#37488 [Bgs->Opn]: Modifing GPC values
ID: 37488
User updated by: serkan dot kibritoglu at gmail dot com
-Summary: import_request_variables doesnt work with pre-changed
_REQUEST vars.
-Reported By: serkan at kibritoglu dot net
+Reported By: serkan dot kibritoglu at gmail dot com
-Status: Bogus
+Status: Open
Bug Type: Variables related
Operating System: winXP
-PHP Version: 5.1.4
+PHP Version: 5.2.0
New Comment:
I am sorry to re-open this bug but it is very very similar to this
one.
Reproduce code:
---
foreach($_POST as $key => $value) {
$_POST[$key] = trim($value);
$_POST[$key] = strip_tags($value);
$_POST[$key] = mysql_real_escape_string($value);
}
Expected result:
The code above should; trim, strip_tags and mysql_real_escape_string to
the original values but it only applies the last function in foreach,
which is mysql_real_escape_string.
When i replace the trim() line to the end, it only trims and so on..
I think same goes for _GET and _COOKIE values as well.
Previous Comments:
[2006-06-05 16:02:40] [EMAIL PROTECTED]
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php
Only the actual values supplied via GPC can be imported.
[2006-05-18 07:01:11] serkan dot kibritoglu at gmail dot com
Description:
Very simple logic. Here you go;
Reproduce code:
---
if($_GET['param']=='') $_GET['param'] = "I am changed forever.";
echo "Should print: " . $_GET['param'] . "\n";
import_request_variables("g", "g_");
echo "And... !: " . $g_param . "\n";
Expected result:
Should print: I am changed forever.
And... !: I am changed forever.
Actual result:
--
Should print: I am changed forever.
And... !:
--
Edit this bug report at http://bugs.php.net/?id=37488&edit=1
#40425 [Fbk->Opn]: php_getuid() always return 1.
ID: 40425 User updated by: priappub at yahoo dot fr Reported By: priappub at yahoo dot fr -Status: Feedback +Status: Open Bug Type: Safe Mode/open_basedir Operating System: Solaris 10 PHP Version: 5.2.1 New Comment: The self-compiled apache: [EMAIL PROTECTED] bin]# ./httpd -V Server version: Apache/2.0.59 Server built: Feb 22 2007 00:29:21 Server's Module Magic Number: 20020903:12 Server loaded: APR 0.9.12, APR-UTIL 0.9.12 Compiled using: APR 0.9.12, APR-UTIL 0.9.12 Architecture: 32-bit Server compiled with -D APACHE_MPM_DIR="server/mpm/prefork" -D APR_HAS_SENDFILE -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_FCNTL_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D HTTPD_ROOT="/usr/apache2" -D SUEXEC_BIN="/usr/apache2/bin/suexec" -D DEFAULT_PIDLOG="/var/logs/httpd.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_LOCKFILE="/var/logs/accept.lock" -D DEFAULT_ERRORLOG="logs/error_log" -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types" -D SERVER_CONFIG_FILE="/etc/apache2/httpd.conf" Previous Comments: [2007-03-09 23:37:38] [EMAIL PROTECTED] Well, then provide the one from the self-compiled apache. [2007-03-09 16:09:31] priappub at yahoo dot fr This is the httpd -V from apache provided by SUN. [2007-03-09 10:40:27] [EMAIL PROTECTED] And the same for Sun apache, please. [2007-03-08 22:32:38] priappub at yahoo dot fr For the difference, I don't know... I have this: [EMAIL PROTECTED] ~]# /usr/apache2/bin/httpd -V Server version: Apache/2.0.58 Server built: Sep 5 2006 07:46:49 Server's Module Magic Number: 20020903:12 Server loaded: APR 0.9.12, APR-UTIL 0.9.12 Compiled using: APR 0.9.12, APR-UTIL 0.9.12 Architecture: 32-bit Server compiled with -D APACHE_MPM_DIR="server/mpm/prefork" -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_FCNTL_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D HTTPD_ROOT="/usr/apache2" -D SUEXEC_BIN="/usr/apache2/bin/suexec" -D DEFAULT_PIDLOG="/var/run/apache2/httpd.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_LOCKFILE="/var/run/apache2/accept.lock" -D DEFAULT_ERRORLOG="logs/error_log" -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types" -D SERVER_CONFIG_FILE="/etc/apache2/httpd.conf" [2007-03-07 10:19:42] [EMAIL PROTECTED] What's the difference between Sun Apache and the one compiled from sources? The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/40425 -- Edit this bug report at http://bugs.php.net/?id=40425&edit=1
#40773 [NEW]: Apache crash when ibase.dateformat "%d-%m-%Y"
