PHP 4.0 Bug #6123: Transparent Session ID (SID) miss substitution.
| From: | geoff at zone12 dot com | Date: | Sat, 12 Aug 2000 13:38:08 +0000 |
| Subject: | PHP 4.0 Bug #6123: Transparent Session ID (SID) miss substitution. | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-28664@lists.php.net to get a copy of this message | ||
From: geoff@zone12.com
Operating system: Linux 2.2.10
PHP version: 4.0.1pl2
PHP Bug Type: Session related
Bug description: Transparent Session ID (SID) miss substitution.
the code:
<A HREF="/contact/info.php?ID=<? print "1"; ?>"> blah </A>
is morphed into:
<A HREF="/contact/info.php?ID=&PHPSESSID=d420a697e7b1a7af11007fac138a49a61">
blah </A>
On line 167 of "url_scanner.re" the pattern matching thing stops after it sees the second
quote.. could this be what's happening? (I guess the code's being substituted before the
php stuff is removed.)