Re: PHP 4.0 Bug #7593 Updated: trans-sid doesn't work in JavaScript onClick URLs

> ID: 7593 > Updated by: sas > Reported By: justin@solidlinux.com > Status: Closed > Bug Type: *Session related > Assigned To: > Comments: > > We certainly would appreciate your contribution of an AI which implements the desired feature. Well, I guess it would require a list to be put together that contains the various JavaScript functions that have a URL as an argument. Once that is done, the URL can be recognized by the ' and ' around it within these functions and the session query string stuff could be inserted in. From what I've seen between 4.0.3 and 4.0.3pl1, a functionality was added which automatically inserts a hidden form field just inside the <form> tag in order to pass the session key during POST or GET. I assume this is more or less regexed in the document and then added in. Couldn't the same sort of function look for known JavaScript calls? Or at least certain ones like window.open? -Justin ---- Original Message ---- > ID: 7593 > Updated by: sas > Reported By: justin@solidlinux.com > Status: Closed > Bug Type: *Session related > Assigned To: > Comments: > > We certainly would appreciate your contribution of an AI which implements the desired feature. > > Previous Comments: > --------------------------------------------------------------------------- > > [2000-11-02 10:28:27] justin@solidlinux.com > In an anchor tag such as this: > > <a href="?session=12405dbb3a5f101c5f1bd8da4da5c685#7" > onClick="instructions = > window.open('/benchmarks/instructions.php#7','instructions','width=700,height=500,scrollbars'); > instructions.focus();">detailed definition</a> > > The session_id is not automatically inserted into the > window.open URL. I think it should be :-) > > -Justin > > > --------------------------------------------------------------------------- > > > Full Bug description available at: http://bugs.php.net/?id=7593 > >