Project

General

Profile

Actions

Bug #22093

closed

jumpurl.secure crashes on spaces or umlauts in URLs

Added by Ernst Went over 14 years ago. Updated almost 11 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Frontend
Target version:
-
Start date:
2010-02-09
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
4.5
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Spaces or umlauts in the filename or path make a secure download link generated via the function filelink crash, i.e. the error message "Calculated juHash did not match the submitted juHash" is shown.

This is because the URL-encoding used for calculating the file hash differs in class.tslib_fe.php and class.tslib_content.php.
The verification routine for the download link in class.tslib_fe.php should use
str_replace('%2F', '/', rawurlencode($this->jumpurl))
instead of
$this->jumpurl
for calculating the hash - as it is done in the function filelink.

A patch is provided.

(issue imported from #M13484)


Files

jumpurl_encoding.patch (527 Bytes) jumpurl_encoding.patch Administrator Admin, 2010-02-09 18:33
Actions

Also available in: Atom PDF