Bug #22093
closed
jumpurl.secure crashes on spaces or umlauts in URLs
0%
Description
Spaces or umlauts in the filename or path make a secure download link generated via the function filelink crash, i.e. the error message "Calculated juHash did not match the submitted juHash" is shown.
This is because the URL-encoding used for calculating the file hash differs in class.tslib_fe.php and class.tslib_content.php.
The verification routine for the download link in class.tslib_fe.php should use
str_replace('%2F', '/', rawurlencode($this->jumpurl))
instead of
$this->jumpurl
for calculating the hash - as it is done in the function filelink.
A patch is provided.
(issue imported from #M13484)
Files
Updated by Dmitry Dulepov about 14 years ago
I was unable to reproduce the issue with TYPO3 4.3. Probably, it is related to character sets. I use UTF-8 everywhere, so could not check.
I tried the following paths:
/fileadmin/doctrine-user-manual.pdf
/fileadmin/doctrine user manual.pdf
/fileadmin/??????????? ?? doctrine.pdf
Everything works perfectly.
Updated by Dmitry Dulepov about 14 years ago
As usual, our BT killed all non–English letters... :(
Updated by Ernesto Baschny about 14 years ago
Please provide some additional feedback, else we will have to close the issue. Thanks!
Updated by Ernesto Baschny almost 14 years ago
Closed due to lack of further feedback.
Updated by
Updated by Dmitry Dulepov over 11 years ago
- Category changed from Communication to Frontend
- Status changed from Closed to Accepted
- TYPO3 Version changed from 4.3 to 4.5
The issue exists. Try (typo)linking with jumpurl.secure=1 to a file name with spaces. The provided patch solves the issue.
Updated by Dmitry Dulepov over 11 years ago
- Status changed from Accepted to Closed
The problem is in DAM. tx_dam_tsfe replaces the file url but it does not rawurlencode() it as necessary.
Not a core bug.