Hi,

I think it's not problem related to registering as globals data from
POST/GET. Problem is that what I expected (and seen on every other
configurations) was POST data being lost after

header("Location: $url);

And here, on IIS+PHP, I get POST data being "forwarded" to script
called with

header("Location: $url);

And I don't want that. That causes problems, cause it's not expected
behavior.

To be sure I just checked - on my other config. Apache+PHP POST data
don't propagate when redirecting, no matter what. No matter
register_globals is set off or on.

I suppose that to be some bug in IIS or PHP module working with IIS.

--
Best regards,
Sebastian Baran

Monday, July 7, 2003, 1:36:46 PM, you wrote:
SM> In your php.ini   (c:\windows\php.ini  for 9x, xp,  c:\winnt\  for NT4, 
2000  =>> around line 365)
SM> make sure  Register Globals = Off.

SM> Register globals does just that, creates global variables from any data 
SM> posted to from a form.
SM> As you've noticed it's not the most secure thing, to have these 
SM> variables accessible to all your
SM> scripts.

SM> Cheers,
SM> ~Steve

SM> Sebastian Baran wrote:

>>Hello,
>>
>>Has anybody experienced such problem? Let's have script "a.php" with form
>>
>>
>><form name="myform" action="a.php" method="POST">
>><input name="field" ...>
>>....
>></form>
>>
>>
>>Script "a.php" receives POST data and process them, then executes
>>redirect:
>>
>>header("Location: b.php");
>>
>>And then on most configurations (like Apache+PHP, no matter on windows
>>or unix) script "b.php" has no idea about data from form "myform". But I've
>>found that "my" server, wich is IIS, sends somehow POST data to
>>"b.php"!!! More, if we "b.php"="a.php" we have a loop! Cause "a.php"
>>checks if there is something in POST and then redirects to itself.
>>
>>*********** a.php BEGIN *********
>><?php
>>if ($_POST["field"]) {
>>   (do something)
>>   ...
>>   header("Location: a.php");
>>}
>>?>
>><form action="a.php" method="POST">
>><input name="field" ...>
>>....
>></form>
>>
>>************ END ****************
>>
>>How to get lost of POST data? Is it a bug in IIS, php or something
>>else?
>>
>>Thanks in advance!
>>
>>
>>my configuration:
>>
>>PHP Version 4.3.2
>>
>>System  Windows NT WEB 5.0 build 2195  
>>Server API  CGI/FastCGI
>>SERVER_SOFTWARE  Microsoft-IIS/5.0
>>
>>
>>  
>>


-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to