#36536 [NEW]: Character '|' kill whole sessions

From: dave at dgx dot cz Operating system: Windows XP PHP version: 5.1.2 PHP Bug Type: Session related Bug description: Character '|' kill whole sessions Description: ------------ If any session key contains character '|', the whole session will not be saved (and will be erased!) Reproduce code: --------------- <?php session_start(); $_SESSION['La'] = 'Trine'; $_SESSION['a|b'] = 'the killer'; session_write_close(); // test session_start(); var_dump($_SESSION); ?> Expected result: ---------------- array(2) { ["La"]=> string(5) "Trine" ["a|b"]=> string(10) "the killer" } Actual result: -------------- PHP 4.3.9-4.4.2 & 5.0.2-5.1.2 array(0) { } PHP 5.0.0-5.0.1 and previous PHP4 array(3) { ["La"]=> string(5) "Trine" ["a"]=> NULL ["b"]=> string(10) "the killer" } -- Edit bug report at http://bugs.php.net/?id=36536&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=36536&r=trysnapshot44 Try a CVS snapshot (PHP 5.1): http://bugs.php.net/fix.php?id=36536&r=trysnapshot51 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=36536&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=36536&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=36536&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=36536&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=36536&r=needscript Try newer version: http://bugs.php.net/fix.php?id=36536&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=36536&r=support Expected behavior: http://bugs.php.net/fix.php?id=36536&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=36536&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=36536&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=36536&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=36536&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=36536&r=dst IIS Stability: http://bugs.php.net/fix.php?id=36536&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=36536&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=36536&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=36536&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=36536&r=mysqlcfg