ext/session/tests/session_basic5.phpt - master - vshmidt/php

ext/session/tests/session_basic5.phpt
445 строк18 KB
Kamil Tekiela
Deprecate disabling use_only_cookies (#13578)
24 авг 2024, 17:33
24 авг 2024, 17:33c5bce0d
--TEST--
Test basic function : variation5 use_trans_sid
--INI--
session.use_strict_mode=0
session.use_only_cookies=0
session.use_trans_sid=1
session.save_handler=files
session.gc_probability=1
session.gc_divisor=1000
session.gc_maxlifetime=300
session.save_path=
session.name=PHPSESSID
--EXTENSIONS--
session
--SKIPIF--
<?php include('skipif.inc'); ?>
--FILE--
<?php
ob_start();

$_SERVER['HTTP_HOST'] = 'php.net';
ini_set('session.trans_sid_hosts','php.net,example.com');

echo "*** Testing basic session functionality : variation5 use_trans_sid ***\n";
echo "*** Test trans sid ***\n";

$session_id = 'session-basic5';
session_id($session_id);
session_start();
// Should add session ID to allowed hosts only for SECURITY
echo '
<a href="/">test</a>
<a href="/path">test</a>
<a href="/path/">test</a>
<a href="/path/?foo=var">test</a>
<a href="../">test</a>
<a href="../path">test</a>
<a href="../path/">test</a>
<a href="../path/?foo=var">test</a>

<a href="/#bar">test</a>
<a href="/path/#bar">test</a>
<a href="/path/?foo=var#bar">test</a>
<a href="../#bar">test</a>
<a href="../path/#bar">test</a>
<a href="../path/?foo=var#bar">test</a>

<a href="/?foo">test</a>
<a href="/?foo#bar">test</a>
<a href="/?foo=var">test</a>
<a href="/?foo=var#bar">test</a>
<a href="../?foo">test</a>
<a href="../?foo#bar">test</a>
<a href="../?foo=var">test</a>
<a href="../?foo=var#bar">test</a>

<a href="file.php">test</a>
<a href="file.php?foo">test</a>
<a href="file.php?foo=var">test</a>
<a href="file.php?foo=var#bar">test</a>
<a href="../file.php">test</a>
<a href="../file.php?foo">test</a>
<a href="../file.php?foo=var">test</a>
<a href="../file.php?foo=var#bar">test</a>

<a href="http://php.net">test</a>
<a href="http://php.net/">test</a>
<a href="http://php.net/#bar">test</a>
<a href="http://php.net/?foo">test</a>
<a href="http://php.net/?foo#bar">test</a>
<a href="http://php.net/?foo=var">test</a>
<a href="http://php.net/?foo=var#bar">test</a>
<a href="http://php.net/file.php">test</a>
<a href="http://php.net/file.php#bar">test</a>
<a href="http://php.net/file.php?foo">test</a>
<a href="http://php.net/file.php?foo#bar">test</a>
<a href="http://php.net/file.php?foo=var">test</a>
<a href="http://php.net/file.php?foo=var#bar">test</a>
<a href="http://php.net/some/path/file.php">test</a>
<a href="http://php.net/some/path/file.php?foo">test</a>
<a href="http://php.net/some/path/file.php?foo=var">test</a>
<a href="http://php.net/some/path/file.php?foo=var#bar">test</a>

<a href="https://php.net">test</a>
<a href="https://php.net/">test</a>
<a href="https://php.net/?foo=var#bar">test</a>
<a href="https://php.net/file.php">test</a>
<a href="https://php.net/file.php?foo=var#bar">test</a>
<a href="https://php.net/some/path/file.php">test</a>
<a href="https://php.net/some/path/file.php?foo=var#bar">test</a>
<a href="https://php.net:8443">test</a>
<a href="https://php.net:8443/">test</a>
<a href="https://php.net:8443/?foo=var#bar">test</a>
<a href="https://php.net:8443/file.php">test</a>
<a href="https://php.net:8443/file.php?foo=var#bar">test</a>
<a href="https://php.net:8443/some/path/file.php">test</a>
<a href="https://php.net:8443/some/path/file.php?foo=var#bar">test</a>

<a href="//php.net">test</a>
<a href="//php.net/">test</a>
<a href="//php.net/#bar">test</a>
<a href="//php.net/?foo">test</a>
<a href="//php.net/?foo#bar">test</a>
<a href="//php.net/?foo=var">test</a>
<a href="//php.net/?foo=var#bar">test</a>
<a href="//php.net/file.php">test</a>
<a href="//php.net/file.php#bar">test</a>
<a href="//php.net/file.php?foo">test</a>
<a href="//php.net/file.php?foo#bar">test</a>
<a href="//php.net/file.php?foo=var">test</a>
<a href="//php.net/file.php?foo=var#bar">test</a>
<a href="//php.net/some/path/file.php">test</a>
<a href="//php.net/some/path/file.php?foo">test</a>
<a href="//php.net/some/path/file.php?foo=var">test</a>
<a href="//php.net/some/path/file.php?foo=var#bar">test</a>

