-- Kononov Ruslan <[EMAIL PROTECTED]> wrote
(on Saturday, 15 November 2008, 12:34 PM -0800):
> Matthew Weier O'Phinney-3 wrote:
> > We do no filtering on the parameters received by default. Check the
> > encoding your server is expecting and the encoding the client is
> > sending.
> 
> I spent a lot of time and found the problem.
> 
> Zend_Controller_Router_Route_Module->match() used urldecode()  to decode any
> %## and convert to UTF-8!!!
> 
> $_GET parameters decoded in the light of encryption on the server, so with
> no problems.
> 
> Need replace urldecode() on html_entity_decode() with needed charset.

Can you create an issue in the tracker for this? I had another report
while at php|works this week of a location where htmlentities() is
called without the encoding argument, and these all need to be fixed.

-- 
Matthew Weier O'Phinney
Software Architect       | [EMAIL PROTECTED]
Zend Framework           | http://framework.zend.com/

Reply via email to