ID:               46291
 Updated by:       [EMAIL PROTECTED]
 Reported By:      micromas at arcor dot de
-Status:           Open
+Status:           Bogus
 Bug Type:         Scripting Engine problem
 Operating System: Debian Linux 2.6.20
 PHP Version:      5.2.6
 New Comment:

Sorry, but your problem does not imply a bug in PHP itself.  For a
list of more appropriate places to ask for help using PHP, please
visit http://www.php.net/support.php as this bug system is not the
appropriate forum for asking support questions.  Due to the volume
of reports we can not explain in detail here why your report is not
a bug.  The support channels will be able to provide an explanation
for you.

Thank you for your interest in PHP.

Your host probably has some sort of "security" module that is causing
this. Nothing to do with PHP here.


Previous Comments:
------------------------------------------------------------------------

[2008-10-14 15:04:59] micromas at arcor dot de

Description:
------------
I created a form with a textarea named "editContent" and a submit
button named "btnSave":

  <form name="editForm" action="<?php echo $_SERVER["PHP_SELF"]; ?>"
method="post" enctype="multipart/form-data">
  <textarea name='editContent' style='width: 550px; height: 400px;'
wrap='off'>
  <?php htmlspecialchars($txt); ?>
  </textarea>
  <input type="submit" name="btnSave" value="Save">

The textarea is used for editing php files. Whenever there is a file
containg an sql statement containing the word VALUES (e. g. for insert)
then I get this error message after submitting:

"You don't have permission to access /folder/script.php on this
server."

Reproduce code:
---------------
$query="INSERT INTO TABLE1 (FIELD1, FIELD2) VALUES (1,2)"; (Part of
submitted text)

Expected result:
----------------
No error message.

Actual result:
--------------
"You don't have permission to access /folder/script.php on this
server." This happens only if the text contains the word VALUES.


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=46291&edit=1

Reply via email to