#44030 [NEW]: Lack of validation of input parameters

From: weirdan at gmail dot com Operating system: Irrelevant PHP version: Irrelevant PHP Bug Type: Website problem Bug description: Lack of validation of input parameters Description: ------------ When visiting http://www.php.net/results.php?q[]=1&l=ru&p=wholesite it throws errors (because 'q' GET param was passed as array): Warning: urlencode() expects parameter 1 to be string, array given in /home/local/Web/sites/www.php.net/results.php on line 18 Warning: Cannot modify header information - headers already sent by (output started at /home/local/Web/sites/www.php.net/results.php:18) in /home/local/Web/sites/www.php.net/include/layout.inc on line 81 Warning: Cannot modify header information - headers already sent by (output started at /home/local/Web/sites/www.php.net/results.php:18) in /home/local/Web/sites/www.php.net/include/layout.inc on line 82 Reproduce code: --------------- Visit the provided link. Expected result: ---------------- No errors shown. Perhaps something along the lines of 'Internal error' is shown, footer is present. Actual result: -------------- Errors are shown. Footer is not present. -- Edit bug report at http://bugs.php.net/?id=44030&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=44030&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=44030&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=44030&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=44030&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=44030&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=44030&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=44030&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=44030&r=needscript Try newer version: http://bugs.php.net/fix.php?id=44030&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=44030&r=support Expected behavior: http://bugs.php.net/fix.php?id=44030&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=44030&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=44030&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=44030&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=44030&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=44030&r=dst IIS Stability: http://bugs.php.net/fix.php?id=44030&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=44030&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=44030&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=44030&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=44030&r=mysqlcfg