RE: phpweb / tut.php

please revert the variables code + comment, and go checkout the cvs log -- i added it that way on purpose to demonstrate how register globals worked, whilst warning why it might not. -- james > -----Original Message----- > From: Jacques Marneweck [mailto:jacques@ataris.co.za] > Sent: Monday, July 08, 2002 2:56 AM > To: php-mirrors@lists.php.net > Subject: cvs: phpweb / tut.php > > > jacques Sun Jul 7 21:56:17 2002 EDT > > Modified files: > /phpweb tut.php > Log: > * Added links to the manual pages for the strstr function and > the if control > structure. It goes to the mirror's default language page if > that does > not exist it falls back to english. > * <?php style police > * Changed the variables since the register_globals is now turned off in > php 4.2.1 and later. > > --jm > > > > Index: phpweb/tut.php > diff -u phpweb/tut.php:1.15 phpweb/tut.php:1.16 > --- phpweb/tut.php:1.15 Fri Jun 28 21:03:19 2002 > +++ phpweb/tut.php Sun Jul 7 21:56:16 2002 > @@ -1,6 +1,11 @@ > <?php > require_once 'prepend.inc'; > > +$lang = default_language(); > +if (!@is_dir("$DOCUMENT_ROOT/manual/$lang")) { > + $lang = "en"; // fall back to English > +} > + > $SIDEBAR_DATA=' > <h3>More tutorials</h3> > <p> > @@ -100,7 +105,7 @@ > In order to do that we check the user agent string that the browser > sends as part of its request. This information is stored in a variable. > Variables always start with a dollar-sign in PHP. The variable we > -are interested in is <b>$HTTP_USER_AGENT</b>. To display this > +are interested in is <b>$_SERVER["HTTP_USER_AGENT"]</b>. To display > this > variable we can simply do: > </p> > > @@ -137,7 +142,8 @@ > ?>');?> > > <p> > -Here we introduce a couple of new concepts. We have an &quot;if&quot; > +Here we introduce a couple of new concepts. We have an > +&quot;<?php print_link ('/manual/' . $lang . > '/control-structures.php#control-structures.if', 'if'); ?>&quot; > statement. If you are familiar with the basic syntax used by the C > language this should look logical to you. If you don't know enough > C or some other language where the syntax used above is used, you > @@ -148,10 +154,10 @@ > </p> > > <p> > -The second concept we introduced was the strstr() function call. > +The second concept we introduced was the <?php print_link > ('/manual/' . $lang . '/function.strstr.php', 'strstr()'); ?> > function call. > strstr() is a function built into PHP which searches a string for > another string. In this case we are looking for &quot;MSIE&quot; inside > -$HTTP_USER_AGENT. If the string is found the function returns true > +$_SERVER["HTTP_USER_AGENT"]. If the string is found the function > returns true > and if it isn't, it returns false. If it returns true the following > statement is executed. > </p> > @@ -165,11 +171,11 @@ > if (strstr($_SERVER["HTTP_USER_AGENT"], "MSIE")) { > ?> > <center><b>You are using Internet Explorer</b></center> > -<? > +<?php > } else { > ?> > <center><b>You are not using Internet Explorer</b></center> > -<? > +<?php > } > ?>');?> > > @@ -206,7 +212,7 @@ > > <?php example('<form action="action.php" method="post"> > Your name: <input type="text" name="name"> > -You age: <input type="text" name="age"> > +Your age: <input type="text" name="age"> > <input type="submit"> > </form>');?> > > @@ -217,19 +223,14 @@ > In this file you would have something like this: > </p> > > -<?php example('Hi <?php echo $name; ?>. > -You are <?php echo $age; ?> years old.')?> > +<?php example('Hi <?php echo $HTTP_POST_VARS["name"]; ?>. > +You are <?php echo $HTTP_POST_VARS["age"]; ?> years old.')?> > > <p> > It should be obvious what this does. There is nothing more to it. > -The $name and $age variables are automatically set for you by PHP. > +The $HTTP_POST_VARS["name"] and $HTTP_POST_VARS["age"] variables > +are automatically set for you by PHP. > </p> > - > -<p> > -<b>NB:</b> Since PHP version 4.2.1, this functionality is > disabled by default. > -We chose to do this because with careless coding, it becomes > possible to cause > -security holes in PHP scripts. You can read more about this > -<a > href="http://php.net/register.globals">here</a>. > > <h2>What's next?</h2> > > > >