Send Data using address

[WJProctor]

Hi, im trying to send a command using the address for example

localhost/install.php?Do=Load

thing is php wont seem to do it for me, maybe im just being daft or something, could someone have a look please??

The code is as follows

<?
$Style = urlencode(&quot;Address&quot;
print(&quot;<a href='SiteMap.php?Order=$Style'>Order by Address</a>&quot;
print(&quot;<BR>&quot;
$Style = urlencode(&quot;Description&quot;
print(&quot;<a href='SiteMap.php?Order=$Style'>Order by Description</a>&quot;
?>

then on SiteMap.php

if ($Order==&quot;Description&quot{
$Site = mysql_query('SELECT * FROM siteindex ORDER BY Description', $db);
} else {
$Site = mysql_query('SELECT * FROM siteindex ORDER BY Address',$db);
}

but it doesnt register the value of Order.

Regards

JP

 

[sleipnir214]

This sounds like the register_globals problem.

See section 1.1 of my FAQ: faq434-2999

Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!!

 

[KarveR]

Agree with Sleipnir214 but occasionally , regexp does what you least expect. From a coding point of view (and resilience), I prefer switch for things like this, as adding more options and even having a default are nice.:
(to make it active , remove the double quotes and echo statements - these are there purely to demonstarte that the switch() correctly assembles the mysql queries.

switch(true){
		case preg_match('/Description/i',$Order) :
	 		$Site = "mysql_query('SELECT * FROM siteindex ORDER BY Description', $db)";
			echo $Site;
		break;

       	case preg_match('/Address/i',$Order) :
       	 	$Site = "mysql_query('SELECT * FROM siteindex ORDER BY Address', $db)";
	   		echo $Site;
		break;

		default :
			$Site = "mysql_query('SELECT * FROM siteindex', $db)";
			echo $Site;
		}

______________________________________________________________________
There's no present like the time, they say. - Henry's Cat.