[PHP] Session Variables and Posting

2003-04-04 Thread Van Andel, Robbert
Is there a way that I can prevent session variables getting values from
query strings.  I want them to receive values only from posted forms.


Robbert van Andel 

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Session Variables and Posting

2003-04-04 Thread Kevin Stone

- Original Message -
From: Van Andel, Robbert [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 04, 2003 4:00 PM
Subject: [PHP] Session Variables and Posting


 Is there a way that I can prevent session variables getting values from
 query strings.  I want them to receive values only from posted forms.


 Robbert van Andel


You should be accessing the $_GET, $_POST and $_SESSION arrays directly
rather than relying on request vars to be parsed automatically.  This will
allow you to be much more discriminatory in your code.

Read up on Predefined Variables in the manual..
http://www.php.net/manual/en/reserved.variables.php

HTH,
Kevin



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Session Variables and Posting

2003-04-04 Thread Leif K-Brooks
http://www.php.net/manual/en/security.registerglobals.php

Van Andel, Robbert wrote:

Is there a way that I can prevent session variables getting values from
query strings.  I want them to receive values only from posted forms.
Robbert van Andel 

 

--
The above message is encrypted with double rot13 encoding.  Any unauthorized attempt 
to decrypt it will be prosecuted to the full extent of the law.


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php