URL-Rewriter should not get enabled if use_only_cookies is set to 1
| Bug #51338 | URL-Rewriter should not get enabled if use_only_cookies is set to 1 | ||||
|---|---|---|---|---|---|
| Submitted: | 2010-03-20 16:43 UTC | Modified: | 2010-03-22 13:18 UTC | ||
| From: | j dot jeising at gmail dot com | Assigned: | iliaa (profile) | ||
| Status: | Closed | Package: | Session related | ||
| PHP Version: | 5.3SVN-2010-03-20 (SVN) | OS: | |||
| Private report: | No | CVE-ID: | None | ||
[2010-03-20 16:43 UTC] j dot jeising at gmail dot com
Description:
------------
If session.use_only_cookies is enabled and session_use_trans_sid is enabled PHP
sets the URL-Rewriter as an ouput handler, although there is nothing to rewrite.
The Problem is the apply_trans_sid variable in session.c, which is only set to
zero if a cookie is found. I wrote a small patch which should fix it but somebody
with more insight should have a look.
Test script:
---------------
<?php
ini_set('session.use_only_cookies', 1);
ini_set('session.use_trans_sid', 0);
session_start();
print_r(ob_list_handlers());
?>
Expected result:
----------------
Array
(
[0] => default output handler
)
Actual result:
--------------
Array
(
[0] => URL-Rewriter
)
Patches
apply_trans_sid.patch (last revision 2010-03-20 15:43 UTC by j dot jeising at gmail dot com)Pull Requests
History
AllCommentsChangesGit/SVN commits
[2010-03-20 16:45 UTC] j dot jeising at gmail dot com
Should be "ini_set('session.use_trans_sid', 1);" in the test script.[2010-03-22 13:18 UTC] iliaa@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: iliaa