Dmitry Stogov
09ca61c125
Made server wide switch for unicode on/off (according to PDM).
20 years ago
foobar
251c5173fd
bump year and license version
20 years ago
foobar
2b1085d103
fix typo
20 years ago
Ilia Alshanetsky
a4861d1512
Prevent header injection by limiting each header to a single line.
20 years ago
foobar
8c633a099f
- Revert bad patch. This is wrong way to handle leak in "php -m"
20 years ago
Michael Wallner
ab95f1981c
- sapi_header_op(SAPI_HEADER_(REPLACE|ADD), {NULL, 0, 0}) caused HTTP response splitting
- sapi_send_headers() already takes care of default_content_type (left over of fix for bug #29983 )
20 years ago
Ilia Alshanetsky
c1a09f6399
MFB51: Fixed minor memory leak triggered by: -dzlib.output_compression=1 -m
20 years ago
Ilia Alshanetsky
50686f4d7c
Fixed bug #29983 (PHP does not explicitly set mime type & charset).
20 years ago
Andrei Zmievski
264cec8be6
Unicode support.
21 years ago
foobar
23e671a51e
- Bumber up year
21 years ago
Ilia Alshanetsky
0131b2b032
Fixed double-free in the digest authentication handling.
# Found and Reported by Stefan Esser
21 years ago
Rui Hirokawa
8235a70ef9
added a server variable PHP_AUTH_DIGEST to support HTTP Digest Authentication.
21 years ago
Rasmus Lerdorf
3c0411c496
Fix for bug #32263
This adds proto_num to request_info. It is defaulted to HTTP 1.0 (1000)
such that it has a valid value even if the underlying sapi doesn't set it
correctly. It is then used to determine if a 302 or a 303 should be sent
on a Location redirect. Any non GET/HEAD HTTP 1.1 redirect will get a 303
instead of a 302 to be compatible with the HTTP spec.
21 years ago
Andrey Hristov
9e939133d2
FR 32275 - fifth parameter to preg_replace() to count number of replaces
made.
#it would be nice if someone of the doc team documents it. thanks!
21 years ago
Moriyoshi Koizumi
5e33c04e95
- Fixed bug #32109 ($_POST is not populated in multithreaded environment).
21 years ago
Moriyoshi Koizumi
b19d28907e
- Silly typo.
21 years ago
foobar
498cce1f80
Nuke unused variables when PCRE is not compiled in
21 years ago
foobar
42599f8191
Remove the useless TSRM_FETCH calls
21 years ago
Moriyoshi Koizumi
0d7845384f
- Fix bug #28568 (known_post_content_types is not thread safe).
# What is eventually necessiated is entire SAPI redesign, I think.
21 years ago
Stefan Esser
c02b2d2d45
Fixed: Correctly Initialize fields
21 years ago
Andi Gutmans
216853c0db
- Apply realpath() cache patch. We don't use it if we're in safe_mode and
- friends (which are quite slow anyway).
- If it proves to be stable I'll remove the #ifdef's in a few weeks.
22 years ago
Brian France
2f97097e0f
If you send a post with a content-type header and then the next post without the content-type header, raw_post_data will not be set. This is because SG(request_info).post_entry is set to the first requests function pointer which makes it follow the wrong code path.
22 years ago
Rasmus Lerdorf
3166314d89
Reset global request_time in sapi_activate. Reset it in sapi_deactivate
too, although I can't see why that would be necessary, but most of the
other sapi globals are reset there as well.
22 years ago
Rasmus Lerdorf
cad60c3760
Add SAPI hook to get the request time if provided by the web server,
otherwise call time(0) on the first call and store it so subsequent
calls will get the same time. Hook support for Apache1/2 included.
22 years ago
Ilia Alshanetsky
b8c9e83664
Fixed bug #28692 (\0 in Authenticate header passed via safe_mode).
22 years ago
Ilia Alshanetsky
ff5b2d27ae
Fixed bug #28670 (WWW-Authentication header mangling with PCRE in safe_mode
adds extra spaces).
22 years ago
Stefan Esser
7dc95709c8
break is better
22 years ago
Marcus Boerger
bca4347064
Fixed bug #27687 (Bug Adding Default Charset to 'text/*' Content-Type Header
22 years ago
Ilia Alshanetsky
09517318b1
Fixed bug #27530 (broken http auth when safe_mode is on and PCRE is
disabled).
22 years ago
Andi Gutmans
dbeb4158d2
- A belated happy holidays and PHP 5
22 years ago
Derick Rethans
750b0338bf
- Fix sapi_input_filter patch. Returning 1 from the filter handler should
make PHP register the variable, returning 0 shouldn't. The new length of
the variables being filtered is now returned in the new_val_len argument
of the function.
22 years ago
Stefan Esser
28b6c35d80
On error do not leave content_type_dup unitialised.
22 years ago
Ard Biesheuvel
6f37733367
Fixed for 64bit archs
23 years ago
Stefan Roehrich
2fc92e8fd8
Fix for bug #23488 zlib.output_compression overrides vary header.
It was already fixed for ob_gzhandler (#24827 ).
23 years ago
Sascha Schumann
af8e15b8db
kill warnings
23 years ago
Marcus Boerger
c60d2a312e
Bugfix #25044
23 years ago
James Cox
f68c7ff249
updating license information in the headers.
23 years ago
Edin Kadribasic
b7713f411e
Fix for #23902 by Shane.
Removed bogus recommendation from php.ini files.
# Basic authentication is actually possible
# usign IIS + PHP cgi countrary to our current docs
23 years ago
Rasmus Lerdorf
d08a0e99c8
An input filter might not simply strip stuff, it might also turn things
into entities or use some other mechanism which causes the filtered data
to be longer than the original data. Ergo, pass in the address of the
buffer instead so the filter is free to reallocate it.
23 years ago
Rasmus Lerdorf
7429c2dc3f
Input Filter support. See README.input_filter for details.
@- Input Filter support added. See README.input_filter. (Rasmus)
23 years ago
Stefan Esser
a0873a8f7d
size matters not.
23 years ago
Stefan Esser
d2c550e991
8 + 20 + 1 + 1 = 30
There was no Bufferoverflow on 64bit systems.
And the "fix" broke the header code on systems with old style snprintf.
23 years ago
Moriyoshi Koizumi
6d95ea199d
Fixed possible snprintf problem
# besides snprintf returns int value, not uint / size_t...
23 years ago
Moriyoshi Koizumi
9450b1e4b0
Fixed possible buffer overflow in 64bit systems
23 years ago
Moriyoshi Koizumi
9d5811c1f0
Jani happification
23 years ago
Moriyoshi Koizumi
21f766b7a4
Fixed zlib.output_compression so it can work even if zlib extension is built as shared
23 years ago
Sascha Schumann
ba32a619ae
use SUCCESS/FAILURE instead of 0/-1
23 years ago
foobar
a09e1397c7
Fixed compile failures when ZLIB / PCRE are compiled as shared
extensions in same build.
23 years ago
Sascha Schumann
294e776d95
add sapi_get_target_uid/_gid for obtaining information about the
non-privileged user the web server is running as. this is useful
for creating shared memory segments which need to be accessed by
the child processes/threads.
23 years ago
Sascha Schumann
0855c0b603
whitespace
23 years ago