House of Fusion
Home of the ColdFusion Community

Search cf-talk

December 05, 2008

<<   <   Today   >   >>
Su Mo Tu We Th Fr Sa
   1 2 3 4 5 6
7 8 9 10 11 12 13
14 15 16 17 18 19 20
21 22 23 24 25 26 27
28 29 30 31       

Search over 2,500 ColdFusion resources here  >>>      
Home / Groups / ColdFusion Talk (CF-Talk)

encrypt/decrypt bug

Author:
Kris Jones
04/27/2007 02:14 PM

Hi Les, I've seen similar behavior most typically when I'm also urlencoding the the encrypted value. What I figured out was happening is that if the encrypted value contained a space, when urlencodedformat() was run on it, the space would get converted to "%20" as expected. However, when it was decoded, the spaces were converted to "+" instead of a space, then the decrypt would  not function properly. In my situation that either resulted in strange characters being added or usually resulting in a null pointer reference error. Also, this was under CFMX6.1. Cheers, Kris > This is driving me crazy!! > > For this code: > > <cfif IsDefined("form.myVAR") AND #form.myVAR# NEQ ""> >    <cfset encrpt_myVAR=encrypt("#trim(FORM.myVAR)#","#encCODE#")> > </cfif> > > Figure this out. Here's a few test: > ----------------------------------------------- > Form Entry: 2222        Decrypted output: 2222 > Form Entry: 22222       Decrypted output: 2222= > form Entry: 222222      Decrypted output: 222222 > form entry: 33333332    Decrypted output: 3333333= > form entry: abcdef2     Decrypted output: abcdef2 > form entry: abcdef32    Decrypted output abcdef3= > form entry: abcdef33    Decrypted output abcdef33 > > > I can pretty much put anything I want into the form field and it > encrypts correctly - UNLESS it ends in a "2". Then it's screwed - > sometimes. I can't tell if the problem is on the encrypt or decrypt side > either. > > During these test, the var "encCODE" was kept constant. I haven't tried > yet, but wonder if changing it would make a difference. Will try that next. > > Something I'll get a ">" some instead of the equal sign. It's ONLY a "2" > that does this. WTF? > > Any ideas at all? Is there a patch from the version below to fix this? > It's driving myself and a client insane right now!!! > > > Level: Enterprise > Name: ColdFusion Server > Version 7,0,2,142559 > >


Mailing Lists