phpwebsite-developers

[Phpwebsite-developers] buggy cleanArray()

[Don S. <do...@se...>]

This was driving me nuts.  Whenever a form var contained the text "t?",
like "what?", the "t?" was being replaced with "NOPHP" if it was sourced
=66rom $_REQUEST[].  If $_POST[] was used then the var was fine.

Looks like this line in PHPWebSite's index.php is the culprit:

$Value =3D eregi_replace("['<'|'%3C'|'&lt;'|'&#60;']+\?", "NOPHP", $Value);

Looks like this needs to be fine tuned.  My form field didn't contain a
"<" char at all, so this certainly shouldn't have been substituted.

Don.

--=20
Reporter: "The European Union and Japan have filed a challenge in the WTO
          (World Trade Organization) against a rule in the Agriculture
          Appropriations bill that would allow steel companies to receive
          money from antidumping duties."

Bush: "Say again now?"

George W. Bush
December 22, 2000
Spoken during a press conference held by the president-elect.

Re: [Phpwebsite-developers] buggy cleanArray()

[Darren G. <dg...@tu...>]

The index.php file in CVS was updated to fix this problem.  I noticed it
when I added a FAQ that ended in "0.9.3-3?".

Darren


> This was driving me nuts.  Whenever a form var contained the text "t?",
> like "what?", the "t?" was being replaced with "NOPHP" if it was sourced
> from $_REQUEST[].  If $_POST[] was used then the var was fine.
>
> Looks like this line in PHPWebSite's index.php is the culprit:
>
> $Value = eregi_replace("['<'|'%3C'|'<'|'<']+\?", "NOPHP", $Value);
>
> Looks like this needs to be fine tuned.  My form field didn't contain a
> "<" char at all, so this certainly shouldn't have been substituted.
>
> Don.
>
> --
> Reporter: "The European Union and Japan have filed a challenge in the WTO
>           (World Trade Organization) against a rule in the Agriculture
>           Appropriations bill that would allow steel companies to receive
>           money from antidumping duties."
>
> Bush: "Say again now?"
>
> George W. Bush
> December 22, 2000
> Spoken during a press conference held by the president-elect.
>

Re: [Phpwebsite-developers] buggy cleanArray()

[Don S. <do...@se...>]

So 3? does it too?  I thought it was just "t?", I know that "s?" works
fine.

Alright I'll see if we can drop the new index.php into our -3 install
install.

Thanks,

Don.

On Mon, Jun 14, 2004 at 08:53:31AM -0400, Darren Greene wrote:
> The index.php file in CVS was updated to fix this problem.  I noticed it
> when I added a FAQ that ended in "0.9.3-3?".
>=20
> Darren
>=20
>=20
> > This was driving me nuts.  Whenever a form var contained the text "t?",
> > like "what?", the "t?" was being replaced with "NOPHP" if it was sourced
> > from $_REQUEST[].  If $_POST[] was used then the var was fine.
> >
> > Looks like this line in PHPWebSite's index.php is the culprit:
> >
> > $Value =3D eregi_replace("['<'|'%3C'|'<'|'<']+\?", "NOPHP", $Value);
> >
> > Looks like this needs to be fine tuned.  My form field didn't contain a
> > "<" char at all, so this certainly shouldn't have been substituted.
> >
> > Don.
> >
> > --
> > Reporter: "The European Union and Japan have filed a challenge in the W=
TO
> >           (World Trade Organization) against a rule in the Agriculture
> >           Appropriations bill that would allow steel companies to recei=
ve
> >           money from antidumping duties."
> >
> > Bush: "Say again now?"
> >
> > George W. Bush
> > December 22, 2000
> > Spoken during a press conference held by the president-elect.
> >
>=20
>=20
>=20
> -------------------------------------------------------
> This SF.Net email is sponsored by the new InstallShield X.
> >From Windows to Linux, servers to mobile, InstallShield X is the
> one installation-authoring solution that does it all. Learn more and
> evaluate today! http://www.installshield.com/Dev2Dev/0504
> _______________________________________________
> Phpwebsite-developers mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers

--=20
"It is incredibly presumptive for somebody who has not yet earned his party=
's
nomination to start speculating about vice presidents."

George W. Bush
October 22, 1999
Comment made while visiting Keene, New Hampshire.