From:             [EMAIL PROTECTED]
Operating system: Red Hat linux 7.3
PHP version:      4.2.0
PHP Bug Type:     *General Issues
Bug description:  Hash in urldata

http://localhost/editaccount.php?UID=1&Email=##@;localhost
http://localhost/editaccount.php?UID=1&Email=%23%23@;localhost


These two urls points to the same thing. The first one is generated by
mozilla (uri's are normally escaped by the browser if nescesarry). The
variabel Email appears emtpy, and the my script then fails and shit :-/

If I escape the url manually to the second one, php is happy and the Email
variabel is set to a value :-)

In both cases, isset($Email) and is_string($Email) returned true.

I also tested this:

http://localhost/editaccount.php?UID=1&Email=test##@;localhost

and Email was set to "test"


Stian
-- 
Edit bug report at http://bugs.php.net/?id=20210&edit=1
-- 
Try a CVS snapshot:         http://bugs.php.net/fix.php?id=20210&r=trysnapshot
Fixed in CVS:               http://bugs.php.net/fix.php?id=20210&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=20210&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=20210&r=needtrace
Try newer version:          http://bugs.php.net/fix.php?id=20210&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=20210&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=20210&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=20210&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=20210&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=20210&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=20210&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=20210&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=20210&r=isapi

Reply via email to