Register Globals

nigelwong · 08-26-2006, 01:03 AM

Hi,

I have register globals turned on, but i have a script that when a form is posted, the variables are not passed on.

In the script at the top if i just go echo $dbhost; it works.

However, if i have something like

if (!isset($var1))
{
$dblink=@mysql_connect($dbhost, $dbuser, $dbpass);
}

The variables are not passed on. Any ideas?

Peter · 08-26-2006, 01:29 AM

take the @ sign away and try again and see if any error message is displayed. If it is post it here.

nigelwong · 08-26-2006, 05:27 AM

The mysql function works, but it executes it has having no values in it. so it has an error like cannot connect with nobody@localhost (USINGPASSWORD: NO) etc.

BillyConnite · 08-26-2006, 06:27 AM

Hey nigel,
Try this:

PHP Code:

  if (!isset($var1))

{

$dblink=@mysql_connect($_POST[dbhost], $_POST[dbuser], $_POST[dbpass]);

}

Is that what you were looking for, or am I off? lol

Constantin · 08-26-2006, 07:10 AM

Try this one:

$dblink=@mysql_connect("$dbhost", "$dbuser", "$dbpass");

**Eric** · 08-26-2006, 07:25 AM

Quote:

Originally Posted by BillyConnite

Hey nigel,
Try this:

PHP Code:

  if (!isset($var1))

{

$dblink=@mysql_connect($_POST[dbhost], $_POST[dbuser], $_POST[dbpass]);

}

Is that what you were looking for, or am I off? lol

^ Do not use register_globals..at all

nigelwong · 08-26-2006, 04:03 PM

I've tried substituting them with the $_POST things too, but they didn't work either =/ it's really weird.

Heres the code:

PHP Code:

  <?PHP

$xinput_style="style=\"BORDER-STYLE: solid;BORDER-COLOR: #999999; BACKGROUND-COLOR: #ffffff; BORDER-WIDTH: 1px; FONT-FAMILY: Verdana; FONT-SIZE: 8pt\"";

 
if(phpversion() <= "4.0.6") { $_POST=$HTTP_POST_VARS; }

if ($_POST['submit'])

    {

    if (trim($_POST['db'])=="") { $e0=true; }

    if (trim($_POST['dbhost'])=="") { $e1=true; }

    if (trim($_POST['dbuser'])=="") { $e2=true; }

    if (trim($_POST['dbpass'])=="") { $e3=true; }

    if (!is_writable(str_replace("/install1.php", "", $HTTP_SERVER_VARS['PATH_TRANSLATED']))) { $e4=true; }

    

    if (!isset($e0)&&!isset($e1)&&!isset($e2)&&!isset($e3)&&!isset($e4))

        {

        # --------------------------------------------------------

        $dblink=@mysql_connect($dbhost, $dbuser, $dbpass);

        $dbsel=@mysql_select_db($db);

 
        $read_dump=@fopen("Master_DB.sql", "r");

        $result_dump=@fread($read_dump, filesize("Master_DB.sql"));

        @fclose($read_dump);

 
        $result_dump=str_replace("`", "", $result_dump);

 
        $count=substr_count($result_dump, "\n");

        $explode=explode("\n", $result_dump);

        $buffer="";

        for ($i=0; $i<=($count-1); $i++)

            {

            # Create db structure

            if (substr($explode[$i], 0, 1)!="#")

                {

                if (substr(trim($explode[$i]), -1)==";") 

                    { 

                    $temp=str_replace(";", "", $explode[$i]);

                    $buffer.=str_replace("\n", " ", $temp);

                    mysql_query($buffer);

                    $buffer=""; 

                    }

                else { $buffer.=str_replace("\n", " ", $explode[$i]); }

                }

            }

Peter · 08-26-2006, 06:41 PM

just a note are you sure you are meant to be using post variables for the database connection. this poses a huge security risk if that is what you are actually doing

08-26-2006, 01:03 AM	#1 (permalink)
nigelwong NamePros Member Join Date: Nov 2005 Posts: 66 64.00 NP$ (Donate)	Register Globals Hi, I have register globals turned on, but i have a script that when a form is posted, the variables are not passed on. In the script at the top if i just go echo $dbhost; it works. However, if i have something like if (!isset($var1)) { $dblink=@mysql_connect($dbhost, $dbuser, $dbpass); } The variables are not passed on. Any ideas? __________________ Free AJAX Proxy: http://www.ctrlaltproxy.com Useful DHTML/AJAX tutorials: http://www.dhtmlsite.com

