编码＆in header（）函数

Question

I am doing this redirect:

$perf = get_query_var('goperf');
$campaignid = get_option('campaign_id');
$url = 'http://ww.mysite.com?test=1&testtwo=2';
header("HTTP/1.1 301 Moved Permanently");
header('Location: '.$url); 
exit;

Should I use:

$url = 'http://ww.mysite.com?test=1&testtwo=2';

Or should I encode the &? using & instead of &

$url = 'http://ww.mysite.com?test=1&esttwo=2';

TY

Answer 1

You should use the htmlencoded variant ONLY if the URL is being inserted into an HTML document.

So if you have:

<a href="<?php echo $url;?>">click me!</a>

you should use the & variant (htmlencoded)

If you're doing:

header("Location: " . $url);

or anything else that isn't the first case, don't htmlencode.