ID:               22773
 Updated by:       [EMAIL PROTECTED]
 Reported By:      joe at mcknight dot de
 Status:           Critical
 Bug Type:         CGI related
 Operating System: Linux
 PHP Version:      4.3.2-RC
 New Comment:

This problem is a rather interesting one, it appears that in CGI the
entire POST data makes into the enviroment. You can see this by adding
a printf() to _php_import_environment_variables() function. The last
element will contain the entire POST string. If that string contains a
'=', then data before the '=' becomes the key (variable name) and the
rest the variable content. Meaning that by the time the POST variables
are registered $suchstr already has a value.
One way to fix this is to prevent duplicate variable registration by
breaking on the 1st invalid entry from the enviroment inside
_php_import_environment_variables(), which happens to be the script
name, which is followed by either the POST data or random garbage.
Here is the relavent patch: http://bb.prohost.org/22773.txt


Previous Comments:
------------------------------------------------------------------------

[2003-03-25 05:52:58] [EMAIL PROTECTED]

Related to bug #22612


------------------------------------------------------------------------

[2003-03-24 18:33:26] [EMAIL PROTECTED]

That means a command-line test case in tests/basic should fail as well.

------------------------------------------------------------------------

[2003-03-24 18:17:01] [EMAIL PROTECTED]

It doesn't matter. I tried two different ways, both failed.
For example (otherwise default httpd.conf):

    AddType application/x-httpd-php .php
    ScriptAlias /php/ "/www/apache/cgi-bin/"
    Action application/x-httpd-php /php/php-cgi


------------------------------------------------------------------------

[2003-03-24 18:12:23] [EMAIL PROTECTED]

How are you triggering the cgi?  ie. what does your Apache config look
like?

------------------------------------------------------------------------

[2003-03-24 18:06:58] [EMAIL PROTECTED]

making critical (should really be fixed before 4.3.2 goes gold..)


------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/22773

-- 
Edit this bug report at http://bugs.php.net/?id=22773&edit=1

Reply via email to