Bug #6281 [Csd->Opn]: My wishlist doesn't work =(
| From: | mikael at synd dot info | Date: | Tue, 16 May 2006 17:06:37 +0000 |
| Subject: | Bug #6281 [Csd->Opn]: My wishlist doesn't work =( | ||
| References: | 1 | Groups: | php.pear.webmaster |
| Request: | Send a blank email to pear-webmaster+get-5053@lists.php.net to get a copy of this message | ||
Edit report at http://pecl.php.net/bugs/bug.php?id=6281&edit=1
ID: 6281
Updated by: mikael@synd.info
Reported By: techtonik at php dot net
-Status: Closed
+Status: Open
Type: Bug
Package: Web Site
PHP Version: Irrelevant
Assigned To: pajoye
New Comment:
account-edit.php seems to quote the posted values before inserting into
the database and wishlist.php outputs the quoted uri directly using
header("Location: $url");
The result is that the browser is redirected to an uri where every & is
quoted to &
A solution could be to use unhtmlentities() from
http://www.php.net/htmlspecialchars in
wishlist.php before the call to
header('Location: ..')
Using
http://pecl.php.net/wishlist.php/mikl
Expected
http://www.amazon.com/gp/registry/wishlist/3QP28R224S50N/103-4864265-6791821?reveal=unpurchased&filter=all&sort=priority&layout=standard&x=13&y=12
Actual
http://www.amazon.com/gp/registry/wishlist/3QP28R224S50N/103-4864265-6791821?reveal=unpurchased&filter=all&sort=priority&layout=standard&x=13&y=12
Previous Comments:
------------------------------------------------------------------------
[2006-02-18 10:10:04] techtonik at php dot net
Ok.
------------------------------------------------------------------------
[2006-02-18 10:09:25] techtonik at php dot net
Just edit your PEAR details to specify URL with a ampersands in
wishlist field to see how it "works". I've just adjusted mine for you,
but better check this overhtmlescaping yourself.
http://pear.php.net/wishlist.php/techtonik
------------------------------------------------------------------------
[2006-02-18 09:41:52] pajoye at php dot net
This bug has been fixed in CVS.
If this was a documentation problem, the fix will appear on
pear.php.net by the end of next Sunday (CET).
If this was a problem with the pear.php.net website, the change should
be live shortly.
Otherwise, the fix will appear in the package's next release.
Thank you for the report and for helping us make PEAR better.
------------------------------------------------------------------------
[2006-02-18 09:25:30] pajoye at php dot net
what's the exact target url? (copy it here)
------------------------------------------------------------------------
[2006-02-18 09:21:47] techtonik at php dot net
It works, because I've changed the URL. =/
Try again and note that ampersands in URL are transformed to & 's.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://pecl.php.net/bugs/bug.php?id=6281
--
Edit this bug report at http://pecl.php.net/bugs/bug.php?id=6281&edit=1