From 34cb9a073caae0a6a980bbbfd8cafc7c7817074f Mon Sep 17 00:00:00 2001
From: Yarmo Mackenbach <yarmo@qivro.xyz>
Date: Wed, 1 Jul 2020 14:42:19 +0200
Subject: [PATCH] Use urlencode instead of htmlspecialchars

---
 server/verifyLobsters.php | 4 ++--
 server/verifyReddit.php   | 6 +++---
 server/verifyTweet.php    | 4 ++--
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/server/verifyLobsters.php b/server/verifyLobsters.php
index 96f1212..4023657 100644
--- a/server/verifyLobsters.php
+++ b/server/verifyLobsters.php
@@ -1,7 +1,7 @@
 <?php
 
-$fingerprint = htmlspecialchars($_GET["fp"]);
-$user = htmlspecialchars($_GET["user"]);
+$fingerprint = urlencode($_GET["fp"]);
+$user = urlencode($_GET["user"]);
 
 $url = "https://lobste.rs/u/$user.json";
 $check = "\[Verifying my OpenPGP key: openpgp4fpr:$fingerprint\]";
diff --git a/server/verifyReddit.php b/server/verifyReddit.php
index 0e73696..1d886fd 100644
--- a/server/verifyReddit.php
+++ b/server/verifyReddit.php
@@ -1,8 +1,8 @@
 <?php
 
-$fingerprint = htmlspecialchars($_GET["fp"]);
-$user = htmlspecialchars($_GET["user"]);
-$comment = htmlspecialchars($_GET["comment"]);
+$fingerprint = urlencode($_GET["fp"]);
+$user = urlencode($_GET["user"]);
+$comment = urlencode($_GET["comment"]);
 
 $url = "https://www.reddit.com/user/$user/comments/$comment.json";
 $check = "\[Verifying my OpenPGP key: openpgp4fpr:$fingerprint\\\\\]";
diff --git a/server/verifyTweet.php b/server/verifyTweet.php
index 0f7ac92..bced5ff 100644
--- a/server/verifyTweet.php
+++ b/server/verifyTweet.php
@@ -2,8 +2,8 @@
 
 include 'secrets.php';
 
-$fingerprint = htmlspecialchars($_GET["fp"]);
-$tweetId = htmlspecialchars($_GET["id"]);
+$fingerprint = urlencode($_GET["fp"]);
+$tweetId = urlencode($_GET["id"]);
 
 $check = "\[Verifying my OpenPGP key: openpgp4fpr:$fingerprint\]";