<?xml version="1.0"?>
<?xml-stylesheet
href="http://www.w3.org/2000/08/w3c-synd/style.css" type="text/css"
?>
<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns="http://purl.org/rss/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:admin="http://webns.net/mvcb/" xmlns:content="http://purl.org/rss/1.0/modules/content/">
    <channel rdf:about="http://pear.php.net/bugs/search.php">
    <title>PEAR Bug Search Results</title>
    <link>http://pear.php.net/bugs/search.php?cmd=display&amp;package_name%5B0%5D=HTML_AJAX</link>
    <description>Search Results</description>
    <dc:language>en-us</dc:language>
    <dc:creator>pear-webmaster@lists.php.net</dc:creator>
    <dc:publisher>pear-webmaster@lists.php.net</dc:publisher>
    <admin:generatorAgent rdf:resource="http://pear.php.net/bugs"/>
    <sy:updatePeriod>hourly</sy:updatePeriod>
    <sy:updateFrequency>1</sy:updateFrequency>
    <sy:updateBase>2000-01-01T12:00+00:00</sy:updateBase>
    <items>
     <rdf:Seq>
      <rdf:li rdf:resource="http://pear.php.net/bug/21194" />
      <rdf:li rdf:resource="http://pear.php.net/bug/21179" />
      <rdf:li rdf:resource="http://pear.php.net/bug/19542" />

     </rdf:Seq>
    </items>
  </channel>

  <image rdf:about="http://pear.php.net/gifs/pearsmall.gif">
    <title>PEAR Bugs</title>
    <url>http://pear.php.net/gifs/pearsmall.gif</url>
    <link>http://pear.php.net/bugs</link>
  </image>

    <item rdf:about="http://pear.php.net/bug/21194">
      <title>HTML_AJAX: Bug 21194 [Open] package.xml of 0.5.8 does not replace @data-dir@ in Server.php</title>
      <link>http://pear.php.net/bugs/21194</link>
      <content:encoded><![CDATA[<pre>HTML_AJAX Bug
Reported by avb
2017-03-10T09:55:47+00:00
PHP: Irrelevant OS: Irrelevant Package Version: 0.5.8

Description:
------------
package.xml for 0.5.7:

   &lt;file baseinstalldir=&quot;HTML&quot; md5sum=&quot;93c59d4681e6b8218c93d48da0f1a134&quot; name=&quot;AJAX/Server.php&quot; role=&quot;php&quot;&gt;
    &lt;tasks:replace from=&quot;@package_version@&quot; to=&quot;version&quot; type=&quot;package-info&quot; /&gt;
    &lt;tasks:replace from=&quot;@data-dir@&quot; to=&quot;data_dir&quot; type=&quot;pear-config&quot; /&gt;
   &lt;/file&gt;

package.xml for 0.5.8:


   &lt;file baseinstalldir=&quot;/&quot; md5sum=&quot;93c59d4681e6b8218c93d48da0f1a134&quot; name=&quot;HTML/AJAX/Server.php&quot; role=&quot;php&quot;&gt;
    &lt;tasks:replace from=&quot;@package_version@&quot; to=&quot;version&quot; type=&quot;package-info&quot; /&gt;
&lt;/file&gt;


This prevents HTML_AJAX_Server::clientJsLocation() from working correctly from PEAR installation and consequently breaks handleRequest()

Test script:
---------------
Try running examples from PEAR installation

Expected result:
----------------
Working examples

Actual result:
--------------
Lots of alert()'s</pre>]]></content:encoded>
      <description><![CDATA[<pre>HTML_AJAX Bug
Reported by avb
2017-03-10T09:55:47+00:00
PHP: Irrelevant OS: Irrelevant Package Version: 0.5.8

Description:
------------
package.xml for 0.5.7:

   &lt;file baseinstalldir=&quot;HTML&quot; md5sum=&quot;93c59d4681e6b8218c93d48da0f1a134&quot; name=&quot;AJAX/Server.php&quot; role=&quot;php&quot;&gt;
    &lt;tasks:replace from=&quot;@package_version@&quot; to=&quot;version&quot; type=&quot;package-info&quot; /&gt;
    &lt;tasks:replace from=&quot;@data-dir@&quot; to=&quot;data_dir&quot; type=&quot;pear-config&quot; /&gt;
   &lt;/file&gt;

package.xml for 0.5.8:


   &lt;file baseinstalldir=&quot;/&quot; md5sum=&quot;93c59d4681e6b8218c93d48da0f1a134&quot; name=&quot;HTML/AJAX/Server.php&quot; role=&quot;php&quot;&gt;
    &lt;tasks:replace from=&quot;@package_version@&quot; to=&quot;version&quot; type=&quot;package-info&quot; /&gt;
&lt;/file&gt;


