[bugs] [Bug 1035] New - Downloading a page from cvs.php.net with wget
inserts Horde session into file
bugs@bugs.horde.org
bugs@bugs.horde.org
Thu, 29 Aug 2002 05:57:37 -0300
http://bugs.horde.org/show_bug.cgi?id=1035
*** shadow/1035 Thu Aug 29 05:57:37 2002
--- shadow/1035.tmp.20431 Thu Aug 29 05:57:37 2002
***************
*** 0 ****
--- 1,55 ----
+ Bug#: 1035
+ Product: Horde
+ Version: 2.2 Stable
+ Platform: other
+ OS/Version: Linux
+ Status: NEW
+ Resolution:
+ Severity: normal
+ Priority: P2
+ Component: Core
+ Area: BUILD
+ AssignedTo: chuck@horde.org
+ ReportedBy: pgod@php.net
+ URL:
+ Summary: Downloading a page from cvs.php.net with wget inserts Horde session into file
+
+ ATTENTION! Component is Chora (2.0-cvs), not Core! (maybe a good idea to add it
+ to the list?)
+
+ I wanted to download a file from cvs.php.net, therefore I pointed wget
+ to it, but the file in cvs and the downloaded file differ in a strange
+ way.
+
+ This is how to reproduce the issue:
+
+ Please open
+ http://cvs.php.net/co.php/php-gtk-web/include/layout.php
+ in your browser, and find the function 'make_link' (line 125).
+
+ Line 126 reads
+
+ return sprintf("<a href=\"%s\"%s%s>%s</a>",
+
+
+ This remains true also if you download the file layout.php by opening
+ this in a browser:
+ http://cvs.php.net/co.php/php-gtk-web/include/layout.php?p=1
+
+ But if you, like me, download the file by giving this url to the wget
+ program (version 1.5.3, SuSE Linux 7.1), the same line in the
+ downloaded file reads
+
+ return sprintf("<a
+ href="\?Horde=89d711fe32dcdbf0b8c32996c43ca0e2""%s\"%s%s>%s</a>",
+
+ The random looking session id remains the same with every download.
+
+ Hard to say wether this has to do with Horde/Chora, PHP Session
+ Management or wget, as only the wget part lies on my site.
+
+
+ Note: I first reported this to the php.net bugtracker, but we came to the
+ conclusion that it might have to do with Horde in the first place. The original
+ bug report can be found here:
+ http://bugs.php.net/bug.php?id=19162