From:             [EMAIL PROTECTED]
Operating system: FreeBSD 4.4
PHP version:      4.0.6
PHP Bug Type:     Session related
Bug description:  The doubledoublequote strikes again

I came across the bug described in Bug-ID #8311 with 4.03pl1
on our old Server, so I transfered it to the new Server running 4.0.6 and
the behaviour is nearly the same.
This:
<?php
session_start();
$somevar = "<a href=\"javascript:;\"
onClick=window.open(\"/hardware/somevar.php?hinfoid=".$somevar_id."\",\"chgti\",\"location=0,directories=0,status=0,menubar=0,scrollbars=0,toolbar=0,width=450,height=470\");>Badlink</a>";

echo $somevar;
?>

produces this:
<a href="javascript:;"
onClick="window.open(""/hardware/somevar.php?hinfoid=","chgti","location=0,directories=0,status=0,menubar=0,scrollbars=0,toolbar=0,width=450,height=470");>Badlink</a>


Without the session, the Output is normal, both with 4.0.3pl1 and 4.06.
The only difference is that 4.0.6 does a few less quotes than 4.0.3pl1.

Trans-SID is enabled, PHP is running as an Apache-Module



-- 
Edit bug report at: http://bugs.php.net/?id=14080&edit=1


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to