It seams that PHP isn't set to process the vars. It is needed to change 
the php.ini in some place where there is the following:

; You should do your best to write your scripts so that they do not require
; register_globals to be on;  Using form variables as globals can easily 
lead
; to possible security problems, if the code is not very well thought of.
register_globals = Off

For your script to work as is, replace the Off with On.

However, bear in mind the security problems, because it very easy to 
"emulate" a web page and feed it with the data one wants.

I would recomend that you use the arrays $_GET and $_POST to get the 
specific var (depending on the method used in the form page) and more, 
perform a expretion evaluation with regarding to the vars values (to 
ensure that the values are ok (like be numeric so the multiplication 
with the unit price will give the correct ammout).

Be ware also that when "re-posting" the data for the execution page, 
never reuse totals and values processed by the previous page... because 
would be easy to send a $1 dollar bill for all those stuff in your store!

Cheers,
Luis Ferro
TelaDigital.net

Sim wrote:

>Hi,
> 
>Please don't reply with RTFM.   I just installed Apache 2.0.36 and PHP
>4.2 in Win XP Pro.  Apache is running fine */localhost/ is working* and
><? phpinfo() ?> is showing the config.  I have set register_globals =
>On.  So I practice following the source code from the book (and even
>used the book's files), it seems that the form (in html) does not pass
>the variable to the php file, all I can see is the html with the current
>time (**echo date("H:i, jS F"); **).  So if I can see the time output in
>html that means PHP is working but why aren't the variables
>passed/shown?  I have been looking all over the mailing lists and I
>can't find anybody with the exact same problem.
> 
>--------------
>HTML FILE:
>--------------
><html>
><head>
>  <title>Bob's Auto Parts</title>
></head>
><body>
><h1>Bob's Auto Parts</h1>
><h2>Order Form</h2>
> 
><form action="processorder.php" method=post>
><table border=0>
><tr bgcolor=#cccccc>
>  <td width=150>Item</td>
>  <td width=15>Quantity</td>
></tr>
><tr>
>  <td>Tyres</td>
>  <td align=center><input type="text" name="tyreqty" size=3
>maxlength=3></td>
></tr>
><tr>
>  <td>Oil</td>
>  <td align=center><input type="text" name="oilqty" size=3
>maxlength=3></td>
></tr>
><tr>
>  <td>Spark Plugs</td>
>  <td align=center><input type="text" name="sparkqty" size=3
>maxlength=3></td>
></tr>
><tr>
>  <td colspan=2 align=center><input type=submit value="Submit
>Order"></td>
></tr>
></table>
></form>  
></body>
></html>
> 
>-------------------
>PHP FILE:
>-------------------
><html>
><head>
>  <title>Bob's Auto Parts - Order Results</title>
></head>
><body>
><h1>Bob's Auto Parts</h1>
><h2>Order Results</h2>
><? 
>  echo "<p>Order processed at "; // Start printing order 
> 
>  echo date("H:i, jS F");
>  echo "<br>";
>  echo "<p>Your order is as follows:";
>  echo "<br>";
>  echo $tyreqty." tyres<br>";
>  echo $oilqty." bottles of oil<br>";
>  echo $sparkqty." spark plugs<br>";
> 
>  $totalqty = 0;
>  $totalamount = 0.00;
> 
>  define("TYREPRICE", 100);
>  define("OILPRICE", 10);
>  define("SPARKPRICE", 4);
> 
>  $totalqty = $tyreqty + $oilqty + $sparkqty;
>  $totalamount =  $tyreqty * TYREPRICE
>                + $oilqty * OILPRICE
>                + $sparkqty * SPARKPRICE;
>  
>  echo "<br>\n";
>  echo "Items ordered:       ".$totalqty."<br>\n";
>  echo "Subtotal:            $";
>  echo number_format($totalamount, 2);
>  echo "<br>\n";
> 
>  $taxrate = 0.10;  // local sales tax is 10%
>  $totalamount = $totalamount * (1 + $taxrate);
>  $totalamount = number_format($totalamount, 2);
>  echo "Total including tax: $".$totalamount."<br>\n";
> 
>?>
></body>
></html>
>-----------------
>Result:
>-----------------
> 
>
>Bob's Auto Parts
>
>
>Order Results
>
>Order processed at 16:54, 30th May
>Your order is as follows:
>tyres
>bottles of oil
>spark plugs
>
>Items ordered: 0
>Subtotal: $0.00
>Total including tax: $0.00
> 
>Sim
> 
>
>  
>




-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to