krishmk
May 15th 2009, 8:13 pm
I am unable to use "url" as a value of get variable.
For example:
mysite.com/hits.php?url=http://www.outboundlink.com
My server returns a 403 Forbidden error.
But it works fine if I encode the url (php urlencode() function)
Why does my server outputs the error. Does having plain url in get variable will have any security implications?
Also when I encode the url, IE displays it correctly in the status bar but not Firefox.
For example:
mysite.com/hits.php?url=http://www.outboundlink.com
My server returns a 403 Forbidden error.
But it works fine if I encode the url (php urlencode() function)
Why does my server outputs the error. Does having plain url in get variable will have any security implications?
Also when I encode the url, IE displays it correctly in the status bar but not Firefox.