php-openid
php-openid copied to clipboard
Bug Auth_OpenID::parse_str ignores values that contain '='
If the parameter value contains an '=' sign, the parameter is ignored.
e.g. Auth_OpenID::parse_str('foo=xxxx=&baz=yyyy') will skip the 'foo' parameter because its value has a trailing '='.
This causes problems when some values are base64 encoded, because they may contain '=' symbols.
The solution is the following: Auth/OpenID.php line 275: old: $pair = explode('=', $parts[$i]); new: $pair = explode('=', $parts[$i], 2);
Please consider forking the repository, amending the fix, committing and pushing, then opening a Pull Request to have this included.
This repo is being archived. Closing issue.