Bug #18337 Updated: General cookies have higher priority than specific

ID: 18337 Updated by: derick@php.net Reported By: shaggy@vip.bg -Status: Assigned +Status: Open Bug Type: HTTP related Operating System: Slackware Linux 8.1, gcc 2.95.3 PHP Version: 4.2.1 Assigned To: derick New Comment: Partly fix can be found here: http://files.derickrethans.nl/cookie_patch.diff As I have no more time to finish it I just share it here, it works, but not for registered globals. Derick Previous Comments: ------------------------------------------------------------------------ [2002-07-14 09:28:10] derick@php.net Working on it... Derick ------------------------------------------------------------------------ [2002-07-14 09:09:55] shaggy@vip.bg I use PHP compiled from sources, ./configure --with-pgsql --with-mysql --with-zlib --with-apache=dir Consider the following code has been executed, and another page loaded setcookie('test', 'value1', time()+3600, '/foo/bar/'); setcookie('test', 'value2', time()+3600, '/'); setcookie('test', 'value3', time()+3600, '/foo/'); When a browser requests a file under the /foo/bar/ directory it sends the cookies with the most specific one first: test="value1"; $Path="/foo/bar"; test="value3"; $Path="/foo/"; test="value2"; $Path="/"; Then PHP processes these and it overrides the first two cookies with the most general one which is incorrect. The correct behaviour is to leave the value of the cookie set to the most specific one. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=18337&edit=1