#22773 [Ctl]: posted form variables mixed

ID: 22773 Updated by: iliaa@php.net Reported By: joe at mcknight dot de Status: Critical Bug Type: CGI related Operating System: Linux PHP Version: 4.3.2-RC New Comment: This problem is a rather interesting one, it appears that in CGI the entire POST data makes into the enviroment. You can see this by adding a printf() to _php_import_environment_variables() function. The last element will contain the entire POST string. If that string contains a '=', then data before the '=' becomes the key (variable name) and the rest the variable content. Meaning that by the time the POST variables are registered $suchstr already has a value. One way to fix this is to prevent duplicate variable registration by breaking on the 1st invalid entry from the enviroment inside _php_import_environment_variables(), which happens to be the script name, which is followed by either the POST data or random garbage. Here is the relavent patch: http://bb.prohost.org/22773.txt Previous Comments: ------------------------------------------------------------------------ [2003-03-25 05:52:58] moriyoshi@php.net Related to bug #22612 ------------------------------------------------------------------------ [2003-03-24 18:33:26] rasmus@php.net That means a command-line test case in tests/basic should fail as well. ------------------------------------------------------------------------ [2003-03-24 18:17:01] sniper@php.net It doesn't matter. I tried two different ways, both failed. For example (otherwise default httpd.conf): AddType application/x-httpd-php .php ScriptAlias /php/ "/www/apache/cgi-bin/" Action application/x-httpd-php /php/php-cgi ------------------------------------------------------------------------ [2003-03-24 18:12:23] rasmus@php.net How are you triggering the cgi? ie. what does your Apache config look like? ------------------------------------------------------------------------ [2003-03-24 18:06:58] sniper@php.net making critical (should really be fixed before 4.3.2 goes gold..) ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/22773 -- Edit this bug report at http://bugs.php.net/?id=22773&edit=1