ID:               43162
 Comment by:       zizzy at wolvez dot org
 Reported By:      ryat at wolvez dot org
 Status:           Feedback
 Bug Type:         *General Issues
 Operating System: Ubuntu7.10
 PHP Version:      5.2.4
 New Comment:

I want to know is this is bug?


Previous Comments:
------------------------------------------------------------------------

[2007-11-01 09:25:46] [EMAIL PROTECTED]

And why would you want to pass null byte in the parameter name? 


------------------------------------------------------------------------

[2007-11-01 08:32:21] ryat at wolvez dot org

Replenish other example

magic_quotes_gpc=on

http://127.0.0.1/test/test3.php?a%00aaaa=a%00aaaa

Array ( [a] => a\0aaaa )

magic_quotes_gpc=off

http://127.0.0.1/test/test3.php?a%00aaaa=a%00aaaa

Array ( [a] => aaaaa )

------------------------------------------------------------------------

[2007-10-31 17:01:40] ryat at wolvez dot org

Hihi,pay attention to:

magic_quotes_gpc=on

http://127.0.0.1/test.php?a'aaaa=test

Actual result:
--------------
Array ( [a\'aaaa] => test )


http://127.0.0.1/test.php?a%00aaaa=test

Actual result:
--------------
Array ( [a] => test )

------------------------------------------------------------------------

[2007-10-31 16:41:14] crescentfreshpot at yahoo dot com

php is written in C. In C the null byte represents the end of a string.
I don't think php can work around this.

------------------------------------------------------------------------

[2007-10-31 13:23:33] ryat at wolvez dot org

Description:
------------
GET date variable name not binary-safe on null bytes

Reproduce code:
---------------
<?php
print_r($_GET);
?>


http://127.0.0.1/test.php?a%00aaaa=test

Actual result:
--------------
Array ( [a] => test )


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=43162&edit=1

Reply via email to