Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:43525
Return-Path: <retricek@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 35628 invoked from network); 27 Mar 2009 19:14:29 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 27 Mar 2009 19:14:29 -0000
Authentication-Results: pb1.pair.com smtp.mail=retricek@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=retricek@gmail.com; sender-id=pass; domainkeys=bad
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.219.179 as permitted sender)
DomainKey-Status: bad
X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01
X-PHP-List-Original-Sender: retricek@gmail.com
X-Host-Fingerprint: 209.85.219.179 mail-ew0-f179.google.com  
Received: from [209.85.219.179] ([209.85.219.179:50908] helo=mail-ew0-f179.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 7B/48-30978-4952DC94 for <internals@lists.php.net>; Fri, 27 Mar 2009 14:14:29 -0500
Received: by ewy27 with SMTP id 27so1374031ewy.23
        for <internals@lists.php.net>; Fri, 27 Mar 2009 12:14:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:mime-version:received:in-reply-to:references
         :date:message-id:subject:from:to:content-type
         :content-transfer-encoding;
        bh=iIdsaLn/mSjp2Fo1OK+g5Kt9F9YoF+FjKibrKX72BzA=;
        b=g5RCxUYJFaRwCu3r0kZdMudU80FfwPy+2rBEGdMu++24JcNBNdfNjbwdRaLOfthQap
         979+gBYq9/7KfgyZ//tYSN924UhVBk5XJvl4pzekwlT3cqkR0wy1ZcR2FqxbJHBCcvj3
         GNg3eYYJYbQTHINForrEf8qFBJUr4gbxoQUjA=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=BUZj5/TzvrSbqBA09sTtzfGfMTxnFzb1Gjybp9C04QHqGhYfixjUqYOPKYWJj5wRya
         4MPkiyJsN/hWEW5inIkc+i/fEw/CGAM0mdSNN+/jmLzADoJbokmj6i4H6Ed8wBjy/8Nm
         T9J/MO2lHffBfZSGITN+uCz6JDyrGSF1oZo/k=
MIME-Version: 1.0
Received: by 10.216.35.69 with SMTP id t47mr946389wea.221.1238181265385; Fri, 
	27 Mar 2009 12:14:25 -0700 (PDT)
In-Reply-To: <49CD2334.4070207@sektioneins.de>
References: <744ffb620903271040t6f260e6bp893b6219f095e9fa@mail.gmail.com>
	 <744ffb620903271121g51290b9amdc26116280aec055@mail.gmail.com>
	 <49CD2334.4070207@sektioneins.de>
Date: Fri, 27 Mar 2009 20:14:25 +0100
Message-ID: <744ffb620903271214w7a62f2d8wac87922702503fd2@mail.gmail.com>
To: Stefan Esser <stefan.esser@sektioneins.de>, m.bretz@metropolis-ag.de, 
	internals@lists.php.net
Content-Type: text/plain; charset=ISO-8859-2
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] Re: Bug #40698 Re-use search term in the quicksearch 
	input field
From: retricek@gmail.com (=?ISO-8859-2?Q?Josef_=A9im=E1nek?=)

ok, but Mike Bretz wrote that it will be better to mark this bug as
"Bogus" according to all browsers auto-form completion function.
This patch was written very fast, without thinking. Next time I spend
more time to focus on security.

ok, what about these bugs :
http://bugs.php.net/bug.php?id=3D46663
http://bugs.php.net/bug.php?id=3D40696

Will be any improvement to focus on these bugs ?
Thank you for fast response.

Dne 27. b=F8ezen 2009 20:04 Stefan Esser <stefan.esser@sektioneins.de> naps=
al(a):
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello Josef,
>
> before you want to commit something to the PHP bugs website, you should
> recheck your code for obvious XSS bugs in it...
>
>> + =A0 =A0 =A0 =A0<input class=3D"small" type=3D"text" name=3D"search_for=
"
>> value=3D"<?php if(isset($_GET['search_for'])) echo $_GET['search_for'];
>> ?>" size=3D"30" />
>
> Greets,
> Stefan
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAknNIzMACgkQSuF5XhWr2njSZwCfTsKMpEM+/q4w8jwx8w2rqLFt
> EHIAnjpNDsqAS0MdERmWNUHETS2QXLHQ
> =3D477X
> -----END PGP SIGNATURE-----
>