There is a code which accepts value from the link and compares it with values ​​from base. There is a link that contains information about the values. Example. http://sitename.com/user/auth_mobile.php?nick=Dimitri%0D&password=Dimitry2018 (This link is generated in Flash "AS3") and fails validation. Immediately inform - there are no restrictions on the characters. http://sitename.com/user/auth_mobile.php?nick=Dimitri&password=Dimitry2018 It is enough to remove the extra characters and everything will work (but the request from flash cannot be changed)

I can not understand what to do. How to be - what to treat, trying to blow up extra values ​​after $ _GET - did not help.

I checked both queries in Fiddler and found that the value of% 0D adds an empty value on the new line. How to get rid of it?

    1 answer 1

    You have a lot of string handling capabilities in php. Just read how special characters are encoded (which is a newline) in the URI format - this is a% sign and a two-byte hexadecimal number. Those. you can simply search for all occurrences of the% character in the $ _GET array and exclude the% character itself and two bytes after it.

    • Thank you so much! - Sunset Shimmer