House of Fusion
Search over 2,500 ColdFusion resources here
  
Home of the ColdFusion Community

Mailing Lists
Home / Groups / ColdFusion Talk (CF-Talk)

encrypt/decrypt bug

Author:
Kris Jones
04/27/2007 02:14 PM

Hi Les, I've seen similar behavior most typically when I'm also urlencoding the the encrypted value. What I figured out was happening is that if the encrypted value contained a space, when urlencodedformat() was run on it, the space would get converted to "%20" as expected. However, when it was decoded, the spaces were converted to "+" instead of a space, then the decrypt would  not function properly. In my situation that either resulted in strange characters being added or usually resulting in a null pointer reference error. Also, this was under CFMX6.1. Cheers, Kris > This is driving me crazy!! > > For this code: > > <cfif IsDefined("form.myVAR") AND #form.myVAR# NEQ ""> >    <cfset encrpt_myVAR=encrypt("#trim(FORM.myVAR)#","#encCODE#")> > </cfif> > > Figure this out. Here's a few test: > ----------------------------------------------- > Form Entry: 2222        Decrypted output: 2222 > Form Entry: 22222       Decrypted output: 2222= > form Entry: 222222      Decrypted output: 222222 > form entry: 33333332    Decrypted output: 3333333= > form entry: abcdef2     Decrypted output: abcdef2 > form entry: abcdef32    Decrypted output abcdef3= > form entry: abcdef33    Decrypted output abcdef33 > > > I can pretty much put anything I want into the form field and it > encrypts correctly - UNLESS it ends in a "2". Then it's screwed - > sometimes. I can't tell if the problem is on the encrypt or decrypt side > either. > > During these test, the var "encCODE" was kept constant. I haven't tried > yet, but wonder if changing it would make a difference. Will try that next. > > Something I'll get a ">" some instead of the equal sign. It's ONLY a "2" > that does this. WTF? > > Any ideas at all? Is there a patch from the version below to fix this? > It's driving myself and a client insane right now!!! > > > Level: Enterprise > Name: ColdFusion Server > Version 7,0,2,142559 > >


Search cf-talk

February 11, 2012

<<   <   Today   >   >>
Su Mo Tu We Th Fr Sa
       1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29