From: mikea at gb-im dot com Operating system: Linux Slackware 9.0 PHP version: 4.3.1 PHP Bug Type: Variables related Bug description: PHP is not dealing properly with variable names ending in 'id'
Description: ------------ RE: bug 15052 We are having a similar problem with scripts that were working fine in older versions of PHP (4.16, etc.) and now that we are on version 4.3.1, any variable that I have that ends in the letters 'id' isn't being passed properly from POST submissions to form handler scripts. NO CODE HAS CHANGES IN THE SCRIPTS THEMSELVES, ONLY THE VERSION OF PHP HAS CHANGED. For example: A snipet from the form (I switched normal HTML brackets for square brackets for readibility and posible security issues on this bug tracker): [form method="post" action="form_submit.php?ul=$ul&uid=$uid"] COMMENT: the URL variables of UL and UID are pulled from values passed in on th calling link and represent user level and user ID respectively. I have no problem retrieving these values. [select name="sid"] [option value="NOTUSED"]NOTUSED[/option] [option value=1]blah[/option] [option value=2]rocco[/option] [/select] [/form] COMMENT: When the form is submitted, I dynamically create an SQL string based on which form fields are filled out. So, in the receiving script, there is logic similar to this: If ($sid != 'NOTUSED') { $search_string = $search_string . " and sid = '$sid'"; } When the script has finished looking at all of the submitted form values, and you look at the finished SQL query string, it ends up looking like this: "select * from orders where stuff = 'stuff' and junk = 'junk' and sid = '1sid1'"; I honestly have no idea what is going on, a the scripts themselves worked fine under the older versions of PHP and now is doing this. It is a strange error. We temporarily fixed it by exploding the $sid variable. That allowed us to seperate out the first character and isolate it for use throughout the script. Any thoughts? Reproduce code: --------------- <html> <body> <?PHP $ul = 2; $uid = 99999; print "<form method=\"post\" action=\"myform_process.php?ul=$ul&uid=$uid\">"; ?> <select name=sid> <option>[not used]</option> <option value=1>blah</option> <option value=2>stuff</option> </select> <input type="submit" value="submit now!"> </form> </body> </html> Expected result: ---------------- A printed statement (assuming I chose the option labeled 'blah'): select * from orders where uid = '99999' and sid = '1' Actual result: -------------- This is the actual printed statement: select * from orders where uid = '99999' and sid = '1sid=1' (the form submit-to script looks like this: <?PHP print "select * from orders where uid = '$uid' and sid = '$sid'"; ?> ) Yes, that is all the script does is print out a statement in this example! -- Edit bug report at http://bugs.php.net/?id=24651&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=24651&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=24651&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=24651&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=24651&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=24651&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=24651&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=24651&r=support Expected behavior: http://bugs.php.net/fix.php?id=24651&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=24651&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=24651&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=24651&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=24651&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=24651&r=dst IIS Stability: http://bugs.php.net/fix.php?id=24651&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=24651&r=gnused