PHP 4.0 Bug #5877: single quote non-compliance
| From: | dietricha at subpop dot com | Date: | Mon, 31 Jul 2000 17:09:38 +0000 |
| Subject: | PHP 4.0 Bug #5877: single quote non-compliance | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-27077@lists.php.net to get a copy of this message | ||
From: dietricha@subpop.com
Operating system: Debian Linux (slink), Apache 1.3.12, PHP 4.0.1
PHP version: 4.0.1
PHP Bug Type: Session related
Bug description: single quote non-compliance
when using php 4.0.1 compiled with --enable-trans-sid:
this script:
<?
print "<a href='test.php'>";
?>
prints this:
<a href='test.php'&PHPSESSID=23hj2hj3j3jhhk2k>
and session id is not propagated.
php4 isn't acknowledging single quotes to be valid delimiters of href attribute values.
Note from W3C HTML 4.01 specification:
"By default, SGML requires that all attribute values be delimited using either double quotation
marks (ASCII decimal 34) or single quotation marks (ASCII decimal 39). Single quote marks can be
included within the attribute value when the value is delimited by double quote marks, and vice
versa."