1--TEST-- 2Test output_add_rewrite_var() with and without nested session URL-Rewriting 3--EXTENSIONS-- 4session 5--INI-- 6session.trans_sid_tags="a=href,area=href,frame=src,form=" 7url_rewriter.tags="a=href,area=href,frame=src,form=" 8--FILE-- 9<?php 10$testTags = <<<TEST 11 12<a href=""></a> 13<a href="./foo.php"></a> 14 15<a href="//php.net/foo.php"></a> 16<a href="http://php.net/foo.php"></a> 17<a href="bad://php.net/foo.php"></a> 18<a href="//www.php.net/foo.php"></a> 19 20<a href="//session-trans-sid.com/foo.php"></a> 21<a href="http://session-trans-sid.com/foo.php"></a> 22<a href="bad://session-trans-sid.com/foo.php"></a> 23<a href="//www.session-trans-sid.com/foo.php"></a> 24 25<a href="//url-rewriter.com/foo.php"></a> 26<a href="http://url-rewriter.com/foo.php"></a> 27<a href="bad://url-rewriter.com/foo.php"></a> 28<a href="//www.url-rewriter.com/foo.php"></a> 29 30<form action="" method="get"> </form> 31<form action="./foo.php" method="get"></form> 32 33<form action="//php.net/foo.php" method="get"></form> 34<form action="http://php.net/foo.php" method="get"></form> 35<form action="bad://php.net/foo.php" method="get"></form> 36<form action="//www.php.net/foo.php" method="get"></form> 37 38<form action="//session-trans-sid.com/bar.php" method="get"></form> 39<form action="http://session-trans-sid.com/bar.php" method="get"></form> 40<form action="bad://session-trans-sid.com/bar.php" method="get"></form> 41<form action="//www.session-trans-sid.com/bar.php" method="get"></form> 42 43<form action="//url-rewriter.com/bar.php" method="get"></form> 44<form action="http://url-rewriter.com/bar.php" method="get"></form> 45<form action="bad://url-rewriter.com/bar.php" method="get"></form> 46<form action="//www.url-rewriter.com/bar.php" method="get"></form> 47 48TEST; 49 50ob_start(); 51 52ini_set('session.trans_sid_hosts', 'session-trans-sid.com'); 53ini_set('url_rewriter.hosts', 'url-rewriter.com'); 54 55ini_set('session.use_only_cookies', 1); 56ini_set('session.use_cookies', 1); 57ini_set('session.use_strict_mode', 0); 58ini_set('session.use_trans_sid', 0); 59 60output_add_rewrite_var('<name>', '<value>'); 61 62echo "URL-Rewriting with output_add_rewrite_var() without transparent session id support\n"; 63echo $testTags; 64 65ob_flush(); 66 67output_reset_rewrite_vars(); 68 69ini_set('session.use_only_cookies', 0); 70ini_set('session.use_cookies', 0); 71ini_set('session.use_strict_mode', 0); 72ini_set('session.use_trans_sid', 1); 73 74session_id('testid'); 75session_start(); 76 77output_add_rewrite_var('<NAME>', '<VALUE>'); 78 79echo "\nURL-Rewriting with transparent session id support without output_add_rewrite_var()\n"; 80echo $testTags; 81 82ob_end_flush(); 83 84 85output_add_rewrite_var('<name2>', '<value2>'); 86 87echo "\nURL-Rewriting with output_add_rewrite_var() without transparent session id support\n"; 88echo $testTags; 89 90--EXPECT-- 91URL-Rewriting with output_add_rewrite_var() without transparent session id support 92 93<a href="?%3Cname%3E=%3Cvalue%3E"></a> 94<a href="./foo.php?