Bug #14984 Updated: php parser problem, with // comment, can reveal script
| From: | irc-html@php.net | Date: | Sat, 26 Jan 2002 17:28:43 +0000 |
| Subject: | Bug #14984 Updated: php parser problem, with // comment, can reveal script | ||
| References: | 1 | Groups: | php.dev php.doc |
| Request: | Send a blank email to php-dev+get-78190@lists.php.net to get a copy of this message | ||
ID: 14984
Updated by: irc-html
Reported By: dd@asi.fr
Old Status: Assigned
Status: Open
Bug Type: Documentation problem
Operating System: windows and other
PHP Version: 4.0.6
Assigned To: irc-html
New Comment:
Un-assigning.
Status -> Open
Previous Comments:
------------------------------------------------------------------------
[2002-01-19 22:05:27] irc-html@php.net
I'll add a note in the documentation about this.
Status -> Assigned
------------------------------------------------------------------------
[2002-01-11 05:56:38] hholzgra@php.net
'?>' in a comment switching out of php mode
is intended behaviour, consider
...<?php foo($bar); // do foo ?>...
embedded in a document
changing this would break backwards compatibility
and would lead to problems of its own kind
changed to "documentation problem"
------------------------------------------------------------------------
[2002-01-10 19:03:01] dd@asi.fr
Hi all,
I found this bug randomly as all other, it cause me
a php html parser to crash.
try a script like this :
<?php
// eval('?>'.$tmp);
// eval('>'.$tmp);
$coucou='';
$password = 'le parser php déconne';
$password = 'php parser bug';
/*
<? php ?>
*/
// // coucou ?>
// ?>
// ?
// >
?>
see the result, abnormal I think:
'.$tmp); // eval('>'.$tmp); $coucou=''; $password = 'le parser php
déconne'; $password = 'php parser bug'; /* */ // // coucou ?> // ?> //
? // > ?>
I think it can be a very very serious, easy to fiw fot you,
but in the case a php user encounter it.
It so surpising !!!
thanks.
An echo please.
Yours faithlly php is always great!.
------------------------------------------------------------------------
Edit this bug report at http://bugs.php.net/?id=14984&edit=1