ID: 33904
Updated by: [EMAIL PROTECTED]
Reported By: php at kanariepiet dot com
-Status: Critical
+Status: Closed
Bug Type: *General Issues
Operating System: *
PHP Version: 5CVS-2005-07-29
Previous Comments:
------------------------------------------------------------------------
[2005-07-28 17:20:03] [EMAIL PROTECTED]
See also bug #29165.
------------------------------------------------------------------------
[2005-07-28 17:04:23] php at kanariepiet dot com
php5-200507281430 gives the same results as php-5.0.4:
<?php
print_r ($_POST);
?>
<form method="post">
<input type="text" name="foo'bar" value="bar'foo">
</form>
returns
Array (
[foo\'bar] => bar'foo
)
------------------------------------------------------------------------
[2005-07-28 16:34:20] [EMAIL PROTECTED]
Please try using this CVS snapshot:
http://snaps.php.net/php5-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php5-win32-latest.zip
------------------------------------------------------------------------
[2005-07-28 16:30:33] php at kanariepiet dot com
phpinfo() show that magic quotes are turned off.
As stated above, value parts are left alone. The following
code returns Array ( [test] => foo'bar ) as expected, so the
settings are ok.
<?php print_r ($_POST); ?>
<form method="post">
<input type="text" name="test" value="foo'bar">
</form>
------------------------------------------------------------------------
[2005-07-28 16:26:57] php at kanariepiet dot com
To be more precies:
The quotes in the value parts of the $_POST array are left
alone (good), but the quotes in the key parts of the $_POST
array are preceeded with slashes (wrong).
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/33904
--
Edit this bug report at http://bugs.php.net/?id=33904&edit=1