Bug #70028 [Opn->Csd]: $_POST data being automatically filtered.

From: Date: Wed, 15 Jul 2015 06:56:49 +0000
Subject: Bug #70028 [Opn->Csd]: $_POST data being automatically filtered.
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-194452@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=70028&edit=1 ID: 70028 User updated by: treboralmasy1 at gmail dot com Reported by: treboralmasy1 at gmail dot com Summary: $_POST data being automatically filtered. -Status: Open +Status: Closed Type: Bug Package: *General Issues PHP Version: 5.6.10 Block user comment: N Private report: N New Comment: Yep it was Suhosin that was causing the issue. My server admin said that the automatic filtering was one of the 'new features' of 5.6.1. Apparently not. =D Previous Comments: ------------------------------------------------------------------------ [2015-07-14 02:46:24] rasmus@php.net All 3 of these could be doing it and this is the wrong place to ask about those. with the ionCube PHP Loader v4.7.5, Copyright (c) 2002-2014, by ionCube Ltd., and with Zend Guard Loader v3.3, Copyright (c) 1998-2014, by Zend Technologies with Suhosin v0.9.36, Copyright (c) 2007-2014, by SektionEins GmbH Disable them one by one and see which one it is. ------------------------------------------------------------------------ [2015-07-14 00:25:52] treboralmasy1 at gmail dot com I have contacted my server admin about this and here is all the info they gave, though none of it seems to point to anything specific: Memory Information Memory: 16268716k/17301504k available (5336k kernel code, 565380k absent, 467408k reserved, 7016k data, 1292k init) System Information Linux server1.commoncoresheets.com 2.6.32-504.1.3.el6.x86_64 #1 SMP Tue Nov 11 17:57:25 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux Physical Disks sd 0:0:0:0: [sda] 1953525168 512-byte logical blocks: (1.00 TB/931 GiB) sd 1:0:0:0: [sdb] 1953525168 512-byte logical blocks: (1.00 TB/931 GiB) sd 0:0:0:0: [sda] Write Protect is off sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00 sd 1:0:0:0: [sdb] Write Protect is off sd 1:0:0:0: [sdb] Mode Sense: 00 3a 00 00 sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA sd 1:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA sd 0:0:0:0: [sda] Attached SCSI disk sd 1:0:0:0: [sdb] Attached SCSI disk sd 0:0:0:0: Attached scsi generic sg0 type 0 sd 1:0:0:0: Attached scsi generic sg1 type 0 Current Memory Usage total used free shared buffers cached Mem: 16291120 15542064 749056 4380 470748 10204920 -/+ buffers/cache: 4866396 11424724 Swap: 16433144 32920 16400224 Total: 32724264 15574984 17149280 Current Disk Usage Filesystem Size Used Avail Use% Mounted on /dev/md1 908G 55G 808G 7% / tmpfs 7.8G 0 7.8G 0% /dev/shm /dev/md0 992M 113M 828M 12% /boot /dev/sdc1 50G 47G 2.8G 95% /backup Apache version: Server version: Apache/2.2.29 (Unix) Server built: Jul 8 2015 20:42:37 Cpanel::Easy::Apache v3.30.2 rev9999 MySQL version: Server version: 5.5.42-cll MySQL Community Server (GPL) PHP version PHP 5.6.10 (cli) (built: Jul 8 2015 20:45:52) Copyright (c) 1997-2015 The PHP Group Zend Engine v2.6.0, Copyright (c) 1998-2015 Zend Technologies with the ionCube PHP Loader v4.7.5, Copyright (c) 2002-2014, by ionCube Ltd., and with Zend Guard Loader v3.3, Copyright (c) 1998-2014, by Zend Technologies with Suhosin v0.9.36, Copyright (c) 2007-2014, by SektionEins GmbH cPanel version 11.50.0 (build 23) ------------------------------------------------------------------------ [2015-07-09 21:37:47] keithm at aoeex dot com Works for me as well. Perhaps a problem with your server configuration. Can you provide specifics about your setup? tested @ https://aoeex.com/70028/test.php ------------------------------------------------------------------------ [2015-07-08 21:11:03] treboralmasy1 at gmail dot com The SAPI used is CGI PHP. An example of the problem can be found here: http://myservicecalls.com/postTest.php Code in link: <?php error_reporting(E_ALL); $raw_post = file_get_contents('php://input'); echo 'php://input: '.$raw_post; echo '<br/>'; print_r($_POST); echo '<br/>'; $sapi_type = php_sapi_name(); if (substr($sapi_type, 0, 3) == 'cgi') { echo "You are using CGI PHP\n"; } else { echo "You are not using CGI PHP\n"; } ?> <form action="postTest.php" method="POST"> <input type="text" name="username" /> <input type="submit" value="click"> </form> ------------------------------------------------------------------------ [2015-07-08 19:22:43] cmb@php.net I'm not able to reproduce the described behavior with the following self contained test script (PHP 5.6.10, built-in webserver): <?php if ($_SERVER['REQUEST_METHOD'] == 'POST') { var_dump($_POST); var_dump(file_get_contents('php://input')); } ?> <form action="<?=$_SERVER['PHP_SELF']?>" method="POST"> <input type="text" name="username"> <input type="submit" value="click"> </form> Which SAPI do you use? ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=70028 -- Edit this bug report at https://bugs.php.net/bug.php?id=70028&edit=1

« previous php.bugs (#194452) next »