[Resolved] array with $_POST

mikanmao

How can i convert the following code as my register_globals turned off, i cannot get the array values now :-(

$j=0;
for ($i=0; $i < 5; $i++)
{
if (isset ($_POST['update']))
{
$result[$j] = $update[$i];
$j = $j+1;
}
}

LiLaaron

Originally posted by kburger
You just need 1 line at the beginning:
if (isset($_POST['update'])) $update = $_POST['update'];
[/B]

You double posted it mate... your response is on the other one :bemused:

kburger

Oops. My bad. I don't know what I did. I thought I posted a reply, then edited it.

Sorry.

LiLaaron

I was actually talking to mikanmao, kburger you posted right but on his other post... so i just put the code you did in here for ya 🙂

kburger

Oh.

I'd hereby like to formally retract my previous OOPS and replace it with a new OOPS. :rolleyes:

gaucho

Hi,
if you don't want to handle each single $POST var or use $POST as a variable name, just set this piece of code at the beginning of your script(-s):

if(!empty($_GET))
  extract($_GET);

if(!empty($_POST))
  extract($_POST);

Each time the script is reloaded the variables, arrays and values from $GET and $POST are extracted so you can use your custom variables without having to care about naming.

Best regards

gaucho

liquorvicar

i would be very wary of just putting code like that in your script. you leave yourself open to the posibility of data poisoning.

ideally, you should only extract the GET/POST variables you are expecting and check that they are properly escaped if they are strings.

gaucho

Hello liquorvicar,
I diidn't ment to just put this code in the scripts and then leave validation to whatever. You still have to validate the data before submitting it to other functions or database.
This only makes it easier to work with the variables, not more not less.

greetz

gaucho

liquorvicar

fair enough gaucho, but i always try and "clean" and "dirty" data separate and that way you'll never forget to validate. i keep all "dirty" data in the original POST/GET and all "clean" data in $name etc.

it's a good programming habit to get into!

gaucho

Yes, I know,
and yes, you are right. I should have posted the warning with the piece of code I posted.
To tell you the truth, I use what I posted, but, I'm disciplinned (hope this is right spelled) enough not to forget validating (hope so).

best regards

gaucho

mikanmao

Thanks everyone...my code works now :-)