<form action="script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="../script.php" method="post">r
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="/path/script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="../path/script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="http://php.net/script.php">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="https://php.net/script.php">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="//php.net/script.php">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>


<a href="http://bad.com">test</a>
<a href="http://bad.com/">test</a>
<a href="http://bad.com/#bar">test</a>
<a href="http://bad.com/?foo">test</a>
<a href="http://bad.com/?foo#bar">test</a>
<a href="http://bad.com/?foo=var">test</a>
<a href="http://bad.com/?foo=var#bar">test</a>
<a href="http://bad.com/file.php">test</a>
<a href="http://bad.com/file.php#bar">test</a>
<a href="http://bad.com/file.php?foo">test</a>
<a href="http://bad.com/file.php?foo#bar">test</a>
<a href="http://bad.com/file.php?foo=var">test</a>
<a href="http://bad.com/file.php?foo=var#bar">test</a>
<a href="http://bad.com/some/path/file.php">test</a>
<a href="http://bad.com/some/path/file.php?foo">test</a>
<a href="http://bad.com/some/path/file.php?foo=var">test</a>
<a href="http://bad.com/some/path/file.php?foo=var#bar">test</a>

<a href="https://bad.com">test</a>
<a href="https://bad.com/">test</a>
<a href="https://bad.com/?foo=var#bar">test</a>
<a href="https://bad.com/file.php">test</a>
<a href="https://bad.com/file.php?foo=var#bar">test</a>
<a href="https://bad.com/some/path/file.php">test</a>
<a href="https://bad.com/some/path/file.php?foo=var#bar">test</a>
<a href="https://bad.com:8443">test</a>
<a href="https://bad.com:8443/">test</a>
<a href="https://bad.com:8443/?foo=var#bar">test</a>
<a href="https://bad.com:8443/file.php">test</a>
<a href="https://bad.com:8443/file.php?foo=var#bar">test</a>
<a href="https://bad.com:8443/some/path/file.php">test</a>
<a href="https://bad.com:8443/some/path/file.php?foo=var#bar">test</a>

<a href="//bad.com">test</a>
<a href="//bad.com/">test</a>
<a href="//bad.com/#bar">test</a>
<a href="//bad.com/?foo">test</a>
<a href="//bad.com/?foo#bar">test</a>
<a href="//bad.com/?foo=var">test</a>
<a href="//bad.com/?foo=var#bar">test</a>
<a href="//bad.com/file.php">test</a>
<a href="//bad.com/file.php#bar">test</a>
<a href="//bad.com/file.php?foo">test</a>
<a href="//bad.com/file.php?foo#bar">test</a>
<a href="//bad.com/file.php?foo=var">test</a>
<a href="//bad.com/file.php?foo=var#bar">test</a>
<a href="//bad.com/some/path/file.php">test</a>
<a href="//bad.com/some/path/file.php?foo">test</a>
<a href="//bad.com/some/path/file.php?foo=var">test</a>
<a href="//bad.com/some/path/file.php?foo=var#bar">test</a>

<form action="//bad.com/script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="https://bad.com/foo/../script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="https://bad.com//path/script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="https://bad.com/foo/bar../path/script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="http://bad.com/script.php">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="https://bad.com/script.php">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="//bad.com/script.php">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>

';
var_dump(session_commit());

echo "*** Cleanup ***\n";
var_dump(session_start());
var_dump(session_id());
var_dump(session_destroy());

ob_end_flush();
?>
--EXPECTF--
Deprecated: PHP Startup: Disabling session.use_only_cookies INI setting is deprecated in Unknown on line 0

Deprecated: PHP Startup: Enabling session.use_trans_sid INI setting is deprecated in Unknown on line 0

Deprecated: ini_set(): Usage of session.trans_sid_hosts INI setting is deprecated in %s on line 5
*** Testing basic session functionality : variation5 use_trans_sid ***
*** Test trans sid ***

<a href="/?PHPSESSID=session-basic5">test</a>
<a href="/path?PHPSESSID=session-basic5">test</a>
<a href="/path/?PHPSESSID=session-basic5">test</a>
<a href="/path/?foo=var&PHPSESSID=session-basic5">test</a>
<a href="../?PHPSESSID=session-basic5">test</a>
<a href="../path?PHPSESSID=session-basic5">test</a>
<a href="../path/?PHPSESSID=session-basic5">test</a>
<a href="../path/?foo=var&PHPSESSID=session-basic5">test</a>