08-26-2006, 05:27 AM	#3 (permalink)
nigelwong NamePros Member Join Date: Nov 2005 Posts: 66 64.00 NP$ (Donate)	The mysql function works, but it executes it has having no values in it. so it has an error like cannot connect with nobody@localhost (USINGPASSWORD: NO) etc. __________________ Free AJAX Proxy: http://www.ctrlaltproxy.com Useful DHTML/AJAX tutorials: http://www.dhtmlsite.com

08-26-2006, 06:27 AM	#4 (permalink)
BillyConnite Join Date: Jul 2005 Location: Coffs H, Australia Posts: 3,107 47.00 NP$ (Donate)	Hey nigel, Try this: PHP Code: `if (!isset($var1)) { $dblink=@mysql_connect($_POST[dbhost], $_POST[dbuser], $_POST[dbpass]); }` Is that what you were looking for, or am I off? lol __________________ <?php if(1===1){ $computer="fine."; }else{ $computer="broken."; } echo "Your computer is ".$computer; ?>

08-26-2006, 07:10 AM	#5 (permalink)
Constantin Senior Member Join Date: Jan 2006 Posts: 1,081 269.00 NP$ (Donate)	Try this one: $dblink=@mysql_connect("$dbhost", "$dbuser", "$dbpass"); __________________ ZileDeNastere.ro ProBazar.com - Cumparare si vanzare - nume de domenii PokerGuides.net - your all-inclusive poker resource

08-26-2006, 04:03 PM	#7 (permalink)
nigelwong NamePros Member Join Date: Nov 2005 Posts: 66 64.00 NP$ (Donate)	I've tried substituting them with the $_POST things too, but they didn't work either =/ it's really weird. Heres the code: PHP Code: <?PHP $xinput_style="style=\"BORDER-STYLE: solid;BORDER-COLOR: #999999; BACKGROUND-COLOR: #ffffff; BORDER-WIDTH: 1px; FONT-FAMILY: Verdana; FONT-SIZE: 8pt\""; if(phpversion() <= "4.0.6") { $_POST=$HTTP_POST_VARS; } if ($_POST['submit']) { if (trim($_POST['db'])=="") { $e0=true; } if (trim($_POST['dbhost'])=="") { $e1=true; } if (trim($_POST['dbuser'])=="") { $e2=true; } if (trim($_POST['dbpass'])=="") { $e3=true; } if (!is_writable(str_replace("/install1.php", "", $HTTP_SERVER_VARS['PATH_TRANSLATED']))) { $e4=true; } if (!isset($e0)&&!isset($e1)&&!isset($e2)&&!isset($e3)&&!isset($e4)) { # -------------------------------------------------------- $dblink=@mysql_connect($dbhost, $dbuser, $dbpass); $dbsel=@mysql_select_db($db); $read_dump=@fopen("Master_DB.sql", "r"); $result_dump=@fread($read_dump, filesize("Master_DB.sql")); @fclose($read_dump); $result_dump=str_replace("`", "", $result_dump); $count=substr_count($result_dump, "\n"); $explode=explode("\n", $result_dump); $buffer=""; for ($i=0; $i<=($count-1); $i++) { # Create db structure if (substr($explode[$i], 0, 1)!="#") { if (substr(trim($explode[$i]), -1)==";") { $temp=str_replace(";", "", $explode[$i]); $buffer.=str_replace("\n", " ", $temp); mysql_query($buffer); $buffer=""; } else { $buffer.=str_replace("\n", " ", $explode[$i]); } } } __________________ Free AJAX Proxy: http://www.ctrlaltproxy.com Useful DHTML/AJAX tutorials: http://www.dhtmlsite.com

08-26-2006, 01:29 AM	#2 (permalink)
Peter Senior Member Join Date: Nov 2003 Location: Scotland Posts: 4,900 0.60 NP$ (Donate)	take the @ sign away and try again and see if any error message is displayed. If it is post it here.

08-26-2006, 06:41 PM	#8 (permalink)
Peter Senior Member Join Date: Nov 2003 Location: Scotland Posts: 4,900 0.60 NP$ (Donate)	just a note are you sure you are meant to be using post variables for the database connection. this poses a huge security risk if that is what you are actually doing

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Technical Services