[TYPO3-core] RFC #13506: Bug: Function changePassword does not work, when hitting 'enter' in change password form

[Christian Futterlieb]

> Somewhat related, I remember an issue with IE where a submit with
> type=image sends the XY coordinates instead of the actual post value so
> you'd get changepasswordsubmit_x and changepasswordsubmit_y instead of
> changepasswordsubmit.

First: No, it's (fortunately) not an IE issue, this is HTML spec [1] 
(the issue you remember might be [2]).

Then: Yes, the '_x' and '_y' would be created by php [3], if the name of 
the input image was 'changepasswordsubmit' (instead of 
'tx_felogin_pi1[changepasswordsubmit]')

Because of the array notation, php does not recognize the coordinates 
from the request query [4] as expected and fills the value of the y 
coordinate into the _POST array (when no explicit value is set).

I searched the php bugtracker, but it does not seem to be a bug.. [5].

>
> If that's applicable for you here, then I guess felogin may need to deal
> with that also. What do you think?

Considering all the facts I would say, that it's save to check the value 
from the submit button with isset(), expecting either a text or an 
integer value.

Regards, Christian


[1] http://www.w3.org/TR/html401/interact/forms.html#h-17.4.1
[2] http://bugs.php.net/bug.php?id=25366
[3] 
http://php.net/manual/en/language.variables.external.php#language.variables.external.form.submit
[4] 
?tx_felogin_pi1[changepasswordsubmit].x=59&tx_felogin_pi1[changepasswordsubmit].y=13
[5] http://bugs.php.net/bug.php?id=27330