REQUEST_URI - v 4.41 windows vs linux

[sde]

Came across an interesting thing today. $_SERVER['REQUEST_URI'] is supported on Linux/PHP v4.4.1, but not Windows/PHP v4.4.1.

It is supported on Windows/PHP v5.x though.

[DJMaze]

http://dragonflycms.org/cvs/html/inc....php?v=9.24#85

[DJMaze]

oh and another i use

PHP Code:

# Workaround to create an REQUEST_URI for IIS 5 servers
$this->request_uri = (!empty($_SERVER['REQUEST_URI']) ? $_SERVER['REQUEST_URI'] : ($_SERVER['SCRIPT_NAME'].(!empty($_SERVER['QUERY_STRING']) ? '?'.$_SERVER['QUERY_STRING'] : ''))); 


[sde]

that is a big function .. i found out when i deployed this project where i set the entry page in a cookie because the user gets directed to another domain if they are not logged in. tested on linux, deployed on win, same version =/

i could have sworn i posted this in PHP, .. i must be losing it.

good code examples, looks like you've been through this before i'm glad they fixed it in php5.

[DJMaze]

Been there many times in PHP 4

function get_uri() is designed to prevent XSS exploits.
For example your website shows where people go and the uri has "><script>alert()</script>
then you know what might happen

The second is just plain and simple without security measurements.