#27965 [Opn->Bgs]: invalid HTML is created after adding session id to URL's

ID: 27965 Updated by: sniper@php.net Reported By: rch at online dot lt -Status: Open +Status: Bogus Bug Type: Session related Operating System: Linux PHP Version: 4.3.4 New Comment: The ini option is there for this and this is not gonna change. Previous Comments: ------------------------------------------------------------------------ [2004-04-12 14:36:09] rch at online dot lt Description: ------------ Invalid HTML is created after adding session ids to URL's. E.g.: <a href="/p/index.php?action=article&amp;article_id=7&sid=4ecaf17fb3db7aa3782b6ad8d87f9488">more</a> & before "sid" (session id name changed from default) is invalid as it marks start of HTML entity in HTML syntax. This fails to validate a page with formal syntax checker on validator.w3.org for example. You should use &amp; form of escaping instead when adding session ids to references in the HTML output. You may suggest changing arg_separator as in #15504, but most people don't have access to system wide php.ini configuration file on web hosting accounts, and it looks unreasonable to me that special hacking is needed just to get a valid HTML output. Expected result: ---------------- /p/index.php?action=article&amp;article_id=7&amp;sid=4ecaf17fb3db7aa3782b6ad8d87f9488 Actual result: -------------- /p/index.php?action=article&amp;article_id=7&sid=4ecaf17fb3db7aa3782b6ad8d87f9488 ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=27965&edit=1