[PHP] Problem with array variables in forms
G'day, Our web-host just upgraded to PHP v4.2.3 (from v4.1.2) and broke all of our forms that use array variables. It appears that when the URL contains square brackets (i.e. %5B and %5D instead of [ and ]) then PHP doesn't parse the variables correctly. For example, http://www.offloadonline.com/test.php?personal[name]=johnpersonal[email]=john%40blah.com works (you might need to paste the URL into your browser) but http://www.offloadonline.com/test.php?personal%5Bname%5D=johnpersonal%5Bemail%5D=john%40blah.com fails. Can anyone suggest a workaround? Thanks, Chris. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Array not working
At 08:45 18.02.2003, Chris Blake said: [snip] // THIS IS LINE 27 //print them out to page echo $row['ClientID'].['ClientName'].['Distance']. 'hr'; [snip] Try echo $row['ClientID'].$row['ClientName'].$row['Distance']. 'hr'; -- O Ernest E. Vogelsinger (\)ICQ #13394035 ^ http://www.vogelsinger.at/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] [Fwd: [PHP-DOC] Urgent....plz]
At 08:54 18.02.2003, [EMAIL PROTECTED] said: [snip] trying to provide the new solutions to our customer by using the PHP and MySql.So there are few questions I would like to ask about PHP. Upfront - PHP is a programming language, not a ready-to-use environment (although there may be a couple of application frameworks ready that already implement stuff you want to achieve). Thus said: you can implement virtually all and everything using PHP. 1. Is PHP support or can do the Single Sign On features like Oracle do?Plz explain to me OK!!! Yes, it can (you can ;-). Upon login, you create something like a user authentication token that is stored at the server side. As long as your scripts pass that token around, the user remains logged in, with the credentials you assigned at login time. See http://www.php.net/manual/en/ref.session.php for session handling functions. 2. Is PHP support the Multiple Logons? Same holds true here - it depends on your application logic. 3. Can we create the environment like this using PHP: Different user logon in the portal and the are using different interface/different portals but still under the same URL/address? Sure you can - make a good application design, separating content from presentation. After identifying the user, decide which content you want to display, then decide which presentation you want to use. Check out some template scripts, a lot of people seem to favor the Smarty template engine (http://smarty.php.net/). -- O Ernest E. Vogelsinger (\)ICQ #13394035 ^ http://www.vogelsinger.at/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Text data truncated after first blank character in form fields
Errnest Thanks. I used htlmentities and still have the truncation. Mike --- Ernest E Vogelsinger wrote: At 22:04 17.02.2003, Michael Eacott said: [snip] When I have the following in a form: ?php $testvar = a b c; ? input type=text size=20 name=testvar value=?php echo $testvar; ? the value shown in the form field is a and not a b c why? and how can I get to see the untrucated text, please? [snip] You should always place quotes around the Value parameter; input type=text size=20 name=testvar value=?php echo $testvar; ? Additionally you should always htmlencode the value parameter: input type=text size=20 name=testvar value=?php echo htmlentities($testvar); ?
