Passing Form Variables to PHP/Database

[Anon]

Hello all,

I'm having trouble figuring something very little out that is driving me nuts. I have two files: input.html and dbcheck.php.

input.html looks like this:
<html...
<form method="GET" action="dbcheck.php">
<input type="text" name="id">
<input type="submit" name="submit value="go">

So when they enter say, "11" into the box and hit enter, it should send the data via "http://blah/dbcheck.php?id=11". It does that... here is my problem:

dbcheck.php:
<?php
$db = mssql_connect("server","user","pass");
mssql_select_db("BLAH",$db);
$result = mssql_query("SELECT * FROM TABLE1 WHERE Requested_ID='$id'",$db);
$USERNAME= mssql_result($result,0,"Username");
Your username is: <?= $USERNAME ?>

Now the problem is that the file doesn't return anything.. according to SQL 7.0 (tracing) the query is: SELECT * FROM TABLE1 WHERE Requested_ID="
Which is clearly wrong and should be the one in dbcheck.php. It seems the ...Requested_ID='$id'" does not get parsed.

Any suggestions?
Thanks in advance. PHP 4.1.x, SQL 7.0, Apache on Windows 2000.
-Sopan

[Anon]

UPDATED:

dbcheck.php:
<?php
$db = mssql_connect("server","user","pass");
mssql_select_db("BLAH",$db);
$result = mssql_query("SELECT * FROM TABLE1 WHERE Requested_ID='$id'",$db);
$USERNAME= mssql_result($result,0,"Username");
?>
Your username is: <?= $USERNAME ?>

(I had forgot to write the closing ?> in the post, sorry).

[Anon]

Have you tried changing your form method from 'get' to 'post'?

[ccranium]

It's possible your host has turned off the automagic assigning of form and querystring variables. Try accessing $id by using $HTTP_GET_VARS['id'].

[Anon]

Yep I've tried both methods (POST & GET).

[Anon]

I have a question regarding your suggestion.. You see I am running Apache on Windows 2000 myself so is there some setting I over looked in httpd.conf or is it a PHP.ini issue? (In regard to "your host has turned off the automagic assigning of form and querystring variables" goes).

Thanks,
Sopan

[ccranium]

In your php.ini file, look for the register_globals option. If it is set to "off", PHP won't create the variables.

Does trying to get at them via the $HTTP_GET_VARS array work for you?

There's a bit more information here:
http://www.php.net/manual/en/configuration.php#ini.register-globals

and

http://www.php.net/manual/en/security.registerglobals.php

[Anon]

Would you know it? I used the wrong php.ini file during the inital setup of PHP... amazing.

Thanks all.