From: kafka@antichri.st
Operating system: RedHat GNU/Linux 7.3
PHP version: 4.1.2
PHP Bug Type: Session related
Bug description: session_start with use_trans_sid adds unexpected quotes
This may be related to bug #14080.
This bug is reproducible on 4.1.2 and 4.2.1, and can be seen using the
following code:
<?
session_start();
print "<A HREF='http://foobar'
onMouseIn=t('test')>test</A>";
?>
When cookies are not in use (eg. when first visiting the page in a new
browser window), the following output results:
<A HREF='http://foobar'
onMouseIn="t("'test')>test</A>
When cookies are used, the output is normal.
If session_start, the output is also normal.
Putting the link outside the <??> php code produces no change in the
result.
All magic_quote options are disabled in php.ini
Configure line is as follows:
'./configure' 'i386-redhat-linux' '--prefix=/usr'
'--exec-prefix=/usr'
'--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc'
'--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib'
'--libexecdir=/usr/libexec' '--localstatedir=/var'
'--sharedstatedir=/usr/com' '--mandir=/usr/share/man'
'--infodir=/usr/share/info' '--prefix=/usr'
'--with-config-file-path=/etc'
'--enable-force-cgi-redirect' '--disable-debug' '--enable-dbg=shared'
'--with-dbg-profiler' '--enable-pic' '--disable-rpath'
'--enable-inline-optimization' '--with-bz2' '--with-db3'
'--with-curl'
'--with-dom=/usr' '--with-exec-dir=/usr/bin'
'--with-freetype-dir=/usr'
'--with-png-dir=/usr' '--with-gd' '--enable-gd-native-ttf'
'--with-ttf'
'--with-gdbm' '--with-gettext' '--with-ncurses' '--with-gmp'
'--with-iconv' '--with-jpeg-dir=/usr' '--with-mm'
'--with-openssl'
'--with-png' '--with-pspell' '--with-regex=system'
'--with-xml'
'--with-expat-dir=/usr' '--with-zlib' '--with-layout=GNU'
'--enable-bcmath' '--enable-debugger' '--enable-exif'
'--enable-ftp'
'--enable-magic-quotes' '--enable-safe-mode' '--enable-sockets'
'--enable-sysvsem' '--enable-sysvshm' '--enable-discard-path'
'--enable-track-vars' '--enable-trans-sid' '--enable-yp'
'--enable-wddx'
'--without-oci8' '--with-imap=shared' '--with-imap-ssl'
'--with-kerberos=/usr/kerberos' '--with-ldap=shared'
'--with-mysql=shared,/usr' '--with-pgsql=shared'
'--with-snmp=shared,/usr'
'--with-snmp=shared' '--enable-ucd-snmp-hack' '--with-unixODBC=shared'
'--enable-memory-limit' '--enable-bcmath' '--enable-shmop'
'--enable-versioning' '--enable-calendar' '--enable-dbx'
'--enable-dio'
'--enable-mcal' '--enable-mbstring' '--enable-mbstr-enc-trans'
'--with-apxs=/usr/sbin/apxs'
--
Edit bug report at http://bugs.php.net/?id=18276&edit=1
--
Fixed in CVS: http://bugs.php.net/fix.php?id=18276&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=18276&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=18276&r=needtrace
Try newer version: http://bugs.php.net/fix.php?id=18276&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=18276&r=support
Expected behavior: http://bugs.php.net/fix.php?id=18276&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=18276&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=18276&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=18276&r=globals