Variable Question

flinginarrows

I just moved to a new server and my variables are no longer working properly

$result = mysql_query("SELECT * FROM shops WHERE state = '$state' ORDER BY name LIMIT " . $start . ", 14");

If I change the $state to an actual state name it works. And my url is http://www.flinginarrows.com/archeryshops/listlocalshops.php?state=Colorado

The problem is that when I echo $state it's empty. Shouldn't ?state=Colorado in the url essentially be the same as changing state = '$state' to state = 'colorado'?

dagon

$_GET['state']

you old server must have had register globals on which is very very bad

flinginarrows

So how do I go about passing the variables now?

flinginarrows

Fixed it with $state = $_REQUEST['state'];

dagon

flinginarrows wrote:
So how do I go about passing the variables now?

read what i wrote again.

dagon

better to use $GET than $REQUEST

flinginarrows

Thanks dagon I appreciate it. Looks like Im running into multiple problems. Now my "next" link displays the original results and doesnt get the next 14 results. hmmm You might be hearing from me again...

dagon

I really hope your cleaning state before passing it to the query or you are setting your self up for a sql injection attack.

at the minimum use mysql_real_escape_string()