#22773 [Ver->Ctl]: posted form variables mixed
| From: | sniper@php.net | Date: | Tue, 25 Mar 2003 00:06:59 +0000 |
| Subject: | #22773 [Ver->Ctl]: posted form variables mixed | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-36344@lists.php.net to get a copy of this message | ||
ID: 22773
Updated by: sniper@php.net
Reported By: joe at mcknight dot de
-Status: Verified
+Status: Critical
Bug Type: CGI related
Operating System: Linux
PHP Version: 4.3.2-RC
New Comment:
making critical (should really be fixed before 4.3.2 goes gold..)
Previous Comments:
------------------------------------------------------------------------
[2003-03-24 17:51:39] sniper@php.net
I just tested again this, and could finally reproduce this.
(had an old cgi binary which read wrong php.ini, stupid me..)
Summary of conditions:
- only happens with the regular posts (ie. when rfc1867.c is used, it
works fine, or GET method)
- register_globals has to be 'On'
- The posted value has to be longer than one (1) character
- Only the global variable gets mangled, $_POST[] array has the correct
value
------------------------------------------------------------------------
[2003-03-18 15:36:56] joe at mcknight dot de
With these pages:
test.php:
--------------------
<html>
<body>
<form method="post" action="out.php">
<p>
<input type="text" name="suchstr" size="20">
<input type="submit" value="OK" name="B1">
</p>
</form>
</table>
</body>
</html>
out.php:
-----------
<?
echo "Variable \"suchstr\": $suchstr";
echo "<br>";
echo "Variable \"B1\": $B1";
?>
I get (clicking on the button):
Variable "suchstr": abc&B1=OK
Variable "B1": OK
That means that "suchstr" got mixed with the name and value of Variable
B1!
Feel free to ask for more information or tell me what I'm doing wrong
:-)
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=22773&edit=1