HTTP_GET_VARS in php-4.2.2

vaibhavg

I have big problem.
I have PHP 4.0.6 with apache1.x. IN my old combination of php & papche on linux I am able to use HTTP_GET_VARS & HTTP_POST_VARS directly for example
if i invoke url www.myhome.net/search.php?qstr=asdf
In php script the value of the variable qstr will be asdf

BUT in new combination php-4.2.2 with apache2 or apache 1.x
I am getting the value of the variable qstr as blank but the value of variabe HTTP_GET_VARS['qstr'] is asdf.

I have same problem with HTTP_POST_VARS too.

I have the very large code written on php-4.0.6 but it completly fails with php 4.2.2 because of this.

I am stucked.

Plz somebody suggest what to do ?
-vaibhav

sadair

I believe due to security reasons, POST_VARS isn't available as a global anymore. I'm sure someone more experienced can provide a better explanation, but for now, I think you can use this:
$vars = extract($POST) or
$vars = extract($GET)
to create a new array of these items.

undertow

The quick fix is to go into your php.ini file and look for the line that says "register_globals = Off" and turn it On.

However, this has some serious security issues, which is why it has been off by default since v4.2.0 I believe. This explains why you didn't have a problem in v4.0.6.

I bet you could read the ChangeLog for more details because I don't remember all of them.

But you should start writing your scripts so that they use $HTTP*VARS instead of relying on register_globals.

EDIT - If you want to use $HTTP*VARS inside a function, make sure you make it global first with the (wisely named) "global" command.

merkinmuffley

EDIT - If you want to use $HTTPVARS inside a function, make sure you make it global first with the (wisely named) "global" command.

Instead of $HTTP**VARS, there are new "superglobal" arrays introduced in version 4.1, called $POST and $GET (among others). These arrays are always global, so you don't have to declare them global even inside a function.

http://www.php.net/manual/en/language.variables.predefined.php#language.variables.predefined

undertow

I had heard of those but I wasn't sure exactly how they worked. Are they enabled by default in php.ini?

Anyway, there's a document for vaibhavg on the PHP site that describes the risk of having register_globals on at http://www.php.net/manual/en/security.registerglobals.php.

merkinmuffley

the superglobals have some connection with a php.ini setting called "variables_order". read that page that I linked to, it's on there somewhere.