#23049 [NEW]: href, textarea, session.use_trans_sid = 1 and session.use_cookies = 0

From: adu@php.net Operating system: REDHAT 8 PHP version: 4.3.0 PHP Bug Type: Session related Bug description: href, textarea, session.use_trans_sid = 1 and session.use_cookies = 0 Write this into a php file // START HERE ////////////////////////// <?php session_start(); ?> <form><textarea><a href=/>ROOT</a></textarea></form> // END HERE ////////////////////////// If you have session.use_trans_sid = 1 session.use_cookies = 0 in php.ini, href=/ will be replaced with href="/?PHPSESSID=8c620e45832e417c14f3458c0a826274" although it is into a textarea. -- Edit bug report at http://bugs.php.net/?id=23049&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=23049&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=23049&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=23049&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=23049&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=23049&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=23049&r=support Expected behavior: http://bugs.php.net/fix.php?id=23049&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=23049&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=23049&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=23049&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=23049&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=23049&r=dst IIS Stability: http://bugs.php.net/fix.php?id=23049&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=23049&r=gnused