My simple PHP app not working any more.

Anon

I have switched
from:
php-4.1.1-Win32
to:
php-4.2.0-Win32

I used to access all my query parameters by $paramName, now they are always "" in the page.

I tried to look in PHP doc to what has changed, I would not find and info.

Regards, peace.

crusty_php

http://www.php.net/manual/en/language.variables.predefined.php

Anon

Thanks Martin, very helpful doc.

Just to double check, it's safter to use $_GET[***] rather than make register_globals to 'On',

right?

Regards.

crusty_php

There are some security issues with having register_globals on and how important that is to your site I have no idea, however as this is now the default, better to get used to it :~)

Anon

Yes, there are security issues. Imagine:

if($pass == "password"){
$correctpass = 1;
}
if($correctpass == 1){
print "Secret stuff";
}

A hacker, if the script was open source, could type in ?correctpass=1 in the URL and get "Secret stuff" printed.

Anon

Would it not work if you tried configuring
you php.ini File and turning on the
global variables...

register_globals = On

Apparently they say it is not a secure
way of writing your script I suppose
that they mean that some external idiotic
hacker can manipulate your variables...

Spizo....

mikefn

It does the same with me ...
But after I did some tests, I figured out that none of the variables were passed to the other page.
For the php-4.2.1, the external variables (from the environment, the HTTP request, cookies or the web server) are no longer registered in the global scope by default.
Here is the patch:

put this in the header of your File(s)

if(phpversion() >= "4.2.1") {
//PHP 4.2.1 Patch
extract($HTTP_POST_VARS);
extract($HTTP_GET_VARS);

}