[pmwiki-devel] Passing information via the URL

[Randy Brown]

Peter,

Thanks for the tip. I changed my function to the following, and it worked:

Markup('urlval', '<pagelist',
  '/\\(:urlval (.*?):\\)/e',
  "urlval('$1')");   
function urlval($key)
{
   return urlencode($_GET[$key]);
}

I assume there are no security implications to passing user-supplied data to pagelist's parameters. Please wise me up if that's not true.

Randy

On May 28, 2010, at 4:25 AM, Peter Bowers wrote:

> On Fri, May 28, 2010 at 11:12 AM, Randy Brown <randy at brownragfilms.com> wrote:
>> If there are functions to convert the information from one encoding to
>> another, so I can pass the parameter value around freely, it would greatly
>> simplify my coding. I had hoped that PUE($x) was one such function, but
>> apparently it's not enough by itself. Are there other functions I can use?
> 
> I believe what you are looking for is urlencode() and urldecode().
> 
> Be aware that there are security implications, so beware what you do
> with the data you get from your URL.
> 
> -Peter