A one liner to parse a http query string in bash

parse_query.sh

#
# the following one liner creates a shell variable from every parameter in a
# the query string in the variable QUERY, of the form p1=v1&p2=v2,... and sets it to
# the corresponding value so that parameters can be accessed by its name $p1, $p2, ...
#

for p in ${QUERY//&/ };do kvp=( ${p/=/ } ); k=${kvp[0]};v=${kvp[1]};eval $k=$v;done

👍

What about http://localhost/cgi-bin/script.sh?reboot;a=a ?

try this

protect_shell(){

QUERY_STRING=$(echo "${QUERY_STRING}" | sed 's/;//g')

if [ "${QUERY_STRING}" ]; then

	export IFS="&"
	for cmd in ${QUERY_STRING}; do
	
		 if [ "$(echo $cmd | grep '=')" ]; then
		 	key=$(echo $cmd | awk -F '=' '{print $1}')
		 	value=$(echo $cmd | awk -F '=' '{print $2}')
		 	eval $key=$value
		 fi
		 
	done

fi

QUERY_STRING=""

}

If you are just going to assume that nothing is URL encoded and use eval to set variables, then all you really need is:

eval "${QUERY_STRING//&/$'\n'}"