#24007 [Opn->Csd]: register_globals + request arrays = missing register_global variables

ID: 24007 Updated by: iliaa@php.net Reported By: gateschris at yahoo dot com -Status: Open +Status: Closed Bug Type: Scripting Engine problem Operating System: Linux version 2.2.19 PHP Version: 4.3.2 Assigned To: iliaa New Comment: This bug has been fixed in CVS. In case this was a PHP problem, snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. In case this was a documentation problem, the fix will show up soon at http://www.php.net/manual/. In case this was a PHP.net website problem, the change will show up on the PHP.net site and on the mirror sites in short time. Thank you for the report, and for helping us make PHP better. Previous Comments: ------------------------------------------------------------------------ [2003-06-13 11:55:51] rasmus@php.net I'm not ready to give up on this one. This used to work and really should be fixed. ------------------------------------------------------------------------ [2003-06-13 10:19:21] iliaa@php.net You should either use the recommended _REQUEST super global or not create values with the same names in both POST & GET if you need to use register_globals. ------------------------------------------------------------------------ [2003-06-04 10:32:57] iliaa@php.net The fix only fixed the _REQUEST, which is what you should be using. The register_global variables still have the same issue. I will look into this issue to see if it can be easily fixed, but I suspect there is a greater chance this will be marked won't fix. ------------------------------------------------------------------------ [2003-06-04 05:59:48] gateschris at yahoo dot com Hi Philip, Yes, sorry i did not find that report before, but bug report #23454 relates to a 4.3.2RC3-dev not 4.3.2 release version, and the bug report is closed, and iliaa@php.net mentions that they have patched the cvs on the 13 May (before the release version), so perhaps something is still wrong here, it seems like a serious bug in a release version to me. I will wait for the next point release (incase the patch was passed over this current release). Cheers, ------------------------------------------------------------------------ [2003-06-04 00:39:31] philip@php.net Verified and related to bug #23454 Note that $_REQUEST works perfectly here... <?php if (@$_POST['action'] == 'submit') { print "<pre>"; print_r(array('get' => $_GET, 'post' => $_POST, 'request' => $_REQUEST, 'foo' => $foo)); } else { ?> <form method="POST" action="<?php echo $_SERVER['PHP_SELF'] ?>?foo[a][a]=a"> <br><input type="text" name="foo[]" value="b"> <br><input type="text" name="foo[a][b]" value="c"> <br><input type="submit" name="submit" value="submit"> <input type="hidden" name="action" value="submit"> </form> <?php } ?> Outputs: Array ( [get] => Array ( [foo] => Array ( [a] => Array ( [a] => a ) ) ) [post] => Array ( [foo] => Array ( [0] => b [a] => Array ( [b] => c ) ) [submit] => submit [action] => submit ) [request] => Array ( [foo] => Array ( [a] => Array ( [a] => a [b] => c ) [0] => b ) [submit] => submit [action] => submit ) [foo] => Array ( [0] => b [a] => Array ( [b] => c ) ) ) ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/24007 -- Edit this bug report at http://bugs.php.net/?id=24007&edit=1