Home » HTTP » HTTP_Request » Bug #8214

[2006-07-14 07:40 UTC] rofranco at c17 dot net

Description:
------------
We have found a case where a web server running Microsoft-IIS/5.0 returns an "HTTP/1.1 302 MOVED TEMPORARILY" header as the first line of the response.

The problem is that, between the rest of the header lines, it is including an invalid "HTTP/1.1 404 Not Found" header which is generating a warning in method "_processHeader" in this line:

list($headername, $headervalue) = explode(':', $header, 2);

We have added a previous validation in order to ignore malformed headers.

Test script:
---------------
Here you have the erroneous HTTP response. For example, Firefox web browser seems to ignore the invalid header.

http://www.biomedcentral.com/currtreatoptionsgastroenterol

I'm including the contents of the diff function in case you want to apply a patch:

Index: Request.php
===================================================================
--- Request.php (revisión: 820)
+++ Request.php (copia de trabajo)
@@ -1075,6 +1075,8 @@
*/
function _processHeader($header)
{
+ // If the header has an invalid syntax, ignore it
+ if (strpos($header,':') === false) return;
list($headername, $headervalue) = explode(':', $header, 2);
$headername = strtolower($headername);
$headervalue = ltrim($headervalue);