#43430 [NEW]: Parser seems not to like to see "select from" on posted items

From: ajoliveira at acutron dot net Operating system: linux PHP version: 4.4.7 PHP Bug Type: Scripting Engine problem Bug description: Parser seems not to like to see "select from" on posted items Description: ------------ Error: "Forbidden access to /trash/mail.php on acutron.net" this error is reproducible under 4.4.7, but not under 4.3.11 Reproduce code: --------------- Hi I'm using 4.4.7 on the same directory I put the following files (in fact those are on the air at http://acutron.net/trash): 1. trash1.html ************************************************* <html> <head> </head> <body background="jpg/rock.jpg"> <FORM action="mail.php" method="post"> <INPUT TYPE="submit" VALUE="Correio"> <input type="hidden" name="sellit" value="SELECT FRAM"> </form> </body></html> ************************************************* 2. trash2.html ************************************************* <html> <head> </head> <body background="jpg/rock.jpg"> <FORM action="mail.php" method="post"> <INPUT TYPE="submit" VALUE="Correio"> <input type="hidden" name="sellit" value="SELECT FROM"> </form> </body></html> ************************************************* any one of the previous files calls main.php, which...does nothing. diff btw the 2 files is that one posts "selected fram" and the other "select from". try the difference 3. main.php do-nothing script... ******************************************** <html> <head> </head> <body> <?php //echo stripslashes ($_POST['sel']).'<br>'; ?> </body></html> ******************************************** Expected result: ---------------- blank screen Actual result: -------------- trash1.html does nothing, as expected, but trash2.html results in: "Forbidden access to /trash/mail.php on acutron.net" -- Edit bug report at http://bugs.php.net/?id=43430&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=43430&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=43430&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=43430&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=43430&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=43430&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=43430&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=43430&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=43430&r=needscript Try newer version: http://bugs.php.net/fix.php?id=43430&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=43430&r=support Expected behavior: http://bugs.php.net/fix.php?id=43430&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=43430&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=43430&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=43430&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=43430&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=43430&r=dst IIS Stability: http://bugs.php.net/fix.php?id=43430&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=43430&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=43430&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=43430&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=43430&r=mysqlcfg