RE: [PHP] Question: $_* etc or $HTTP_*_VARS etc

From: Date: Fri, 25 Jan 2002 19:18:05 +0000
Subject: RE: [PHP] Question: $_* etc or $HTTP_*_VARS etc
Groups: php.general 
Request: Send a blank email to php-general+get-82150@lists.php.net to get a copy of this message
Hrm. Thanks. Apparently they didn't feel like listing $_FILES here: http://www.php.net/release_4_1_0.php $_GET - contains form variables sent through GET $_POST - contains form variables sent through POST $_COOKIE - contains HTTP cookie variables $_SERVER - contains server variables (e.g., REMOTE_ADDR) $_ENV - contains the environment variables $_REQUEST - a merge of the GET variables, POST variables and Cookie variables. In other words - all the information that is coming from the user, and that from a security point of view, cannot be trusted. $_SESSION - contains HTTP variables registered by the session module (no $_FILES) Ahh well. Now I know. Thanks. -----Original Message----- From: Rasmus Lerdorf [mailto:rasmus@lerdorf.ca] Sent: Friday, January 25, 2002 1:11 PM To: Gonzalez, Zara E Cc: 'PHP-General' Subject: RE: [PHP] Question: $_* etc or $HTTP_*_VARS etc http://www.php.net/manual/en/features.file-upload.php $HTTP_POST_FILES or $_FILES -Rasmus On Fri, 25 Jan 2002, Gonzalez, Zara E wrote: > To add on to this question, I have an upload script that I use on my > site and now that I have registered globals off, I can't seem to find > where the auto-generated $*_name $*_type $*_size variables are > going... > > Anyone have any insight? I thought they would be in $_POST['$*_name'] > but they aren't showing up there. > > Help is appreciated, > > Zara > > -----Original Message----- > From: Gonzalez, Zara E > Sent: Friday, January 25, 2002 10:02 AM > To: 'PHP-General' > Subject: [PHP] Question: $_* etc or $HTTP_*_VARS etc > > > I am going through some code that I wrote recently and trying to > change it so that I can turn register globals off in my php.ini. > However, before I do that I want to make sure I am using the right > variables. > > I read in the manual that $HTTP_*_VARS has been 'replaced' by $_* is > this correct? Should I be using $_* syntax then? > > The only reason I am asking instead of trusting the manual is because > I'd hate to have misread something and thought I understood it, > recoded my site, and then realized I used the wrong variables. So if > someone could just tell me one or the other I'd be happy. > > (Oh I'm using php 4.1.1 if that makes a difference since I believe the > manual said the $_* syntax started at 4.1.0?) > > Thanks, > > Zara > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net To > contact the list administrators, e-mail: php-list-admin@lists.php.net > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net To > contact the list administrators, e-mail: php-list-admin@lists.php.net >

« previous php.general (#82150) next »