Post variables

reeksy

I’ve been using an older version of PHP up until recently. Using the older build I had 'register_long_arrays' on. However this depreciated some time ago and I want to start working with 'register_long_arrays' set to off.

My question is; if, for example you have a form with 25 fields is there a quick way assign variables to the value of the post variables using the field names?

For example instead of writing this sort of thing for each field in the form:

$fieldOne  = $_POST['fieldOne'];
$fieldTwo  = $_POST['fieldTwo'];
$fieldThree  = $_POST['fieldThree'];

Is there a way of looping through all post variables?

I used this in previous code:

foreach ($HTTP_POST_VARS as $key=>$value){
	$$key = $value;
}

laserlight

You can use [man]extract/man, but then you open yourself to the risk of variable poisoning. This can be avoided by using [man]import_request_variables/man with a suitable prefix, but in either case you still have to perform validation of incoming variables.

I used this in previous code:

The equivalent would then be:

foreach ($_POST as $key => $value) {
	$$key = $value;
}

reeksy

Thanks for reply.

So are there any security issues using the following?

foreach ($_POST as $key => $value) { 
    $$key = $value; 
}

laserlight

So are there any security issues using the following?

About the same as using extract($_POST)
I wouldnt say it really is a security problem, but the potential is there.