|
|
| Author |
Message |
Occulis
RealPoor Jedi

Joined: 11 Oct 2002 Posts: 13293
Location: Moral Relativity Central
|
Posted: 02/23/03 - 15:05 Post subject: wow php is p*****g me off today
|
|
|
I'm trying to be a good boy and do everything with register_globals off. $_GET and $HTTP_GET_VARS however are no longer receiving GET data from the URL.
For instance...
http://localhost/index.php?f**k=10
This should set $_GET['fuckyou'] equal to 10.
Does it? Nope.
How about $_SERVER['fuckyou'] or $HTTP_GET_VARS['fuckyou']? Nope.
Register globals set off may make the site more secure but people can forge cookies, send false POST data, etc., if they really want anyway.
Anyone have similar php problems with register globals? This is version 4.3+
|
|
|
Back to top
|
|
|
|
 |
Tanaren
Luke Warm

Joined: 11 Oct 2002 Posts: 210
|
Posted: 02/23/03 - 17:33 Post subject:
|
|
|
| Quote: | http://localhost/index.php?f**k=10
This should set $_GET['fuckyou'] equal to 10. |
Typo? That would set "f**k" equal to 10.
Try this:
for the URL: http://localhost/index.php?fuckyou=10
code:
extract($HTTP_GET_VARS);
echo "$fuckyou";
|
|
|
Back to top
|
|
|
|
 |
Mental_Hernia
RealPoor Guru

Joined: 14 Oct 2002 Posts: 3336
Location: Texas
|
Posted: 02/23/03 - 17:40 Post subject:
|
|
|
|
What the [fuck10] are you talking about
|
|
|
Back to top
|
|
|
|
 |
khrath
Guest
|
Posted: 02/23/03 - 17:48 Post subject:
|
|
|
add this somewhere, to like a header or something that will stay constant.
foreach($_GET as $key => $fuckyou){$$key = $fuckyou;}
then use $fuckyou instead of $_GET['fuckyou']
|
|
|
Back to top
|
|
|
|
 |
Occulis
RealPoor Jedi

Joined: 11 Oct 2002 Posts: 13293
Location: Moral Relativity Central
|
Posted: 02/23/03 - 17:49 Post subject:
|
|
|
the problem was there were 0 keys in _GET.
:p
|
|
|
Back to top
|
|
|
|
 |
|
|