To come back on my post about the file uploader bugs…
I found that every *_nmutf8.php has the following code:
function NM_utf8_urldecode($str)
{
$aRep = array(
'&' => '&',
'<' => '<',
'>' => '>',
'"' => '"',
"'" => ''',
'+' => ',',
'?' => 'Á',
'?' => 'á',
'?' => 'Â',
...
This , is wrong i my view. It has to be + (that is the hex ascii for a + sign, , is the , character.
But this NM_utf8_urldecode function is used many many times in the generated code. So this could be a pretty serious bug…
Please check this asap!!
I would not be entirely surprised if there are more bugs in it.
Apart from the fact that there are dozens of characters missing: (see also http://www.w3.org/TR/html4/sgml/entities.html)