Javascript + PHP $_GET URL with % gives me 406 Not Acceptable

[AkkeDaBest]

Hello to everyone out there!

I am Akke, and I'm a newbie developer, I know some VB, OK PHP, and OK JavaScript and some AJAX.

I'm working on a project that requires me to send stuff through an AJAX $_GET request to a PHP page which then echoes a string which then is fed back to the form on the first page.

So the GET url looks something like this:

dataminer.php?question=kassasumma&q=500&kale=10%&nro=6

I have tried to escape that URL with various escaping methods including

escape()

and

encodeURIComponent()

but, with no luck. The server keeps giving me a 406 Not Acceptable and it's because of the percentage sign (which is essential) in the url.

Does anyone of you kind sirs have any suggestions?

Sincerly,

Akke

[007Julien]

You have not to encode all the URL but only values (if necessary) with encodeURIComponent ...

SEe too PHP urldecode notes : The superglobals $_GET and $_REQUEST are already decoded. Using urldecode() on an element in $_GET or $_REQUEST could have unexpected and dangerous results.

[AkkeDaBest]

Thank you a LOT for the answer. I tried applying that in several ways, but failed to get a valid respose from the server (still 406 not acceptable)

Here are 2 different ways I tried applying it:

  //Set kale variable
  kale = document.getElementById("TOS_K_ale").value;
  //attempt 1
  xmlhttp.open("GET","dataminer.php?question="+encodeURIComponent("kassasumma")+"&q="+encodeURIComponent(str)+"&kale="+encodeURIComponent(kale)+"&nro="+encodeURIComponent(document.getElementById("S_NRO").value),true);
  //attempt 2
  xmlhttp.open("GET",encodeURIComponent("dataminer.php?question=kassasumma&q="+str+"&kale="+kale+"&nro="+document.getElementById("S_NRO").value),true);

The first ways' URL looks like this:

/dataminer.php?question=kassasumma&q=500&kale=10%25&nro=6

The second ways' URL looks like this:

/dataminer.php%3Fquestion%3Dkassasumma%26q%3D500%26kale%3D10%25%26nro%3D6

What did I mess up?

[007Julien]

The first way is the rigth way.This simple test

<?php
  header("Content-Type:text/html;charset=utf-8");
    if (!empty($_GET)) {
        foreach ($_GET as $k=>$v) echo "<br>$k => $v";
    }
// Give effectively with this first adress
question => kassasumma
q => 500
kale => 10%
nro => 6
?>

Your error 406 as probably an other origin. See this page

[AkkeDaBest]

Thanks for the reply.

I tried that test, but it gave me the good old 406.

I have however solved this problem an other way, which is replacing the % with p and then sending it to the PHP script:

xmlhttp.open("GET","dataminer.php?question=kassasumma&q="+str+"&kale="+kale.replace("%", "p")+"&nro="+document.getElementById("S_NRO").value,true);

notice the

+kale.replace("%", "p")+

On the PHP side, I regexp replace the p back to % if it is there:

preg_match('[p]', $kale, $matches);

if ($question == "kassasumma") {
    if (!empty($matches)) {
        $kale = preg_replace('[p]', '%', $kale);
        $tapa = "1";
        $kassasumma = $laskun_summa - ($laskun_summa * ($kale / 100)) . "€";
    }
    
    if (empty($matches)) {
        $kale = preg_replace('[€]', '', $kale);
        $tapa = "2";
        $kassasumma = $laskun_summa - $kale ."€";
    }
    echo $kassasumma;
} 

Thanks a lot for the help anyway!

--Akke