Bug #16052 Updated: Some predefined variables allow GET overwrite

ID: 16052 Updated by: rlm@pricegrabber.com Reported By: rlm@pricegrabber.com Status: Open Bug Type: Apache related Operating System: RH 7.2 PHP Version: 4.1.2 New Comment: Funny, the docs say the "S" stands for "Server" variables: http://www.php.net/manual/en/configuration.php#ini.register-globals Furthermore, it doesn't make any comment whatsoever as to the nature of the HTTP_* variables, though the predefined variables page claims some are Apache, and some are environment. http://www.php.net/manual/en/language.variables.predefined.php In this instance, it says HTTP_ACCEPT_CHARSET and HTTP_REFERER are both Apache (presumably, "S"erver, yes?) variables. So are you saying this is a documentation bug? Previous Comments: ------------------------------------------------------------------------ [2002-03-14 02:10:20] daniel@php.net sorry, it's EGPCS by default. ------------------------------------------------------------------------ [2002-03-14 02:08:47] daniel@php.net are you sure? HTTP_* variables are environment variables. the variables_order is normally set to EGCPS (if not, change it) where "S" is not "Server Variables" but "SESSION Variables". this behaviour thus looks intentional - first HTTP_ACCEPT_CHARSET is set by the environment, then you overwrite it with a GET. ------------------------------------------------------------------------ [2002-03-13 18:56:56] rlm@pricegrabber.com Incidentally, our variables_order flag is set to "GPCS". ------------------------------------------------------------------------ [2002-03-13 18:47:07] rlm@pricegrabber.com Been there, done that. So, why don't any of the other variables from purportedly the same source (s/b "S", yes?) change when I request this on the command line? The point is that either (a) the docs are broken here and the two variables in question aren't from the server, or (b) the EGPCS processing is broken, take your pick. ------------------------------------------------------------------------ [2002-03-13 18:27:06] daniel@php.net read the manual on "variables_order" ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/16052 -- Edit this bug report at http://bugs.php.net/?id=16052&edit=1