If you're tired of typing $var = $_GET['var'] to get variables, don't forget that you can also use:
extract($_GET, EXTR_PREFIX_ALL, "g")
So if you have $_GET['under'], you can do $g_under. It's way shorter if you have more get elements! If you don't want prefix, do
extract($_GET)
to get normal. So $_GET['under'] would become $under. Might not extract under if it already exists, however.
$_GET
(PHP 4 >= 4.1.0, PHP 5, PHP 7, PHP 8)
$_GET — HTTP GET variables
Descrizione
An associative array of variables passed to the current script via the URL parameters (aka. query string). Note that the array is not only populated for GET requests, but rather for all requests with a query string.
Esempi
Example #1 $_GET example
<?php
echo 'Hello ' . htmlspecialchars($_GET["name"]) . '!';
?>Assuming the user entered http://example.com/?name=Hannes
Il precedente esempio visualizzerà qualcosa simile a:
Hello Hannes!
Note
Nota:
Questa è una variabile 'superglobale', o automaticamente global. Ciò semplicemente significa che è visibile in tutti gli ambiti in uno script. Non è necessario dichiararla come global $variable; per accedervi da funzioni o metodi.
Nota:
The GET variables are passed through urldecode().
add a note
User Contributed Notes 2 notes
CleverUser123 ¶
3 years ago
An Anonymous User ¶
3 years ago
<?php
// It is important to sanitize
// input! Otherwise, a bad actor
// could enter '<script src="evilscript.js"></script>'
// in a URL parameter. Assuming you echo it, this
// would inject scripts in an XSS attack.
//
// The solution:
$NAME = $_GET['NAME'];
// Bad:
echo $NAME;
// that one is vulnerable to XSS
// Good:
echo htmlspecialchars($NAME);
// Sanitizes input thoroughly.
?>
