From: admin at rcczone dot com Operating system: Linux / Apache PHP version: 4.4.2 PHP Bug Type: Strings related Bug description: strip_tags selectively strips allowed_tags
Description: ------------ For some reason beyond my knowledge, the strip_tags function is selectively stripping allowed_tags. I have tested it against three relatively similar strings (all <embed> tags) and it passing on only one out of the three. The string and xhtml tags themselves are perfectly valid, and I have no clue why strip_tags is behaving in such a way. Reproduce code: --------------- echo strip_tags('<embed allowScriptAccess="never" src="http://www.picturetrail.com/photoFlick/l_bookhorizontal.swf" name="photoFlick" FlashVars="img1=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756363.jpg&img2=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756370.jpg&img3=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756373.jpg&img4=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756375.jpg&img5=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756377.jpg&img6=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756379.jpg&img7=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756381.jpg&img8=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756384.jpg&img9=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756386.jpg&img10=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756388.jpg&img11=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756391.jpg&img12=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756394.jpg&img13=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/! 139756395.jpg&img14=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756397.jpg" loop="false" menu="false" quality="high" bgcolor="..ffffff" width="600" height="410" align="middle" allowScriptAccess="never" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"></embed>','<embed>'); Expected result: ---------------- <embed allowScriptAccess="never" src="http://www.picturetrail.com/photoFlick/l_bookhorizontal.swf" name="photoFlick" FlashVars="img1=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756363.jpg&img2=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756370.jpg&img3=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756373.jpg&img4=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756375.jpg&img5=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756377.jpg&img6=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756379.jpg&img7=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756381.jpg&img8=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756384.jpg&img9=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756386.jpg&img10=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756388.jpg&img11=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756391.jpg&img12=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756394.jpg&img13=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/! 139756395.jpg&img14=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756397.jpg" loop="false" menu="false" quality="high" bgcolor="..ffffff" width="600" height="410" align="middle" allowScriptAccess="never" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"></embed> Actual result: -------------- </embed> -- Edit bug report at http://bugs.php.net/?id=37898&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=37898&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=37898&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=37898&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=37898&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=37898&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=37898&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=37898&r=needscript Try newer version: http://bugs.php.net/fix.php?id=37898&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=37898&r=support Expected behavior: http://bugs.php.net/fix.php?id=37898&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=37898&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=37898&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=37898&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=37898&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=37898&r=dst IIS Stability: http://bugs.php.net/fix.php?id=37898&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=37898&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=37898&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=37898&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=37898&r=mysqlcfg