Bug #14984 Updated: php parser problem, with // comment, can reveal script

From: Date: Mon, 29 Apr 2002 11:33:30 +0000
Subject: Bug #14984 Updated: php parser problem, with // comment, can reveal script
References: 1  Groups: php.bugs php.doc 
Request: Send a blank email to php-bugs+get-6444@lists.php.net to get a copy of this message
ID: 14984 Updated by: manuzhai@php.net Reported By: dd@asi.fr -Status: Open +Status: Closed Bug Type: Documentation problem Operating System: windows and other PHP Version: 4.0.6 New Comment: This bug has been fixed in CVS. You can grab a snapshot of the CVS version at http://snaps.php.net/ Previous Comments: ------------------------------------------------------------------------ [2002-01-26 12:28:42] irc-html@php.net Un-assigning. Status -> Open ------------------------------------------------------------------------ [2002-01-19 22:05:27] irc-html@php.net I'll add a note in the documentation about this. Status -> Assigned ------------------------------------------------------------------------ [2002-01-11 05:56:38] hholzgra@php.net '?>' in a comment switching out of php mode is intended behaviour, consider ...<?php foo($bar); // do foo ?>... embedded in a document changing this would break backwards compatibility and would lead to problems of its own kind changed to "documentation problem" ------------------------------------------------------------------------ [2002-01-10 19:03:01] dd@asi.fr Hi all, I found this bug randomly as all other, it cause me a php html parser to crash. try a script like this : <?php // eval('?>'.$tmp); // eval('>'.$tmp); $coucou=''; $password = 'le parser php déconne'; $password = 'php parser bug'; /* <? php ?> */ // // coucou ?> // ?> // ? // > ?> see the result, abnormal I think: '.$tmp); // eval('>'.$tmp); $coucou=''; $password = 'le parser php déconne'; $password = 'php parser bug'; /* */ // // coucou ?> // ?> // ? // > ?> I think it can be a very very serious, easy to fiw fot you, but in the case a php user encounter it. It so surpising !!! thanks. An echo please. Yours faithlly php is always great!. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=14984&edit=1

« previous php.bugs (#6444) next »