Dealing with HTTP variables while register_globals is on

[smc]

Hello,

 

I recently turned register_globals off on a security recommendation but apparently my coding style doesn't agree with it. Basically I need to know how to use the variables I define in the HTTP bar in my code with register_globals off.

 

Thanks!

[per1os]

$var = $_GET['passedVarName'];

 

and remember before using it in any type of sql to use mysql_real_escape_string();

 

also remember that you may want to convert all < to < to avoid javascript injection.

 

[WebGeek182]

$var = $_GET['passedVarName'];

 

and remember before using it in any type of sql to use mysql_real_escape_string();

 

also remember that you may want to convert all < to < to avoid javascript injection.

 

Exactly - I agree with frost110.