<a href="/?PHPSESSID=session-basic5#bar">test</a>
<a href="/path/?PHPSESSID=session-basic5#bar">test</a>
<a href="/path/?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="../?PHPSESSID=session-basic5#bar">test</a>
<a href="../path/?PHPSESSID=session-basic5#bar">test</a>
<a href="../path/?foo=var&PHPSESSID=session-basic5#bar">test</a>

<a href="/?foo&PHPSESSID=session-basic5">test</a>
<a href="/?foo&PHPSESSID=session-basic5#bar">test</a>
<a href="/?foo=var&PHPSESSID=session-basic5">test</a>
<a href="/?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="../?foo&PHPSESSID=session-basic5">test</a>
<a href="../?foo&PHPSESSID=session-basic5#bar">test</a>
<a href="../?foo=var&PHPSESSID=session-basic5">test</a>
<a href="../?foo=var&PHPSESSID=session-basic5#bar">test</a>

<a href="file.php?PHPSESSID=session-basic5">test</a>
<a href="file.php?foo&PHPSESSID=session-basic5">test</a>
<a href="file.php?foo=var&PHPSESSID=session-basic5">test</a>
<a href="file.php?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="../file.php?PHPSESSID=session-basic5">test</a>
<a href="../file.php?foo&PHPSESSID=session-basic5">test</a>
<a href="../file.php?foo=var&PHPSESSID=session-basic5">test</a>
<a href="../file.php?foo=var&PHPSESSID=session-basic5#bar">test</a>

<a href="http://php.net/?PHPSESSID=session-basic5">test</a>
<a href="http://php.net/?PHPSESSID=session-basic5">test</a>
<a href="http://php.net/?PHPSESSID=session-basic5#bar">test</a>
<a href="http://php.net/?foo&PHPSESSID=session-basic5">test</a>
<a href="http://php.net/?foo&PHPSESSID=session-basic5#bar">test</a>
<a href="http://php.net/?foo=var&PHPSESSID=session-basic5">test</a>
<a href="http://php.net/?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="http://php.net/file.php?PHPSESSID=session-basic5">test</a>
<a href="http://php.net/file.php?PHPSESSID=session-basic5#bar">test</a>
<a href="http://php.net/file.php?foo&PHPSESSID=session-basic5">test</a>
<a href="http://php.net/file.php?foo&PHPSESSID=session-basic5#bar">test</a>
<a href="http://php.net/file.php?foo=var&PHPSESSID=session-basic5">test</a>
<a href="http://php.net/file.php?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="http://php.net/some/path/file.php?PHPSESSID=session-basic5">test</a>
<a href="http://php.net/some/path/file.php?foo&PHPSESSID=session-basic5">test</a>
<a href="http://php.net/some/path/file.php?foo=var&PHPSESSID=session-basic5">test</a>
<a href="http://php.net/some/path/file.php?foo=var&PHPSESSID=session-basic5#bar">test</a>

<a href="https://php.net/?PHPSESSID=session-basic5">test</a>
<a href="https://php.net/?PHPSESSID=session-basic5">test</a>
<a href="https://php.net/?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="https://php.net/file.php?PHPSESSID=session-basic5">test</a>
<a href="https://php.net/file.php?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="https://php.net/some/path/file.php?PHPSESSID=session-basic5">test</a>
<a href="https://php.net/some/path/file.php?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="https://php.net:8443/?PHPSESSID=session-basic5">test</a>
<a href="https://php.net:8443/?PHPSESSID=session-basic5">test</a>
<a href="https://php.net:8443/?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="https://php.net:8443/file.php?PHPSESSID=session-basic5">test</a>
<a href="https://php.net:8443/file.php?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="https://php.net:8443/some/path/file.php?PHPSESSID=session-basic5">test</a>
<a href="https://php.net:8443/some/path/file.php?foo=var&PHPSESSID=session-basic5#bar">test</a>

<a href="//php.net/?PHPSESSID=session-basic5">test</a>
<a href="//php.net/?PHPSESSID=session-basic5">test</a>
<a href="//php.net/?PHPSESSID=session-basic5#bar">test</a>
<a href="//php.net/?foo&PHPSESSID=session-basic5">test</a>
<a href="//php.net/?foo&PHPSESSID=session-basic5#bar">test</a>
<a href="//php.net/?foo=var&PHPSESSID=session-basic5">test</a>
<a href="//php.net/?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="//php.net/file.php?PHPSESSID=session-basic5">test</a>
<a href="//php.net/file.php?PHPSESSID=session-basic5#bar">test</a>
<a href="//php.net/file.php?foo&PHPSESSID=session-basic5">test</a>
<a href="//php.net/file.php?foo&PHPSESSID=session-basic5#bar">test</a>
<a href="//php.net/file.php?foo=var&PHPSESSID=session-basic5">test</a>
<a href="//php.net/file.php?foo=var&PHPSESSID=session-basic5#bar">test</a>
<a href="//php.net/some/path/file.php?PHPSESSID=session-basic5">test</a>
<a href="//php.net/some/path/file.php?foo&PHPSESSID=session-basic5">test</a>
<a href="//php.net/some/path/file.php?foo=var&PHPSESSID=session-basic5">test</a>
<a href="//php.net/some/path/file.php?foo=var&PHPSESSID=session-basic5#bar">test</a>

