RE: [PHP-DB] PHP Security and Code Design

2002-07-10 Thread Hutchins, Richard

Thanks, Adam. All clear now.

Rich

-Original Message-
From: Adam Alkins [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 10, 2002 4:28 PM
To: [EMAIL PROTECTED]
Subject: Re: [PHP-DB] PHP Security and Code Design


> I understand that this applies to data put into a form to be submitted to
a
> database (or another page, I guess), but does it also apply to
> variable/value pairs passed along the URL from a hyperlink ( href="foo/bar.php?thisVar=thisVal>Click here.)? I couldn't quite get
it
> from the explanation above. Would I need to reference the passed variable
> with $_GET["thisVal"] on the receiving page (bar.php)? I'm sure I would
have
> to if $thisVar was passed from a form with the GET method, but wasn't sure
> about the hyperlink stuff.
>
> Anybody working with register globals off already that can clear this up?

Yes. URL passed variables are access via the GET method. So page.php?foo=bar
is accessed by $_GET['foo']

--
Adam Alkins
http://www.rasadam.com
--


-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP-DB] PHP Security and Code Design

2002-07-10 Thread Adam Alkins

> I understand that this applies to data put into a form to be submitted to
a
> database (or another page, I guess), but does it also apply to
> variable/value pairs passed along the URL from a hyperlink ( href="foo/bar.php?thisVar=thisVal>Click here.)? I couldn't quite get
it
> from the explanation above. Would I need to reference the passed variable
> with $_GET["thisVal"] on the receiving page (bar.php)? I'm sure I would
have
> to if $thisVar was passed from a form with the GET method, but wasn't sure
> about the hyperlink stuff.
>
> Anybody working with register globals off already that can clear this up?

Yes. URL passed variables are access via the GET method. So page.php?foo=bar
is accessed by $_GET['foo']

--
Adam Alkins
http://www.rasadam.com
--


-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php