Re: [PHP] Text data truncated after first blank character in form fields
Kevin I tried flushing and also IE 6 and Netscape 6.2. Still getting truncation. Mike --- Kevin Stone wrote: Hmm. Don't know what to tell ya. It works on my computer. Have you tried pressing CTRL+F5 to flush your browser cache? - Kevin - Original Message - From: rentAweek support [EMAIL PROTECTED] To: Kevin Stone [EMAIL PROTECTED] Cc: Michael Eacott [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Monday, February 17, 2003 3:12 PM Subject: Re: [PHP] Text data truncated after first blank character in form fields Thanks I tried our your suggestion sic: input type=text size=20 name=testvar value=?php echo $testvar; ? Still truncation Mike --- Kevin Stone wrote: It's your HTML Failing to enclose the value in quotes may lead to truncation. Your output looks like this... input type=text size=20 name=testvar value=a b c You should always quote every parmeter in the tag just to avoid such problems. This should work.. input type=text size=20 name=testvar value=?php echo $testvar;? - Kevin
[PHP] diksha's problem
hi everybody, i am a b.tech final year student and as a part of the requirement of the degree, i have to do a software project. the project that i am doing is E-SHOPPING PORTAL DEVELOPMENT and it uses php. i have started learning php 10 days back. today i have the following problem: i have a directory called bdoi_change in which i have an html registration form called regist.html. i am attaching filecheck.php to regist.html so that when i click on the submit button on regist.html, i get connected to filecheck.php. in filecheck.php i have opened a file andar.html and have written i have solved an error today in it through filecheck.php. and when filecheck.php is run, it shows me i have solved an error today . but in bdoi_change i cannot see andar.html nor can i open it by internet explorer. if anybody can solve my problem, please reply back. thanks a lot, diksha. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] inserting BR
hi to all, I'm having problem posting messages that have paragraph. It's doesnt appear to have one when being viewd in the page? Any idea on how to post this properly without manually inserting a BR tags in the text box before it is being store in the database. Thanks in advance. mike -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] $_SESSIONS and printing off..
Hi All,
I'm a little bit confused and it's maybe a newbie question but maybe you can help me
out;
A user is login in and after username password check it will redirects to this page
?php
session_start();
if (isset($_SESSION['username'])){
$username = $_SESSION['username'];
echo 'Welcome, you are still loged in.';
echo $username;
}
else{
header ( Location: login.htm );
}
?
Question is; is this the way to print of his username?
$username = $_SESSION['username'];
Echo $username
Or has anyone some alternatives..
This is working o.k. but in my opinion it's a little bit quick and dirty?
Thanks for the comments and suggestions!
Frank
Re: [PHP] inserting BR
This one time, at band camp, Michael P. Carel [EMAIL PROTECTED] wrote: hi to all, I'm having problem posting messages that have paragraph. It's doesnt appear to have one when being viewd in the page? Any idea on how to post this properly without manually inserting a BR tags in the text box before it is being store in the database. nl2br() http://www.php.net/nl2br Kevin -- __ (_ \ _) ) | / / _ ) / _ | / ___) / _ ) | | ( (/ / ( ( | |( (___ ( (/ / |_| \) \_||_| \) \) Kevin Waterson Port Macquarie, Australia -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Text data truncated after first blank character in form fields
At 09:27 18.02.2003, rentAweek support said: [snip] Errnest Thanks. I used htlmentities and still have the truncation. [snip] Have a look at the HTML source the server transmits. -- O Ernest E. Vogelsinger (\)ICQ #13394035 ^ http://www.vogelsinger.at/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] inserting BR
At 09:36 18.02.2003, Michael P. Carel said: [snip] I'm having problem posting messages that have paragraph. It's doesnt appear to have one when being viewd in the page? Any idea on how to post this properly without manually inserting a BR tags in the text box before it is being store in the database. [snip] echo nl2br($text_to_send); -- O Ernest E. Vogelsinger (\)ICQ #13394035 ^ http://www.vogelsinger.at/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Re: safe mode
Hello Wilbert, I had same problem and I do not have good news for you. Problem is caused by different owner of script file and file (or folder) which need to be manipulated by this script file. To change owner from script (chown) you must have `root` privilege. I download files which have different owner (usually those files are generated by some script). Then I upload those files again and owner is same like other uploaded files. Best regards, Nenad Djordjevic mailto:[EMAIL PROTECTED] Diyomi Soft http://www.diyomisoft.com/ Monday, February 17, 2003, 12:50:40 PM, you wrote: WE Hi all WE I'm having troubles with the safe mode. My ISP has safe mode ON. WE Now i'm busy accessing files, deleting uploaded files, moving them and so WE on. Different actions are performed by different scripts. WE I want to make use of functions like stat() and so on, but each time I get WE the warning: WE Warning: file_exists() [function.file-exists]: SAFE MODE Restriction in WE effect. The script whose uid is 884 is not allowed to access WE /opt/guide/www.company.com.nl/HTML/myDir owned by uid 99 WE Since safe mode is ON and I can't change it in php.ini of my ISP I am WE wondering what to do now? WE There is this whole lot of file functions which I wanna use, but each time WE I'm getting the warning or warnings that look like the one above. WE I already tried ini_set(safe_mode,0) but since the script is already WE accessed this action comes too late and even more important, according to WE the manual this entry can be set only in php.ini or httpd.conf WE (PHP_INI_SYSTEM) . WE Does anybody know a safe workaround for this phenomenon? Any tips are most WE welcome! WE Regards Wilbert Enserink WE - WE Pas de Deux WE Van Mierisstraat 25 WE 2526 NM Den Haag WE tel 070 4450855 WE fax 070 4450852 WE http://www.pdd.nl WE [EMAIL PROTECTED] WE - -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] $_SESSIONS and printing off..
