#44080 [NEW]: Session misbehaviour with Mozilla browsers

From: k dot mcmanus at gre dot ac dot uk Operating system: Solaris and Windows PHP version: 5.2.5 PHP Bug Type: Session related Bug description: Session misbehaviour with Mozilla browsers Description: ------------ I have EXACTLY the same files on 2 different Apache (Solaris) servers and an IIS server. The example works correctly with IE5.5, 6 and 7 and Opera 9 clients but with Firefox (2.0.0.12 or 2.0.0.11) or Mozilla (1.7.10) clients. Yes, cookies are on in the clients and I have tried restarting the clients and tried several client machines. Please feel free to try the examples... PHP 4.3.10 on Apache http://staffweb.cms.gre.ac.uk/~mk05/session/index.php PHP5.0.5 on Apache http://stuweb.cms.gre.ac.uk/~mk05/session/index.php PHP5.2.3 on IIS http://cms-stu-iis.gre.ac.uk/mk05/session/index.php When you reach activate.php $_SESSION has remembered literals but has forgotten variable values. I am at a loss to explain why it refuses to work in Moz clients. I am am even more confused at to why commenting out the line <link href="" rel="stylesheet" type="text/css"/> in register.php fixes the problem. I am not at all clear as to whether the problem lies with Mozilla or PHP. The fact that it affects such a range of versions of both PHP and Mozilla is also mystifying. I cannot imaging what possible mechanism could cause this effect. Reproduce code: --------------- http://staffweb.cms.gre.ac.uk/~mk05/session/index.php.txt http://staffweb.cms.gre.ac.uk/~mk05/session/register.php.txt http://staffweb.cms.gre.ac.uk/~mk05/session/activate.php.txt These are links not copies so you see exactly the same source. Expected result: ---------------- 3 stage process index.php -> register.php -> activate.php (you don't need to fill in the forms, just press the buttons) form input from index.php is posted to register.php in register.php the POST data is copied into $_SESSION together with a string literal in activate.php the session values are printed Actual result: -------------- in activate.php the session has lost the values of the variables but not the value of the literal - only with Mozilla/Firefox browsers -- Edit bug report at http://bugs.php.net/?id=44080&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=44080&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=44080&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=44080&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=44080&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=44080&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=44080&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=44080&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=44080&r=needscript Try newer version: http://bugs.php.net/fix.php?id=44080&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=44080&r=support Expected behavior: http://bugs.php.net/fix.php?id=44080&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=44080&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=44080&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=44080&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=44080&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=44080&r=dst IIS Stability: http://bugs.php.net/fix.php?id=44080&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=44080&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=44080&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=44080&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=44080&r=mysqlcfg