Req #29401 [Opn->Fbk]: Form POST not decoded properly
| From: | heiglandreas@php.net | Date: | Fri, 20 Jan 2017 20:23:57 +0000 |
| Subject: | Req #29401 [Opn->Fbk]: Form POST not decoded properly | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-206781@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=29401&edit=1
ID: 29401
Updated by: heiglandreas@php.net
Reported by: xmlguy at hotmail dot com
Summary: Form POST not decoded properly
-Status: Open
+Status: Feedback
Type: Feature/Change Request
-Package: Feature/Change Request
+Package: *General Issues
Operating System: Win XP Pro
PHP Version: 4.3.8
Block user comment: N
Private report: N
New Comment:
Is this still relevant?
Previous Comments:
------------------------------------------------------------------------
[2011-12-21 18:06:01] mikebianc at aol dot com
fwiw, python parses this properly. I'm just seeing an empty array!
<form enctype="multipart/form-data" action='/fileupload.php' method=post>
<input multiple=true type=file name='file["my{}stuff"].data'><input
type=submit value='submit'></form>
var_dump($_FILES) yields:
array(0) {}
If I change the 'action' to a python script, I see this:
[ { 'file["my{}stuff"].dataâ, âtestfile2.txtâ, âthis is another
test file (2)\nâ }, { âfile["my{}stuff"].dataâ, âtestfile1.txtâ,
âthis is test file 1\nâ } ] ]
POST source:
Content-Type: multipart/form-data; boundary=---------------------------141539390286251557952150290
Content-Length: 468 -----------------------------141539390286251557952150290 Content-Disposition:
form-data; name="file[\"my{}stuff\"].data"; filename="testfile2.txt"
Content-Type: text/plain this is another test file (2)
-----------------------------141539390286251557952150290 Content-Disposition: form-data;
name="file[\"my{}stuff\"].data"; filename="testfile1.txt"
Content-Type: text/plain this is test file 1
-----------------------------141539390286251557952150290--
------------------------------------------------------------------------
[2004-10-12 00:32:05] xmlguy at hotmail dot com
I indicated this as an mbstring related problem because the similar bugs I found used this as the
category.
See bugs 20114 19507 19347 20024 20133.
------------------------------------------------------------------------
[2004-10-08 16:17:43] moriyoshi@php.net
How come this could be a mbstring related problem..?
------------------------------------------------------------------------
[2004-07-27 02:44:23] xmlguy at hotmail dot com
with the version of the form I posted, the expected and actual result sample data should obviously
reflect the strings "John" and "Doe" instead of "billy" and
"joel", respectfully.
------------------------------------------------------------------------
[2004-07-27 02:33:53] xmlguy at hotmail dot com
Description:
------------
If key contains more than one set of square brackets, the key value pair is not decoded properly.
For example, a form with a series of input elements named such as
"formname[0].fieldname[0]" will cause incorrect and missing key/value pairs to be stored
into the $_POST array.
In researching the existing bug list, I noticed that there have been numerous variations of bugs
reported when form data contains url encoded data, such as occurs when the brackets are encoded as
%5b and %5d. However these bugs have apparently been closed without actually fixing this problem.
Perhaps a more thorough analysis of this problem is warranted to keep it from lingering on for a few
more years before this report is closed. The Adobe acrobat products/reader have just started to
encode form names in this format, so it could become a very serious issue if PHP cannot correctly
process this form data.
Reproduce code:
---------------
<html>
<head><title>Form Submit Test Script</title></head>
<body>
<form name='fm1' action="<? echo
($_SERVER["HTTP_REFERER"])?>" method='post'>
<input type='text' name='form1[0].firstname[0]' value='John'
/>
<input type='text' name='form1[0].lastname[0]' value='Doe'
/>
<input type='submit' />
</form>
<?
var_dump($_POST);
?>
</body>
</html>
Expected result:
----------------
array(2) { ["form1[0].firstname[0]"]=> string(5) "billy"
["form1[0].lastname[0]"]=> string(4) "joel" }
Actual result:
--------------
array(1) { ["form1"]=> array(1) { [0]=> string(4) "joel" } }
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=29401&edit=1