PHP :: Request #68729 :: http_build_query() should use RFC3986 escape as the default

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for

Request #68729

http_build_query() should use RFC3986 escape as the default

Submitted:

2015-01-03 01:52 UTC

Modified:

2015-02-23 11:49 UTC

Votes:	1
Avg. Score:	4.0 ± 0.0
Reproduced:	1 of 1 (100.0%)
Same Version:	1 (100.0%)
Same OS:	1 (100.0%)

From:

yohgaki@php.net

Assigned:

yohgaki (profile)

Status:

Assigned

Package:

*URL Functions

PHP Version:

Irrelevant

OS:

ANY

Private report:

CVE-ID:

None

View Add Comment Developer Edit

[2015-01-03 01:52 UTC] yohgaki@php.net

Description:
------------
It uses RFC 1738 (escape ' ' as +). It should use RFC 3986. i.e. escape ' ' as %20.
Since urldecode() decodes %20 to ' '. There is no BC issue.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports

[2015-01-15 11:28 UTC] ppasindud at gmail dot com

Then wouldn't it be same as rawurlencode, I am assuming that there is a reason to have two of those with slight differences.

[2015-02-23 11:49 UTC] yohgaki@php.net

-Assigned To: +Assigned To: yohgaki


Copyright © 2001-2019 The PHP Group All rights reserved.	Last updated: Tue Jul 16 00:01:26 2019 UTC