140686 - Flash 6.0 r23 calls NPN_GetURL() to send data using the POST method instead of NPN_PostURL()

Status: RESOLVED WORKSFORME

(Core Graveyard :: Plug-ins, defect, P3)

Description

[sgt-d]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.0.0+) Gecko/20020427
BuildID:    2002042708

Flash 6.0 tells Mozilla specifically to send data using the POST method - but
Mozilla refuses to use POST and instead uses GET.

We have a Flash login with POST method and an HTML login also with POST.  IE and
Mozilla both POST when using the HTML login, but only IE uses POST from the
Flash login.  Mozilla uses GET.

Reproducible: Always
Steps to Reproduce:
1.  go to http://www.sodpit.com/top.htm -> login as user [SoD]Test and pass = test
2.  look at the address bar - see how user and pass are empty?
3.  you may need to use something to sniff what method is being used, but it is
definitely using GET and not POST

4.  now go to http://www.sodpit.com/browsertest.asp - this is an HTML login that
will work right (same user & pass) becasue it is using POST.

Actual Results:  IE and Mozilla both work for HTML forms using POST method.
IE works for Flash forms using POST method.
Mozilla fails with Flash forms using POST method, it changes it to GET.

Expected Results:  Mozilla should be able to work with Flash forms using POST
method.

I've had 2 people confirm this as a problem, but I can't be certain that this is
a Mozilla problem.  It could be a problem with Flash 6, or a combination of
Flash 6 in a nightly Mozilla build, or it could even be a problem on the site. 
But we've checked the site 100 times, the Flash movie is set to post, and all
other browsers can login with this Flash login, Mozilla is the only one that
fails, and it fails every single time.     :(

Comment 1

[Boris Zbarsky [:bzbarsky]]

To plug-ins

Comment 2

[rubydoo123]

assigning to av

Comment 3

[serge (gone)]

Hmm, 
http log for http://www.sodpit.com/top.htm
clearly shows mozilla does
0[3051d0]: http request [
0[3051d0]:   POST /flash/asp/members/login.asp HTTP/1.1
0[3051d0]:   Host: www.sodpit.com
0[3051d0]:   User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; 
rv:0.9.9
...
you can get http log by setting
set NSPR_LOG_MODULES=nsHttp:5
set NSPR_LOG_FILE=c:\http.log

Comment 4

[sgt-d]

ok, older versions of mozilla that i tried also failed, but some 0.9.9's might 
work, even the official build.

i'm trying with 1.0.0 rc1 specifically, and with subsequent nightly builds - 
like most true mozilla fans, we are constantly after the latest possible build.

regardless, on any 1.0.0+ rc1 nightly build, or the official rc1, you will not 
see the POST request that should take place, but instead you will see GET as 
shown below in my log:

0[771d00]: http request [
0[771d00]:   GET /asp/members/login.asp HTTP/1.1
0[771d00]:   Host: www.sodpit.com
0[771d00]:   User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.0.0+) 
Gecko/20020428
0[771d00]:   Accept: 
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,
video/x-mng,image/png,image/jpeg,image/gif;q=0.2,text/css,*/*;q=0.1
0[771d00]:   Accept-Language: en-us, en;q=0.50
0[771d00]:   Accept-Encoding: gzip, deflate, compress;q=0.9
0[771d00]:   Accept-Charset: ISO-8859-1, utf-8;q=0.66, *;q=0.66
0[771d00]:   Keep-Alive: 300
0[771d00]:   Connection: keep-alive
0[771d00]:   Referer: http://www.sodpit.com/top.htm
0[771d00]:   Cache-Control: max-age=0
0[771d00]: ]

therin lies the problem.  as you saw, it works in 0.9.9, but here in rc1+ it is 
not working properly at all.    :(

Comment 5

[sgt-d]

also, i just noticed...

your log:  POST /flash/asp/members/login.asp HTTP/1.1
my log:  GET /asp/members/login.asp HTTP/1.1

yours is showing the flash folder, mine isn't.  aside from POST vs. GET, would 
this have anything to do with the problem?

Comment 6

[serge (gone)]

could you please post here
http://bugzilla.mozilla.org/attachment.cgi?bugid=140686&action=enter
whole log file from 1.0.0+ rc1 you are using, thanks.

Comment 7

[sgt-d]

Attachment: 1.0 rc1+ log file, 184kb

1.0 rc1+ log file, 184kb

Comment 8

[serge (gone)]

hmm, I found no http://www.sodpit.com/top.htm in the log file, 
did you try to access that page when this log has been generated?

Comment 9

[sgt-d]

Attachment: New log file showing: http://www.sodpit.com/top.htm

This new log file shows http://www.sodpit.com/top.htm

Also, this is an even newer build of Mozilla...

