From: ross dot girshick at gmail dot com
Operating system: Redhat Linux 2.4.20-20.9
PHP version: 4.3.7
PHP Bug Type: Unknown/Other Function
Bug description: error_log(addslashes(string)) double escapes string
Description:
------------
error_log used with addslashes seems to double escape strings.
Other info about my setup:
--------------------------
magic_quotes_gpc Off Off
magic_quotes_runtime Off Off
Apache Version Apache/1.3.31 (Unix) PHP/4.3.7
Apache Release 10331100
Apache API Version 19990320
User/Group smarter(501)/110
Max Requests Per Child: 0 - Keep Alive: on - Max Per Connection: 10000
Timeouts Connection: 300 - Keep-Alive: 15
Server Root /usr/local/apache
Loaded Modules mod_auth_mysql, mod_php4, mod_setenvif, mod_so,
mod_headers, mod_auth, mod_access, mod_rewrite, mod_alias, mod_userdir,
mod_actions, mod_imap, mod_asis, mod_cgi, mod_dir, mod_autoindex,
mod_include, mod_status, mod_negotiation, mod_mime, mod_log_config,
mod_env, mod_vhost_alias, http_core
Reproduce code:
---------------
print addslashes(' " ');
error_log(' " ');
error_log(addslashes(' " '));
Expected result:
----------------
code output
-- --
print addslashes(' " '); \"
error_log(' " '); "
error_log(addslashes(' " ')); \"
Actual result:
--------------
code output
-- --
print addslashes(' " '); \"
error_log(' " '); "
error_log(addslashes(' " ')); \\" <-- Note the extra '\'
--
Edit bug report at http://bugs.php.net/?id=29076&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=29076&r=trysnapshot4
Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=29076&r=trysnapshot5
Fixed in CVS: http://bugs.php.net/fix.php?id=29076&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=29076&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=29076&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=29076&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=29076&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=29076&r=support
Expected behavior: http://bugs.php.net/fix.php?id=29076&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=29076&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=29076&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=29076&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=29076&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=29076&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=29076&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=29076&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=29076&r=float