Home/ Questions/Q 6986181
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-27T18:46:34+00:00

I use perl for ajax (POST method), and when I read POST query with

  • 0

I use perl for ajax (POST method), and when I read POST query with script below, I get my query URIencoded.

Example: sent – привет , received: %D0%BF%D1%80%D0%B8%D0%B2%D0%B5%D1%82

Latin queries work well. Script was just googled somewhere.

Script: 

sub populatePostFields {
    %_POST = ();
    read( STDIN, $tmpStr, $ENV{ "CONTENT_LENGTH" } );
    @parts = split( /\&/, $tmpStr );
    foreach $part (@parts) {
        ( $name, $value ) = split( /\=/, $part );
        $value =~ ( s/%23/\#/g );
        $value =~ ( s/%2F/\//g );
        $_POST{ "$name" } = $value;
    }
}
Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Well, it’s not Perl-specific. The web browser is required to URI-encode the values when sending.

    You can use the standard use CGI module to decode form fields for you — this is definitely recommended, as it will take care of all kinds of edge cases for you, and is also usable if you decide to convert to a mod_perl module later.

    If you’re running a CGI script, I also strongly recommend that you have -T on the shebang line (#!/usr/bin/perl -T) and use strict;, to help catch things that might otherwise be easily exploitable over the web.

         #!/usr/bin/perl -T
     use strict;
     use CGI;

     my $q = CGI->new;

     print "Content-Type: text/html\n\n";

     print "<html><body><h1> Field FOO contains: ", $q->param('FOO'),
           "</h1></body></html>\n\n";

    →

         <html><body><h1> Field FOO contains: привет </h1></body></html>

    You can use the ->param(string) to read the various form fields; it’ll handle GET and POST transparently, and decode the URI-encoded strings for you.

    The “not-recommended, hard way” would be to use the expression:

           my ($name, $value) = split /\=/, $part;
       $value =~ s/\+/ /g;
       $value =~ s/(\%[0-9a-fA-F][0-9a-fA-F])/ (chr (hex $1)) /gex;
    • 0