[PHP-DEV] PHP 4.0 Bug #7854 Updated: trans-sid inserts " From: hholzgra <email protected>
Date: 11/16/00

ID: 7854
Updated by: hholzgra
Reported By: hartmut <email protected>
Status: Assigned
Bug Type: *Session related
Assigned To: sas
Comments:

Previous Comments:
---------------------------------------------------------------------------

[2000-11-16 14:02:58] hartmut <email protected>
the transparent rewriter seems to miss-identify the following
javascript code as html?

sascha?

<?php
  session_start();
  session_register("i");
  $i++;
?>
<html>
<head>
<script language="javascript">
function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++)
  x.src=x.oSrc;
}
</script>
</head>
<body>
<a href="abc.php">hallo <?= $i ?></a>
</body>
</html>

becomes

<html>
<head>
<script language="javascript">
function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x="a[i])&&x.oSrc;i++)"
  x.src="x.oSrc;"
}
</script>
</head>
<body>
<a href="abc.php?PHPSESSID=05391ddf955070ea18e6cc2a44e9a9f2">hallo 1</a>
</body>
</html>

---------------------------------------------------------------------------

Full Bug description available at: http://bugs.php.net/?id=7854 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>