Mozilla 1.0.0+ Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.0.0+) Gecko/20020430


Mozilla 1.0.0.2002043010 (1.0 RC1+ 30-Apr-2002 2:53pm 10.3mb) -
http://ftp.mozilla.org/pub/mozilla/nightly/latest/mozilla-win32-installer-sea.exe

Comment 10

[serge (gone)]

taking this bug

Comment 11

[serge (gone)]

This is one more Flash 6.0 r23 bug, period
here is the stack trace from debug build, flash is calling _geturl instead of 
_post:
_geturlnotify(_NPP * 0x03bf6f00, const char * 0x04a7e790, const char * 
0x04aac1f8, void * 0x00000003)
- 0x04a7e790 "asp/members/login.asp"
NPSWF32_60! NP_Shutdown + 107 bytes
NPSWF32_60! NP_Shutdown + 2430 bytes
NPSWF32_60! native_ShockwaveFlash_TCallFrame + -43462 bytes
NPSWF32_60! native_ShockwaveFlash_TCallFrame + -63356 bytes
NPSWF32_60! native_ShockwaveFlash_TCallFrame + -91787 bytes
NPSWF32_60! native_ShockwaveFlash_TCallFrame + -90334 bytes
NPSWF32_60! NP_Shutdown + 6636 bytes
NPSWF32_60! NP_Shutdown + 388 bytes
USER32! UserCallWinProc@20 + 24 bytes
USER32! DispatchMessageWorker@8 + 244 bytes
USER32! DispatchMessageA@4 + 11 bytes
nsAppShell::Run(nsAppShell * const 0x015d6358) line 124
nsAppShellService::Run(nsAppShellService * const 0x01b10460) line 451
main1(int 1, char * * 0x003077b8, nsISupports * 0x00000000) line 1431 + 32 bytes
main(int 1, char * * 0x003077b8) line 1779 + 37 bytes

BTW: I've tried Flash Player 6.0 d265 (some beta version), it does a right call.
Changing summary to reflect this problem:
Flash 6.0 r23 calls NPN_GetURL() to send data using the POST method instead of  
NPN_PostURL()

Comment 12

[sgt-d]

can you attach flash 6 beta d265 so i can duplicate it here?  i've been 
looking, but i can't find it anywhere.  i also tried the brand new version of 
flash 6 that was released today and it doesn't work either.  flash 5 works fine.

Comment 13

[sgt-d]

Shockwave Flash 6.0 r29 does not work.  This is the new version of Flash that I 
mentioned in my last post.  The DLL is dated 4/22/02 but was just released 
today, 5/1/02.  Still looking for Flash Player 6.0 Beta d265...   :/

Comment 14

[serge (gone)]

Attachment: NPSWF32_60d265.dll

Flash Player 6.0 d265 win32 dll

Comment 15

[sgt-d]

flash 6 beta d265 does work better than the official flash 6 r23 and r29 - 
however, it still does not login correctly.  instead of finding the "user 
failed" or "pass failed" page, it does seem to want to send the user and pass, 
but with d265 it screws up and looks in the wrong folder for login.asp.

d265 tries to find it here:
/flash/asp/members/login.asp

when it is really here:
/asp/members/login.asp

and no matter what we try, we can't get it out of the flash folder and back to 
the asp folder - and we shouldn't have to, flash 6 in internet explorer 
resolves the path correctly - and so does flash 5 in mozilla 1.0.0+ nightly 
builds.  i'm focusing on flash 6 for mozilla as the problem here, no doubt.

to see how it should login, use a flash 5 dll (i will attach one in a few 
minutes) - you will have to right click the flash movie and select "play", then 
you will be able to login at either www.sodpit.com or www.sodpit.com/top.htm.  
user = [SoD]Test (case sensitive), pass = test.

why would flash 5 player in mozilla 1.0.0+ (nightly) work better than flash 6 
player when it IS a flash 6 movie?  clearly makes no sense at all...

Comment 16

[sgt-d]

Attachment: Flash Player 5.0.41

Flash Player 5.0.41

This one logs in perfectly with Mozilla, even though the movie is really Flash
6.  The only down side to using this version of the player is that each time
you load the page you have to right-click the Flash Movie and select "play"
just to kick start it.	  :/

Comment 17

[serge (gone)]

well, we cannot fix flash bugs in mozilla code, let's keep this bug open as 
known flash 6 problem, adding this on bug 139820 dependency list

Comment 18

[sgt-d]

ack!  i already knew that.  the issue now is - when will flash 6 work right?

Comment 19

[rubydoo123]

reassign

Comment 20

[Ed Millard]

The supposed working URL http://www.sodpit.com/browsertest.asp is 404 Not 
Found.  I see the arguments aren't being passed as described but manually 
inserting them I was not successful in loging in.  Is this workflow still 
valid? 

Comment 21

[serge (gone)]

I've tested w2k Flash 6.0 r47, which correctly calls |NPN_PostURL|,
sgt-d, please confirm the fix.

Comment 22

[rubydoo123]

reassign

Comment 23

[Peter Lubczynski]

marking WFM based on last comments