This is because register_globals is set to Off in your php.ini. For security reasons, it is best to leave this setting as it is; instead, add some code at the top of your script so that you get what you would expect:
$week = $_GET['week']; $day = $_GET['day']; ... The security hole comes in form submissions. If all you do is refence a variable submitted via a form by its name instead of via the $_POST array, anyone can "submit" your form by figuring out the appropriate URL name/value pairs--a BAD thing. > -----Original Message----- > From: Gator [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, June 18, 2002 9:49 AM > To: [EMAIL PROTECTED] > Subject: [PHP-INST] PHP/IIS5 Problem > > > I needed to move a couple of working sites that use PHP > scripts to a new Win2K server. The new server runs simple > PHP scripts like <?php phpinfo();?>. But it will not run the > scripts where input parameters are added to the URL like: > > daily.php?week=1&day=1 > > This runs as if there was no input, like: > > daily.php > > This is all running perfectly on the old server and > everything "looks" the same with the exception of going from > php 4.0.6 to 4.2.1. There are no error messages that I can > see coming up. > > Any ideas what might be the issue here or where to look? > > Thanks - Jack > > > -- > PHP Install Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > -- PHP Install Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
