RE: [PEAR-BUG] Bug #18118 [Opn]: Incorrect validation
[email protected] ("Ken Haynes")
| Newsgroups | php.pear.qa |
|---|---|
| Organization | Ken Haynes Consultancy Services |
| Message-ID | <000801cb9d63$a8974480$f9c5cd80$@com> |
Hi Daniel, Sorry, no I can't. I only discovered the bug during use, I have no further information. Ken. Web: https://kenhaynes.com SECURITY STATEMENT Unless agreed by prior arrangement this document and where applicable, its attachments, contains no macros or executable code of any kind. Any prompts or statements to the contrary must be treated as suspicious. This e-mail has been digitally signed. This e-mail has been scanned for viruses prior to transmission. -----Original Message----- From: PEARBug Database [mailto:[email protected]] Sent: Thursday, December 16, 2010 2:17 AM To: [email protected] Subject: [PEAR-BUG] Bug #18118 [Opn]: Incorrect validation ATTENTION! Do NOT reply to this email! To reply, use the web interface found at http://pear.php.net/bugs/bug.php?id=18118&edit=2 ID: 18118 Updated by: [email protected] Reported By: ken at kenhaynes dot com Summary: Incorrect validation Status: Open Type: Bug Package: Validate_US Operating System: XP Pro SP3 Package Version: 0.5.4 PHP Version: 5.3.3 Roadmap Versions: New Comment: I don't suppose you are able to point us to documentation where SSNs have changed checksums; and derive others which *should* be valid? Previous Comments: ------------------------------------------------------------------------ [2010-12-16 06:33:58] kenhaynes Description: ------------ Hi, I have just downloaded and installed Validate_US. I have only been in the US for 2 years and my SSN is returned as Invalid". I tried my wife's SSN using the same format and it returned "Valid". I believe this has to do with the later SSNs so I thought that I had better draw this to your attention so that it can be caught before it is released from beta and starts to affect people's scripts. I have not given my SSN in the code example for security reasons, but please let me know if I can be of further assistance. Regards, Ken. Test script: --------------- include_once 'Validate/us.php'; $validate = new Validate_US(); echo $validate->ssn("xxx-xx-xxxx") ? "Valid SSN<br />" : "Invalid SSN<br />"; Expected result: ---------------- "Valid SSN" should be displayed. Actual result: -------------- "Invalid SSN" is displayed. ------------------------------------------------------------------------
smime.p7s
(application/x-pkcs7-signature, 4.5 KB) - not displayed