Question

I created a simple file browser in PHP that links to the files through generation expiring query URLs. So for each access to a directory, a link to each file is generated that is valid for say 900 seconds.

I now have the problem that the generated signatures seem to fail sometimes. Which is strange, since I intentionally used external S3 libraries for generating the URLs and signatures.

In fact, I tried the following libraries to generate the signatures:

• CloudFusion
• S3 generator
• Amazon S3 PHP class

The libraries internally use hash_hmac(‘sha256’, … or hash_hmac(‘sha1’, … – I also don’t understand why differnet hash algorithms are used.

Since the problem is the same with all libraries, it could as well be in my URL generation code, which is straightforward though:

$bucket = "myBucket";
$filename = $object->Key;
$linksValidForSeconds = 900;
$url = $s3->get_object_url($bucket, $filename, $linksValidForSeconds);

Sp $bucket and $linksValidForSeconds are constant, $filename is e.g. “Media/Pictures/My Picture.png”. But event for same variables, it sometimes works, soemtimes doesn’t.

Any ideas?

Edit: Typo/Wrong constant variable name fixed (thanks)

Answer 1

I found the problem and it had nothing to do with the code I mentioned. The generated URL is urlencode()’d and sent to another PHP script. There I use the URL to display an image from S3. I used urldecode() there to undo the changes but apparently this is not neccesary.

So each time the signature contains certain chars, the urldecode() would change them and corrupt it.

Sorry for omitting the actual problem code.