Actions
Bug #22093
closedjumpurl.secure crashes on spaces or umlauts in URLs
Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Frontend
Target version:
-
Start date:
2010-02-09
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
4.5
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
Spaces or umlauts in the filename or path make a secure download link generated via the function filelink crash, i.e. the error message "Calculated juHash did not match the submitted juHash" is shown.
This is because the URL-encoding used for calculating the file hash differs in class.tslib_fe.php and class.tslib_content.php.
The verification routine for the download link in class.tslib_fe.php should use
str_replace('%2F', '/', rawurlencode($this->jumpurl))
instead of
$this->jumpurl
for calculating the hash - as it is done in the function filelink.
A patch is provided.
(issue imported from #M13484)
Files
Actions