[bugs] [Bug 1035] New - Downloading a page from cvs.php.net with wget inserts Horde session into file

bugs@bugs.horde.org bugs@bugs.horde.org
Thu, 29 Aug 2002 05:57:37 -0300


http://bugs.horde.org/show_bug.cgi?id=1035

*** shadow/1035	Thu Aug 29 05:57:37 2002
--- shadow/1035.tmp.20431	Thu Aug 29 05:57:37 2002
***************
*** 0 ****
--- 1,55 ----
+ Bug#: 1035
+ Product: Horde
+ Version: 2.2 Stable
+ Platform: other
+ OS/Version: Linux
+ Status: NEW   
+ Resolution: 
+ Severity: normal
+ Priority: P2
+ Component: Core
+ Area: BUILD
+ AssignedTo: chuck@horde.org                            
+ ReportedBy: pgod@php.net               
+ URL: 
+ Summary: Downloading a page from cvs.php.net with wget inserts Horde session into file
+ 
+ ATTENTION! Component is Chora (2.0-cvs), not Core! (maybe a good idea to add it 
+ to the list?)
+ 
+ I wanted to download a file from cvs.php.net, therefore I pointed wget
+ to it, but the file in cvs and the downloaded file differ in a strange
+ way.
+ 
+ This is how to reproduce the issue:
+ 
+ Please open
+ http://cvs.php.net/co.php/php-gtk-web/include/layout.php
+ in your browser, and find the function 'make_link' (line 125).
+ 
+ Line 126 reads
+ 
+ return sprintf("<a href=\"%s\"%s%s>%s</a>",
+ 
+ 
+ This remains true also if you download the file layout.php by opening
+ this in a browser:
+ http://cvs.php.net/co.php/php-gtk-web/include/layout.php?p=1
+ 
+ But if you, like me, download the file by giving this url to the wget
+ program (version 1.5.3, SuSE Linux 7.1), the same line in the
+ downloaded file reads
+ 
+ return sprintf("<a
+ href="\?Horde=89d711fe32dcdbf0b8c32996c43ca0e2""%s\"%s%s>%s</a>",
+ 
+ The random looking session id remains the same with every download.
+ 
+ Hard to say wether this has to do with Horde/Chora, PHP Session
+ Management or wget, as only the wget part lies on my site.
+ 
+ 
+ Note: I first reported this to the php.net bugtracker, but we came to the 
+ conclusion that it might have to do with Horde in the first place. The original 
+ bug report can be found here:
+ http://bugs.php.net/bug.php?id=19162