PHP 4.0 Bug #3411 Updated: Transparent sessions breaking randomly

ID: 3411 Updated by: hholzgra Reported By: mian@thirty4.com Status: Analyzed Bug Type: Misbehaving function Assigned To: Comments: this is a transcript from phpdev list that should explain what's wrong here: On Mon, 3 Jul 2000, Hartmut Holzgraefe wrote: > there is some problem related to the interaction of output buffering > (i guess) and --trans-sid-id url rewriting > > the problem is that the function performing the actual rewrite > (url_scanner() in ext/standard/url_scanner.c) will be provided > with chunks of data that may contain incomplete parts of an url > spanning across a buffer boundary > > as the url_scanner() does not know that it was provided with > incomplete data it will attach the session id parameter to the > end of the url as it appears in the buffer passed into it as a > parameter, and in the next step the remaining part of the url > located at the very beginning of the next chunk of output is > appended to the session id parameter just added, with the final > result of an url with the session id parameter stuffed into the > middle of the url Correct analysis. The fix is to make the url scanner context-sensitive, so that it will buffer and correctly patch URLs. Please use output buffering in the meantime. - Sascha Full Bug description available at: http://bugs.php.net/?id=3411