iliaa Tue Aug 2 13:01:05 2005 EDT
Modified files:
/php-srcNEWS
/php-src/main php_variables.c
Log:
Fixed bug #33958 (duplicate cookies and magic_quotes=off may cause a crash)
http://cvs.php.net/diff.php/php-src/NEWS?r1=1.2017&r2=1.2018&ty=u
I
iliaa Fri Jul 29 11:43:37 2005 EDT
Modified files:
/php-srcNEWS
/php-src/main php_variables.c
Log:
Fixed bug #33904 (input array keys being escaped when magic quotes is off).
http://cvs.php.net/diff.php/php-src/NEWS?r1=1.2013&r2=1.2014&ty=u
I
iliaa Mon Jul 18 15:18:03 2005 EDT
Modified files:
/php-src/main php_variables.c
/php-srcNEWS
Log:
Revert cookie patch for BC reasons.
http://cvs.php.net/diff.php/php-src/main/php_variables.c?r1=1.97&r2=1.98&ty=u
Index: php-src/main/php_varia
Ilia Alshanetsky wrote:
The Cookie RFC (2109)
Is irrelevant, because PHP never supported the cookie format described
there.
PHP only knows about the Netscape Cookie Specification. And that
Specification only allows ; as separator and all other chars SHOULD be
encoded, but because no encodin
The Cookie RFC (2109) clearly states that spaces are permitted between
tokens and that a comma is a valid separator. PHP's own setcookie()
function will refuse to create cookies containing spaces or commas in
their names. At the same time, while uncommon it is perfectly valid to
have multiple C
case PARSE_COOKIE:
- separator = ";\0";
+ /* The , and space are needed for instances when there
are multiple Cookie: headers */
+ separator = ";, \0";
break;
}
This patch breaks
iliaa Mon Jul 18 00:04:18 2005 EDT
Modified files:
/php-srcNEWS
/php-src/main php_variables.c
Log:
Fixed handling of HTTP requests with multiple Cookie headers.
http://cvs.php.net/diff.php/php-src/NEWS?r1=1.1997&r2=1.1998&ty=u
Index: php-src
iliaa Sun Oct 24 13:41:14 2004 EDT
Modified files:
/php-srcNEWS
/php-src/main php_variables.c
Log:
Make request start time be available via $_SERVER['REQUEST_TIME'].
# As discussed on internals.
http://cvs.php.net/diff.php/php-src/NEWS?r