#23405 [NEW]: fopen() fails when SessionID is added as GET-Param

From: helmut dot chang at tuivelsminne dot at Operating system: SuSE Linux 8.0 PHP version: 4.3.2RC2 PHP Bug Type: HTTP related Bug description: fopen() fails when SessionID is added as GET-Param Using Apache 1.3.27 with mod_ssl and mod_php4 as DSO, fopen() fails when adding SessionID as GET-Parameter: test1.php: <?php session_start(); $fp = fopen('http://domain.tld/test2.php?'.session_name().'='.session_id(), 'r'); ?> test2.php: <?php session_start(); ?> Calling 'test1.php' makes the server busy for the max_execution_time and then producing the message: Warning: fopen(http://cmit.dev.is-it-on.at/test2.php?PHPSESSID=d438afbea1645cab6e557bd7cb396165): failed to open stream: HTTP request failed! main:443 for SSL protocol L library ound (st in /daten/www-data/cmIT/htdocs/test.php on line 4 The part between 'HTTP request failed!' and 'in /daten/...' changes each time, sometimes producing somewhat looking like binary data. Changing test1.php to: $fp = fopen('http://domain.tld/test2.php', 'r'); doesn't cause any problems. The same, when using other GET-Params: $fp = fopen('http://domain.tld/test2.php?test=TRUE', 'r'); works also. I just compiled a new PHP, using the latest Snapshot, after reading the Bugreports #19051, #22937, #20759,..., but it seems to me, the problem is not exact the same: fopen works ALWAYS with 'normal' HTTP-URLs and NEVER works when adding the SessionID. -- Edit bug report at http://bugs.php.net/?id=23405&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=23405&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=23405&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=23405&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=23405&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=23405&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=23405&r=support Expected behavior: http://bugs.php.net/fix.php?id=23405&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=23405&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=23405&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=23405&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=23405&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=23405&r=dst IIS Stability: http://bugs.php.net/fix.php?id=23405&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=23405&r=gnused