#23049 [Ver->Bgs]: href, textarea, session.use_trans_sid = 1 and session.use_cookies = 0

ID: 23049 Updated by: iliaa@php.net Reported By: adu@php.net -Status: Verified +Status: Bogus Bug Type: Session related Operating System: REDHAT 8 PHP Version: 4.3.2-RC New Comment: Thank you for taking the time to write to us, but this is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php The <a href> should've been encoded, then the problem would not have occured. Expected behaviour with invalid HTML. Previous Comments: ------------------------------------------------------------------------ [2003-04-04 11:15:09] sniper@php.net Tested with latest stable CVS. ------------------------------------------------------------------------ [2003-04-04 06:43:34] adu@php.net Write this into a php file // START HERE ////////////////////////// <?php session_start(); ?> <form><textarea><a href=/>ROOT</a></textarea></form> // END HERE ////////////////////////// If you have session.use_trans_sid = 1 session.use_cookies = 0 in php.ini, href=/ will be replaced with href="/?PHPSESSID=8c620e45832e417c14f3458c0a826274" although it is into a textarea. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=23049&edit=1