#34999 [Fbk->Opn]: setcookie() uses wrong format for expiry date in http header

ID: 34999 User updated by: giunta dot gaetano at sea-aeroportimilano dot it Reported By: giunta dot gaetano at sea-aeroportimilano dot it -Status: Feedback +Status: Open Bug Type: HTTP related Operating System: Solaris 8 PHP Version: 4.4.0 New Comment: OK. Running PHP 4.4.1, the day-of-week is correctly written using the 3 letters code, both on windows and solaris. Previous Comments: ------------------------------------------------------------------------ [2005-10-27 15:16:57] derick@php.net Please try using this CVS snapshot: http://snaps.php.net/php4-STABLE-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-STABLE-latest.zip ------------------------------------------------------------------------ [2005-10-27 15:12:13] giunta dot gaetano at sea-aeroportimilano dot it Description: ------------ The day-of-week part of the expiry date in the set-cookie http header generated by PHP uses the full day name instead of the 3 letters abbreviation (as per RFC 822) on Solaris8 + Apache 2.0.54 + PHP 4.4.0. It also puts dashes between date parts insted of spaces. Note that the cookie spec that PHP follows is 'version 0' cookies, available at: http://wp.netscape.com/newsref/std/cookie_spec.html In that spec the mentioned format for time is rfc 822 (which has been superseded by rfc 1123), which explicitly mentions using 3 letters for day-of-week and spaces between date parts. PHP bug #33597 (closed) mentions explicitly rfc 2616 as permitting the long weekday format, but, imho, it does not applicate to the cookie header, which should follow only rfc 1123. BTW: on Linux and Windows, php 4.4.0 uses the rfc 1123 format... Reproduce code: --------------- <?php setcookie('hello', '12345', time()+60*60); ?> + use mozilla LiveHTTPHeader to see results: Expected result: ---------------- HTTP/1.x 200 OK Date: Thu, 27 Oct 2005 12:44:11 GMT Server: Apache/2.0.54 (Unix) PHP/4.4.0 X-Powered-By: PHP/4.4.0 Set-Cookie: hello=12345; expires=Thu, 27-Oct-05 13:44:11 GMT Content-Length: 0 Keep-Alive: timeout=15, max=1000 Connection: Keep-Alive Content-Type: text/html Actual result: -------------- HTTP/1.x 200 OK Date: Thu, 27 Oct 2005 12:44:11 GMT Server: Apache/2.0.54 (Unix) PHP/4.4.0 X-Powered-By: PHP/4.4.0 Set-Cookie: hello=12345; expires=Thursday, 27Oct 2005 13:44:11 GMT Content-Length: 0 Keep-Alive: timeout=15, max=1000 Connection: Keep-Alive Content-Type: text/html ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=34999&edit=1