Fixed bug: #16637, username/password needs to be urlencoded.

diff --git a/ext/standard/http_fopen_wrapper.c b/ext/standard/http_fopen_wrapper.c
index 5ba1876e6899be5163d335aca8d528b68c403228..3ff9d0edc9bec1f45f2468c638d9e915c4aa1a01 100644 (file)
--- a/ext/standard/http_fopen_wrapper.c
+++ b/ext/standard/http_fopen_wrapper.c
@@ -148,6 +148,10 @@ php_stream *php_stream_url_wrap_http(php_stream_wrapper *wrapper, char *path, ch
 
        /* authz header if it was specified */
        if (resource->user && resource->pass)   {
+               /* decode the strings first */
+               php_url_decode(resource->user, strlen(resource->user));
+               php_url_decode(resource->pass, strlen(resource->pass));
+
                /* scratch is large enough, since it was made large enough for the whole URL */
                strcpy(scratch, resource->user);
                strcat(scratch, ":");