[vox-tech] Odd ncftp bug

[Bill Kendrick]

On Tue, Sep 16, 2003 at 12:17:44PM -0700, Mitch Patenaude wrote:
> On Tuesday, Sep 16, 2003, at 11:55 US/Pacific, Bill Kendrick wrote:
> 
> >>6. strace -o LOG ncftpget -R ftp://USER:"PASSWORD"@ftp.server.com
> >
> >Ah-hah!  Someone, somewhere, is using "%" as an escape character!
> 
> That's part of the URL spec.  %XX is used to encode a character that 
> wouldn't be legal otherwise in that context, where XX is the hex for 
> the ascii value of that character.  Sorry.. I don't remember that ascii 
> value for "%" offhand, but there are a lot of utilities for 
> encoding/decoding.

Yeah, it totally didn't occur to me that URL encoding might take
place in the username/password field.

But, I guess it's useful if you have a password like:

  I0wnYou[Ctrl-C][Ctrl-C]1234

;)


PS - For looking up hex and octal values for ASCII chars, the "ascii"
man page is great.  It's "%25" BTW :)


-bill!

-- 
bill@newbreedsoftware.com                           Got kids?  Get Tux Paint! 
http://newbreedsoftware.com/bill/       http://newbreedsoftware.com/tuxpaint/