PHP 4.2.2 code problems

raisinlove

Hi, my service provider recently upgraded to a new version of PHP and now my site doesnt work because some of the code doesnt work anymore (and it worked fine on the previous version)

The most basic problem I have is passing variable sfrom the URL.

I used to have a url like "example.php?text=test"

The code within the page would be:

<?php
print ($text);
?>

And the page would display the word "test"

I looked up this forum for answers and found the following solution for printing variables:

<?php
print $_GET['id'];
?>

However, if I place this within an isset argument, it fails to display:

if (isset($id)){
print $_GET['id'];
}
else {
print "nothing specified";
}

What am I doing wrong? is isset obsolete as well? Should I be using something other than $_GET[] ?

I really appreciate any help!
Thank you

-steph

toma42

if (isset($_REQUEST['id'])){ 
print $_REQUEST['id']; 
}

will do the trick.

You can also try adding this to your 'main' file (whatever include file you use to setup your db connection, etc.:

ini_set('register_globals', 'true');

That will restore the setting from before the upgrade if your isp allows ini_set().

vocoder

or you can change your actual php.ini file to register_globals = true

or on

however, i guess this isn't recommended for security reasons

raisinlove

So in other words, they just didnt set the register globals to true when they upgraded. If I request that they do, what are the security risks? And will this mean I wont need to change my initial code if they do so?

I dont have access to the php.ini file 🙁

Weedpacket

Originally posted by raisinlove

However, if I place this within an isset argument, it fails to display:
if (isset($id)){
print $_GET['id'];
}
else {
print "nothing specified";
}
[/b]

Well no, it wouldn't, because $id isn't set. That's the point.

I'd recommend you change your scripts; with register_globals turned on, someone could arbitrarily set any variable of their own choosing - all they'd need to do would be to stick "foo=bar" in the URL. If you're not careful about initialising every variable you use they could potentially slip something past you. Accessing them through $_GET keeps them quarantined, and you only let out the ones you actually want.

Plus it gives slightly better perforamnce.