<form action="script.php" method="post"><input type="hidden" name="PHPSESSID" value="session-basic5" />
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="../script.php" method="post"><input type="hidden" name="PHPSESSID" value="session-basic5" />r
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="/path/script.php" method="post"><input type="hidden" name="PHPSESSID" value="session-basic5" />
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="../path/script.php" method="post"><input type="hidden" name="PHPSESSID" value="session-basic5" />
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="http://php.net/script.php"><input type="hidden" name="PHPSESSID" value="session-basic5" />
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="https://php.net/script.php"><input type="hidden" name="PHPSESSID" value="session-basic5" />
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="//php.net/script.php"><input type="hidden" name="PHPSESSID" value="session-basic5" />
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>


<a href="http://bad.com">test</a>
<a href="http://bad.com/">test</a>
<a href="http://bad.com/#bar">test</a>
<a href="http://bad.com/?foo">test</a>
<a href="http://bad.com/?foo#bar">test</a>
<a href="http://bad.com/?foo=var">test</a>
<a href="http://bad.com/?foo=var#bar">test</a>
<a href="http://bad.com/file.php">test</a>
<a href="http://bad.com/file.php#bar">test</a>
<a href="http://bad.com/file.php?foo">test</a>
<a href="http://bad.com/file.php?foo#bar">test</a>
<a href="http://bad.com/file.php?foo=var">test</a>
<a href="http://bad.com/file.php?foo=var#bar">test</a>
<a href="http://bad.com/some/path/file.php">test</a>
<a href="http://bad.com/some/path/file.php?foo">test</a>
<a href="http://bad.com/some/path/file.php?foo=var">test</a>
<a href="http://bad.com/some/path/file.php?foo=var#bar">test</a>

<a href="https://bad.com">test</a>
<a href="https://bad.com/">test</a>
<a href="https://bad.com/?foo=var#bar">test</a>
<a href="https://bad.com/file.php">test</a>
<a href="https://bad.com/file.php?foo=var#bar">test</a>
<a href="https://bad.com/some/path/file.php">test</a>
<a href="https://bad.com/some/path/file.php?foo=var#bar">test</a>
<a href="https://bad.com:8443">test</a>
<a href="https://bad.com:8443/">test</a>
<a href="https://bad.com:8443/?foo=var#bar">test</a>
<a href="https://bad.com:8443/file.php">test</a>
<a href="https://bad.com:8443/file.php?foo=var#bar">test</a>
<a href="https://bad.com:8443/some/path/file.php">test</a>
<a href="https://bad.com:8443/some/path/file.php?foo=var#bar">test</a>

<a href="//bad.com">test</a>
<a href="//bad.com/">test</a>
<a href="//bad.com/#bar">test</a>
<a href="//bad.com/?foo">test</a>
<a href="//bad.com/?foo#bar">test</a>
<a href="//bad.com/?foo=var">test</a>
<a href="//bad.com/?foo=var#bar">test</a>
<a href="//bad.com/file.php">test</a>
<a href="//bad.com/file.php#bar">test</a>
<a href="//bad.com/file.php?foo">test</a>
<a href="//bad.com/file.php?foo#bar">test</a>
<a href="//bad.com/file.php?foo=var">test</a>
<a href="//bad.com/file.php?foo=var#bar">test</a>
<a href="//bad.com/some/path/file.php">test</a>
<a href="//bad.com/some/path/file.php?foo">test</a>
<a href="//bad.com/some/path/file.php?foo=var">test</a>
<a href="//bad.com/some/path/file.php?foo=var#bar">test</a>

<form action="//bad.com/script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="https://bad.com/foo/../script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="https://bad.com//path/script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form action="https://bad.com/foo/bar../path/script.php" method="post">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="http://bad.com/script.php">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="https://bad.com/script.php">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>
<form method="post" action="//bad.com/script.php">
  <input type="text" name="test1"></input>
  <input type="text" name="test2" />
</form>

bool(true)
*** Cleanup ***
bool(true)
string(14) "session-basic5"
bool(true)