PHP direct eval problem after 4.07 update

[janaf]

Thanks for looking,

Any selection of drop-downs should be valid, if you use just one single drop-down. For example brand name only (for example Beyma, which there are about 100 record in the db) or nominal size only (for examlpe size 12 which there are about 300 records). The drop-downs are directly based on SQL "Select Distinct" queries on the db, which is a single table, so they must excist, or they would not be in the drop-down.

Selections do not return any results because values of the drop-down POST values are for some reason empty in php now. For example the drop-down named "brand" and the value should be read by:

PHP Code:

$brand = vB::$vbulletin->input->clean_gpc('r', 'brand', TYPE_STR); 


But $brand is empty, so the query can not be created as this evaluates to false:

PHP Code:

if (strlen($brand) > 0) {
$query.=' AND brand like "'.$brand.'" '; 
} 


I can also verify this by simply printing $brand but again, it is empty.

I can also verify that by assigning a value to $brand in the code, then all works as expected.

I have also tried adding arguments to the URL, but that does not work either. I think I could do a direct url of type <mypage>&brand=Beyma before, but not now.

And it has worked for a month.....

So my conclusion so far is that something changed that makes this php code invalid:

PHP Code:

$brand = vB::$vbulletin->input->clean_gpc('r', 'brand', TYPE_STR); 


Any suggestions on alternative ways of reading the posted arguments?