其名称中带有哈希（＃）的文件无法在Web浏览器中打开

Question

I have a simple php web application in which user upload a file. the uploaded file can be accessed by other users.its been working perfectly ,recently a user uploaded a file with name file_name#234324. when I opened this file through my web application it gave me an error that file name does not exist. it is due to the presence of (#) in file name due to which browser is unable to locate it correctly. What should I do?I don't want to change the file name

Answer 1

# has special meaning in URLs. You need to represent such characters with their percent-encoded equivalent.

Pass the filename through urlencode before adding it to the URL.

(This will also protect you from XSS when a user uploads a file with the name "><script>etc</script>).