- Status: Moved to Github
TLDR: The @ symbol is getting double encoded
When we visit {siteurl}/contact and fill in the contact form as a guest with the setting "Require guests to verify their email?" enabled, we get a page that says we must verify our email address.
We correctly receive the email, but note the encoding in the email here - specifically the @ symbol is represented as %2540 because it has been double encoded (domain and actual email values adjusted for privacy):
https://mydomain.com/contact/?do=confirm&key=a3f63bd3df3614e0ef1fad43dbbf7286&email=my.name%2Bcc5625%2540gmail.com
When we click the link, we land on a page asking us to click the button to verify the email address. If I look in the page source I see the following:
<input type="hidden" name="email" value="my.name+cc5625%40gmail.com">
And upon submitting the form, we get error 2C435/1 because the email address stored in the database is not encoded.
Recommended Comments