Forum Moderators: coopster
PHP/Apache on Sun
We seem to have intermittent issues with the $_POST array going missing. We can replicate it but not on our live site, thankfully. It is confined to dev sites.
What we see
1. submit a form (not confined to 1 specific one)
2. next page kills itself, no $_POST array
3. refresh and all's well
It takes a while to get a form to do it but once it starts you can replicate continuously. We can't get it to happen in either moz or opera, confined 100% to IE.
Any ideas or clues?
We are sniffing it and using tcpdump to see if we can get any more info.
didn't find that for some reason. Sounds exactly like the same issue and all of their assumptions are the same I came to.
I don't really want to switch to $_REQUEST frankly, I don't want cookie, get and post together. Possible injection using GET strings to corrupt data since GET is higher priority than POST.
from
[ca.php.net...]
Variables provided to the script via the GET, POST, and COOKIE input mechanisms, and which therefore cannot be trusted.
and
variables_order [ca.php.net]
I guess it is just another reason to hate IE ;)
POST protocol (http or https)?
https
character encoding?
iso-8859-1
Is your server dishing out HTTP 1.1 headers?
yep
from the link
When a POST request is sent to a HTTP 1.1 server, Internet Explorer may append an extra carriage return and line feed character (CRLF) to the end of the post. This may cause problems with the server. The network may stop responding (hang) or you may receive a "Page Not Found" error message, depending on how the server or the Web application is configured.
I may try the fix listed there for the heck of it but those are not our symptoms per se. Everything works fine, just no POST array. When you refresh the destination page it prompts for reposting and everything is back to normal.
I will continue with what we have found.
Direct relation between SSL and IE 6 cumulative patch service pack 1. All posts work before that patch and don't after. We installed a fresh XP and went through all patches on windows update one by one to isolate which patch does it.
Also this only occurs with XP our 2000 machines all work flawlessly.
The problem only occurs on our 2 dev servers which are located inside our network. Our QA servers and live servers don't have the issue at all.
On our dev servers, when we try all of the exact same misbehaving scripts with out SSL everything works perfectly.
We have looked through all server conf's and they are all exactly the same except for some logging and domain differences.
We are still plugging away at it.