php in RedHat 8.0

jayakrishnan · 12-28-2002, 06:11 PM

test.html
*******
<html>

<form action=test.php method=post>
<input type=text name=memname value="hello">
</form>

</html>

test.php
********
<?php

print $memname;

?>

this prints

hello

in RH 7.2

but in Rh 8.0 doesn't print anything.

what is the reason

bulliver · 12-28-2002, 06:18 PM

The version of php in redhat 8 has the "register_globals" directive in php.ini is set to "Off" by default for security reasons. You can change this in php.ini or better yet register your global variables manually.

jayakrishnan · 12-28-2002, 06:36 PM

thanks bulliver

nxny · 12-28-2002, 08:39 PM

As bulliver said, the register_globals have been turned off by default so that malicious users wont be able to override your globals by passing them through the URL.

I would keep the settings that way and start accessing get and post variables by being more explicit $_GET["varname"] or _POST["memname"] in the above example.

anilpujara · 02-02-2003, 03:20 PM

Thank you for all assistance in advance.

I have been having some problems with the PHP in Linux 8.0 It seems that RH's newest version seems awfully buggy and it is very hard on us programmers. I fixed the register_globals to On so that I can access the FORM elements with just the dollar sign. For example,

<FORM ACTION="admin.php" METHOD="POST">
<INPUT TYPE="text" NAME="password">
</FORM>

In the PHP file, to echo it out it would be:
<?

echo $password;

?>

Usually it will work and print out what the user had in that box. However, instead it prints this (if the user entered "chris" in the password box):

chrispassword=chris

It seems that it does get the value that was entered, but adds the "password=chris".

How do I fix this problem? Even if I use the $_POST, and $_GET commands, it still dosn't fix the problem.

nxny · 02-02-2003, 04:21 PM

Welcome to LQ!!

Quote:

I have been having some problems with the PHP in Linux 8.0 It seems that RH's newest version seems awfully buggy
and it is very hard on us programmers

Hehe. Think positive. Thats a good way to start. What other 'bugs' have you found on RH 8.0? Did you buy this software? Have you tried reaching RH support if you did? What else do you program?

Quote:

I fixed the register_globals to On so that I can access the FORM elements with just the dollar sign.

What you've just done is *NOT* a fix. You have *DISABLED* a security feature that prevents a malicious user from guessing your global scope variables and overwriting them by injecting variables into the URL. Please try and understand that if some things have changed, they have changed for a *REASON*

Quote:

For example,

<FORM ACTION="admin.php" METHOD="POST">
<INPUT TYPE="text" NAME="password">
</FORM>

In the PHP file, to echo it out it would be:
<?

echo $password;

?>

If you have register_globals on - assuming you have PHP setup correctly - it will work. At this point, reading some documentation will be worthwhile.

Quote:

Usually it will work and print out what the user had in that box. However, instead it prints this (if the user entered "chris" in the password box):

chrispassword=chris

Double check your files. There something you're missing here.

Quote:

How do I fix this problem? Even if I use the $_POST, and $_GET commands, it still dosn't fix the problem.

using $_POST["password"] is the preferred way to access the POSTed variable.