NYCPHP Meetup

[Dan Cech]

George Schlossnagle wrote:
> My example was flawed, but the same case still works.  Apache allows  
> the use of '/' as an IFS, so you can do
> 
> http://www.example.com/index.php/$BAD_STUFF_HERE and it will appear  
> in full form in PHP_SELF.

You are absolutely correct, I hadn't thought of that case either.

Would it make more sense to use the $_SERVER['SCRIPT_NAME'] variable?

> $_SERVER["QUERY_STRING"]   no value
> $_SERVER["REQUEST_URI"]    /info.php/hello=tiger
> $_SERVER["SCRIPT_NAME"]    /info.php
> $_SERVER["PATH_INFO"]      /hello=tiger
> $_SERVER["PHP_SELF"]       /info.php/hello=tiger

Dan