Since yesterday when our Apache updated himself at night we started to get websites saying 403 Forbidden.
It looks like that encoding the “?” is not anymore allowed. The crazy thing is that PHP does exactly that when using rawurlencode().
We use this for user’s input in form fields which are transfered by GET. Do we need to change all this places?
Using google we read about an option named “UnsafeAllow3F” but I am not sure how to set this.
Has this problem occured at others and what are you doing to fix?

In the code example, in case $test contains a “?” the user get a 403 Forbidden.

<a href='test?a=<?=rawurlencode($test);?>test</a>