Incorporate item from ?URL into html page via a PHP tag??

ZaonDude

I thought this was simple, but I can't seem to find anything but ultra-fancy complete php galleries via a google search :-(

===>I'm looking for a way to have a simple link of blah.com/blah/blah/picviewer.php?=image1.jpg (or something like that) where the dynamic item I put into the link is passed into the html doc / php page that gets pulled up. The purpose of this is so I can construct a single html page that can be used to display any one of several existing image files in a particular directory... That way, a nice html layout with the layout I desire with a pic mounted in the middle of it can be brought up or sent to others via a modified link to that same page.

Not sure if I'm being clear enough about this... but if I've got:

image1.jpg
image2.jpg
image3.jpg
etc.

and displayimage.php file somewhere on my site,

I can send someone a link of displayimage.php?(my choice of image#.jpg) and have the same html page pop up with the image I specified in the middle of that page somwhere wherever I've made a place for images to appear.

Thanks for any help on this!

I figure it's simple, but I can't seem to find anything but ultra-complex php auto-thumbnail generating supergallery code. 🙁

Weedpacket

Take the parameter in the URL and find the corresponding file. Then use fpassthru() to deliver it to the browser.

ZaonDude

Oy?? hmmm... that doesn't sound right at all...

There should be just a simple command argument that goes at the end of the (file.php) that I think involves a question mark or something.. then, that same file.php should just comprise two .txt files which contain the first and second halves of the html page with some php command between the two.

In other words, the file.php should have contents identical to the following, except for the command where I so noted it:

<?php
readfile("http://www.domain.com/picdisplaystart.txt");
[a php command that nabs the filename.jpg and nothing but that name from the URL]
readfile("http://www.domain.com/picdisplayend.txt");
?>

So, as I understand it I just need a one line php command that goes in the above file, but the proper syntax of the URL, right?

I'm a newbie, so please forgive me if I've oversimplified my question.

Thanks!

ZaonDude

Hmmm... lemme try to explain it this way:

Looking to simply pass a specific filename (appended to the end of a URL) to the appropriate spot in the middle of an html page code.

Should just be a short one-line piece of PHP code, right?

ZaonDude

ahhh... a friend helped me find it... this is the answer:

print $QUERY_STRING;

the_Igel

Be aware not to print $QUERY_STRING as is. Do htmlspecialchars() to it at least. Otherway your page will be subject to cross-site scripting (aka XSS), a maleficial hacking technique. If you're interested, it's easy to find some articles on the topic.
In case you have image1.jpg, image2.jpg etc. it's enough to pass the number, then you may do print $QUERY_STRING + 0; (it'll convert to integer).

ZaonDude

Wow... thanks Igel! I never would have known that.

Unfortunately, the image names are not that simple... So, I'm not sure exactly how to change my code...

This is what I'm using so far:

<?php
readfile("gallerydisplay1.txt");
print $QUERY_STRING;
readfile("gallerydisplay2.txt");
?>

And this is the actual page: http://www.zaon.com/promo (used in links of the gallery items)

How do I convert the "print $QUERY_STRING;" to include the htmlspecialchars() you're mentioning?

the_Igel

print htmlspecialchars($QUERY_STRING);
(wow! you never would have known that 🙂 )

ZaonDude

Originally posted by the_Igel
print htmlspecialchars($QUERY_STRING);
(wow! you never would have known that 🙂 )

Thanks, Igel!!

Yeah, dammit, I'm an artist not a programmer! :-) Don't know anything about coding... 🙁

So, pardon my ignorance, but it almost seems like the opposite by using a command called 'htmlspecialchars' as if it's additionally allowing special characters to send through the link.

Any more info on this?

I'm reading this right now which is VERY interesting: http://www.idefense.com/idpapers/XSS.pdf

ZaonDude

aaaaaaahhaaa!!! so, it converts special characters to the way you'd want them to print instead of 'activate' in HTML...

'&' (ampersand) becomes '&'

'<' (less than) becomes '<'

'>' (greater than) becomes '>'

etc., sooooo a malicious hacker couldn't write specific URL links that would escape out of my current <img> tag by printing a closing > and then begin additional html or javascript code that could do evil stuff!

wow...