From: treck at nano dot lv Operating system: FreeBSD PHP version: 5.2.1 PHP Bug Type: InterBase related Bug description: Apache crash when ibase.dateformat "%d-%m-%Y" Description: When ibase.dateformat is set to "%d-%m-%Y" in php.ini or via ini_set php crashes with Bus error. -- Edit bug report at http://bugs.php.net/?id=40773&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=40773&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=40773&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=40773&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=40773&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=40773&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=40773&r=needtrace Need Reproduce Script:http://bugs.php.net/fix.php?id=40773&r=needscript Try newer version:http://bugs.php.net/fix.php?id=40773&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=40773&r=support Expected behavior:http://bugs.php.net/fix.php?id=40773&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=40773&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=40773&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=40773&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=40773&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=40773&r=dst IIS Stability:http://bugs.php.net/fix.php?id=40773&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=40773&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=40773&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=40773&r=nozend MySQL Configuration Error:http://bugs.php.net/fix.php?id=40773&r=mysqlcfg
#40759 [Fbk->Opn]: pspell_new_personal does not load custom dictionary
ID: 40759 User updated by: david at mytton dot net Reported By: david at mytton dot net -Status: Feedback +Status: Open Bug Type: Pspell related Operating System: Windows XP PHP Version: 5.2.1 New Comment: I tested the code on another XP computer and also on my Linux server, all with PHP 5.2.1 and it doesn't seem to work (even with full permissions). '; print_r($suggestions); ''; ?> [EMAIL PROTECTED] [/home/site/public_html]# ls -al ... -rwxrwxrwx 1 site site32 Mar 10 19:57 custom.dict* ... Output: Array ( [0] => blooms bur [1] => blooms-bur [2] => blooms [3] => Bloom's [4] => bloom's [5] => bloomers [6] => Bloomer [7] => bloomer ) Previous Comments: [2007-03-10 00:11:03] [EMAIL PROTECTED] Works perfectly fine here, on Linux. Array ( [0] => blooms bur [1] => blooms-bur [2] => Bloomsbury [3] => bloomsbury < [4] => blooms [5] => Bloom's [6] => bloom's ) bool(true) [2007-03-09 19:23:31] david at mytton dot net The pspell dictionary or my custom one? The pspell one is a standard English dictionary downloaded from the Aspell website at http://ftp.gnu.org/gnu/aspell/w32/Aspell-en-0.50-2-3.exe. I included my custom dictionary at the bottom of the reproduce code. [2007-03-09 10:34:36] [EMAIL PROTECTED] We'll also need your dictionary to investigate it. Though I doubt it has something to do with PHP. If pspell doesn't use your dictionary, it's hardly PHP problem. [2007-03-08 17:14:15] david at mytton dot net Corrected typo in summary [2007-03-08 17:13:40] david at mytton dot net Description: The personal dictionary does not appear to be used when asking pspell for suggestions. The same result occurs whether or not custom.dict actually exists. E.g. if I change the filename to customdict no error is output and the output is the same. I tried this with the latest php_pspell.dll from http://snaps.php.net/win32/php5.2-win32-200703081530.zip Reproduce code: --- '; print_r($suggestions); ''; ?> custom.dict: personal_ws-1.1 en 1 bloomsbury Expected result: Array of suggestions including bloomsbury in the suggestions. Actual result: -- bloomsbury is not in the suggestions list: Array ( [0] => blooms bur [1] => blooms-bur [2] => blooms [3] => Bloom's [4] => bloom's [5] => bloomers [6] => Bloomer [7] => bloomer ) -- Edit this bug report at http://bugs.php.net/?id=40759&edit=1
#40772 [NEW]: PDO::query() does not raise exception
From: vunnuk_o at ukr dot net
Operating system: Win XP
PHP version: 5.2.1
PHP Bug Type: PDO related
Bug description: PDO::query() does not raise exception
Description:
PDO::query() does not throw an error when the SQL query contains syntax
error
Reproduce code:
---
$pdo = new PDO($dsn, $user, $pass,
array(PDO::ATTR_ERRMODE=>PDO::ERRMODE_EXCEPTION));
$pdo->query("SELETC * FROM test");
Expected result:
Exception should be raised.
