From:             ajoliveira at acutron dot net
Operating system: linux
PHP version:      4.4.7
PHP Bug Type:     Scripting Engine problem
Bug description:  Parser seems not to like to see "select from" on posted items

Description:
------------
Error:

"Forbidden access to /trash/mail.php on acutron.net"

this error is reproducible under 4.4.7, but not under 4.3.11

Reproduce code:
---------------
Hi

I'm using 4.4.7

on the same directory I put the following files (in fact those are on the
air at http://acutron.net/trash):

1. trash1.html
*************************************************
<html>
<head>
</head>
<body background="jpg/rock.jpg">
<FORM action="mail.php" method="post">
<INPUT TYPE="submit" VALUE="Correio">
<input type="hidden" name="sellit" value="SELECT FRAM">
</form> 

</body></html>
*************************************************

2. trash2.html
*************************************************
<html>
<head>
</head>
<body background="jpg/rock.jpg">
<FORM action="mail.php" method="post">
<INPUT TYPE="submit" VALUE="Correio">
<input type="hidden" name="sellit" value="SELECT FROM">
</form> 
</body></html>
*************************************************

any one of the previous files calls main.php, which...does nothing.

diff btw the 2 files is that one posts "selected fram" and the other
"select from". try the difference

3. main.php
do-nothing script...
********************************************
<html>
<head>
</head>
<body>
<?php
//echo stripslashes ($_POST['sel']).'<br>';
?>  
</body></html>
********************************************



Expected result:
----------------
blank screen

Actual result:
--------------
trash1.html does nothing, as expected, but trash2.html results in:

"Forbidden access to /trash/mail.php on acutron.net"

-- 
Edit bug report at http://bugs.php.net/?id=43430&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=43430&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): 
http://bugs.php.net/fix.php?id=43430&r=trysnapshot52
Try a CVS snapshot (PHP 5.3): 
http://bugs.php.net/fix.php?id=43430&r=trysnapshot53
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=43430&r=trysnapshot60
Fixed in CVS:                 http://bugs.php.net/fix.php?id=43430&r=fixedcvs
Fixed in release:             
http://bugs.php.net/fix.php?id=43430&r=alreadyfixed
Need backtrace:               http://bugs.php.net/fix.php?id=43430&r=needtrace
Need Reproduce Script:        http://bugs.php.net/fix.php?id=43430&r=needscript
Try newer version:            http://bugs.php.net/fix.php?id=43430&r=oldversion
Not developer issue:          http://bugs.php.net/fix.php?id=43430&r=support
Expected behavior:            http://bugs.php.net/fix.php?id=43430&r=notwrong
Not enough info:              
http://bugs.php.net/fix.php?id=43430&r=notenoughinfo
Submitted twice:              
http://bugs.php.net/fix.php?id=43430&r=submittedtwice
register_globals:             http://bugs.php.net/fix.php?id=43430&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=43430&r=php3
Daylight Savings:             http://bugs.php.net/fix.php?id=43430&r=dst
IIS Stability:                http://bugs.php.net/fix.php?id=43430&r=isapi
Install GNU Sed:              http://bugs.php.net/fix.php?id=43430&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=43430&r=float
No Zend Extensions:           http://bugs.php.net/fix.php?id=43430&r=nozend
MySQL Configuration Error:    http://bugs.php.net/fix.php?id=43430&r=mysqlcfg

Reply via email to