Passing special characters in URL

[Anonymous]

Hello All,

Ive been having an issue and would be greatful if I can get some help to my problem. I need to pass a primary key in the URL. I would like to encrypt it for security.

I get the following outputs after calling my encrypt() and decrypt() methods (please see below for my code):

$result = encrypt("27");
value printed to screen: z0Da0HE7BfClV0q6hoKEt%2BkYs6CJxZkwCC7zd8%2BmIWU%3D
Value passed in url: z0Da0HE7BfClV0q6hoKEt+kYs6CJxZkwCC7zd8+mIWU=

I cannot understand why the values above are different. The same variable is printed and passed in the url.

encrypt($result);
value printed to screen: z0Da0HE7BfClV0q6hoKEt kYs6CJxZkwCC7zd8 mIWU=

The + is replaces with a space. I have tried to user str_replace after decrypting but it still prints the above.

Your help will be greatly appreciated.
Thanks,
Imran

function encrypt($input) {
        $encrypted_result =  base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $this->securekey, $input, MCRYPT_MODE_ECB, $this->iv));
        $encrypted_result = urlencode($encrypted_result);
        return $encrypted_result;

}
	
function decrypt($input) {
        $decrypted_result = trim(mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $this->securekey, base64_decode($input), MCRYPT_MODE_ECB, $this->iv));
        $decrypted_result = str_replace(' ', '+', $decrypted_result );   
        return $decrypted_result;
        
}

 

[Anonymous]

I see a URL encode.
But not a URL decode.

php.net/urldecode

 

[Anonymous]

Hi egami,

Thanks for getting back.
I have not used urldecode because I am using $_GET to retrieve the value from the url and $_GET does a urldecode.

I call the function with the code:
$encrypt_result = $crypt->encrypt($id);
<a href='JAVASCRIPT: openWindow(\"Add.php?id={$encrypt_result}\")'> Add </a>

I use the following to retrieve the value:
$id = $crypt->decrypt($_GET['id']);

Your help is appreciated,
Imran