globals & session

[Ike]

if you are programming a php-page and you use the following, what will
be the result?

<form action=test.php method=post>
name: <input type=text name=naam><br>
id: <input type=text name=userid><br >
</form>

in the page test.php:

$userid = $_SESSION['userid'];

this session var was set previously

will $userid be written with the 5 from the post or will it be written
with the $_SESSION['userid']

is it still secure to use this variable more than once?

on the server i use the globals can't be turned of

thx on advance Ike

[Tony Marston]

Do you mean register_global s? Can't you turn it off with an .htaccess file?

If register_global s is ON then the contents of the GET/POST arrays will be
available to your script the minute it fires up and before you execute the
first line of code. If you then change a variable then that variable is
changed.

You can use a variable more than once, but it will only contain the last
value written to it.

--
Tony Marston

http://www.tonymarston.net

"Ike" <de*********@ya hoo.com> wrote in message
news:10******** *************** ***@posting.goo gle.com...

if you are programming a php-page and you use the following, what will
be the result?

<form action=test.php method=post>
name: <input type=text name=naam><br>
id: <input type=text name=userid><br >
</form>

in the page test.php:

$userid = $_SESSION['userid'];

this session var was set previously

will $userid be written with the 5 from the post or will it be written
with the $_SESSION['userid']

is it still secure to use this variable more than once?

on the server i use the globals can't be turned of

thx on advance Ike

[Ike]

yes indeed it is register_global s is on

so that means if register_global s is on that i better do not use the
same variable twice.

i don't know how to use the .htaccess file

and can you change settings with a config file from apache in you php
settings?

"Tony Marston" <to**@NOSPAM.de mon.co.uk> wrote in message news:<cj******* ************@ne ws.demon.co.uk> ...

Do you mean register_global s? Can't you turn it off with an .htaccess file?

If register_global s is ON then the contents of the GET/POST arrays will be
available to your script the minute it fires up and before you execute the
first line of code. If you then change a variable then that variable is
changed.

You can use a variable more than once, but it will only contain the last
value written to it.

--
Tony Marston

http://www.tonymarston.net

[Justin Koivisto]

Ike wrote:

yes indeed it is register_global s is on

so that means if register_global s is on that i better do not use the
same variable twice.

i don't know how to use the .htaccess file
create a file in your document root named ".htaccess" with the following:

php_flag register_global s 0

Then do a phpinfo() call and see what it says for the "local" value.
and can you change settings with a config file from apache in you php
settings?

http://us2.php.net/manual/en/configu...changes.apache

Whenever I am dealing with a server that has register_global s = On, I
simply avoid using variable names that match up with GET or POST var
names...

--
Justin Koivisto - sp**@koivi.com
http://www.koivi.com

[Ike]

Thx to you people, it was a real good help for me

my problems are solved

Justin Koivisto <sp**@koivi.com > wrote in message news:<xK******* **********@news 7.onvoy.net>...

create a file in your document root named ".htaccess" with the following:

php_flag register_global s 0

Then do a phpinfo() call and see what it says for the "local" value.

and can you change settings with a config file from apache in you php
settings?

http://us2.php.net/manual/en/configu...changes.apache

Whenever I am dealing with a server that has register_global s = On, I
simply avoid using variable names that match up with GET or POST var
names...