#28373 [Opn->Bgs]: Backslashes no longer escaped in $_SERVER variables

ID: 28373 Updated by: sniper@php.net Reported By: phpbugreport at thedigitalnetwork dot com -Status: Open +Status: Bogus Bug Type: Apache2 related Operating System: Windows XP SP1 PHP Version: 5CVS-2004-05-12 (dev) New Comment: Bug was fixed. (phpinfo() output is not necessarily the "real" data, it's usually modified to _look_ good) Previous Comments: ------------------------------------------------------------------------ [2004-05-12 18:04:16] phpbugreport at thedigitalnetwork dot com Description: ------------ In PHP4.3.4, $_SERVER['HTTP_REFERER'], along with others like PATH, SystemRoot, COMSPEC and WINDIR, have any backslashes escaped. In PHP5RC2 & the current DEV (php5-win32-200405121430.zip) version, the items in $_SERVER are not escaped anymore. I could find no mention in the bug database or change logs, so I wondered if this was a change in the way Super Globals are handled, since $_SERVER is not part of "GPC"? Relevent INI settings: ---------------------- register_globals=Off register_argc_argv = Off gpc_order = "GPC" variables_order = "GPCS" magic_quotes_gpc = On magic_quotes_runtime = Off magic_quotes_sybase = Off ---------------------- Thanks for your assistance! Reproduce code: --------------- phpinfo(); Expected result: ---------------- Expect to see items in _SERVER with backslashes escaped: [HTTP_REFERER] => http://localhost/Browse.php?Category=\\Language%20Arts\\Reading\\Letter%20TV&Level=4 [PATH] => C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\Program Files\\Common Files\\GTK\\2.0\\bin [SystemRoot] => C:\\WINDOWS [COMSPEC] => C:\\WINDOWS\\system32\\cmd.exe Actual result: -------------- Unescaped backslashes: [HTTP_REFERER] => http://localhost/Browse.php?Category=\Language%20Arts\Reading\Letter%20TV&Level=4 [PATH] => C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Common Files\\TK\2.0\bin [SystemRoot] => C:\WINDOWS [COMSPEC] => C:\WINDOWS\system32\cmd.exe ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=28373&edit=1