Hi.

With...
     curl --form name=value http://somewhere.org
there is a bit of special syntax that applies to the value part in that if I say
     curl --form name=@filename http://somewhere.org
it does a multipart form post, and transfers the contents of filename.

OK then: how do I transfer a literal value that starts with '@'. Is there any
way of sending a literal 'name=@some-string'? As far as I can tell from reading
the curl man page, the 'value' part isn't supposed to be URL encoded, so '@' is
a perfectly valid character that you might want to send.

I suppose I'm really approaching this from a security point of view - you might
have a case where 'value' is captured from a user, and there needs to be a way
of ensuring that what they type gets sent verbatim without the possibility of
opening some file and sending its contents. The same '@' trick works in
curl_setopt() in PHP too, and the same vulnerability arises.

Thanks

-- 
    David.Houlder_at_anu.edu.au         ANU Supercomputer Facility
    Phone: +61 2 6125 0578           and APAC National Facility
    Fax:   +61 2 6125 8199           Leonard Huxley Bldg (No. 56)
                                     Australian National University
                                     Canberra, ACT, 0200, Australia