ID:               28373
 Updated by:       [EMAIL PROTECTED]
 Reported By:      phpbugreport at thedigitalnetwork dot com
-Status:           Open
+Status:           Bogus
 Bug Type:         Apache2 related
 Operating System: Windows XP SP1
 PHP Version:      5CVS-2004-05-12 (dev)
 New Comment:

Bug was fixed. (phpinfo() output is not necessarily the "real" data,
it's usually modified to _look_ good)



Previous Comments:
------------------------------------------------------------------------

[2004-05-12 18:04:16] phpbugreport at thedigitalnetwork dot com

Description:
------------
In PHP4.3.4, $_SERVER['HTTP_REFERER'], along with others like PATH,
SystemRoot, COMSPEC and WINDIR, have any backslashes escaped.
 
In PHP5RC2 & the current DEV (php5-win32-200405121430.zip) version, the
items in $_SERVER are not escaped anymore.

I could find no mention in the bug database or change logs, so I
wondered if this was a change in the way Super Globals are handled,
since $_SERVER is not part of "GPC"?

Relevent INI settings:
----------------------
register_globals=Off
register_argc_argv = Off

gpc_order = "GPC"
variables_order = "GPCS"

magic_quotes_gpc = On
magic_quotes_runtime = Off    
magic_quotes_sybase = Off
----------------------
Thanks for your assistance!

Reproduce code:
---------------
phpinfo();

Expected result:
----------------
Expect to see items in _SERVER with backslashes escaped:

[HTTP_REFERER] =>
http://localhost/Browse.php?Category=\\Language%20Arts\\Reading\\Letter%20TV&Level=4
[PATH] =>
C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\Program
Files\\Common Files\\GTK\\2.0\\bin
[SystemRoot] => C:\\WINDOWS
[COMSPEC] => C:\\WINDOWS\\system32\\cmd.exe


Actual result:
--------------
Unescaped backslashes:

[HTTP_REFERER] =>
http://localhost/Browse.php?Category=\Language%20Arts\Reading\Letter%20TV&Level=4
[PATH] =>
C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program
Files\Common Files\\TK\2.0\bin
[SystemRoot] => C:\WINDOWS
[COMSPEC] => C:\WINDOWS\system32\cmd.exe



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=28373&edit=1

Reply via email to