#36 urlencode() cookies

open
nobody
None
5
2005-01-03
2005-01-03
Anonymous
No

cookies are urlencoded.
some bulletin board software and the like allow
usernames and passwords with spaces.
urlencode()ing cookies causes this to fail.

_
ryan.neudorf@gmail.com

Discussion

  • Nobody/Anonymous

    Logged In: NO

    I don't know your case. But in my case, I simutaneous remove
    urlenode and urldecode when handling cookies.

     
  • Nobody/Anonymous

    Logged In: NO

    Cookies should be urlencode()'d when being sent, and
    urldecode()'d when being retrieved. I don't know about the
    encoding, but the decode set (in setcookies()) is missing,
    and should be added. I've specifically worked around this bug
    myself, but in the case of following redirects (in which case
    the user of the class doesn't "hook" into the code to clean
    this up), this would be handled incorrectly as cause problems.

     
  • Nobody/Anonymous

    Logged In: NO

    Had a similar situation where urlencoding of cookie values was fatal.

    Should be removed.

    ----
    pmwikidev (at) sigproc DOT de

     

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks