request problem

[scialom]

Hi,

I used to get the value of my form just by using the name of the element. Like this:

<input type=text name=chk value=1>

....

echo $chk;

Now we change our server, and I need to use this:
$chk=$HTTP_POST_VARS['chk'];

I don't want to change all my codes. Is there is something in the ini file that I can change?

Thanks,
Assaf

[piersk]

Yeah, turn register_globals to off. However this is a bit of a security risk and so its advisable to leave it on and do a find-replace on all your code. To save on the typing, can't you use $_POST[''] instead of $HTTP_POST_VARS?

[scialom]

Why it is a risk?

[AstroTeg]

With register_globals on, a crafty web user can spoof your PHP variables by entering them on the URL and because you have the globals turned on, PHP will be happy to assign them to your variables and use the supplied data. This is really a problem if you fail to initialize the variable before using it (which is probably common practice with PHP coding). Its better to leave register_globals off and use $GET/$POST when you need them.