If you're tired of typing $var = $_GET['var'] to get variables, don't forget that you can also use:
extract($_GET, EXTR_PREFIX_ALL, "g")
So if you have $_GET['under'], you can do $g_under. It's way shorter if you have more get elements! If you don't want prefix, do
extract($_GET)
to get normal. So $_GET['under'] would become $under. Might not extract under if it already exists, however.
$_GET
$HTTP_GET_VARS [deprecated]
(PHP 4 >= 4.1.0, PHP 5, PHP 7)
$_GET -- $HTTP_GET_VARS [deprecated] — HTTP GET variables
설명
An associative array of variables passed to the current script via the URL parameters.
$HTTP_GET_VARS contains the same initial information, but is not a superglobal. (Note that $HTTP_GET_VARS and $_GET are different variables and that PHP handles them as such)
변경점
| 버전 | 설명 |
|---|---|
| 4.1.0 | Introduced $_GET that deprecated $HTTP_GET_VARS. |
예제
Example #1 $_GET example
<?php
echo 'Hello ' . htmlspecialchars($_GET["name"]) . '!';
?>
Assuming the user entered http://example.com/?name=Hannes
위 예제의 출력 예시:
Hello Hannes!
주의
Note:
이는 '자동전역' 변수입니다. 스크립트의 모든 영역에서 사용할 수 있습니다. 함수나 메쏘드 안에서 접근하기 위해서 global $variable;를 할 필요가 없습니다.
Note:
The GET variables are passed through urldecode().
add a note
User Contributed Notes 2 notes
CleverUser123 ¶
3 years ago
An Anonymous User ¶
3 years ago
<?php
// It is important to sanitize
// input! Otherwise, a bad actor
// could enter '<script src="evilscript.js"></script>'
// in a URL parameter. Assuming you echo it, this
// would inject scripts in an XSS attack.
//
// The solution:
$NAME = $_GET['NAME'];
// Bad:
echo $NAME;
// that one is vulnerable to XSS
// Good:
echo htmlspecialchars($NAME);
// Sanitizes input thoroughly.
?>
