Dealing with case in GET variables

gerardg

Anybody have a way to deal with this?

www.url.com/page.php?itemid=123

www.url.com/page.php?ItemID=123

www.url.com/page.php?ITEMID=123

If you expect and use $itemid in your script, then the other two URLs won't work. Is there a way to get the other item id's? All I can think of is a switch for all possible case variations.

jordan

$HTTP_GET_VARS will tell you the names of all of the variables passed through a GET request, if that helps. A good solution, though, would be to make sure that all of your forms and links use a consistent format. And if your users screw with the case in the address bar, that's their own problem -- why would they be doing that? Give 'em an error message and send them on their way.

junebug

you should deal with unexpected variables being passed into your script. not trying to break your own script will let others take advantage of vulnerabilities that you do not know about. so, expect variables that shouldn't be passed and deal with them accordingly.

Anon

Try this:

if (!$itemid){
while(list($var, $val) = each($HTTP_GET_VARS)){
if (strtolower($var) == 'itemid'){$itemid = $val;}

}
}

Scott Menke
7menkes Consulting