123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172 |
- --TEST--
- rewriter handles form and fieldset tags correctly
- --EXTENSIONS--
- session
- --SKIPIF--
- <?php include('skipif.inc'); ?>
- --INI--
- session.use_cookies=0
- session.use_only_cookies=0
- session.use_strict_mode=0
- session.cache_limiter=
- session.use_trans_sid=1
- url_rewriter.tags="a=href,area=href,frame=src,input=src,form=,fieldset="
- session.name=PHPSESSID
- session.serialize_handler=php
- session.save_handler=files
- --FILE--
- <?php
- error_reporting(E_ALL);
- ini_set('session.trans_sid_hosts', 'php.net');
- $_SERVER['HTTP_HOST'] = 'php.net';
- session_id("test021");
- session_start();
- ?>
- <form action="//bad.net/do.php">
- <fieldset>
- <form action="//php.net/do.php">
- <fieldset>
- <?php
- ob_flush();
- ini_set("url_rewriter.tags", "a=href,area=href,frame=src,input=src,form=");
- ?>
- <form action="../do.php">
- <fieldset>
- <?php
- ob_flush();
- ini_set("url_rewriter.tags", "a=href,area=href,frame=src,input=src,form=fakeentry");
- ?>
- <form action="/do.php">
- <fieldset>
- <?php
- ob_flush();
- ini_set("url_rewriter.tags", "a=href,fieldset=,area=href,frame=src,input=src");
- ?>
- <form action="/foo/do.php">
- <fieldset>
- <?php
- session_destroy();
- ?>
- --EXPECT--
- <form action="//bad.net/do.php">
- <fieldset>
- <form action="//php.net/do.php"><input type="hidden" name="PHPSESSID" value="test021" />
- <fieldset>
- <form action="../do.php"><input type="hidden" name="PHPSESSID" value="test021" />
- <fieldset>
- <form action="/do.php"><input type="hidden" name="PHPSESSID" value="test021" />
- <fieldset>
- <form action="/foo/do.php"><input type="hidden" name="PHPSESSID" value="test021" />
- <fieldset>
|