Query infohash in an encoding-safe way

sections/reportsv2/takeresolve.php

@@ -94,7 +94,7 @@ if (($Escaped['resolve_type'] == 'manual' || $Escaped['resolve_type'] == 'dismis
     <tr>
       <td>
         <a href="reportsv2.php?view=report&amp;id=<?=$ReportID?>">Somebody has already resolved this report</a>
-        <input type="button" value="Clear" onclick="ClearReport(<?=$ReportID?>);" />
+        <input type="button" value="Clear" o nclick="ClearReport(<?=$ReportID?>);" />
       </td>
     </tr>
   </table>
@@ -205,7 +205,7 @@ if ($DB->affected_rows() > 0 || !$Report) {
     $DB->query("
       SELECT
         r.ExtraID,
-        t.info_hash
+        HEX(t.info_hash)
       FROM reportsv2 AS r
       LEFT JOIN torrents AS t ON r.ExtraID = t.ID
       WHERE r.ID = $ReportID");
@@ -231,7 +231,7 @@ if ($DB->affected_rows() > 0 || !$Report) {
         }
       }
       foreach ($AffectedUsers as $UserID) {
-        Tracker::update_tracker('add_token', array('info_hash' => rawurlencode($InfoHash), 'userid' => $UserID));
+        Tracker::update_tracker('add_token', ['info_hash' => substr('%'.chunk_split($InfoHash,2,'%'),0,-1), 'userid' => $UserID]);
         $DB->query("
           INSERT INTO users_freeleeches (UserID, TorrentID, Time)
           VALUES ($UserID, $ExtraID, NOW())

sections/schedule/every/expire_tokens.php

@@ -12,13 +12,13 @@ if ($DB->has_results()) {
   }
 
   $DB->query("
-    SELECT uf.UserID, t.info_hash
+    SELECT uf.UserID, HEX(t.info_hash)
     FROM users_freeleeches AS uf
       JOIN torrents AS t ON uf.TorrentID = t.ID
     WHERE uf.Expired = FALSE
       AND uf.Time < (NOW() - INTERVAL 4 DAY)");
   while (list($UserID, $InfoHash) = $DB->next_record(MYSQLI_NUM, false)) {
-    Tracker::update_tracker('remove_token', array('info_hash' => rawurlencode($InfoHash), 'userid' => $UserID));
+    Tracker::update_tracker('remove_token', ['info_hash' => substr('%'.chunk_split($InfoHash,2,'%'),0,-1), 'userid' => $UserID]);
   }
   $DB->query("
     UPDATE users_freeleeches

sections/torrents/download.php

@@ -74,7 +74,7 @@ if (!is_array($Info) || !array_key_exists('PlainArtists', $Info) || empty($Info[
       tg.CategoryID,
       t.Size,
       t.FreeTorrent,
-      t.info_hash
+      HEX(t.info_hash)
     FROM torrents AS t
       INNER JOIN torrents_group AS tg ON tg.ID = t.GroupID
     WHERE t.ID = '".db_string($TorrentID)."'");
@@ -121,7 +121,7 @@ if ($_REQUEST['usetoken'] && $FreeTorrent == '0') {
     }
 
     // Let the tracker know about this
-    if (!Tracker::update_tracker('add_token', array('info_hash' => rawurlencode($InfoHash), 'userid' => $UserID))) {
+    if (!Tracker::update_tracker('add_token', ['info_hash' => substr('%'.chunk_split($InfoHash,2,'%'),0,-1), 'userid' => $UserID])) {
       error('Sorry! An error occurred while trying to register your token. Most often, this is due to the tracker being down or under heavy load. Please try again later.');
     }
 

sections/userhistory/token_history.php

@@ -38,7 +38,7 @@ if (isset($_GET['expire'])) {
     error(403);
   }
   $DB->query("
-    SELECT info_hash
+    SELECT HEX(info_hash)
     FROM torrents
     WHERE ID = $TorrentID");
   if (list($InfoHash) = $DB->next_record(MYSQLI_NUM, FALSE)) {
@@ -48,7 +48,7 @@ if (isset($_GET['expire'])) {
       WHERE UserID = $UserID
         AND TorrentID = $TorrentID");
     $Cache->delete_value("users_tokens_$UserID");
-    Tracker::update_tracker('remove_token', array('info_hash' => rawurlencode($InfoHash), 'userid' => $UserID));
+    Tracker::update_tracker('remove_token', ['info_hash' => substr('%'.chunk_split($InfoHash,2,'%'),0,-1), 'userid' => $UserID]);
   }
   header("Location: userhistory.php?action=token_history&userid=$UserID");
 }