From: admin at rcczone dot com Operating system: Linux / Apache PHP version: 4.4.2 PHP Bug Type: Strings related Bug description: strip_tags selectively strips allowed_tags
Description:
------------
For some reason beyond my knowledge, the strip_tags function is
selectively stripping allowed_tags. I have tested it against three
relatively similar strings (all <embed> tags) and it passing on only one
out of the three. The string and xhtml tags themselves are perfectly
valid, and I have no clue why strip_tags is behaving in such a way.
Reproduce code:
---------------
echo strip_tags('<embed allowScriptAccess="never"
src="http://www.picturetrail.com/photoFlick/l_bookhorizontal.swf";
name="photoFlick"
FlashVars="img1=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756363.jpg&img2=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756370.jpg&img3=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756373.jpg&img4=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756375.jpg&img5=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756377.jpg&img6=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756379.jpg&img7=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756381.jpg&img8=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756384.jpg&img9=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756386.jpg&img10=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756388.jpg&img11=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756391.jpg&img12=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756394.jpg&img13=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/!
139756395.jpg&img14=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756397.jpg";
loop="false" menu="false" quality="high" bgcolor="..ffffff" width="600"
height="410" align="middle" allowScriptAccess="never"
type="application/x-shockwave-flash"
pluginspage="http://www.macromedia.com/go/getflashplayer";></embed>','<embed>');
Expected result:
----------------
<embed allowScriptAccess="never"
src="http://www.picturetrail.com/photoFlick/l_bookhorizontal.swf";
name="photoFlick"
FlashVars="img1=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756363.jpg&img2=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756370.jpg&img3=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756373.jpg&img4=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756375.jpg&img5=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756377.jpg&img6=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756379.jpg&img7=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756381.jpg&img8=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756384.jpg&img9=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756386.jpg&img10=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756388.jpg&img11=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756391.jpg&img12=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756394.jpg&img13=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/!
139756395.jpg&img14=http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756397.jpg";
loop="false" menu="false" quality="high" bgcolor="..ffffff" width="600"
height="410" align="middle" allowScriptAccess="never"
type="application/x-shockwave-flash"
pluginspage="http://www.macromedia.com/go/getflashplayer";></embed>
Actual result:
--------------
</embed>
--
Edit bug report at http://bugs.php.net/?id=37898&edit=1
--
Try a CVS snapshot (PHP 4.4):
http://bugs.php.net/fix.php?id=37898&r=trysnapshot44
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=37898&r=trysnapshot52
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=37898&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=37898&r=fixedcvs
Fixed in release:
http://bugs.php.net/fix.php?id=37898&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=37898&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=37898&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=37898&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=37898&r=support
Expected behavior: http://bugs.php.net/fix.php?id=37898&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=37898&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=37898&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=37898&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=37898&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=37898&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=37898&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=37898&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=37898&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=37898&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=37898&r=mysqlcfg
![http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756397.jpg"](http://pic20.picturetrail.com:80/VOL1204/4617287/9809076/139756397.jpg"){kind=link}