Dear Jim

Could you please explain why it is a bad idea - is it something to do with
people passing malicious strings? What are the alternatives?

Tseung

-----Original Message-----
From: Jim Thome [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, 1 May 2002 22:39
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: [PHP-INST] Re: not reading variables


With PHP 4.2.0, the register_global directive is off by default.  Please
read the section on external variables ->
http://www.php.net/release_4_2_0.php

In general, automatically creating form fields into variables is a bad idea,
and PHP 4.2 does not do this by default.

--Jim



>>> "Graham Nichols" <[EMAIL PROTECTED]> 05/01/02 07:32AM >>>

"Geoff" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Im running php 4.0.2 on winxp pro and the latest apache (1.3.x) and have
> followed all of the installation instructions on php.net, and the only
> problem i have encountered so far is the my variables arnt reading from
the
> url
>
> ie : /?page=contact wont go to the contact page, it will only refresh the
> current page.
>
> any help would be appreciated (and its not my code, other peopel have
tested
> on their machines, and i have uploaded to a temp host and it works fine)
>
> thankyou
>
>

Hi Geoff,

If that 4.0.2 or 4.2.0? I've just installed version 4.2.0 and my previously
working php3 application won't send variables either, now that it's running
under 4.2.0. So, if I ask for www.nextpage.com?name=fred  an empty
www.nextpage.com comes up indicating that the ?name=fred portion is not
being sent/read somewhere. I was glad to see your post as I thought that I
was going nuts (er .. make that even more nuts)!  However, and here's the
really scary part, our office intranet raq3, the same beast as our online
server, works OK with the same code and php 4.2.0 sending/receiving the
variables without fault.  Very strange and very annoying.

kind regards,

Graham Nichols.




-- 
PHP Install Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php 


Reply via email to