From: thochgreve at php-resource dot de
Operating system: any
PHP version: Irrelevant
PHP Bug Type: Feature/Change Request
Bug description: url_rewriter.tags for JavaScript?
Description:
------------
I am searching for an easy way to enable transparent SIDs for JavaScript.
url_rewriter.tags seemed to be the thing at first glance; but apparently
there´s no way yet to tell PHP what JS snippets define URLs.
This would be my approach for a solution;
please consider to add this functionality to PHP
and PLEASE let me know your decision.
-----
js_rewriter.funcname="addsid"
js_rewriter.properties="*.location,*.src,*.action"
First, insert '<script language="JavaScript" src="'. $PHP_SELF.
'?='.php_sessionjs_guid(). '"></script>' into the HTML source.
The guid above should define a function addsid(url) (function name
depending on js_rewriter.funcname) which assumes the parameter being a url
and provide the same functionality as the trans_sid feature.
Of course this should only apply if classic trans_sid applies as well.
See the input below for example results.
Sending the string through addsid in any case should work around the
trouble with dynamic values.
You might want to add type recognition to addsid, so that
old: myimage.src="dummy.php";
new: myimage.src = addsid('myimage', 'src', "dummy.php");
with addsid determining the type of myimage
but so far every src or location attribute holds in fact an URL and any
change is improbable, so this would most likely be wasted time.
Reproduce code:
---------------
<script>
myimage.src="dummy.php";
pagename = 'index';
extension = (phpflag ? 'php':'html');
top.frames[1].src = pagename + '.' + extension;
</script>
<a href="javascript:top.frames[1].src='index.html';">home</a>
<a href="javascript:;" onClick="top.frames[1].src='index.html';">home</a>
<button onClick="top.frames[1].src='index.html';">home</button>
<form action="submit.php">
<input type="submit" value="submit">
<button
onClick="this.form.action='rollback.php';this.form.submit();">rollback</button>
</form>
Expected result:
----------------
<script language="JavaScript" src="thisscript.php?=PHP..."></script>
<script>
myimage.src=addsid("dummy.php");
pagename = 'index';
extension = (phpflag ? 'php':'html');
top.frames[1].src = addsid(pagename + '.' + extension);
</script>
<a href="javascript:top.frames[1].src=addsid('index.html');">home</a>
<a href="javascript:;"
onClick="top.frames[1].src=addsid('index.html');">home</a>
<button onClick="top.frames[1].src=addsid('index.html');">home</button>
<form action="submit.php">
<input type="submit" value="submit">
<button
onClick="this.form.action=addsid('rollback.php');this.form.submit();">rollback</button>
</form>
--
Edit bug report at http://bugs.php.net/?id=24963&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=24963&r=trysnapshot4
Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=24963&r=trysnapshot5
Fixed in CVS: http://bugs.php.net/fix.php?id=24963&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=24963&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=24963&r=needtrace
Try newer version: http://bugs.php.net/fix.php?id=24963&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=24963&r=support
Expected behavior: http://bugs.php.net/fix.php?id=24963&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=24963&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=24963&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=24963&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=24963&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=24963&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=24963&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=24963&r=gnused
