021.phpt 1.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172
  1. --TEST--
  2. rewriter handles form and fieldset tags correctly
  3. --EXTENSIONS--
  4. session
  5. --SKIPIF--
  6. <?php include('skipif.inc'); ?>
  7. --INI--
  8. session.use_cookies=0
  9. session.use_only_cookies=0
  10. session.use_strict_mode=0
  11. session.cache_limiter=
  12. session.use_trans_sid=1
  13. url_rewriter.tags="a=href,area=href,frame=src,input=src,form=,fieldset="
  14. session.name=PHPSESSID
  15. session.serialize_handler=php
  16. session.save_handler=files
  17. --FILE--
  18. <?php
  19. error_reporting(E_ALL);
  20. ini_set('session.trans_sid_hosts', 'php.net');
  21. $_SERVER['HTTP_HOST'] = 'php.net';
  22. session_id("test021");
  23. session_start();
  24. ?>
  25. <form action="//bad.net/do.php">
  26. <fieldset>
  27. <form action="//php.net/do.php">
  28. <fieldset>
  29. <?php
  30. ob_flush();
  31. ini_set("url_rewriter.tags", "a=href,area=href,frame=src,input=src,form=");
  32. ?>
  33. <form action="../do.php">
  34. <fieldset>
  35. <?php
  36. ob_flush();
  37. ini_set("url_rewriter.tags", "a=href,area=href,frame=src,input=src,form=fakeentry");
  38. ?>
  39. <form action="/do.php">
  40. <fieldset>
  41. <?php
  42. ob_flush();
  43. ini_set("url_rewriter.tags", "a=href,fieldset=,area=href,frame=src,input=src");
  44. ?>
  45. <form action="/foo/do.php">
  46. <fieldset>
  47. <?php
  48. session_destroy();
  49. ?>
  50. --EXPECT--
  51. <form action="//bad.net/do.php">
  52. <fieldset>
  53. <form action="//php.net/do.php"><input type="hidden" name="PHPSESSID" value="test021" />
  54. <fieldset>
  55. <form action="../do.php"><input type="hidden" name="PHPSESSID" value="test021" />
  56. <fieldset>
  57. <form action="/do.php"><input type="hidden" name="PHPSESSID" value="test021" />
  58. <fieldset>
  59. <form action="/foo/do.php"><input type="hidden" name="PHPSESSID" value="test021" />
  60. <fieldset>