#20575 [NEW]: arg-separator.output default value causes invalid HTML

From: tom.pike@xiven.com Operating system: Linux 2.2.19 PHP version: 4.2.3 PHP Bug Type: URL related Bug description: arg-separator.output default value causes invalid HTML The arg-separator.output default value of "&" causes an invalid HTML/XHTML page to be displayed when PHP attaches the PHPSESSID to any hrefs on the page that already have a querystring. eg: <a href="example.php?page=1"> becomes: <a href="example.php?page=1&PHPSESSID=xxxxxxxxxxx"> which is invalid HTML. It should be: <a href="example.php?page=1&amp;PHPSESSID=xxxxxxxxxxx"> This issue causes problems when sending pages as application/xhtml+xml as Mozilla will detect the error and refuse to display the page. Changing the default value (to "&amp;") should theoretically not cause any backwards compatibility issues since it gets translated (to "&") by the web browser. It will however, help those of us who _do not_ have access to the PHP configuration files on the web server. -- Edit bug report at http://bugs.php.net/?id=20575&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=20575&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=20575&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=20575&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=20575&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=20575&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=20575&r=support Expected behavior: http://bugs.php.net/fix.php?id=20575&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=20575&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=20575&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=20575&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=20575&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=20575&r=dst IIS Stability: http://bugs.php.net/fix.php?id=20575&r=isapi