When to use $_REQUEST and when to use $_POST

[cpradio]

I am assuming that $_REQUEST will grab the variable out of the address bar/link and that $_POST is used when the method of the form is "post".

Are my assumptions correct or am I wrong?

-Matt

[cpradio]

For example, am I using this correctly:

$query = mysql_query("select * from abMembers where id='$_REQUEST[\\'id\\']'");

id will be passed via a link: http://whatever.com/?id=15

Is using request like that correct or do I need to use something else?

[scoutt]

$_REQUEST is the same as $_GET & $_POST, I mean it does both. I tend to use $_REQUEST as I had problems with $_POST and never could get the variable to show.

[cpradio]

Okay, so I can replace all _POST with _REQUEST?

Also will my above example work?

[scoutt]

same goes with this

$query = mysql_query("select * from abMembers where id='".$_REQUEST["id"]."'"); 

[thexchord]

Variables are passed from one page to another using either the POST method (within the http header string, not visible in the address bar) OR GET (within the URL)

In PHP both methods result in the variables being present as globals to the action script file. In ASP and I think JSP, POST and GET have different functions to retreive the variable values, and GET variables can't be taken from the POST function and vice-versa.
Here's the php manual's definition of $_REQUEST:
An associative array consisting of the contents of $_GET, $_POST, $_COOKIE, and $_FILES. (http://www.php.net/manual/en/reserved.variables.php)

In other words, $_REQUEST carries all the globally available variables.

HTH.

[The Hobo]

Originally posted by thexchord
In other words, $_REQUEST carries all the globally available variables.

Wrong. It does not contain $_SERVER or $_SESSION.

I, personally, always use $_REQUEST as well.

[thexchord]

Originally posted by The Hobo


Wrong. It does not contain $_SERVER or $_SESSION.

I, personally, always use $_REQUEST as well.

That's my alternate ego posting an errata.