#43253 [Opn->Bgs]: wrong parsing of QUERY_STRING
| From: | jani@php.net | Date: | Mon, 12 Nov 2007 11:25:57 +0000 |
| Subject: | #43253 [Opn->Bgs]: wrong parsing of QUERY_STRING | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-119533@lists.php.net to get a copy of this message | ||
ID: 43253
Updated by: jani@php.net
Reported By: carsten_sttgt at gmx dot de
-Status: Open
+Status: Bogus
Bug Type: Scripting Engine problem
Operating System: Windows_NT
PHP Version: 5.2.5
New Comment:
It's not wrong or misbehaviour, null is not allowed in PHP variable
names. (Or in superglobal key names because of register_globals)
This is not bug but expected behaviour.
Previous Comments:
------------------------------------------------------------------------
[2007-11-11 23:33:11] carsten_sttgt at gmx dot de
Description:
------------
Hello,
it seems, only the original bug reporter can change the status of
"Feedback" or "No Feedback" to "Open" with a comment? So I must open a
new bug report according to Bug #43162.
We all know, that a "." or " " in a query_string variable is rewritten
to "_".
But there is a misbehavior with non printable characters (and/or
characters which can't be in a variable name) which should be
clarified.
In the test I use the array $_GET. But this also applies to
parse_str():
| parse_str($_SERVER['QUERY_STRING']);
| var_dump($GLOBALS);
also wrong:
I can create a variable, with is not a valid variable name (as
descriped in PHP manual):
| <a href="?%10a=%10a">Testlink</a>
| <?php
| $a= "\x10a";
| var_dump($$a);
| ?>
An other misbehavior:
If I have a "\0" (in the URI %00), the $_GET key name, starting from
"\0" is missing (not binary safe).
Regards,
Carsten
Reproduce code:
---------------
<html>
<head><title>Testscript</title></head>
<body>
<a
href="?a%00a=a%00a&b%10b=b%10b&c%0Dc=c%0Dc&d%20d=d%20d&e%2Ee=e%2Ee">Testlink</a>
<br>
<pre>
<?php
var_dump($_GET);
?>
</pre>
</body>
</html>
Expected result:
----------------
Good question ;-)
"\0" should have the same misbehavior as "\x10"
Or you can replace all non printable chars with "_".
(On the other side: for an array key ($_GET), this chars are valid.
Only a problem for register_globals or parse_str)
Actual result:
--------------
magic_quotes_gpc = Off:
-----------------------
array(5) {
["a"]=>
string(3) "a�a"
["bb"]=>
string(3) "bb"
["c
c"]=>
string(3) "c
c"
["d_d"]=>
string(3) "d d"
["e_e"]=>
string(3) "e.e"
}
magic_quotes_gpc = On:
----------------------
array(5) {
["a"]=>
string(4) "a\0a"
["bb"]=>
string(3) "bb"
["c
c"]=>
string(3) "c
c"
["d_d"]=>
string(3) "d d"
["e_e"]=>
string(3) "e.e"
}
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=43253&edit=1