%3Cname%3E=%3Cvalue%3E"></a> 95 96<a href="//php.net/foo.php"></a> 97<a href="http://php.net/foo.php"></a> 98<a href="bad://php.net/foo.php"></a> 99<a href="//www.php.net/foo.php"></a> 100 101<a href="//session-trans-sid.com/foo.php"></a> 102<a href="http://session-trans-sid.com/foo.php"></a> 103<a href="bad://session-trans-sid.com/foo.php"></a> 104<a href="//www.session-trans-sid.com/foo.php"></a> 105 106<a href="//url-rewriter.com/foo.php?%3Cname%3E=%3Cvalue%3E"></a> 107<a href="http://url-rewriter.com/foo.php?%3Cname%3E=%3Cvalue%3E"></a> 108<a href="bad://url-rewriter.com/foo.php"></a> 109<a href="//www.url-rewriter.com/foo.php"></a> 110 111<form action="" method="get"><input type="hidden" name="<name>" value="<value>" /> </form> 112<form action="./foo.php" method="get"><input type="hidden" name="<name>" value="<value>" /></form> 113 114<form action="//php.net/foo.php" method="get"></form> 115<form action="http://php.net/foo.php" method="get"></form> 116<form action="bad://php.net/foo.php" method="get"></form> 117<form action="//www.php.net/foo.php" method="get"></form> 118 119<form action="//session-trans-sid.com/bar.php" method="get"></form> 120<form action="http://session-trans-sid.com/bar.php" method="get"></form> 121<form action="bad://session-trans-sid.com/bar.php" method="get"></form> 122<form action="//www.session-trans-sid.com/bar.php" method="get"></form> 123 124<form action="//url-rewriter.com/bar.php" method="get"><input type="hidden" name="<name>" value="<value>" /></form> 125<form action="http://url-rewriter.com/bar.php" method="get"><input type="hidden" name="<name>" value="<value>" /></form> 126<form action="bad://url-rewriter.com/bar.php" method="get"></form> 127<form action="//www.url-rewriter.com/bar.php" method="get"></form> 128 129URL-Rewriting with transparent session id support without output_add_rewrite_var() 130 131<a href="?PHPSESSID=testid&%3CNAME%3E=%3CVALUE%3E&%3Cname2%3E=%3Cvalue2%3E"></a> 132<a href="./foo.php?PHPSESSID=testid&%3CNAME%3E=%3CVALUE%3E&%3Cname2%3E=%3Cvalue2%3E"></a> 133 134<a href="//php.net/foo.php"></a> 135<a href="http://php.net/foo.php"></a> 136<a href="bad://php.net/foo.php"></a> 137<a href="//www.php.net/foo.php"></a> 138 139<a href="//session-trans-sid.com/foo.php?PHPSESSID=testid"></a> 140<a href="http://session-trans-sid.com/foo.php?PHPSESSID=testid"></a> 141<a href="bad://session-trans-sid.com/foo.php"></a> 142<a href="//www.session-trans-sid.com/foo.php"></a> 143 144<a href="//url-rewriter.com/foo.php?%3CNAME%3E=%3CVALUE%3E&%3Cname2%3E=%3Cvalue2%3E"></a> 145<a href="http://url-rewriter.com/foo.php?%3CNAME%3E=%3CVALUE%3E&%3Cname2%3E=%3Cvalue2%3E"></a> 146<a href="bad://url-rewriter.com/foo.php"></a> 147<a href="//www.url-rewriter.com/foo.php"></a> 148 149<form action="" method="get"><input type="hidden" name="<NAME>" value="<VALUE>" /><input type="hidden" name="<name2>" value="<value2>" /><input type="hidden" name="PHPSESSID" value="testid" /> </form> 150<form action="./foo.php" method="get"><input type="hidden" name="<NAME>" value="<VALUE>" /><input type="hidden" name="<name2>" value="<value2>" /><input type="hidden" name="PHPSESSID" value="testid" /></form> 151 152<form action="//php.net/foo.php" method="get"></form> 153<form action="http://php.net/foo.php" method="get"></form> 154<form action="bad://php.net/foo.php" method="get"></form> 155<form