Store form posts in session variables?

reisrui

Hello there,

I have a project in which I´ll need 3 pages until the user gets the final results.
In the first one I have a form with a select list box which allows the user to choose where they´ll go. In the second page I´d like to read 3 parameters from the previous form and store them to use in the 3rd page. This second page has links to several 3rd pages, in which I´ll need the inicial parameters.

What´s the best way to store variables posted in a form I use in my first page.
Variables I'll need to use in the second and third pages the user is directed to, knowing that the third page is the one where I´m doing a series of queries depending on a new different form (only in 3rd page) and also depending on my first page variables.

Anyone can tell me about security issues on having register_globals on?
If I turn it off, session variables will work ok?

Thanks,

Rui Reis

bpat1434

$SESSION will work with register globals off. Register globals deals with the automatic creation of variables from $POST or $GET and other "global" variables. With register globals on $POST['email_addy'] is the same as $email_addy. With register globals off (which is what it should be) the variables aren't created, and you have to explicitly create them like: $email_addy = $_POST['email_addy'];

Sessions will work with or without register globals. You just have to access them with $_SESSION['key'].

Dealing with the forms....
You can do one of two things: (1) Store info in a session, or (2) Use hidden fields to post the data from page to page to page. Either way will work, it's your choice.

suntra

An easy way would be to check and correct variables from the $POST array, put them back in the $POST array with the same key, and then add it to the $_SESSION array...

Exemple...

if(trim($_POST['name']) == <>) {
    add_error('Name empty !');
}
// ....
$_POST['age'] = intval($_POST['age']);
//...
$_SESSION['Posted_data']['Page_1'] = $_POST;

You would do that on every page except the last one, and then on the last page, you would simply have to do something like this...

$_POST = array_merge($_POST, $_SESSION['Posted_data']['Page_1'], $_SESSION['Posted_data']['Page_2']);

I know this isn't quite clear, but I'm tired... 😛