Doc #66539 [NEW]: [ru,zh] http fopen wrapper advises to use header injection via user_agent

From: Date: Wed, 22 Jan 2014 02:43:24 +0000
Subject: Doc #66539 [NEW]: [ru,zh] http fopen wrapper advises to use header injection via user_agent
Groups: php.doc.bugs 
Request: Send a blank email to doc-bugs+get-10862@lists.php.net to get a copy of this message
From: vovan-ve at yandex dot ru Operating system: PHP version: Irrelevant Package: Translation problem Bug Type: Documentation Problem Bug description:[ru,zh] http fopen wrapper advises to use header injection via user_agent Description: ------------ Some documentation translations about HTTP fopen wrapper (http://php.net/manual/ru/wrappers.http.php) has Example 2, which advises to use header injection via 'user_agent' ini option: ini_set('user_agent', "PHP\r\nX-MyCustomHeader: Foo"); I think, it is not good practice to do such things in official documentation. Affected translations are Russian and Chinese. Other translations has no Example 2. Also there are bug reports about injection in user_agent: #52979 and #60668. Its status is "Not a bug". But it IS a bug. But it is another story. -- Edit bug report at https://bugs.php.net/bug.php?id=66539&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=66539&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=66539&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=66539&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=66539&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=66539&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=66539&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=66539&r=needscript Try newer version: https://bugs.php.net/fix.php?id=66539&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=66539&r=support Expected behavior: https://bugs.php.net/fix.php?id=66539&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=66539&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=66539&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=66539&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=66539&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=66539&r=dst IIS Stability: https://bugs.php.net/fix.php?id=66539&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=66539&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=66539&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=66539&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=66539&r=mysqlcfg

« previous php.doc.bugs (#10862) next »