From: [EMAIL PROTECTED] Operating system: Red Hat Linux 7.2 PHP version: 4.2.3 PHP Bug Type: Session related Bug description: PHPSESSID not being added to form action="" if input type="image" used
I have session.auto_start = 1 in my php.ini. I find that the SID is not being added to a form's action="" value if the form contains a <input type="image"> tag ... This is a serious bug as it causes sessions to be lost if <input type="image"> buttons are used in a form. Pasted below is the output of PHP for one of my page swhere I use a form and in it there is an <input type="image"> tag. As you can see the SID is added to the src="" of the image but not to the action="" field of the form, where I believe it is the right place to put it ... Jc <form name="write" action="/hashi/html/market/market.html" method="GET" style="margin:0px";> <input type="hidden" name="write_review" value="true"> <input type="hidden" name="body" value="details"> <input type="hidden" name="pid" value="489000401024"> <table width="650" border="0" cellspacing="0" cellpadding="0"> <tr valign="top"> <td width="65"> <div class="marginleft20"><img src="img/yajirushi_review.gif" width="25" height="42" alt=""></div> </td> <td width="445" valign="bottom"><span class="size12">̴��ˤʤäƸ��ޤ���������ʴ�ư�ʤ��⥫�����ޡ���ӥ塼�ؽ��ߤޤ����������ޡ���ӥ塼�Ǥϥ桼����������ȿ���������������ޤ���</span></td> <td width="140" valign="bottom" align="right"><input type="image" name="toukou" src="img/b_writereview.gif?PHPSESSID=046e74dbd20eca0eb4f2fce3896dbc5e" width="118" height="23" alt="��ӥ塼���" border="0"></td> </tr> </table> </form> -- Edit bug report at http://bugs.php.net/?id=21093&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=21093&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=21093&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=21093&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=21093&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=21093&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=21093&r=support Expected behavior: http://bugs.php.net/fix.php?id=21093&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=21093&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=21093&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=21093&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=21093&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=21093&r=dst IIS Stability: http://bugs.php.net/fix.php?id=21093&r=isapi
