how do you?....

Mark

on my site all i know how to do is something like...

[url]www.somesite.com/main.php?page=somepage[/url]

but how do people do things like....

[url]www.somesite.com/main.php?page=somepage&blahblah[/url]

like.. well, i dont know how to ask, or even what i'm doing 🙁 lol, any information is good 😃

KevinMG

url's can contain multiple variables by separating each with an '&'...for example

page.php?var1=33&var2=45&var3=99

when page.php gets processed, you have access to $var1 (with the value of 33), $var2 (with the value 45), and $var3 (with the value of 99).

url variable passing gets sticky when there are spaces in the variable values like so: page.php?var1=the var value

to avoid problems with that, use the urlencode() function, something like this: $var1 = urlencode($var1);

this will ensure the entire string gets passed in the varialbe

hope this helps

Mark

i understand what your saying, but, how would i use it, and what would i use it for? :-\ a few examples? 😃

KevinMG

i personally use this most often for simple javascripted pop-up windows. i have a single php pop up page which searches for an action and opens the proper type of window. another thing it's useful for is administration areas where you've already pulled results with unique id's out of a database.

psuedo example:

//admin.php

http://www.yourpage.com/delete.php?id=4
http://www.yourpage.com/delete.php?id=9

//delete.php

$cnct = mysql_connect("localhost", "user", "pass");
$db = mysql_select_db("dbname");
$query = "DELETE FROM table WHERE id = '$id'";

edwardsbc

Mark,

Are you saying you can't ever imaging needing to pass more than one variable from one script to another?

Think a bout a general purpose editing script for a database table. It might need several pieces of information, incuding the record to be manipulated, the manipulation (action), perhaps a athentication code. All of this could be passed as such:

edit.php?id=12&action=delete&auth=43edk356hjsksdf353

where action could also be things like "new" or "edit".

Mark

see, i get why you would do it, i dont know how to do it though, because i know almost nothing 🙁 lol.

i know basically nothing about databases and db tables🙁

el_kab0ng

question is, how do you prevent people forging variables in the URL itself?

Is there a way to make sure that on the page that uses the URL passed variables, that some sort of HTTP POST checks to make sure it came from a specific source instead of just being called directly?

Example:

http://somedomain/file2.php?id=1 can only be called from http://somedomain/file1.php and not directly?

piersk

You could use a session/cookie. Then if the session/cookie is not present, you can send them to another page.