You must URL encode any data you’ll pass on in a query string, such as a form post, or other url parameters.
I’m always having to look these up, so this article is as much for my reference as yours.
A URL encoded character is the ascii value of the character preceded with %, with a special case for <space> which is quite common.
Here are some of the most common characters.
| Character |
URL Encoded |
| ; | %3B |
| ? | %3F |
| / | %2F |
| : | %3A |
| # | %23 |
| & | %24 |
| = | %3D |
| + | %2B |
| $ | %26 |
| , | %2C |
| <space> | %20 or + |
| % | %25 |
| < | %3C |
| > | %3E |
| ~ | %7E |
| % | %25 |
Here is a full ascii table you can use to find the hex codes for other characters, click to enlarge it…
