Issue 68580 - XForms does not properly URL-encode GET
Summary: XForms does not properly URL-encode GET
Status: UNCONFIRMED
Alias: None
Product: Writer
Classification: Application
Component: editing (show other issues)
Version: OOo 2.0.3
Hardware: PC Linux, all
: P3 Trivial (vote)
Target Milestone: ---
Assignee: AOO issues mailing list
QA Contact:
URL:
Keywords: needhelp
Depends on:
Blocks:
 
Reported: 2006-08-14 05:56 UTC by jdeisenberg
Modified: 2014-03-31 12:04 UTC (History)
3 users (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---


Attachments
XForms document that uses GET method to send data (9.31 KB, application/vnd.oasis.opendocument.text)
2006-08-14 05:56 UTC, jdeisenberg
no flags Details
CGI script for testing XForm submission via GET (363 bytes, text/plain)
2007-04-22 16:06 UTC, jdeisenberg
no flags Details

Note You need to log in before you can comment on or make changes to this issue.
Description jdeisenberg 2006-08-14 05:56:20 UTC
When you send an XForm document to a CGI script using the "GET" method, the data
is not properly URL-encoded.  If you enter "joe@example.com" in the email field
of the attached document, and then dump all the environment variables, you will
see this in QUERY_STRING:

   email=joe%4example.com&username=Joe+Doakes&

Note the trailing ampersand and the @ encoded as %4 rather than %40.
Comment 1 jdeisenberg 2006-08-14 05:56:58 UTC
Created attachment 38485 [details]
XForms document that uses GET method to send data
Comment 2 michael.ruess 2006-08-14 07:12:25 UTC
Reassigned to MSC.
Comment 3 kpalagin 2007-04-22 08:23:05 UTC
jdeisenberg,
I do not see QUERY_STRING in the list environment variables.
Any chance you can clarify the way I can see string with encoded URL?
Thanks.
P.S. Clicking "Send" produces error message about "evc-cit" host.
Comment 4 jdeisenberg 2007-04-22 16:04:38 UTC
Change URL to http://evc-cit.info/cgi-bin/processform.cgi  (I was testing it
locally, and forgot to change to the online script.  I have attached the script.
Comment 5 jdeisenberg 2007-04-22 16:06:45 UTC
Created attachment 44590 [details]
CGI script for testing XForm submission via GET
Comment 6 kpalagin 2007-04-22 16:36:10 UTC
jdeisenberg,
do you mind expanding a bit?
I am not an expert in this - just trying to go through list of unconfirmed 
issues - and can't find where do I plug your script (will this work on defaul 
Suse 10.2 installation?) and change URL.
Thanks a lot!
Comment 7 jdeisenberg 2007-04-22 16:41:28 UTC
Yes, I think it will work on SuSE 10.2.  Presuming your server is running
Apache, put the script into any directory that can run CGI scripts.  I think
Apache default comes with a cgi-bin directory; if not, add configuration
something like this:

<Directory /server_base_directory/directory_where_script_goes>
  Options +ExecCGI
  AddHandler cgi-script .cgi
  Order allow,deny
  Allow from all
</Directory>
Comment 8 ace_dent 2008-05-15 13:17:04 UTC
This Issue requires more information ('needmoreinfo'), but has not been updated
within the last year. Please re-test with one of the latest versions of OOo -
the problem(s) may have already been addressed. Either use the recent stable
version: http://download.openoffice.org/index.html
or consider trying the new OOo 3 BETA (still in testing):
http://download.openoffice.org/3.0beta/
 
Please report back the outcome so this Issue may be closed or progressed as
necessary - otherwise it may be Resolved as Invalid in the future. You may also
wish to search for (and note) any duplicates of this Issue that may have
advanced further :
http://www.openoffice.org/issues/query.cgi
 
Regards,
Andrew
 
Cleaning-up and Closing old Issues as part of:
~ The Grand Bug Squash, pre v3 ~
Comment 9 Rob Weir 2013-02-02 02:56:29 UTC
This Issue requires more information ('needmoreinfo'), but has not been updated
within the last year. Please provide feedback as requested and re-test with the the latest version of OpenOffice - the problem(s) may already be addressed. 

You can download Apache OpenOffice 3.4.1 from http://www.openoffice.org/download

Please report back the outcome of your testing, so this Issue may be closed or
progressed as necessary - otherwise the issue may be Resolved as Invalid in the
future.
Comment 10 Rob Weir 2013-04-03 21:48:44 UTC
There should be enough info here to test the bug, though it is a more complex scenario that will require access to an http server.