From:             ng4rrjanbiah at rediffmail dot com
Operating system: Linux
PHP version:      4.3.0
PHP Bug Type:     Session related
Bug description:  $_POST vars overwrites $_SESSION vars, if register_globals=on

For me,
register_globals = on;

$_SESSION['foo'] = 'xxx';

...Then form operations that post few data including
$_POST['foo']='yyy'

...Now the value of $_SESSION['foo'] is set to 'yyy'

My server's PHP version is 4.3.0...The above bug is really a big problem
for me...I've developed a part of the module for our big project...I've
developed with the idea of register_globals=off, but other people develped
with the idea of register_globals=on...And in the server, they've put it
with register_globals=on... and I've started experiencing the above
problem...

It worked fine on my local system (PHP4.2.3) with register_globals=off.
As, the module is related to login & session, it is a very big problem for
me. Any workaround?

-R. Rajesh Jeba Anbiah
-- 
Edit bug report at http://bugs.php.net/?id=22389&edit=1
-- 
Try a CVS snapshot:         http://bugs.php.net/fix.php?id=22389&r=trysnapshot
Fixed in CVS:               http://bugs.php.net/fix.php?id=22389&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=22389&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=22389&r=needtrace
Try newer version:          http://bugs.php.net/fix.php?id=22389&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=22389&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=22389&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=22389&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=22389&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=22389&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=22389&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=22389&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=22389&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=22389&r=gnused

Reply via email to