fopen url with querystring

[sijis]

ok, i'm trying to get the output of a url. sorta.
here an url i'm working with:
www.foo.com/strip.php?file=/local/path/item.php?item=123

in my code i'm just trying to get the page that is specified by the file querystring but since item.php?item=123 isn't a 'real' page (because page is generated based on the querystring), i keep getting no output for the $str_value.

I did try some stuff with fsockopen(), but i really don't understand that function very well, so i am just limited to what i can understand about it.

here's what i have:

$file = $_REQUEST['file'];
$read = @fopen($file, "rb");
if(is_readable($file)){
	while(!feof($read)){
		$str_value .= fread($read, filesize($file));
	}
	fclose($read);
}
else{
	echo "cant get file";
}

// note: my original code didn't have the extra conditional
// statement which include is_readable(); I added that
// so that i could stop seeing those errors :)

all of these files are on my server, i'm not trying to get another domains' files.
the above code works fine if i have a url like:
www.foo.com/strip.php?file=/local/path/item_list.php

in case you wonder or if it necessary, the url is generated by $SERVER['PHP_SELF']

echo "www.foo.com/strip.php?file=".$_SERVER['PHP_SELF'];

Thanks for any help.

[diego25]

But how will the script on foo.com access the script PHP_SELF if they are on different servers?? That's impossible, that's why you get nothing back...

Diego

[sijis]

i thought i had clearly stated:

all of these files are on my server

so i'm not trying to access a remote server's file

all the files are also under the same domain.
the reason i began using fsockopen() is becuase i thought it understands querystrings, while fopen() doesn't.

[superwormy]

Aight firs toff, not sure exactly what you're trying to do... but...

What your doing, allowing people to request ANY FILE THEY WANT is VERY dangerous. People could start requesting the local password files on the *nix box and stuff.

So you shouldn't do that.

Secondly, fopen() works fine with query strings.

Thirdly, if you are trying to debug it... why are you wanting to turn errors off???

[sijis]

the code i have is for a print page type of code.
it opens the contents of the file and saves it into a string.

then it only parses between certain HTML comment code, other than that you just get a blank page.

the reason i turned errors off is because since its a loop. i would continously get the same error and it was a never ending loop, so in order to avoid that i added the if(is_readable()){} condition instead with the surpressed error.

this is the error i get without surpressing the error message
(it doesn't matter what value itemID has):
Warning: fopen("new_site/Collection/CinemaClassicsDVD/dvd_title.php?itemID=124", "rb") - No such file or directory in /home/www/print.php on line 66

this is line 66:
$read = fopen($file, "rb");

this file does exist:
new_site/Collection/CinemaClassicsDVD/dvd_title.php

if you want to see the whole code, its here
http://www.phpbuilder.com/snippet/detail.php?type=snippet&id=791
version 1.45

[diego25]

so i'm not trying to access a remote server's file

Well, it looks to me like you are. 'cause how is strip.php on foo.com going to access /local/etc if /local/etc is on another server?

Diego

[sijis]

Diego, huh?
i think i used the wrong names for the example, i should have used the typical foo/bar combo. my apologies.

my server's file structure:
/home/www/strip.php

a file on my server.
/home/www/new_site/Collection/CinemaClassicsDVD/dvd_title.php

here's the the link i want to open using fopen with a querystring:
http://www.foo.com/strip.php?file=/new_site/Collection/CinemaClassicsDVD/dvd_title.php?itemID=124

recap.
strip.php has this code:

$file = $_REQUEST['file'];
$read = @fopen($file, "rb");
if(is_readable($file)){
    while(!feof($read)){
        $str_value .= fread($read, filesize($file));
    }
    fclose($read);
}
else{
    echo "cant get file";
}

// note: my original code didn't have the extra conditional
// statement which include is_readable(); I added that
// so that i could stop seeing those errors :)

if i don't suppress the erros i get this output:

Warning: fopen("new_site/Collection/CinemaClassicsDVD/dvd_title.php?itemID=124", "rb") - No such file or directory in /home/www/print.php on line 66

this is line 66:
$read = fopen($file, "rb");

hope this clears some things up.

[diego25]

Warning: fopen("new_site/Collection/CinemaClassicsDVD/dvd_title.php?itemID=124", "rb") - No such file or directory in /home/www/print.php on line 66

That file doesn't exist. The file's name is new_site/Collection/CinemaClassicsDVD/dvd_title.php. You'll have to use another method to pass the variable to the script. You could put it in a global variable, and then include the PHP script instead of fopen'ing it. .

Diego

[sijis]

is the reason the file doesn't exist is because of the querystring?
because obviously the dvd_title.php file does exist.
I don't understand what you mean here?
You could put it?? in a global variable, and then include the PHP script instead of fopen'ing it.

the purpose of my strip.php is to print out the content between my <--start--> and <!--end--> tags inside the file.

i do get 'content' from just doing
http://www.foo.com/strip.php?file=/new_site/Collection/CinemaClassicsDVD/dvd_title.php
but since the file needs a itemID value in the querystring so i can get the right data from the db, otherwise, i get bunch of non-values and mysql errors.

i contemplating somehow saving the output of that file (using eval(), then try to 'read' it somehow
my other thought, just thought about it, would be open the file w/out the querystring, then somehow attach the querystring's value after the file is read so the db eventually gets the right data.
last thought, could fsockopen() be an alternative? i'm don't know much about this function, but i've seen some examples that included querystrings.

anything seem like a good idea?