Hello

You didn't answer my first question.
Which version of SOGo are you using?

I have one 4.1.0 and one 2.3.23 running in production with several
thousand users on each of them.
Both do not have that bug.
And as I hinted, that would be a bug, as parameters in URLs are standard.


Kind regards,
Christian Mack

Am 18.11.19 um 17:12 schrieb Cornelis Bockemühl ([email protected]):
> 
> Dear Christian,
> 
> Thanks for looking into it!
> 
> No, in that case I cannot share an original, but I set up a Thunderbird mail 
> with the same account, looking into that same message and see the raw source 
> of the HTML mail. That mail I am currently referring to has a plain text part 
> and a HTML part as quoted-printable, and if I decode that part this is how 
> the link looks like (server part replaced by nnnn):
> 
> href="https://nnnn.nnnn.nnn/lt.php?s=f33e07026ad5650044d5e4ef3d160c93&i=695A1452A114A9745";
> 
> However, if I open that mail with SoGo and have the mouse over that link, I 
> see in the lower left corner of the screen the same thing, but the & is 
> replaced by &, and if I click on that link, I am forwarded to - just a 
> one pixel dot. Obviously meaning that the link was wrong!
> 
> If now I am manually entering the above link into a browser, without the 
> damaged ampersand, I come to a page that lets me download some document - 
> which is how it is supposed to work.
> 
> I have no idea whether the & is really PHP code or not, but to me this looks 
> like: the lt.php is some script which takes the parameters s=... and i=..., 
> which are separated by that &. And if the & is replaced by &, then it 
> "sees" a parameter like amp;i=... - and does nothing sensible.
> 
> What I know is: It does not work like that!
> 
> What I don't know: who is the "guilty party":
> 
> - either SoGo should leave the & intact, not replacing it by some &, and 
> simply bring me to the intended linked location. This is what btw. also 
> Thunderbird is doing with that same mail: here the link is working properly!
> 
> - or the writers of that lt.php script should add some additional code that 
> takes care of the possibility that somebody has damaged the link, so ignoring 
> any amp; at the beginning of a parameter.
> 
> My guess is: SoGo should not do the damaging in the first place!
> 
> Regarding the SoGo version that I am using: Actually I have it not installed 
> myself, but I use it because it is provided by my internet provider, 
> netcup.de, and in my web interface I did so far not find some "about" or 
> similar that tells me the version.
> 
> Best regards,
> Cornelis
> 
> Am Montag, November 18, 2019 15:53 CET, "Christian Mack" 
> ([email protected]) <[email protected]> schrieb:
>  Hello
> 
> Am 18.11.19 um 11:37 schrieb Cornelis Bockemühl ([email protected]):
>>
>> Dear Sogo community,
>>
>> My provider is offering us Sogo as a groupware user interface for mail, 
>> contacts and calendar, and I am very happy with it! But there is one little 
>> technical detail that is regularly creating trouble: ampersand signs in 
>> links that I am receiving by mail.
>>
>> So what is happening: I receive a mail with a link, click on it - and do not 
>> get anything! Then I use some other mail program, receive the mail, click on 
>> the link - and everything is just fine.
>>
>> And looking into details I see that SoGo was just converting an ampersand 
>> sign & which is part of the link into &amp; while other mailers simply kept 
>> it as it is.
>>
>> I had already a conversation with the sender of such a mail - and they say 
>> of course that this is the fault of my mail program, ie. SoGo! And I am 
>> afraid that I will hear now from the SoGo community that this is the fault 
>> of those people who send me links containing & chars - because that is a 
>> special character in HTML code, so it is not correct to include it without 
>> some kind of escaping. Still there are many links that contain & chars in 
>> order to pass parameters to some PHP code!
>>
>> Not finding any mention about "ampersand" in the issues tracker, I have a 
>> tendency to enter this as a SoGo bug, but I did not do so yet; rather I want 
>> to hear some expert opinions about the subject here!
>>
> 
> PHP has nothing to do with that.
> Parameters in URLs are a standard defined way to provide options to
> scripts, who produce HTML.
> This works in SOGo, at least for me.
> 
> Which version of SOGo do you use?
> Can you give an example email (raw text)?
> 
> 
> Kind regards,
> Christian Mack
> 
> 


-- 
Christian Mack
Universität Konstanz
Kommunikations-, Informations-, Medienzentrum (KIM)
Abteilung Basisdienste
78457 Konstanz
+49 7531 88-4416

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to