Menu
Community /Pin to ProfileBookmark
@NogDogMay 23.2006 — #It's because your web server has register_globals set to "on". This is not the default setting (assuming you're running PHP 4.2.0 or later) and has certain security issues (thus why it's no longer the default setting). Using the $_POST or $_GET value as applicable will allow your script to run on any host, whereas assuming register_globals is on and just using the simple, scalar variable name will mean your script will likely fail on another host, or if your host is upgraded at some point to have register_globals turned off. See http://www.php.net/register_globals for more info.@NogDogMay 23.2006 — #As long as you explicitly reference your various global variables (e.g.: $_POST['name'], $_GET['name'], $_SESSION['name'], etc.) you should be OK.@NogDogMay 23.2006 — #If you use the get form method, then the value should only be available via $_GET, and $_POST if you use the post method. If it's showing up in both when you only submit it once via one method, then something weird is going on. (Unless you're using the post method in your form and also including a URL query in the form's action attribute?)@NogDogMay 23.2006 — #Try this test. (I just ran it on my PC with register_globals enabled, and only ever got the Post or the Get value, but never both:
Do I Always Need $_GET or $_POST?
Hello, all.
Whether I use $_GET or $
[code]<?php echo (‘<script type=”text/javascript”>alert(“‘); echo($a); echo (‘”)</script>’);?>
It doesn’t matter if use HTTP get or post, the value is retrieved. I guess my question is: When would I need to use $_GET or $
P.S. You’ll notice that I’m not bashful asking very fundamental questions (I’m new to PHP). ? I greatly appreciate any advice that you can provide for me.
bubbis
Sign in
to post a comment17 Comments(s) ↴
0
@NogDogMay 23.2006 — #It's because your web server has register_globals set to "on". This is not the default setting (assuming you're running PHP 4.2.0 or later) and has certain security issues (thus why it's no longer the default setting). Using the $_POST or $_GET value as applicable will allow your script to run on any host, whereas assuming register_globals is on and just using the simple, scalar variable name will mean your script will likely fail on another host, or if your host is upgraded at some point to have register_globals turned off. See 0
@NogDogMay 23.2006 — #As long as you explicitly reference your various global variables (e.g.: $_POST['name'], $_GET['name'], $_SESSION['name'], etc.) you should be OK.0
@NogDogMay 23.2006 — #If you use the get form method, then the value should only be available via $_GET, and $_POST if you use the post method. If it's showing up in both when you only submit it once via one method, then something weird is going on. (Unless you're using the post method in your form and also including a URL query in the form's action attribute?)0
@NogDogMay 23.2006 — #Try this test. (I just ran it on my PC with register_globals enabled, and only ever got the Post or the Get value, but never both:[code=php]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html lang='en'>
<head>
<meta http-equiv='Content-Type' content='text/html; charset=ISO-8859-1'>
<title>Page Title</title>
<!-- link rel='stylesheet' href='style.css' type='text/css' -->
<style type="text/css">
<!--
-->
</style>
</head>
<body>
<form action="<?php echo $_SERVER['PHP_SELF'] ?>" method="post">
<fieldset>
<legend>Post</legend>
<input type="hidden" name="test" value="post test">
<input type="submit" value="Submit Post">
</fieldset>
</form>
<form action="<?php echo $_SERVER['PHP_SELF'] ?>" method="get">
<fieldset>
<legend>Get</legend>
<input type="hidden" name="test" value="get test">
<input type="submit" value="Submit Get">
</fieldset>
</form>
<p><a href="<?php echo $_SERVER['PHP_SELF'] ?>">Neither</a></p>
<pre>
<?php
echo "POST:n";
print_r($_POST);
echo "nGET:n";
print_r($_GET);
echo "n$test:n";
echo (isset($test)) ? $test : "" ;
?>
</pre>
</body>
</html>
[/code]