Er... well I've seen a lot worse code than that but maybe you could use ...
if (isset($_SESSION['username']) !empty($_SESSION['username'])) {
echo 'Welcome '.$_SESSION['username'].', you are still logged in.';
}
else {
header... etc etc
}
Rich
-Original Message-
From: Frank Keessen [mailto:[EMAIL PROTECTED]]
Sent: 18 February 2003 09:00
To: [EMAIL PROTECTED]
Subject: [PHP] $_SESSIONS and printing off..
Hi All,
I'm a little bit confused and it's maybe a newbie question but
maybe you can help me out;
A user is login in and after username password check it will
redirects to this page
?php
session_start();
if (isset($_SESSION['username'])){
$username = $_SESSION['username'];
echo 'Welcome, you are still loged in.';
echo $username;
}
else{
header ( Location: login.htm );
}
?
Question is; is this the way to print of his username?
$username = $_SESSION['username'];
Echo $username
Or has anyone some alternatives..
This is working o.k. but in my opinion it's a little bit quick and dirty?
Thanks for the comments and suggestions!
Frank
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] What are the functions to copy a directory structure then rename?
Hi all, I want to copy an already existing directory structure with generic files then rename it while keeping it's permissions, but I was unable to find a suitable function in the manual to carry out this operation. Can anyone help me with this please. Thank you Dave -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] is http://username:password@localhost.com/secure_area/ secure ?
Hi, I have a PHP login scripts that takes the username and password and stores it in a session. Once verified as a valid user against a mySQL database, the user is redirected to a members area ( /secure_area ), using: http://username:[EMAIL PROTECTED]/secure_area/ This is so that .htaccess (which is in /secure_area won't pop up its own login/password box). However, i am having a couple of problems, first, once the user is redirected to the /secure_area folder, EVERY link on that page (and onwards) is prefixed with http://username:[EMAIL PROTECTED].. for everyone to see !!! and thus the password has been exposed. How can I stop it displaying the username and password ? And also, is this a secure way of logging in? (it is the only way I can figure out how to do it, so that PHP logs u in and passes username and password to .htaccess quietly). Many Thanks for any help! Shams -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
php-general Digest 18 Feb 2003 11:24:19 -0000 Issue 1890
php-general Digest 18 Feb 2003 11:24:19 - Issue 1890 Topics (messages 135917 through 135978): Re: Protecting files 135917 by: Luke Woollard 135918 by: Bryan Lipscy 135919 by: Bryan Lipscy 135920 by: Luke Woollard 135921 by: Ray Hunter 135927 by: Justin French 135950 by: Peter Janett 135956 by: Nate 135957 by: Bryan Lipscy 135958 by: Nate Re: What happened to phpEdit??? 135922 by: Al 135923 by: Chase Urich 135926 by: John Nichel 135928 by: John Wells 135959 by: Ernest E Vogelsinger Re: pro-rated date 135924 by: Tom Rogers Re: session cookie that never expires 135925 by: Jason Sheets 135933 by: Justin French 135936 by: Jason Sheets 135938 by: Justin French Re: MD5 Password Login Driving me Crazy 135929 by: Justin French Counter has gremlins 135930 by: Brian V Bonini 135932 by: Jason Sheets 135934 by: Andrew Brampton Re: MD5 Passwords (How it works?) 