RE: [PHP] $_GET and multiple spaces.
| From: | Andrés Robinet | Date: | Mon, 14 Jan 2008 19:33:04 +0000 |
| Subject: | RE: [PHP] $_GET and multiple spaces. | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-267236@lists.php.net to get a copy of this message | ||
> -----Original Message-----
> From: Richard Lynch [mailto:ceo@l-i-e.com]
> Sent: Monday, January 14, 2008 2:11 PM
> To: Jochem Maas
> Cc: clive; Churchill, Craig; php-general@lists.php.net
> Subject: Re: [PHP] $_GET and multiple spaces.
>
> On Mon, January 14, 2008 3:17 am, Jochem Maas wrote:
> > I think actually the whole url should be urlencoded as a matter of
> > course, not
> > 100% sure about this (and it's way to early on a monday to bother
> > checking up ;-) ...
> > maybe someone else can chime in?
>
> Actually, after you urlencode() the values, you should htmlentities
> the whole URL, as it is being passed to HTML as a value to be output
> to HTML.
>
> The whole URL should *NOT* be URL-encoded, however.
>
> --
> Some people have a "gift" link here.
> Know what I want?
> I want you to buy a CD from some indie artist.
> http://cdbaby.com/from/lynch
> Yeah, I get a buck. So?
Like this?
$url =
htmlspecialchars('whatever.php?'.urlencode($name).'='.urlencode($value));
Regards,
Rob