Bug #70273 [Opn]: header(): Setting the Location header will set a status code of 202 to 302.

Edit report at https://bugs.php.net/bug.php?id=70273&edit=1 ID: 70273 Updated by: cmb@php.net Reported by: jeff at nd4c dot com Summary: header(): Setting the Location header will set a status code of 202 to 302. Status: Open Type: Bug Package: HTTP related Operating System: Any PHP Version: Irrelevant Block user comment: N Private report: N New Comment: RFC 7231, section 7.1.2 states[1]: | For 201 (Created) responses, the Location value refers to the | primary resource created by the request. For 3xx (Redirection) | responses, the Location value refers to the preferred target | resource for automatically redirecting the request. No mention of 202 responses in this section. IMHO, this is not a bug. [1] <http://tools.ietf.org/html/rfc7231#section-7.1.2> Previous Comments: ------------------------------------------------------------------------ [2015-08-14 19:45:01] jeff at nd4c dot com Description: ------------ Setting the Location header will set a status code of 202 to 302. From the online documentation: (http://php.net/manual/en/function.header.php) ... The second special case is the "Location:" header. Not only does it send this header back to the browser, but it also returns a REDIRECT (302) status code to the browser unless the 201 or a 3xx status code has already been set. ... The auto redirect ignores status codes: 201 and 3xx, but it SHOULD also ignore status code: 202. Using the Location header for a 202 response is now the standard for a RESTful api. According to: http://restcookbook.com/Resources/asynchroneous-operations/ ...you can then issue at 202 (Accepted) response code. This informs the client that the request has been accepted and understood by the server, but the resource is not (yet) created. Send the temporary resource inside the Location header. Request: POST /blogs HTTP/1.1 <xml> blogdata </xml> Response: HTTP/1.1 202 Accepted Location: /queue/12345 ... Test script: --------------- header("HTTP/1.1 202 Accepted"); header('Location: /some/arbitrary/uri'); // This will change the status code to 302, but it shouldn't header('Location: /some/arbitrary/uri'); header("HTTP/1.1 202 Accepted", true, 202); // This works, always forcing the status code prevents the defaults redirect handling. Expected result: ---------------- Status code 202 should remain as 202 after a Location header is set. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=70273&edit=1