#49219 [Opn->Bgs]: Incorrect Inputvalidation on GET/POST/REQUEST params in function empty()
| From: | jani@php.net | Date: | Tue, 11 Aug 2009 09:20:06 +0000 |
| Subject: | #49219 [Opn->Bgs]: Incorrect Inputvalidation on GET/POST/REQUEST params in function empty() | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-140903@lists.php.net to get a copy of this message | ||
ID: 49219
Updated by: jani@php.net
Reported By: er at master-studios dot net
-Status: Open
+Status: Bogus
Bug Type: Unknown/Other Function
Operating System: Centos
PHP Version: 5.2.10
New Comment:
# php -r '$foo=array();var_dump(empty($foo));'
bool(true)
Empty array is empty. Not a bug.
Previous Comments:
------------------------------------------------------------------------
[2009-08-11 08:38:00] er at master-studios dot net
Description:
------------
empty() function works incorrect for value validation
Reproduce code:
---------------
---
From manual page: function.empty
---
file.php:
<?php
if(empty($_GET[s]))
echo "EMPTY";
else
echo "FULL";
?>
Expected result:
----------------
on running the "file.php?s=asdf" works fine.
Actual result:
--------------
And if an empty array is passed to this function there should also be a
"EMPTY" result. but if you call "file.php?s[]=" the you get a FULL.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=49219&edit=1