Description:
------------
_SERVER["REQUEST_URI"] /dev/dynamicpages/edit.php?T=WEB_APPS_SECURITY&R='AAAVEDAAXAAA+f4AAV' 

_SERVER["QUERY_STRING"] T=WEB_APPS_SECURITY&R='AAAVEDAAXAAA+f4AAV' 

BUT...

_REQUEST["T"] WEB_APPS_SECURITY 
_REQUEST["R"] 'AAAVEDAAXAAA f4AAV' 

AND
_GET["T"] WEB_APPS_SECURITY 
_GET["R"] 'AAAVEDAAXAAA f4AAV' 

What Happened to my "PLUS" sign ???



Reproduce code:
---------------

test.php?T='AAAVEDAAXAAA+f4AAV'


<?
$var = $_REQUEST["T"];
print($var);
?>

Expected result:
----------------
I expected my "PLUS" sign to be in my string.

Actual result:
--------------
'AAAVEDAAXAAA f4AAV'