From cc85a411750ec86d4a8cf0dc24c7660f2810cbd6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20Dagef=C3=B6rde?= Date: Mon, 7 Aug 2017 22:21:29 +0200 Subject: [PATCH] MDL-59746 oauth2: urlencode parameters for post requests --- lib/oauthlib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/oauthlib.php b/lib/oauthlib.php index f918112f118..87fd236d0ba 100644 --- a/lib/oauthlib.php +++ b/lib/oauthlib.php @@ -524,7 +524,7 @@ abstract class oauth2_client extends curl { public function build_post_data($params) { $result = []; foreach ($params as $name => $value) { - $result[] = str_replace('&', '%26', $name) . '=' . str_replace('&', '%26', $value); + $result[] = urlencode($name) . '=' . urlencode($value); } return implode('&', $result); }