From: chiaroscuro at achromatic dot fsnet dot co dot uk
Operating system: Apache 1.3.31
PHP version: 4.3.10
PHP Bug Type: PCRE related
Bug description: Repetition quantifiers
Description:
------------
I'm using quantifiers in preg_match_all functions,amongst other things, to
restrict the length of strings strings submitted from HTML forms. The lower
limit catches discrepant strings, but the upper limit has no effect. I've
tried using very basic code, but unsuccessfully.
Reproduce code:
---------------
$failure = 0;
$userpattern = "/t{3,6}/";
$username = 'ttttttt';
$usercheck = preg_match_all($userpattern,$username,$results);
if ( !$usercheck )
{ $failure++; }
Expected result:
----------------
$usercheck = 'tt';
This would be a disallowed string
$usercheck = 'ttttttt';
This would also be a disallowed string
Actual result:
--------------
$usercheck = 'tt'; results in $failure == 1 & the string 'fails' as it
should.
$usercheck = 'ttttttt'; results in $failure = 0 & the string is allowed.
This happens however many repetitions the string comprises and with any
upper limit set.
--
Edit bug report at http://bugs.php.net/?id=32875&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=32875&r=trysnapshot4
Try a CVS snapshot (php5.0):
http://bugs.php.net/fix.php?id=32875&r=trysnapshot50
Try a CVS snapshot (php5.1):
http://bugs.php.net/fix.php?id=32875&r=trysnapshot51
Fixed in CVS: http://bugs.php.net/fix.php?id=32875&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=32875&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=32875&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=32875&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=32875&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=32875&r=support
Expected behavior: http://bugs.php.net/fix.php?id=32875&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=32875&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=32875&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=32875&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=32875&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=32875&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=32875&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=32875&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=32875&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=32875&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=32875&r=mysqlcfg