action="//www.php.net/foo.php" method="get"></form> 156 157<form action="//session-trans-sid.com/bar.php" method="get"><input type="hidden" name="PHPSESSID" value="testid" /></form> 158<form action="http://session-trans-sid.com/bar.php" method="get"><input type="hidden" name="PHPSESSID" value="testid" /></form> 159<form action="bad://session-trans-sid.com/bar.php" method="get"></form> 160<form action="//www.session-trans-sid.com/bar.php" method="get"></form> 161 162<form action="//url-rewriter.com/bar.php" method="get"><input type="hidden" name="<NAME>" value="<VALUE>" /><input type="hidden" name="<name2>" value="<value2>" /></form> 163<form action="http://url-rewriter.com/bar.php" method="get"><input type="hidden" name="<NAME>" value="<VALUE>" /><input type="hidden" name="<name2>" value="<value2>" /></form> 164<form action="bad://url-rewriter.com/bar.php" method="get"></form> 165<form action="//www.url-rewriter.com/bar.php" method="get"></form> 166 167URL-Rewriting with output_add_rewrite_var() without transparent session id support 168 169<a href="?%3CNAME%3E=%3CVALUE%3E&%3Cname2%3E=%3Cvalue2%3E"></a> 170<a href="./foo.php?%3CNAME%3E=%3CVALUE%3E&%3Cname2%3E=%3Cvalue2%3E"></a> 171 172<a href="//php.net/foo.php"></a> 173<a href="http://php.net/foo.php"></a> 174<a href="bad://php.net/foo.php"></a> 175<a href="//www.php.net/foo.php"></a> 176 177<a href="//session-trans-sid.com/foo.php"></a> 178<a href="http://session-trans-sid.com/foo.php"></a> 179<a href="bad://session-trans-sid.com/foo.php"></a> 180<a href="//www.session-trans-sid.com/foo.php"></a> 181 182<a href="//url-rewriter.com/foo.php?%3CNAME%3E=%3CVALUE%3E&%3Cname2%3E=%3Cvalue2%3E"></a> 183<a href="http://url-rewriter.com/foo.php?%3CNAME%3E=%3CVALUE%3E&%3Cname2%3E=%3Cvalue2%3E"></a> 184<a href="bad://url-rewriter.com/foo.php"></a> 185<a href="//www.url-rewriter.com/foo.php"></a> 186 187<form action="" method="get"><input type="hidden" name="<NAME>" value="<VALUE>" /><input type="hidden" name="<name2>" value="<value2>" /> </form> 188<form action="./foo.php" method="get"><input type="hidden" name="<NAME>" value="<VALUE>" /><input type="hidden" name="<name2>" value="<value2>" /></form> 189 190<form action="//php.net/foo.php" method="get"></form> 191<form action="http://php.net/foo.php" method="get"></form> 192<form action="bad://php.net/foo.php" method="get"></form> 193<form action="//www.php.net/foo.php" method="get"></form> 194 195<form action="//session-trans-sid.com/bar.php" method="get"></form> 196<form action="http://session-trans-sid.com/bar.php" method="get"></form> 197<form action="bad://session-trans-sid.com/bar.php" method="get"></form> 198<form action="//www.session-trans-sid.com/bar.php" method="get"></form> 199 200<form action="//url-rewriter.com/bar.php" method="get"><input type="hidden" name="<NAME>" value="<VALUE>" /><input type="hidden" name="<name2>" value="<value2>" /></form> 201<form action="http://url-rewriter.com/bar.php" method="get"><input type="hidden" name="<NAME>" value="<VALUE>" /><input type="hidden" name="<name2>" value="<value2>" /></form> 202<form action="bad://url-rewriter.com/bar.php" method="get"></form> 203<form action="//www.url-rewriter.com/bar.php" method="get"></form> 204