This prevents HTML_AJAX_Server::clientJsLocation() from working correctly from PEAR installation and consequently breaks handleRequest()

Test script:
---------------
Try running examples from PEAR installation

Expected result:
----------------
Working examples

Actual result:
--------------
Lots of alert()'s</pre>]]></description>
      <dc:date>2017-03-10T09:55:47+00:00</dc:date>
      <dc:creator>borz_off &amp;#x61;&amp;#116; cs &amp;#x64;&amp;#111;&amp;#x74; msu &amp;#x64;&amp;#111;&amp;#x74; su</dc:creator>
      <dc:subject>HTML_AJAX Bug</dc:subject>
    </item>
    <item rdf:about="http://pear.php.net/bug/21179">
      <title>HTML_AJAX: Bug 21179 [Open] PHP Object Injection through PHP Serializer</title>
      <link>http://pear.php.net/bugs/21179</link>
      <content:encoded><![CDATA[<pre>HTML_AJAX Bug
Reported by ryat
2017-02-07T00:09:44+00:00
PHP: Irrelevant OS:  Package Version: 0.5.8

Description:
------------
The fixes for bug#21165 can be bypassed since PHP's deserialization 
parser quirks.

PoC:
```
o:1:&quot;i:0;i:1;}
```</pre>]]></content:encoded>
      <description><![CDATA[<pre>HTML_AJAX Bug
Reported by ryat
2017-02-07T00:09:44+00:00
PHP: Irrelevant OS:  Package Version: 0.5.8

Description:
------------
The fixes for bug#21165 can be bypassed since PHP's deserialization 
parser quirks.

PoC:
```
o:1:&quot;i:0;i:1;}
```</pre>]]></description>
      <dc:date>2017-02-07T00:09:44+00:00</dc:date>
      <dc:creator>ryat &amp;#x61;&amp;#116; php &amp;#x64;&amp;#111;&amp;#x74; net</dc:creator>
      <dc:subject>HTML_AJAX Bug</dc:subject>
    </item>
    <item rdf:about="http://pear.php.net/bug/19542">
      <title>HTML_AJAX: Bug 19542 [Open] Serializer / XML  with string Input</title>
      <link>http://pear.php.net/bugs/19542</link>
      <content:encoded><![CDATA[<pre>HTML_AJAX Bug
Reported by jerryzz
2012-08-03T14:33:57+00:00
PHP: 5.2.5 OS: Linux Package Version: 0.5.6

Description:
------------
I'm building raw text XMLL

When I set Serializer = XML, I have an error with the&quot;saveXml()&quot;  method.

Btw, it's normal, $input is not an XML DOMDocument  object (but text)

Test script:
---------------
File Serializer/XML.php
$input is a good formed XML text string


Expected result:
----------------
Here is my correction: 


    function serialize($input) 
    {
        if(empty($input))
        {
            return $input;
        }
        // we check for the dom extension
        elseif (extension_loaded('Dom'))
        {
            return (is_a($input, 'DOMDocument')) ? $input-&gt;saveXml() : $input;
        }
        // then will check for domxml
        elseif (extension_loaded('Domxml')) 
		{
            return (is_a($input, 'Domxml')) ? $input-&gt;dump_mem(): $input;
        }</pre>]]></content:encoded>
      <description><![CDATA[<pre>HTML_AJAX Bug
Reported by jerryzz
2012-08-03T14:33:57+00:00
PHP: 5.2.5 OS: Linux Package Version: 0.5.6

Description:
------------
I'm building raw text XMLL

When I set Serializer = XML, I have an error with the&quot;saveXml()&quot;  method.

Btw, it's normal, $input is not an XML DOMDocument  object (but text)

Test script:
---------------
File Serializer/XML.php
$input is a good formed XML text string


Expected result:
----------------
Here is my correction: 


    function serialize($input) 
    {
        if(empty($input))
        {
            return $input;
        }
        // we check for the dom extension
        elseif (extension_loaded('Dom'))
        {
            return (is_a($input, 'DOMDocument')) ? $input-&gt;saveXml() : $input;
        }
        // then will check for domxml
        elseif (extension_loaded('Domxml')) 
		{
            return (is_a($input, 'Domxml')) ? $input-&gt;dump_mem(): $input;
        }</pre>]]></description>
      <dc:date>2012-08-03T14:33:57+00:00</dc:date>
      <dc:creator>mrjerryzz &amp;#x61;&amp;#116; gmail &amp;#x64;&amp;#111;&amp;#x74; com</dc:creator>
      <dc:subject>HTML_AJAX Bug</dc:subject>
    </item>
</rdf:RDF>
