[PHP-DEV] PHP 4.0 Bug #9390 Updated: PHPSESSID adds itself to $HTTP_POST_VARS From: aaron.lake <email protected>
Date: 03/19/01

ID: 9390
User Update by: aaron.lake <email protected>
Old-Status: Open
Status: Closed
Bug Type: *Session related
Description: PHPSESSID adds itself to $HTTP_POST_VARS

both production and development environments
are using identical versions and configurations
of apache web server 1.3.14 and php 4.0.4 pl1,
php.ini config is also identical.

Previous Comments:
---------------------------------------------------------------------------

[2001-03-19 14:13:42] aaron.lake <email protected>
Thanx Jani,

As suggested:

In php.ini:

url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"

Remove the last setting, form=fakeentry.
(or if you don't have this directive in your php.ini,
add it without the last setting.)

when i added this conf. directive and bounced the web server, $HTTP_POST_VARS (using the POST method) contained
NO elements.

I added this directive to my identical development environment and noticed no ill effects.

---------------------------------------------------------------------------

[2001-03-19 14:12:47] sniper <email protected>
Both environments run same php.ini? Same version of PHP?
Same configure line used on building both PHP's?

--Jani

---------------------------------------------------------------------------

[2001-03-19 14:05:53] aaron.lake <email protected>
Thanx Jani,

As suggested:

In php.ini:

url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"

Remove the last setting, form=fakeentry.
(or if you don't have this directive in your php.ini,
add it without the last setting.)

when i added this conf. directive and bounced the web server, $HTTP_POST_VARS (using the POST method) contained
NO elements.

I added this directive to my identical development environment and noticed no ill effects.

---------------------------------------------------------------------------

[2001-03-16 17:46:41] sniper <email protected>
In php.ini:

url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"

Remove the last setting, form=fakeentry.
(or if you don't have this directive in your php.ini,
add it without the last setting.)

--Jani

---------------------------------------------------------------------------

[2001-03-16 17:37:13] sas <email protected>
Since you are using the transparent session id feature, the obvious question is: Do you use forms with method=POST?

---------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online.

Full Bug description available at: http://bugs.php.net/?id=9390

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>