query string

[rashmi_k28]

$checklist=serialize($_GET['check_list']);

echo "<img src=\"./linegraph.php?v1=".$checklist."&start=$start_dt&end=$end_dt\">";

 

 

When I call in linegraph.php as

 

$ckecklist=$_GET['v1'];

$param=unserialize($ckecklist);

 

Please can you help me what is wrong in the

Code:

 

echo "<img src=\"./linegraph.php?v1=".$checklist."&start=$start_dt&end=$end_dt\">";

 

The image is not displayed when passing a query string.

[zenag]

$checklist=urlencode(serialize($_GET['check_list']));
echo "<img src=\"./linegraph.php?v1=".$checklist."&start=$start_dt&end=$end_dt\">";


in linegraph.php 

$ckecklist=unserialize(urldecode(stripslashes($_GET['v1'])));