Bug #14280 Updated: session url rewriting not working?

From: Date: Thu, 29 Nov 2001 15:57:33 +0000
Subject: Bug #14280 Updated: session url rewriting not working?
References: 1  Groups: php.dev 
Request: Send a blank email to php-dev+get-72033@lists.php.net to get a copy of this message 
ID: 14280
Updated by: derick
Reported By: jroenberg@dk.tiscali.com
Status: Bogus
Bug Type: Session related
Operating System: Sun Solaris
PHP Version: 4.0.6
New Comment:

The HTTP standard does not allow relative paths / files in the Location: header.
You should always use this form:

Location: http://servername.domain.nl/file.php

Derick

Previous Comments:
------------------------------------------------------------------------

[2001-11-29 10:43:51] jroenberg@dk.tiscali.com

it does put in a hidden field, I was to quick there, sorry 
about that.

about the header function:
it works saying header("Location: test.php");
you don't have to specify an absolute path, so that means 
a lot of people out there don't. Maybe thats a bug (or a 
feature) in itself.

So whats the story about the header-function, bug? Or if 
not, should'nt it be possible to rewrite the header it its 
relative?


------------------------------------------------------------------------

[2001-11-29 09:20:30] hholzgra@php.net

please check for an added hidden field in <form>.
reopen the bug report if you do not find one

for the "Location:" header:

- trans-sid does only rewrite the HTML content,
  not the headers

- relative URLs are not allowed in Location: headers
   (see php.net/header for further info)



------------------------------------------------------------------------

[2001-11-29 09:12:36] jroenberg@dk.tiscali.com

when compiling php version 4.06 with '--enable-trans-sid' and thereafter setting
'session.use_cookies off' in php.ini or in Apache's virtual host container.

Does anyone know why the url rewriting works like this:
- when it encounters a 'href' it do rewrite
- when it encounters a header("Location: test.php"); it does not rewrite
- when it encounters a <form action=test.php > it does not rewrite

im not sure its a bug, but if it is not - then there is'nt much fun in using url rewriting at
all for sessions. 

'./configure' '--with-apache=../apache_1.3.20'
'--with-config-file-path=/etc' '--without-system-regex'
'--enable-versioning' '--enable-track-vars' '--enable-trans-sid'
'--with-oci8=/home/oracle/product/8.1.7/' '--with-mysql=/opt/mysql-3.23.32' 




------------------------------------------------------------------------



Edit this bug report at http://bugs.php.net/?id=14280&edit=1

Thread (5 messages)

« previous php.dev (#72033) next »