Variables

[kanasta]

Anyone find their variables not working either as part of URL or in form POSTs?
Ever since my move here no variables ever get to the file.
I cannot even echo variables passed as part of URL.

[eUKhost.com]

Please open a ticket and let me know the ticket ID. I will have one of our senior system admins to look into it.

[Vickie]

Hi,
I came unstuck on this one. There are security features in newer versions of PHP, and there is a big change to register globals, ie. variables from forms, etc. It is documented here:

http:// uk.php.net/register_globals

The main thing I found for my program is that every variable that came back from a POST style submit had to be prefaced like this $_POST['variableName'].

I found it easiest to do this kind of thing - Say you had a variable from a form called $name, rather than replace it all the way through, just put:

$name = $_POST['name'];

and then it will work for the scope of the function.

Vickie

[Zammo]

Could this be what has started killing my mambo website then?

I keep getting "Template File Not Found! Looking for template" error from a website that worked fine 24 hours ago. Apparently it could be related to the register_globals setting.

[unplugged]

If I were you I would start coding as if register_globals was switched off anyway!

PHP6 is heavily under development and as of PHP5 it comes switched off by default. If I recall rightly they have removed the ability to enable it completly.

While I will admit its nice but its a potential securrity nightmare especially if like me you tend to randomly open new varibles for holding tempory stuff (lazy I know )

Its only takes a lazy stement such as

if (x==1) {
// do something bad
}

and then someone to come along and put x=1 into their browser. Not only does it help with security but its no harder using $_POST or $_GET. if you MUST use it for conveniance for example not knowing where your stuff will be coming from then you can write your own function to pull data out.

[Zammo]

Yeah the problem that I have is that it's not my code, it's a mambo website which consists of 00's of files. I'm not much of a php code. Give me Assembler and Cobol any day.

[Vickie]

Originally Posted by Zammo

Could this be what has started killing my mambo website then?

I keep getting "Template File Not Found! Looking for template" error from a website that worked fine 24 hours ago. Apparently it could be related to the register_globals setting.

Absolutely no idea. I was only talking about forms, and stuff I wrote myself. You should ask support from Eukhost.

Originally Posted by unplugged

I were you I would start coding as if register_globals was switched off anyway!

It wasn't a matter of that. I did my PHP coding when it was version 4.0 and the security stuff wasn't around. The $_POST variable didn't exist. I haven't coded anything new or major in PHP since then. It has taken a few years to break like this. I agree that register globals off is a good idea. I just didn't notice that the practice had changed.

Maybe Zammo needs a more up to date version of Mambo. Or to do a Google search on "Mambo register globals off".