stupid php problem

Anon

ok i havent done php for a looooooooong time.

if i do this: http://blahblah.com/signup.php?action=confirm

will that make the variable $action = "confirm" ?

cuz i wanna do this:

if (!isset($action)) { $action = "null"; } //did this so it wont say undefined variable
if ($action == "confirm") { echo ("CSDA"); //cdsa is just a way to test it...haven't written anything else yet
} else { //this is where the other stuff shows

the problem is that it keeps setting $action to null even though i do signup.php?action=confirm

Any help will be appreciated. Thanks

Anon

Try:

$_GET['action'] instead of $action when you're using get and

$_POST['action'] when you're using post.

There are some security reasons why you're not supposed to do that or something, but all I really care about it that $myvar isn't supported anymore from forms; you have to use $_GET['myvar'].

Anon

wow thanks alot for the quick reply. security reasons why i shouldnt use $_get? if so, i wouldn't want to take the chance. what else can i use?

Adam wrote:

Try:

$_GET['action'] instead of $action when you're using get and

$_POST['action'] when you're using post.

There are some security reasons why you're not supposed to do that or something, but all I really care about it that $myvar isn't supported anymore from forms; you have to use $_GET['myvar'].

Anon

Oh sorry, what I meant is that you're aren't supposed to use $myvar, you're supposed to use $_GET['myvar'].

Anon

$_GET['myvar'] is more secure.

Anon

newer versions of PHP has the global vars option turned off in the php.ini file.
So unless u turn it back on u can only use
$GET,$POST,..$HTTP_GET_VARS,$HTTP_POST_VARS.,..etc.

It is recommended that you keep it off for security reasons.

thinsoapy

I came with a similar problem:

I want to create a link 'comment' at the bottom of each project displayed on a page. The projects come from a db, so my link would be:

<a href="../comment.php?action="<?php $row[ProjectID]; ?>">comment</a>

Where comments.php is a form & handler that would insert someone's name and comments into a comments table in the db. I want the action to define the Project number so that the comments in the db can be associated later with a particular project.

The ? is, how do I say I want the $_GET['action']...

I think I just answered my own ?. In the query I just make $ProjectID = $_GET['action'];

then if $_GET[action] is not set I can display an error message like, you must pick a project...

I guess now I'll also have to check to see if the Project exists, too and display a different error for that.

If I am wrong, please let me know...

Dave

Anon

yeah i think what you have to do is

if (!isset($_GET[\'action\'])) { echo (\"you didn\'t specify a project id\"); } else { //connect to the database and check if it\'s valid, you can figure this out yourself
}

thinsoapy

it sort of works. BUT, my form page that it links to is /comments.php?action=$ProjectID

so when you get to the form, the project id shows up in the URL correctly (ie action=0001). The problem is that when you hit submit, the form (which handles itself) sets the action to action=

in other words, it clears it. I tried setting the form action to "comments.php?action=<?php $_GET['action']; ?>"

but it doesn't seem to ge that...?

What am I doing wrong?

Dave