RE: [PHP] Question: $_* etc or $HTTP_*_VARS etc
| From: | Gonzalez, Zara E | Date: | Fri, 25 Jan 2002 19:18:05 +0000 |
| Subject: | RE: [PHP] Question: $_* etc or $HTTP_*_VARS etc | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-82150@lists.php.net to get a copy of this message | ||
Hrm. Thanks. Apparently they didn't feel like listing $_FILES here:
http://www.php.net/release_4_1_0.php
$_GET - contains form variables sent through GET
$_POST - contains form variables sent through POST
$_COOKIE - contains HTTP cookie variables
$_SERVER - contains server variables (e.g., REMOTE_ADDR)
$_ENV - contains the environment variables
$_REQUEST - a merge of the GET variables, POST variables and Cookie variables.
In other words - all the information that is coming from the user, and that from
a security point of view, cannot be trusted.
$_SESSION - contains HTTP variables registered by the session module
(no $_FILES)
Ahh well. Now I know. Thanks.
-----Original Message-----
From: Rasmus Lerdorf [mailto:rasmus@lerdorf.ca]
Sent: Friday, January 25, 2002 1:11 PM
To: Gonzalez, Zara E
Cc: 'PHP-General'
Subject: RE: [PHP] Question: $_* etc or $HTTP_*_VARS etc
http://www.php.net/manual/en/features.file-upload.php
$HTTP_POST_FILES or $_FILES
-Rasmus
On Fri, 25 Jan 2002, Gonzalez, Zara E wrote:
> To add on to this question, I have an upload script that I use on my
> site and now that I have registered globals off, I can't seem to find
> where the auto-generated $*_name $*_type $*_size variables are
> going...
>
> Anyone have any insight? I thought they would be in $_POST['$*_name']
> but they aren't showing up there.
>
> Help is appreciated,
>
> Zara
>
> -----Original Message-----
> From: Gonzalez, Zara E
> Sent: Friday, January 25, 2002 10:02 AM
> To: 'PHP-General'
> Subject: [PHP] Question: $_* etc or $HTTP_*_VARS etc
>
>
> I am going through some code that I wrote recently and trying to
> change it so that I can turn register globals off in my php.ini.
> However, before I do that I want to make sure I am using the right
> variables.
>
> I read in the manual that $HTTP_*_VARS has been 'replaced' by $_* is
> this correct? Should I be using $_* syntax then?
>
> The only reason I am asking instead of trusting the manual is because
> I'd hate to have misread something and thought I understood it,
> recoded my site, and then realized I used the wrong variables. So if
> someone could just tell me one or the other I'd be happy.
>
> (Oh I'm using php 4.1.1 if that makes a difference since I believe the
> manual said the $_* syntax started at 4.1.0?)
>
> Thanks,
>
> Zara
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> For additional commands, e-mail: php-general-help@lists.php.net To
> contact the list administrators, e-mail: php-list-admin@lists.php.net
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> For additional commands, e-mail: php-general-help@lists.php.net To
> contact the list administrators, e-mail: php-list-admin@lists.php.net
>