note 68170 deleted from security.globals by betz

Note Submitter: branatk ahht yahoo -dot- com ---- Quoted from above: "Reliance on this directive was quite common and many people didn't even know it existed and assumed it's just how PHP works." Quoted from http://us3.php.net//manual/phpfi2.php#starting <----Begin Quote Block----> A simple example Suppose you have a form: <FORM ACTION="/cgi-bin/php.cgi/~userid/display.html" METHOD=POST> <INPUT TYPE="text" name="name"> <INPUT TYPE="text" name="age"> <INPUT TYPE="submit"> </FORM> Your display.html file could then contain something like: <?echo "Hi $name, you are $age years old!<p>"> It's that simple! PHP/FI automatically creates a variable for each form input field in your form. You can then use these variables in the ACTION URL file. <----End Quote Block----> I never assumed this was how PHP worked. I was told this is how it worked! :-)