phpBB.com

How do I use the set_var to set a request variable, for me, to use later ?

Thank

phpbb's request_var already uses set_var ..

I know. I want to set a variable right before requesting it.
I try to use set_var but nothing happend ??? how I use this function ?

set_var() is just for giving a script variable a value, using a type mask. It has nothing at all to do with request variables.

Brf wrote:set_var() is just for giving a script variable a value, using a type mask. It has nothing at all to do with request variables

Erik Frèrejean wrote:

Code: Select all

// Set a variable to the $_REQUEST array
$_REQUEST['myvar'] = 'something'; 

Thank you for the Info.
But if I used it in a MOD is that forbidden ?

I don't see why, as long you don't introduce an security issue with it. But only a MOD team member can give a conclusive answer to that, I'm not aware of all their policies.

Changing request variables is strongly discouraged because it no longer allows assumptions about superglobals to be made.

igorw wrote:Changing request variables is strongly discouraged because it no longer allows assumptions about superglobals to be made.

What if I take a variable data from the database and set $_request and the variable not set before this action, I mean in the $_request array it's not exist yet.

You could set the default value of the request_var() to the database value.

Dr.Death wrote:You could set the default value of the request_var() to the database value.

Code: Select all

$default = $database_value;
$input = request_var('input', $default);

Please always cast though, related: http://blog.phpbb.com/2009/09/10/how-no ... quest_var/

igorw wrote:

Dr.Death wrote:You could set the default value of the request_var() to the database value.

Code: Select all

$default = $database_value;
$input = request_var('input', $default);

Please always cast though, related: http://blog.phpbb.com/2009/09/10/how-no ... quest_var/

First the variable is sanitized, with the sql_query, Second the variable would not write back to the database, But just will be request for later use.

Let me state the conditions more clearly. If you expect $input to be an integer and want to use it in a query later on, you need to cast $default to an integer.

igorw wrote:Let me state the conditions more clearly. If you expect $input to be an integer and want to use it in a query later on, you need to cast $default to an integer.

Yes. I know that.
So if the variable is sanitized, I can set $_REQUEST['variable'] = $data as integer.
And then request_var() it later.

Thanks.

that should be: or I am getting older..