$mybb->input returning null?

[Dannymh]

Hi All,

I am creating a custom page, and for some reason when I try to return $mybb->input["cid"} it returns as null or 0.

However if I try to return $_GET["cid"] it returns with the correct value.

THis is on a custom page

<?php 
define('IN_MYBB', 1); 
require("global.php");


echo "input: ".$mybb->input["cid"];

echo "<br/>input $_GET: " $_GET["cid"];

?>

THere is a whole lot of other stuff on my page but if I just narrow down to that is doesnt work.

Other things like $lang $templates, $db and $mybb->user all seem to work however.

Can anyone think of any reason for this?

---

Ok for some reason I am guessing because it had "id" in the variable it was looking at cid as an int rather than a string and sanitizing it.

If I change the rewrite rule to con= all is sweet.

Useful info to know

[crazy4cs]

This user has been denied support.

Odd, it should work.

[fizz]

Did you declare the global $mybb?

[crazy4cs]

This user has been denied support.

He's saying $mybb->user and such variables are working, so I believe he did.

[Yaldaram]

This might be issue in the code from where this cid thing is getting. Please paste the complete code you're using other then the one pasted above.

[Omar G.]

Ok for some reason I am guessing because it had "id" in the variable it was looking at cid as an int rather than a string and sanitizing it.

If I change the rewrite rule to con= all is sweet.

Useful info to know

That is because the "cid" input key is sanitized in class_core.php:

	/**
	 * Variables that need to be clean.
	 *
	 * @var array
	 */
	public $clean_variables = array(
		"int" => array(
			"tid", "pid", "uid",
			"eid", "pmid", "fid",
			"aid", "rid", "sid",
			"vid", "cid", "bid",
			"pid", "gid", "mid",
			"wid", "lid", "iid",
			"sid"),
		"a-z" => array(
			"sortby", "order"
		)
	);
/*~~~~~~~~~~~~~~~~~~~~~~~~*/
	/**
	 * Cleans predefined input variables.
	 *
	 */
	function clean_input()
	{
		foreach($this->clean_variables as $type => $variables)
		{
			foreach($variables as $var)
			{
				// If this variable is in the ignored array, skip and move to next.
				if(in_array($var, $this->ignore_clean_variables))
				{
					continue;
				}

				if(isset($this->input[$var]))
				{
					if($type == "int" && $this->input[$var] != "lastposter")
					{
						$this->input[$var] = intval($this->input[$var]);
					}
					else if($type == "a-z")
					{
						$this->input[$var] = preg_replace("#[^a-z\.\-_]#i", "", $this->input[$var]);
					}
				}
			}
		}
	}

[Dannymh]

Very good info I'm going to take a deeper look to see what else is sanitized.

In this case the variable I am looking for can be either an iD or a string

[Paul H.]

Can you post the whole code?

[Omar G.]

You will need to use a different key then ('con' will work).

[Dannymh]

Yup went with a different key. Can't post while code yet, it's just part of the content delivery system