PHP 4.0 Bug #6119: session key placed in URL in wrong location
| From: | dmspink at aria dot uklinux dot net | Date: | Sat, 12 Aug 2000 07:03:47 +0000 |
| Subject: | PHP 4.0 Bug #6119: session key placed in URL in wrong location | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-28643@lists.php.net to get a copy of this message | ||
From: dmspink@aria.uklinux.net
Operating system: Linux
PHP version: 4.0.1pl2
PHP Bug Type: Session related
Bug description: session key placed in URL in wrong location
When the anchor reference is generated on the fly from a variable and --enable-trans-sid is used to
append the session key to the end of the URL, its placed in the wrong location. Example script
below:
---------------------------------
<?session_start();?>
<a href="test.php">click here1</a>
<a href="<? echo 'test.php' ?>">click here2</a>
---------------------------------
click here1 has the URL
http://xxxxxxx/test.php?PHPSESSKEY=xxxxxx...xxxx
but for click here2 the second link the URL is
http://xxxxxxxx/?PHPSESSKEY=xxxxxxx..xxxxtest.php
Thanks
Mark