query?q=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

Test script:
---------------
<?php

print_r($_GET);

Expected result:
----------------
Array
(
    [q] => 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
)

Actual result:
--------------
Array
(
    [5cFNtcGtRMGx6U1cxd2RtRlhOV1prU0d4M1dsTkpOa2x0Y0haaFZ6UnBURU5LZG1KcFNUWkpiVTR3VEcxc2ExQlhhSEJNYlU1d1pFaHNabUZYVVdsbVUzZzNTVzAxYUdKWFZXbFBhVXBxWWpOV2RXUklTalZKYVhkcFdWZDRjRmxZVFdsUGFVcHFaRWhLTlVscGQybGhiVGx3WW13NU1HVllRbXhKYW05cFlXMDVjR0pwU1hOSmJUbDFTV3B2YVZrelVubGxVelZ3WXpJNE9XRkhhM1ZaTWpreFltNVNlV1ZXT1hCak1qaHBabE40TjBsdE5XaGlWMVZwVDJsS2MySXlaR1pqYlRsMllsWTVlbHBYUm5sWk1tZHBURU5LYUdKSGJHaGplVWsyU1cxNGVXTjVTWE5KYlhCMllWYzFabVJJYkhkYVUwazJTVzE0YkZwdVVXZGhiVGx3WW1sSmMwbHRPWFZKYW05cFlraEtla3h0YUhaa1IxWnpXRE5PYkZsWVNtcGhSamx3V2tReGMyRklUWFZoVjFGcFpsWXdjMGx0WkhsaU0xWjNTV3B3WWtsdGVHOWplVFZ3V2tOS1pFeERTbTFrVjNoelpFZFdOR1JEU1RaWGVVcHZZak5TYkdKRFNtUk1RMHBxWWpOV2RXUkZXbkJhVjNoclNXcHZhV0pIYUhwTWJXeHJTVzR3UFE9PQ] => =
)

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2019-11-23 11:53 UTC] rockingnibin at gmail dot com
I have experienced the same problem in my slim project. I'm using php 7.3.10
 [2019-11-23 13:10 UTC] cmb@php.net
I cannot reproduce this; neither with PHP 7.3.10 ZTS x64, nor with
the current HEAD of the PHP-7.3 branch.
 
PHP Copyright © 2001-2020 The PHP Group
All rights reserved.
Last updated: Fri Feb 21 16:01:27 2020 UTC