Thread

Hello all,

I´m getting some infuriating “Invalid GET Data” errors on a site I´m building.

I´m assuming these are completely unsurmountable security features (although some have expressed the opinion to me that it should be allowable to pass complex urls as url parameters).

Basically it boils down to: is there any possible way to get this (simplified) example to work?

<a href="http://www.example.com/?test=example2.com?test2=y">http://www.example.com/?test=example2.com?test2=y</a>

I don´t even really need test, I just need the other parameters. Working with an embedded system so if I could find a fix my end it would save me a lot of trouble. Do I have any options?

thanks,
Pierce

I believe this should be constructed a little differently, though it may still get rejected by EE:

<a href="http://www.example.com/?test=example2.com&test2=y">http://www.example.com/?test=example2.com&test2=y</a>

Hi Ender,

That actually doesn´t get rejected by EE. Well, it may not be passing the parameters properly, but it doesn´t cause “Invalid GET Data” failure.

What I originally posted is what i mean, i.e. passing a URL as a parameter that itself has URL parameters. Essentially the existence of two questions marks in the URL.

http://expressionengine.com/?test=example2.com?test2=y

Thanks,
Pierce

ahh I see.  I thought it was two separate variables (test and test2).

In that case you’ll need to url encode the URL passed as a parameter:

<a href="http://www.example.com/?test=example2.com%3Ftest2%3Dy">http://www.example.com/?test=example2.com%3Ftest2%3Dy</a>

Sorry, I should have mentioned, but it´s actually already encoded. I just decoded it for the purpose of the example.

Still an error, see?
http://expressionengine.com/?test=example2.com?test2=y

<a href="http://expressionengine.com/?test=example2.com?test2=y">http://expressionengine.com/?test=example2.com?test2=y</a>

Sorry, the forum is decoding my link. Copy and paste this for the error.

Aie, still doing it. How are you posting encoded characters?

In any case, copy your encoded example onto http://expresseionengine.com and you will see the “Invalid GET Data”.

% 25 (no space) is an encoded percent sign.  so to show the encoded equal sign you have to type:

%253D

I think that EE is probably hitting you with the url restrictions now that everything is properly encoded.  Might be nothing you can do short of hacking that security out of the core files.

Thanks, Ender.

I’ll have another look around, see what I can find.