Posted by Oli Filth on 10/11/05 13:02

cover said the following on 11/10/2005 10:15:
> On Sun, 09 Oct 2005 17:09:17 -0500, Jerry Stuckle
> <jstucklex@attglobal.net> wrote:
>
>
>>They only way the select box would pass the value to $month in
>>mmonth.php would be if register_globals were set to "on" - which is a
>>huge security hole.
>>
>>Rather, you should have register_globals set to "off" (which it probably
>>is since you don't see the value passed) and you can find the value in
>>$_POST['month'].
>
>
> Thanks, using $_POST['month'] and $_POST['person'], does indeed pass
> the values for 'month', just not 'person'. It reads 'person' just
> fine to populate the first query but wont pass the newly populated
> drop down value anywhere else in spite of using $_POST['person'] on
> that page. There must be some way to retain the value of 'person' and
> pass it as much as you like between pages.
>

The fact that the HTML for the "person" choice was originally
dynamically generated will have *no* bearing on whether GET/POST
variables are being recieved, unless it was dynamically generating
*incorrect* HTML.

Check the HTML source in your browser, and make sure the generated code
is correct.


Note: F'up to alt.php.sql removed.


--
Oli

[Back to original message]