PHP 5.2 follows an older RFC and percent-encodes tildes in URIs. Only PHP 5.3 was changed to follow the current RFC.

The OAuth signature is wrong on PHP 5.2, when the request parameters (typically postTitle/postBody) happen to contain a tilde somewhere in the values.

http://php.net/manual/en/function.rawurlencode.php
http://tools.ietf.org/html/rfc3986#section-2.3

CommentFileSizeAuthor
mollom.rawurlencode.0.patch959 bytessun

Comments

sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Status: Needs review » Fixed

Committed and pushed to 7.x-2.x and 6.x-2.x.

Automatically closed -- issue fixed for 2 weeks with no activity.

  • Commit 685a047 on 7.x-2.x, 8.x-2.x, fbajs, actions by sun: 
    - #1404038 by sun: Fixed Wrong OAuth signature due to rawurlencode() bug...
  • Commit 975697d on 6.x-2.x, fai6, 8.x-2.x, fbajs, actions by sun:
    - #1404038 by sun: Fixed Wrong OAuth signature due to rawurlencode() bug...
  • Commit db220c6 on 7.x-2.x, 8.x-2.x, fbajs, actions by sun:
    - #1404038 by sun: Added unit test for rawurlencode() bug on PHP 5.2 vs...

  • Commit 685a047 on 7.x-2.x, 8.x-2.x, fbajs, actions by sun: 
    - #1404038 by sun: Fixed Wrong OAuth signature due to rawurlencode() bug...
  • Commit 975697d on 6.x-2.x, fai6, 8.x-2.x, fbajs, actions by sun:
    - #1404038 by sun: Fixed Wrong OAuth signature due to rawurlencode() bug...
  • Commit db220c6 on 7.x-2.x, 8.x-2.x, fbajs, actions by sun:
    - #1404038 by sun: Added unit test for rawurlencode() bug on PHP 5.2 vs...