From: [EMAIL PROTECTED] Operating system: all PHP version: 4CVS-2005-04-25 (stable) PHP Bug Type: Unknown/Other Function Bug description: New cookie behaviour is breaking backward compatibility
Description: ------------ Recent changes in cookie handling breaks backward compatibility. The netscape cookie specification says about commas in Set-Cookie header: If there is a need to place such data in the name or value, some encoding method such as URL style %XX encoding is recommended, though no encoding is defined or required. Read RECOMMENDED, BUT NOT REQUIRED. Additionally this limitation only covers name=value in Set-Cookie and not Cookie name=opaque_strings. PHP's Set-Cookie does not allow sending plain commas as Cookie, but that does not change the fact, that anyone can set a Cookie via Java Script with a plain comma in it or use another script language that runs on the same server and is part of the application. Browsers happily send them in plain back. Lots of sites, especially those with FALK.ag ad banners have plain commas in there cookies. It is not longer possible for PHP script on those servers to handle these cookies. -- Edit bug report at http://bugs.php.net/?id=32827&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=32827&r=trysnapshot4 Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=32827&r=trysnapshot50 Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=32827&r=trysnapshot51 Fixed in CVS: http://bugs.php.net/fix.php?id=32827&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=32827&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=32827&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=32827&r=needscript Try newer version: http://bugs.php.net/fix.php?id=32827&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=32827&r=support Expected behavior: http://bugs.php.net/fix.php?id=32827&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=32827&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=32827&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=32827&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=32827&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=32827&r=dst IIS Stability: http://bugs.php.net/fix.php?id=32827&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=32827&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=32827&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=32827&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=32827&r=mysqlcfg
