#21093 [NEW]: PHPSESSID not being added to form action="" if input type="image" used

From: jc@mega-bucks.co.jp Operating system: Red Hat Linux 7.2 PHP version: 4.2.3 PHP Bug Type: Session related Bug description: PHPSESSID not being added to form action="" if input type="image" used I have session.auto_start = 1 in my php.ini. I find that the SID is not being added to a form's action="" value if the form contains a <input type="image"> tag ... This is a serious bug as it causes sessions to be lost if <input type="image"> buttons are used in a form. Pasted below is the output of PHP for one of my page swhere I use a form and in it there is an <input type="image"> tag. As you can see the SID is added to the src="" of the image but not to the action="" field of the form, where I believe it is the right place to put it ... Jc <form name="write" action="/hashi/html/market/market.html" method="GET" style="margin:0px";> <input type="hidden" name="write_review" value="true"> <input type="hidden" name="body" value="details"> <input type="hidden" name="pid" value="489000401024"> <table width="650" border="0" cellspacing="0" cellpadding="0"> <tr valign="top"> <td width="65"> <div class="marginleft20"><img src="img/yajirushi_review.gif" width="25" height="42" alt=""></div> </td> <td width="445" valign="bottom"><span class="size12">Ì´Ãæ¤Ë¤Ê¤Ã¤Æ¸«¤Þ¤·¤¿¡£¤½¤ó¤Ê´¶Æ°¤ò¤¢¤Ê¤¿¤â¥«¥¹¥¿¥Þ¡¼¥ì¥Ó¥å¡¼¤Ø½ñ¤­¹þ¤ß¤Þ¤»¤ó¤«¡©¥«¥¹¥¿¥Þ¡¼¥ì¥Ó¥å¡¼¤Ç¤Ï¥æ¡¼¥¶¡¼¤ÎÀ¸¤ÎÈ¿±þ¤ò¤ªÅÁ¤¨¤¤¤¿¤·¤Þ¤¹¡£</span></td> <td width="140" valign="bottom" align="right"><input type="image" name="toukou" src="img/b_writereview.gif?PHPSESSID=046e74dbd20eca0eb4f2fce3896dbc5e" width="118" height="23" alt="¥ì¥Ó¥å¡¼¤ò½ñ¤¯" border="0"></td> </tr> </table> </form> -- Edit bug report at http://bugs.php.net/?id=21093&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=21093&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=21093&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=21093&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=21093&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=21093&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=21093&r=support Expected behavior: http://bugs.php.net/fix.php?id=21093&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=21093&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=21093&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=21093&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=21093&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=21093&r=dst IIS Stability: http://bugs.php.net/fix.php?id=21093&r=isapi