Re: cvs: php-src /main php_variables.c
| From: | Stefan Esser | Date: | Sat, 23 Apr 2005 23:30:02 +0000 |
| Subject: | Re: cvs: php-src /main php_variables.c | ||
| References: | 1 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-31561@lists.php.net to get a copy of this message | ||
Jani Taskinen wrote:
sniper Sat Apr 23 16:33:35 2005 EDTCould you please revert that patch, or implement the RFC correctly? Now PHP handles cookies in a completely RFC uncovered way. Either we have support for , ; " or only for ; but not something in between. F.e. with your patch you just fucked modsecurity again which will fail to correctly detect evil cookie variables. No matter if you configure it to use V0 or V1 of its detection. StefanModified files: /php-src/main php_variables.c Log:- Fixed bug #32111 (Cookies can also be separated by colon)