Re: $_SESSION['variable_name'], Invalid XHTML and &

"Jim Carlock" <anonymous@xxxxxxxxx> wrote:
http:/ / aquaticcreationsnc . com/lib/php/test.php

Remove the spaces to visit the link above...

The w3 validator identifies the ampersand character as the
leading character for special character sequences. And as
such, all ampersands should be converted to &amp; when
employed as part of a URI. So I configured that manually,
for my own parameters. However, I think what I'm seeing
here with the validator, is that the validator does not activate
cookies and thereby PHP automatically adds an <input>
tag with the PHPSESSID.

Okay, I figured out how to get the separator working. The
rest of the questions about the security concerns are still
valid though. The fix for the "&" ampersand character passed
into the address bar... works great on both Windows and Unix
servers.

<?php
session_start();
ini_set("arg_separator.output", "&amp;");
?>

The other questions I'm leaving open here even though they
are a little off topic now...

--
Also, do any security risks exist? Should I be parsing the
address line passed and checking to see if anyone is trying
to pass <?PHP tags in that line?

The variables working there, are some $_GET['$iPic'] and
$_GET['$iCategory'] placed inside the hidden form input tags.
I'm seeing that PHP automatically adds an extra <input> tag?
Is that correct?
--

Thanks.

Jim Carlock
Post replies to the group.


.

Relevant Pages

  • renee.rtf.xab

    (comp.lang.tcl)
  • Re: Introducing bit-part characters
    ... guy one in the crowd, second speaker in the crowd, yet ... it would be out of character not to know. ... little man spoke with the air of a professor calmly lecturing: ... My evil overlords tag people like "the pretty Farseer, ...
    (rec.arts.sf.composition)
  • Re: How to call this function
    ... This is the procedure format that FastTagReplace expects to find - its rather ... Tag is the tag it has found as a string between the TagStart and TagEnd strings ... all the appropriate characters in the sub-string. ... character in the sub-string it has found an occurence of the whole sub-string. ...
    (comp.lang.pascal.delphi.misc)
  • Re: Stripping html
    ... || time looking for a '<' character. ... | to miss finding the "/string" tag. ...
    (comp.lang.c)
  • Re: search and replace in a binary file
    ... You should not use ampersands on subroutine calls unless you know what ... Some of the replacements will be ascii strings ... and some will be binary characters (e.g ... So how do I go about replacing 1 character with, ...
    (comp.lang.perl.misc)