From:             [EMAIL PROTECTED]
Operating system: win2K
PHP version:      4.1.2
PHP Bug Type:     Variables related
Bug description:  variables still exist after loading to a new page


Below is the short script that produce quite stupid logics :)

//*************** start here



$header =
"<html><head><title>BUGS</title></head><body><center><br><br><br><br>";

$min = 4;
$log = "<br><form action=\"$PHP_SELF\" method=post><table border=0
cellspacing=1 cellpadding=3>";
$log .= "<tr><td class=login colspan=2>Username<br><input type=text
name=\"mumzu\" size=25 maxlength=20></td></tr>";
$log .= "<tr><td class=login colspan=2>Password<br><input type=password
name=\"mumzp\" size=16 maxlength=20> <input align=\"texttop\" type=submit
value=\"Log In\" class=\"submit\"></td></tr>";
$log .= "<tr><td valign=top><input type=\"radio\" name=\"mumzr\"
value=\"1\"></td><td width=150><font class=option>Keep me loged-in into
this MUMZ unless I logout.</font></td></tr>";
$log .= "<tr><td valign=top><input type=\"radio\" name=\"mumzr\"
value=\"0\" checked></td><td width=150><font class=option>Do
nothing.</font></td></tr></table></form><br><br>";


if((isset($HTTP_POST_VARS["mumzu"]) && isset($HTTP_POST_VARS["mumzp"]) &&
isset($HTTP_POST_VARS["mumzr"])) || (isset($HTTP_COOKIE_VARS["mumzu"]) &&
isset($HTTP_COOKIE_VARS["mumzp"]) && isset($HTTP_COOKIE_VARS["mumzr"])))
{
        if(!isset($p))
        {
                $m = 30;
                $lifetime = time() + ($m * 60);
                setcookie("mumzu", $mumzu, $lifetime);
                setcookie("mumzp", $mumzp, $lifetime);
                setcookie("mumzr", $mumzr, $lifetime);
                
                echo $header;
                echo "this is <b>Restricted area</b><br><br>click <a
href=\"$PHP_SELF?p=logout\">here</a> to logout";
        }
        else if(isset($p) && $p == "logout")
        {
                setcookie("mumzu");
                setcookie("mumzp");
                setcookie("mumzr");
                echo $header;
                echo "<font color=\"#FF0000\">Here is the bug: the 3 variabels mumzu,
mumzp, mumzr suppoused to be disapeared after clicking the link
below.<br>And logically since there is no any existing variables it
suppoused to display login form instead <b>restricted area</b>
again</font><br><br>";
                echo "you have been loged out click <a href=\"$PHP_SELF\">here</a> to
login again";
        }
        else
        {
                setcookie("mumzu");
                setcookie("mumzp");
                setcookie("mumzr");
                echo $header;
                echo "Bad username or password";
                echo $log;
        }

}
else
        echo $header.$log;

if(isset($mumzu))
        echo "<br><br>username: \"$mumzu\" , pass: \"$mumzp\", cookie mumzp:
".@$HTTP_COOKIE_VARS["mumzp"];


echo "</center></body></html>";

//***************End of Line
-- 
Edit bug report at http://bugs.php.net/?id=16540&edit=1
-- 
Fixed in CVS:        http://bugs.php.net/fix.php?id=16540&r=fixedcvs
Fixed in release:    http://bugs.php.net/fix.php?id=16540&r=alreadyfixed
Need backtrace:      http://bugs.php.net/fix.php?id=16540&r=needtrace
Try newer version:   http://bugs.php.net/fix.php?id=16540&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=16540&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=16540&r=notwrong
Not enough info:     http://bugs.php.net/fix.php?id=16540&r=notenoughinfo
Submitted twice:     http://bugs.php.net/fix.php?id=16540&r=submittedtwice

Reply via email to