Actual result:
--
Exception is not raised
but $pdo->errorCode() reports 42000
--
Edit bug report at http://bugs.php.net/?id=40772&edit=1
--
Try a CVS snapshot (PHP 4.4):
http://bugs.php.net/fix.php?id=40772&r=trysnapshot44
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=40772&r=trysnapshot52
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=40772&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=40772&r=fixedcvs
Fixed in release:
http://bugs.php.net/fix.php?id=40772&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=40772&r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=40772&r=needscript
Try newer version:http://bugs.php.net/fix.php?id=40772&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=40772&r=support
Expected behavior:http://bugs.php.net/fix.php?id=40772&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=40772&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=40772&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=40772&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=40772&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=40772&r=dst
IIS Stability:http://bugs.php.net/fix.php?id=40772&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=40772&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=40772&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=40772&r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=40772&r=mysqlcfg
#39644 [Csd->Opn]: Update MySQL & MySQLI Libraries
ID: 39644 User updated by: dj02 dot net at nbl dot fi Reported By: dj02 dot net at nbl dot fi -Status: Closed +Status: Open Bug Type: Feature/Change Request Operating System: Windows XP 5.1.2600 PHP Version: 5CVS-2007-03-09 (snap) Assigned To: edink New Comment: news.txt says still v5.0.37? Previous Comments: [2007-03-10 00:02:19] [EMAIL PROTECTED] Updated- [2007-03-09 20:05:41] dj02 dot net at nbl dot fi Updated bugreport PHP Version info. [2007-03-09 20:01:58] dj02 dot net at nbl dot fi - [2007-03-09 20:01:25] dj02 dot net at nbl dot fi Hi, Could you Update MySQL & MySQLi Libraries against MySQL Version 5.0.37? Because MySQL Team have updated sources and WIN32 BINARIES to v5.0.37. v5.0.36 was only a source win32 release. Brevious win32 binary release was v5.0.27 so it would be good to build MySQL & MySQLi Libraries against MySQL Version 5.0.37. [2007-03-05 13:11:00] [EMAIL PROTECTED] Updated to latest ver. The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/39644 -- Edit this bug report at http://bugs.php.net/?id=39644&edit=1
#39351 [Opn]: require and include fails to open file in current directory
ID: 39351
User updated by: lampiluoto at gmail dot com
Reported By: lampiluoto at gmail dot com
Status: Open
Bug Type: *Directory/Filesystem functions
Operating System: Solaris10
PHP Version: 5.2.0
New Comment:
Hi,
I emailed with Tony about providing
Sol10 environment for reproducing the
problem and debugging it.
--
Tero
Previous Comments:
[2007-03-07 07:38:42] [EMAIL PROTECTED]
>Anybody looking to fix this bug?
No, we're unable to replicate it.
If you have a Solaris10 handy - please provide an account with PHP,
GDB, GCC and other utils required to reproduce and invesigate it.
[2007-03-07 01:57:29] mail at unleadedonline dot net
Anybody looking to fix this bug?
We have the same setup as the original bug submitter, and can't upgrade
from 5.1.6 to 5.2.1 because of this issue!
It's a showstopper.
