ID:              43162
 User updated by: ryat at wolvez dot org
 Reported By:     ryat at wolvez dot org
 Status:          Open
 Bug Type:        *General Issues
 PHP Version:     5.2.4
 New Comment:

Hihi,pay attention to:

magic_quotes_gpc=on

http://127.0.0.1/test.php?a'aaaa=test

Actual result:
--------------
Array ( [a\'aaaa] => test )


http://127.0.0.1/test.php?a%00aaaa=test

Actual result:
--------------
Array ( [a] => test )


Previous Comments:
------------------------------------------------------------------------

[2007-10-31 16:41:14] crescentfreshpot at yahoo dot com

php is written in C. In C the null byte represents the end of a string.
I don't think php can work around this.

------------------------------------------------------------------------

[2007-10-31 13:23:33] ryat at wolvez dot org

Description:
------------
GET date variable name not binary-safe on null bytes

Reproduce code:
---------------
<?php
print_r($_GET);
?>


http://127.0.0.1/test.php?a%00aaaa=test

Actual result:
--------------
Array ( [a] => test )


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=43162&edit=1

Reply via email to