View Single Post

  #2 (permalink)  
Old 01-09-2007
tedd
 
Posts: n/a
Default Re: [PHP] newbie question regarding URL parameters

At 9:17 PM -0500 1/5/07, <tg-php@gryffyndevelopment.com> wrote:
>You'll probably get 50 answers to this, but here's probably what happened.
>
>There's a setting called "register globals" that will turn your
>name=me and age=27 into $name = "me" and $age = "27". It used to be
>turned ON by default. This was generally considered to be bad
>security, so it now defaults to OFF.
>
>To get these variables, just use the $_GET system variable.
>
>$name = $_GET['name'];
>$age = $_GET['age'];
>
>Easy!
>
>Best of luck!
>
>-TG


Just to add to -TG advice, you should also clean those inputs. IWO,
make sure the values fall within what you expect. Basic security.

tedd
--
-------
http://sperling.com http://ancientstones.com http://earthstones.com
Reply With Quote