Apache / PHP problem: values not send through browser

Swedie

I got a problem with my installation of Apache and PHP. I have the latest versions from Apache.org and PHP.net.

I have a couple of scripts and something simple such as this doesn't work:

I send two strings through an URL like this...
http://localhost/statistics/stats.php?cat=1&sort=daily

and when I try to echo the value of $cat and $sort. They are NULL. They have no value. It doesn't matter in what way I send something through the browser, it won't work! I know it's a server setting problem because when I go try it on my other live, real webserver for a website of mine, it works just fine.

Pretty please help me out here! I'm going balistic not being able to do my testing offline / locally.

Johnny

stolzyboy

try using

$_GET['cat']

and

$_GET['sort']

instead, you are most surely having a register_globals problem, but it is a good problem to have

Swedie

yeah! found it. thanks

so how could someone hack when the register_global value is On? why's it so bad?

will the way you use to grab the value of something work even though the register_global value is On?

stolzyboy

Originally posted by Swedie
yeah! found it. thanks

so how could someone hack when the register_global value is On? why's it so bad?

will the way you use to grab the value of something work even though the register_global value is On?

it is easier to gain access to secure pages and such by passing info to the query string, since you aren't sure where the info is from, they can also do some insertion attacks if they figure out your variables.
yes the $_GET, etc... can be used with register_globals = On, that is why you should always code that way, as to ensure your code is universal from server to server

Swedie

thanks for clearing that up! I'll start doing that from now on!

Swedie

hummm, tried it and got this:

Parse error: parse error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING in C:\Apache2\htdocs\statistics\stats.php on line 55

stolzyboy

post your code and tell us which line is causing the error

tsinka

Ok,

just a suggestion:

If you use $_POST directly in a string with e.g.

$theStr = "something has been posted $_POST['thevar']";

it would spit the above message.

You can do it in two ways:

More common:

$theStr = "something has been posted ".$_POST['thevar'];

$theStr = "something has been posted {$_POST['thevar']}";

Thomas