Bug #1045 :: HTTP_Response ignores all but the last of multiple headers with equal name

Package home | Report new bug | New search | Development Roadmap

Status: Open | Feedback | All | Closed Since Version 1.4.4

Bug #1045	HTTP_Response ignores all but the last of multiple headers with equal name
Submitted:	2004-03-21 02:17 UTC
From:	ice-k at amnesty dot scene dot pl	Assigned:	avb
Status:	Closed	Package:	HTTP_Request
PHP Version:	5.0.0b4 (beta4)	OS:	FreeBSD
Roadmaps:	(Not assigned)
Subscription	Your email:

Comments Add Comment Add patch

Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know! Just going to say 'Me too!'? Don't clutter the database with that please !

Your email address: MUST BE VALID
Solve the problem : 6 + 26 = ?

[2004-03-21 02:17 UTC] ice-k at amnesty dot scene dot pl

Description:
------------
In _check_options class HTTP_Request send OPTIONS Request 
my server response like that:
---
Server: Apache/2.0.48 (Unix) DAV/2 SVN/1.0.0 Catacomb/0.9.0 PHP/5.0.0b4 mod_ssl/2.0.48 OpenSSL/0.9.6e
DAV: 1,2
DAV: version-control,checkout, checkin, report
DAV: uncheckout,version-controlled-collection
DAV: <http://apache.org/dav/propset/fs/1>
MS-Author-Via: DAV

_check_options always return false becourse class HTTPRequest could not properly fetch this sames headernames !!(names will be overwrite)

Comments

[2004-10-22 18:02 UTC] lists at cyberlot dot net

Same problem had to comment out 795-798 in Stream.php
If you look at the object info below you will see there clearly is a dav_level of 1 but its within a subarray not being seen by $this->dav_level["1"]

HTTP_WebDAV_Client_Stream Object
(
    [url] => http://projects.cyberlot.net/svn/cyberss
    [path] => /svn/cyberss
    [position] => 0
    [stat] => Array
        (
        )

    [user] => 
    [pass] => 
    [dav_level] => Array
        (
            [<http://apache.org/dav/propset/fs/1>] => 1
        )

    [dav_allow] => Array
        (
        )

    [dirfiles] => 
    [dirpos] => 0
    [eof] => 
    [locktoken] => 
    [context] => Resource id #13
)
Array
(
    [/svn/cyberss/] => Array
        (
            [mode] => 16822
            [ctime] => 1098406644
            [atime] => 1098388644
            [mtime] => 1098388644
        )

)

[2005-01-09 23:51 UTC] User who submitted this comment has not confirmed identity

If you submitted this note, check your email.If you do not have a message, click here to re-send
MANUAL CONFIRMATION IS NOT POSSIBLE.  Write a message to pear-dev@lists.php.net
to request the confirmation link.  All bugs/comments/patches associated with this

email address will be deleted within 48 hours if the account request is not confirmed!

[2005-11-05 19:21 UTC] User who submitted this comment has not confirmed identity

If you submitted this note, check your email.If you do not have a message, click here to re-send
MANUAL CONFIRMATION IS NOT POSSIBLE.  Write a message to pear-dev@lists.php.net
to request the confirmation link.  All bugs/comments/patches associated with this

email address will be deleted within 48 hours if the account request is not confirmed!

[2006-09-05 13:01 UTC] giunta dot gaetano at sea-aeroportimilano dot it (Gaetano Giunta)

I do not think the proposed patch fixes the proble THE RIGHT WAY (TM):

the spec says that only headers that have a csv format can be sent on multiple lines

this means that sending twice e.g. content-lenght is wrong

but lots of misconfigurations / bad clients 'in the wild' can lead to this situation

and using the last received content-lenght header might be a better idea than using an XX,YYY string for that (unless you want the client script to fail, so that the coder can go ask questions to the admin responsible for the server)

the only approach I see correct for this problem is a whitelist (blacklist?) of http headers

My 2 c.
Gaetano Giunta