Bug #15678 Updated: isset fails for 4.1.1 and CVS version

ID: 15678 Updated by: derick@php.net Reported By: alberty@neptunelabs.de -Status: Critical +Status: Open Bug Type: Variables related Operating System: i686-pc-linux-gnu PHP Version: 4.0CVS-2002-02-2 New Comment: Not critical. PHP can not work around *all* user errors. Derick Previous Comments: ------------------------------------------------------------------------ [2002-02-28 04:29:13] yohgaki@php.net OOPS. isset() must not return FALSE when value is not set. should be isset() must not return TRUE when value is not set. ------------------------------------------------------------------------ [2002-02-28 03:47:28] yohgaki@php.net This is critical bug in any cases. isset() must not return FALSE when value is not set. This is enough to be a critical bug. This bug is not only hard to find, but also can make security hole in script. Don't you have script relys on isset() to grant access? (Well, I don't have actually since I like everything to be explicit, but some users will have) ------------------------------------------------------------------------ [2002-02-27 07:24:00] derick@php.net not critical ------------------------------------------------------------------------ [2002-02-23 22:59:43] yohgaki@php.net It should be fixed before 4.2.0 at least. Hopefully before 4.1.2 :) ------------------------------------------------------------------------ [2002-02-22 11:41:57] mfischer@php.net Btw, this has nothing to do with current CVS. This applies to at least 4.1.0 I tested (so there's nothing broken since current stable and CVS; if it's broken, it is for a long time) ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/15678 -- Edit this bug report at http://bugs.php.net/?id=15678&edit=1