#39150 [NEW]: PHP allows invalid names for constants and variables

From: z_rules55 at hotmail dot com Operating system: WinXP PHP version: 5.1.6 PHP Bug Type: Variables related Bug description: PHP allows invalid names for constants and variables Description: ------------ The PHP manual states that: A valid variable name starts with a letter or underscore, followed by any number of letters, numbers, or underscores. And that constants must follow the same naming rules as variables. However, PHP allows me to define variables and constants with an invalid character like a hyphen or a dollar sign, as well as starting with a number. Those are the only three invalid names I tested; I assume others could also be used. Reproduce code: --------------- <?php define('my$definition', 'value'); define('my-definition', 'value'); define('2mydefinition', 'value'); $var = '2morrow$is-another-day'; $$var = 'this should be invalid'; echo constant('my$definition')."\n"; echo constant('my-definition')."\n"; echo constant('2mydefinition')."\n"; echo $GLOBALS['2morrow$is-another-day']."\n"; echo "\n"; //echo my$definition."\n"; echo my-definition."\n"; //echo 2mydefinition."\n"; //echo $2morrow$is-another-day."\n"; ?> Expected result: ---------------- Some kind of error upon defining the constant or variable with the invalid name. Actual result: -------------- PHP happily accepts the define() with the invalid name, as well as the assignment to the variable variable with the invalid name. Using constant() and $GLOBALS to read the value of the invalid constant and variable work fine. Echoing the value of my-definition gives the usual warning of: Notice: Use of undefined constant my - assumed 'my' in C:\path\to\script.php on line 14 Notice: Use of undefined constant definition - assumed 'definition' in C:\path\to\script.php on line 14 Only when you try to access the invalid constant or variable directly does PHP throw parse errors. -- Edit bug report at http://bugs.php.net/?id=39150&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=39150&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=39150&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=39150&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=39150&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=39150&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=39150&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=39150&r=needscript Try newer version: http://bugs.php.net/fix.php?id=39150&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=39150&r=support Expected behavior: http://bugs.php.net/fix.php?id=39150&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=39150&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=39150&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=39150&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=39150&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=39150&r=dst IIS Stability: http://bugs.php.net/fix.php?id=39150&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=39150&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=39150&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=39150&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=39150&r=mysqlcfg