Re: Re: header() behaviour

On Wed, 29 Oct 2003, Christian Schneider wrote: > Gareth Ardron wrote: > > $var = "foo=1&bar=2"; > > To clarify: > You should use $var = "foo=1&bar=2"; and then $var for header() but > htmlspecialchar($var) for your href: > - HTTP-Headers must not be html-encoded. > - HTML-Attributes on the other hand have to be html-encoded. > > Even though most browsers work with hrefs without html-encoding and some > browsers might understand & in HTTP-Headers this is not conforming > to the standards. Actually, & is the way you need to write it if you are going to be perfectly standards-compliant. It's just that nobody does this. You can make PHP understand this by setting the separator in your php.ini file to & -Rasmus