photo gallery question

[shror]

hi every body
I need help please

i have designed an image gallery of about 20 pictures and they are
shown in thumb nail views and for viewing the largeer version of the
images i have added a radio button and a push button, so that the user
choose the picture using the radio button and click on the push button
to open the larger version picture in another window, but my problem
is that i know how to pass the selection to the second page but the
problem is how to pass the selected picture not selected value.

the first html page code is:

<form method="POST" action="gallery .php">
<input type="radio" value="V1" name="nature">
<p><input type="radio" value="V1" name="nature"></p>
<p><input type="radio" value="V1" name="nature">
</form>
the gallery.php code is:

<?php
$image = $_POST['nature'];
echo "$image"
?>
my problem is that this way gives me the name of the radio button i
select not the image so how i can make the image get shown not the
radio button name (not V1)
Thanks in advance for your help

shror

[OmegaJunior]

On Tue, 27 Feb 2007 09:56:29 +0100, Geoff Berrow <bl******@ckdog .co.uk>
wrote:

Message-ID: <op************ ***@cp139795-a.landg1.lb.hom e.nlfrom
OmegaJunior contained the following:

>Imagine a hacker who happens to know or guess the system
you use, and then requests your gallery.php to show the contents of that
configuratio n file?

How would a gallery script show the contents of a .php file?

That highly depends on the gallery script, doesn't it? If the script would
perform an fopen() or file() on any file name it receives, and then echoes
the result to the browser, you bet the contents of a .php will be shown.

If the gallery script merely enters the received file name into the src
attribute of an img element, there's little to fear. But if we'd enter it
into the data attribute of an object element or the href attribute of an
iframe element, there's a lot to fear.

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/

[Geoff Berrow]

Message-ID: <op************ ***@cp139795-a.landg1.lb.hom e.nlfrom
OmegaJunior contained the following:

>How would a gallery script show the contents of a .php file?

That highly depends on the gallery script, doesn't it? If the script would
perform an fopen() or file() on any file name it receives, and then echoes
the result to the browser, you bet the contents of a .php will be shown.

If the gallery script merely enters the received file name into the src
attribute of an img element, there's little to fear. But if we'd enter it
into the data attribute of an object element or the href attribute of an
iframe element, there's a lot to fear.

Thanks, I just thought it was worth pointing that out to the OP to
prevent needless paranoia.

--
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/