From: matei dot tene at unidec dot ro Operating system: Windows 2000 PHP version: 4.4.3 PHP Bug Type: Session related Bug description: PHPSESSID is appended in HTML contents of text fields
Description: ------------ Well. I guess that many forum administrators that allow html in posts have this problem. I am using php 4.2.2, and i have a form who's contents can (and most frequently do) contain html tags like <a href="...">. This form is filled out in the administration portion of the site (which requires authentification and thus uses sessions). The problem is that, upon submission, PHP appends the PHPSESSID in the html tags contained in the body of the text fields, like: <form> <input type=text value="<a href=http://url>"> </form> becomes <form> <input type=text value="<a href=http://url?PHPSESSID=1234565756..>"> </form> Has this been fixed in later versions of PHP? -- Edit bug report at http://bugs.php.net/?id=38349&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=38349&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=38349&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=38349&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=38349&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=38349&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=38349&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=38349&r=needscript Try newer version: http://bugs.php.net/fix.php?id=38349&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=38349&r=support Expected behavior: http://bugs.php.net/fix.php?id=38349&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=38349&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=38349&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=38349&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=38349&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=38349&r=dst IIS Stability: http://bugs.php.net/fix.php?id=38349&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=38349&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=38349&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=38349&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=38349&r=mysqlcfg
