#20968 [NEW]: Session rewriter misses a case

From: Date: Thu, 12 Dec 2002 17:42:10 +0000
Subject: #20968 [NEW]: Session rewriter misses a case
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-27512@lists.php.net to get a copy of this message
From: CharlesK@netgaintechnology.com Operating system: Windows 2000 PHP version: 4.2.3 PHP Bug Type: Session related Bug description: Session rewriter misses a case Whe html is written with javascript and trans sid is used, The javascript may get messed up. ie <script LANGUAGE=JavaScript1.2> str += "<form name=reptoc>"; </script> becomes <script LANGUAGE=JavaScript1.2> str += "<form name="reptoc"><input type="hidden" name="PHPSESSID" value="some value" />"; </script> This produces a parse error because the quotes are breaking the string. Thanks Charles Killmer -- Edit bug report at http://bugs.php.net/?id=20968&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=20968&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=20968&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=20968&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=20968&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=20968&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=20968&r=support Expected behavior: http://bugs.php.net/fix.php?id=20968&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=20968&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=20968&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=20968&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=20968&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=20968&r=dst IIS Stability: http://bugs.php.net/fix.php?id=20968&r=isapi

« previous php.bugs (#27512) next »