#43162 [Com]: GET date variable name not binary-safe on null bytes

ID: 43162 Comment by: zizzy at wolvez dot org Reported By: ryat at wolvez dot org Status: Feedback Bug Type: *General Issues Operating System: Ubuntu7.10 PHP Version: 5.2.4 New Comment: I want to know is this is bug? Previous Comments: ------------------------------------------------------------------------ [2007-11-01 09:25:46] jani@php.net And why would you want to pass null byte in the parameter name? ------------------------------------------------------------------------ [2007-11-01 08:32:21] ryat at wolvez dot org Replenish other example magic_quotes_gpc=on http://127.0.0.1/test/test3.php?a%00aaaa=a%00aaaa Array ( [a] => a\0aaaa ) magic_quotes_gpc=off http://127.0.0.1/test/test3.php?a%00aaaa=a%00aaaa Array ( [a] => aaaaa ) ------------------------------------------------------------------------ [2007-10-31 17:01:40] ryat at wolvez dot org Hihi,pay attention to: magic_quotes_gpc=on http://127.0.0.1/test.php?a'aaaa=test Actual result: -------------- Array ( [a\'aaaa] => test ) http://127.0.0.1/test.php?a%00aaaa=test Actual result: -------------- Array ( [a] => test ) ------------------------------------------------------------------------ [2007-10-31 16:41:14] crescentfreshpot at yahoo dot com php is written in C. In C the null byte represents the end of a string. I don't think php can work around this. ------------------------------------------------------------------------ [2007-10-31 13:23:33] ryat at wolvez dot org Description: ------------ GET date variable name not binary-safe on null bytes Reproduce code: --------------- <?php print_r($_GET); ?> http://127.0.0.1/test.php?a%00aaaa=test Actual result: -------------- Array ( [a] => test ) ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=43162&edit=1