View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0003143||phpList 3 application||Campaign Send Process||public||04-05-05 12:02||04-05-05 13:24|
|Summary||0003143: sends out emails in quoted-printable encoding with unintended quoted-printable octet sequences|
|Description||A confirmation link that phplist sent out in an email wouldn't work in some mail readers/webbrowsers. This turned out to be because the confirmation link contained "uid=165f38d..."|
This link was sent in an email with quoted-printable encoding, without any protection. In quoted printable, "=nn", where n is a digit 0-9, represents a single character.
So the email client was replacing uid=16 with uid followed by a single character. (Or even wierder stuff since the character encoded by =16 (ascii 0x16) isn't printable).
|Tags||No tags attached.|