74

How do I include special characters like @ and & in the cURL POST data? I'm trying to pass a name and password like:

curl -d name=john passwd=@31&3*J https://www.mysite.com

This would cause problems as @ is used for loading files and & for specifying more than one key/value. Is there some way I can escape these characters? \@ and \& don't seem to work.

7 Answers 7

Help us improve our answers.

Are the answers below sorted in a way that puts the best answer at or near the top?

82

cURL > 7.18.0 has an option --data-urlencode which solves this problem. Using this, I can simply send a POST request as

curl -d name=john --data-urlencode passwd=@31&3*J https://www.example.com

Summarizing the comments, in case of mixed "good" and "bad" data and exclamation marks inside we can use on Windows:

curl -d "grant_type=client_credentials&client_id=super-client&acr_values=tenant:TNT123" --data-urlencode "client_secret=XxYyZ21D8E&%fhB6kq^mXQDovSZ%Q*!ipINme"  https://login.example.com/connect/token
3
  • I have 7.52.1 and I can't get this to work... I can do --data-urlencode "something=it's a test" but not with double quotes or @ symbols...
    – PJ Brunet
    Jan 20, 2018 at 4:09
  • 1
    Remember to use --data-urlencode only for the data part that needs it. For example, the following will not work when you combine the data into one entity: curl --data-urlencode "name=john&passwd=@31&3*J" https://www.example.com
    – Mr-IDE
    Apr 27, 2018 at 10:08
  • 2
    Exclamation points seem to cause problems with this in regards to history expansion in bash. You can fix it with single quotes around each piece of data (e.g. --data-urlencode 'password=abc!123' or by escaping the exclamation --data-urlencode password=abc\!123. More info: unix.stackexchange.com/questions/33339/…
    – 2xj
    Apr 1, 2019 at 18:28
42

How about using the entity codes...

@ = %40

& = %26

So, you would have:

curl -d 'name=john&passwd=%4031%263*J' https://www.mysite.com

3
  • Could you please be kind enough to specify entity code for "+" May 1, 2018 at 12:08
  • did you figure out the '+' part for this? Sep 20, 2018 at 6:06
  • I wanted to replace name=john&passwd=%4031%263*J with an variable, but couldn't. Any help? Jun 22, 2020 at 12:50
17

Double quote (" ") the entire URL .It works.

curl "http://www.mysite.com?name=john&passwd=@31&3*J"
1
  • 8
    The request is supposed to be a POST, not a GET. Mar 5, 2015 at 13:39
11

Just found another solutions worked for me. You can use '\' sign before your one special.

passwd=\@31\&3*J
0
5

Try this:

export CURLNAME="john:@31&3*J"
curl -d -u "${CURLNAME}" https://www.example.com
1
  • 4
    Does not work if the exclamation point ("!") is one of the special characters. Oct 7, 2016 at 2:49
5

If password has the special characters in it, just round the password with the single quote it will work.

curl -u username:'this|!Pa&*12' --request POST https://www.example.com
1
  • 1
    This worked for me for a password that had a double quote (") in it.
    – T. Thomas
    Jun 16, 2021 at 22:17
0

I did this

~]$ export A=g

~]$ export B=!

~]$ export C=nger


   curl http://<>USERNAME<>1:$A$B$C@<>URL<>/<>PATH<>/
0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.