$_server['request_uri']

I got this code off another forum(yes it was posted) and I am not really sure what the $_SERVER['REQUEST_URI'] means. It's part of a membership system

Here is code(its called register.php):

PHP:

<?php
include ("config.php");
# include the config file

if ($_POST['Submit']){
# check to see if the form was submitted
# if so...

$username = clean($_POST['username']);
# post the form fields and clean the strings

$password = clean($_POST['password']);

$password_con = clean($_POST['password_con']);

$email = clean($_POST['email']);

$ip = clean($_SERVER['REMOTE_ADDR']);
# get the IP of the browsing computer

$signup = time();
# get the timestamp of the signup

if (!$username | !$password | !$password_con | !$email){
# if any of the strings form the form are empty
echo 'You must fill in every field. <a href="'.$_SERVER['REQUEST_URI'].'">Back</a>.';
}
else {

if ($password != $password_con){
# if the passwords do not match
echo 'Password fields did not match. <a href="'.$_SERVER['REQUEST_URI'].'">Back</a>.';
}
else {

$username_test = "SELECT * FROM `users` WHERE username = '$username'";
$username_test = mysql_query($username_test);
# check if the username is already in use

if (mysql_num_rows($username_test) == 1){
# if the username is being used
echo 'Username is already being used. <a href="'.$_SERVER['REQUEST_URI'].'">Back</a>.';
}
else {

$md5pass = md5($password);
# change the password to an [URL=http://www.go4expert.com/articles/md5-tutorial-t319/]md5[/URL] hash

$add = "INSERT INTO `users` VALUES ('', '$username', '$md5pass', '$email', '$ip', '$signup')";
# setup a query to insert the data into the table.

if ( mysql_query($add) ){
# run the query

echo 'Success. You are now registered.<br />';
echo 'Login using the following informationbr />';
echo 'Username: '.$username.'<br />';
echo 'Password: '.$password;
}
else {
echo 'Error, user not added.';
}

}

}

}

}
else {
# else the form was not submitted
?>
<form method="post" action="<?php=[COLOR=Red]$_SERVER['REQUEST_URI'][/COLOR]?>">
Usernamebr />
<input type="text" name="username">
<br />
Passwordbr />
<input type="password" name="password">
<br />
Confirm Passwordbr />
<input type="password" name="password_con">
<br />
E-mailbr />
<input type="text" name="email">
<br />
<input type="submit" name="Submit" value="Register">
</form>
<?php
}
?>


when I try and sign-up with the apache server it gives me a 403 Forbidden Error.
I'm kinda new at php anyway.

If you can tell me what the $_SERVER['REQUEST_URI'] means in somewhat detail, I would appreciate that too.

Thanks in advance,
W3C

 

The $_SERVER is a global variable, which contains serveral server variables and their values. The $_SERVER['REQUEST_URI'] hold the value of the URI requested not the URL though. For example when you visit http://go4expert.com/forums/index.php the $_SERVER['REQUEST_URI'] contains /forums/index.php.
If you want to print all the server variables and their values use the following code:

PHP:

<?
 foreach($_SERVER as $k=>$v)
 {
     print("$k = $v <br/>\n");
 }
 ?>

Finally, the 403 error might be because of your web server configuration, check your web server's documentation for details.

 

I can't find anything under the documentations.
But when I click register button on the form it takes me to the 403 Forbidden.
The Address is:
http://localhost/KRZY%20Space/%3C?php=$_SERVER['REQUEST_URI']?%3E

Error says:
Forbidden

You don't have permission to access /KRZY Space/< on this server.
Apache/2.0.59 (Win32) PHP/5.1.6 Server at localhost Port 80

Don't know if this helps. But tell me if you need more info.

And for the $_SERVER['REQUEST_URI'], is it used in forms like when you register at the site stargatewars.com? or is it different?

 

Looks like you dont have a filename for the PHP script in the URL, and also there are lot of special characters in the URL.

 

So do you any suggestion on what to do?
Do I make a folder/file? If so what should it be called?
And for the specail characters how do I get rid of those?

 

See, the folder and file should be limited to these characters [a-z,A-Z,0-9,_,-], this would elimniate the problems, try making a new folder and make new files there.