#18340 [Dup->Csd]: session management without cookies inserts not-XHTML-conform INPUT

ID: 18340 Updated by: sniper@php.net Reported By: hnt@gmx.at -Status: Duplicate +Status: Closed Bug Type: Session related Operating System: Linux 2.4.18 PHP Version: 4.2.1 New Comment: This bug has been fixed in CVS. In case this was a PHP problem, snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. In case this was a documentation problem, the fix will show up soon at http://www.php.net/manual/. In case this was a PHP.net website problem, the change will show up on the PHP.net site and on the mirror sites in short time. Thank you for the report, and for helping us make PHP better. Previous Comments: ------------------------------------------------------------------------ [2002-07-14 18:02:32] sniper@php.net Just remove the 'form=fake..' from the ini setting and add the session id 'manually' in your code. About when this will be fixed..well..not very soon I guess. (I myself don't know the related code at all to be able to fix it..) ------------------------------------------------------------------------ [2002-07-14 17:59:12] hnt@gmx.at Around when can a fix be expected? It is a bit annoying because the suggested workaround from bugreport #13472 is Transitional-conform but wont validate against Strict :-( ------------------------------------------------------------------------ [2002-07-14 17:47:19] sniper@php.net Duplicate of: http://bugs.php.net/bug.php?id=13472 ------------------------------------------------------------------------ [2002-07-14 15:51:24] hnt@gmx.at By "without cookies" I meant when the browser does not accept the sessionID cookie and php rewrites the document to maintain state ------------------------------------------------------------------------ [2002-07-14 15:46:23] hnt@gmx.at I am using php 4.2.1 The session.use_trans_sid is set to "1" and url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=action" Still the output is not Xhtml 1.0 Strict Valid -- w3 Validator output -- Error: element "input" not allowed here; possible cause is an inline element containing a block-level element -- the incorrect line is <form method="post" action="index.php?phpdiaryID=88e24d5c84040f8f3f5b1cd12e4fc9a2"><input type="hidden" name="phpdiaryID" value="88e24d5c84040f8f3f5b1cd12e4fc9a2" /><p><input type="hidden" name="a" value="login" /> As you can see, there is a "<p>" there. PHP should place the hidden input-field after the <p> then it should be perfectly ok... ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=18340&edit=1