Quote Originally Posted by gernot View Post
Hi torvista,
My eyes are deceiving me... htmlentities() is only used for the Twitter URL, not for the others.
Still, none of them work in my browser with the "&" or with "&" (htmlentities() merely encodes the "&" again for Twitter).
Gernot,
What about if you add the following file to your site:
includes/extra_configures/patch_clean_ampersands.php
to have the contents of that file as found at: https://raw.githubusercontent.com/ze...ampersands.php

Code:
<?php
/*
 * Patch GET 20191111
 * 
 * @package initSystem
 * @copyright Copyright 2003-2020 Zen Cart Development Team
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * @version $Id: patch_clean_ampersands.php New in v1.5.7 $
 */
/**
 * Suitable for versions of Zen Cart prior to v1.5.7
 *
 * Non-sanitization/access - $_GET
 *
 * Please Note : This file should be placed in includes/extra_configures and will automatically load.
 *  
 */

if (!isset($_GET)) {
    return;
}
if (!is_array($_GET)) {
    return;
}
foreach ($_GET as $key => $value) {
    if ($key === 'amp;') continue;
    if (strpos($key, 'amp;') !== 0) {
        continue;
    }
    $newtext = substr($key, 4);
    if (isset($_GET[$newtext])) continue;

    $_GET[$newtext] = $_GET['amp;' . $newtext];
    unset($_GET['amp;' . $newtext]);
}
Does that resolve the issue of not being able to reach the page associated with &amp; being encoded?