[2007-02-27 20:27:11] mcmullent at gmail dot com
Is there any chance you need to add:
allow_url_include = On
to your php.ini? My php.ini file (from a previous PHP5 release) did not
have allow_url_include, and when I tried to upgrade from 5.1.6 to 5.2.x,
I was getting similar errors. When I set allow_url_include, I was able
to upgrade to 5.2.1 without any issues.
[2007-02-23 10:28:08] webtech at get-telecom dot fr
Is there a solution for this bug ?
We're using PHP 5.1.6 and can't upgrade...
[2007-02-09 16:54:55] lampiluoto at gmail dot com
Hello,
This bug seem to exist also in PHP 5.2.1, it
is behaving similarly to the 5.2.0 snapshot I
tested. This is same PHP code I tested earlier.
I remind that this is situation where httpd user
doesn't have read privilege to every directory
level in path. It has only execute/access (x)
to some of the directories.
#
# 5.1.6 truss output
#
24204: stat("./inc/config.php", 0xFD7FFFDFE470)= 0
24204: resolvepath("./inc/config.php", "inc/config.php", 1024) = 14
24204: getcwd(0xFD7FFFDFD6F0, 1024)Err#13 EACCES
[file_dac_read]
24204: stat("./inc/config.php", 0xFD7FFFDFE390)= 0
24204: getcwd(0xFD7FFFDFDFA0, 1024)Err#13 EACCES
[file_dac_read]
24204: resolvepath("./inc/config.php", "inc/config.php", 1024) = 14
24204: getcwd(0xFD7FFFDFD270, 1024)Err#13 EACCES
[file_dac_read]
24204: open("./inc/config.php", O_RDONLY) = 34
24204: fstat(34, 0x007E4F90) = 0
24204: lseek(34, 0, SEEK_CUR) = 0
24204: read(34, " < ? p h p\n\n / / ".., 8192)= 1572
24204: read(34, 0x007E27F8, 8192) = 0
24204: read(34, 0x007E27F8, 8192) = 0
24204: close(34) = 0
24204: time() = 1171039558
24204:
resolvepath("/data/sites/www.lampiluoto.net/dev-html/inc/func_prepare.php",
"/data/sites/www.mysite.example/dev-html/inc/func_prepare.php", 1024) =
60
24204:
stat("/data/sites/www.mysite.example/dev-html/inc/func_prepare.php",
0xFD7FFFDFE360) = 0
24204:
resolvepath("/data/sites/www.mysite.example/dev-html/inc/func_prepare.php",
"/data/sites/www.mysite.example/dev-html/inc/func_prepare.php", 1024) =
60
24204:
open("/data/sites/www.mysite.example/dev-html/inc/func_prepare.php",
O_RDONLY) = 34
24204: fstat(34, 0x007E5F10) = 0
24204: lseek(34, 0, SEEK_CUR) = 0
24204: read(34, " < ? p h p\n\n / /\n".., 8192)= 1171
24204: read(34, 0x007E6C28, 8192) = 0
24204: read(34, 0x007E6C28, 8192) = 0
24204: brk(0x007E8F20) = 0
24204: brk(0x007ECF20) = 0
24204: brk(0x007ECF20) = 0
24204: brk(0x007ECF20) = 0
24204: brk(0x007F0F20) = 0
24204: close(34) = 0
24204: stat("./inc/db_interface.php", 0xFD7FFFDFD9C0) = 0
24204: resolvepath("./inc/db_interface.php", "inc/db_interface.php",
1024) = 20
24204: getcwd(0xFD7FFFDFCC40, 1024)Err#13 EACCES
[file_dac_read]
24204: stat("./inc/db_interface.php", 0xFD7FFFDFD8E0) = 0
24204: getcwd(0xFD7FFFDFD4F0, 1024)Err#13 EACCES
[file_dac_read]
24204: resolvepath("./inc/db_interface.php", "inc/db_interface.php",
1024) = 20
24204: getcwd(0xFD7FFFDFC7C0, 1024)Err#13 EACCES
[file_dac_read]
24204: open("./inc/db_interface.php", O_RDONLY)= 34
24204: fstat(34, 0x007E2E30) = 0
24204: ls
