#43430 [Opn]: Parser seems not to like to see "select from" on posted items
| From: | ajoliveira at acutron dot net | Date: | Tue, 27 Nov 2007 17:51:08 +0000 |
| Subject: | #43430 [Opn]: Parser seems not to like to see "select from" on posted items | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-120145@lists.php.net to get a copy of this message | ||
ID: 43430
User updated by: ajoliveira at acutron dot net
Reported By: ajoliveira at acutron dot net
Status: Open
Bug Type: Scripting Engine problem
Operating System: linux
PHP Version: 4.4.7
New Comment:
on http://acutron.net/trash, there is an info.php so that
server
configuration may be inspected.
Previous Comments:
------------------------------------------------------------------------
[2007-11-27 17:40:31] ajoliveira at acutron dot net
Description:
------------
Error:
"Forbidden access to /trash/mail.php on acutron.net"
this error is reproducible under 4.4.7, but not under 4.3.11
Reproduce code:
---------------
Hi
I'm using 4.4.7
on the same directory I put the following files (in fact those are on
the air at http://acutron.net/trash):
1. trash1.html
*************************************************
<html>
<head>
</head>
<body background="jpg/rock.jpg">
<FORM action="mail.php" method="post">
<INPUT TYPE="submit" VALUE="Correio">
<input type="hidden" name="sellit" value="SELECT FRAM">
</form>
</body></html>
*************************************************
2. trash2.html
*************************************************
<html>
<head>
</head>
<body background="jpg/rock.jpg">
<FORM action="mail.php" method="post">
<INPUT TYPE="submit" VALUE="Correio">
<input type="hidden" name="sellit" value="SELECT FROM">
</form>
</body></html>
*************************************************
any one of the previous files calls main.php, which...does nothing.
diff btw the 2 files is that one posts "selected fram" and the other
"select from". try the difference
3. main.php
do-nothing script...
********************************************
<html>
<head>
</head>
<body>
<?php
//echo stripslashes ($_POST['sel']).'<br>';
?>
</body></html>
********************************************
Expected result:
----------------
blank screen
Actual result:
--------------
trash1.html does nothing, as expected, but trash2.html results in:
"Forbidden access to /trash/mail.php on acutron.net"
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=43430&edit=1