135931 by: Justin French 135935 by: Jason Sheets 135937 by: Justin French 135952 by: Jason Wong Getting around the LOAD DATA LOCAL with MySQL 3.23.49 + using PHP? 135939 by: Peter Janett file-upload.errors 135940 by: Nate 135942 by: Marco Tabini 135946 by: Jason Wong 135949 by: Nate Re: image creation error 135941 by: Michael P. Carel 135944 by: Jason Wong 135953 by: Hugh Danaher Sessions and phplib. 135943 by: Vincent M. 135948 by: Jason Sheets invalid argument supplied for foreach() 135945 by: Lynn 135947 by: Jason Wong 135960 by: Ernest E Vogelsinger Re: browser identification problem 135951 by: Jason Wong 135961 by: Ernest E Vogelsinger Re: mail function - using remote smtp in php.ini 135954 by: Jason Wong vni - unicode 135955 by: Jimmy Brake Array not working 135962 by: Chris Blake 135965 by: Ernest E Vogelsinger Re: [PHP-DOC] Urgentplz] 135963 by: didou.keliglia.com 135966 by: Ernest E Vogelsinger Problem with array variables in forms 135964 by: Chris Pudney Re: Text data truncated after first blank character in form fields 135967 by: rentAweek support 135968 by: rentAweek support 135973 by: Ernest E Vogelsinger diksha's problem 135969 by: DIKSHA NEEL inserting BR 135970 by: Michael P. Carel 135972 by: Kevin Waterson 135974 by: Ernest E Vogelsinger $_SESSIONS and printing off.. 135971 by: Frank Keessen 135976 by: Rich Gray Re: safe mode 135975 by: Nenad Djordjevic What are the functions to copy a directory structure then renam e? 135977 by: Rea_David.emc.com is http://username:[EMAIL PROTECTED]/secure_area/; secure ? 135978 by: Shams Administrivia: To subscribe to the digest, e-mail: [EMAIL PROTECTED] To unsubscribe from the digest, e-mail: [EMAIL PROTECTED] To post to the list, e-mail: [EMAIL PROTECTED] -- ---BeginMessage--- If you want to hide the content of an .inc or other file that contains PHP code simply rename it with a .php ie: config.inc becomes config.inc.php the server will parse the file as PHP now and not allow users to download it... Alternatively you can protect a directory with a .htaccess file if you are using apache. See: http://httpd.apache.org/docs/howto/htaccess.html -Original Message- From: PR [mailto:[EMAIL PROTECTED]] Sent: Tuesday, 18 February 2003 8:18 AM To: Subject: [PHP] Protecting files Hello, How can I protect my php files among other files like templates (.inc) and mysql config (config.inc) files being copied/read/imported (front page)/used by other applications other than my site... can this be done by htaccess? is so , could anyone point me into right direction? -- Thank you, Paul -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php ---End Message--- ---BeginMessage--- How can I protect my php files among other files like templates (.inc) and mysql config (config.inc) files being copied/read/imported (front page)/used by other applications other than my site... can this be done by htaccess? is so , could anyone point me into right direction? I have renamed my sensitive (those containing l/p for mail and mysql) files to .php and constructed them to render a blank page if ever directly called. Something like this: ? All the sensitive code $db_login = user; $db_pwd = password; $mail_login = mail; $mail_pwd = pass; ? htmlhead/headbody/body/html I do not think that -r to everyone would work in that Apache still needs to read the file when included by another script. Still
[PHP] opening a file from internet explorer
hi all, i have a problem: i am opening and reading and writing a file through php page. $fp = fopen(\bdoi_change\andar.html, w); fwrite($fp, htmlheadtitlediksha/title/headbodyh1i solved problem!/body/html); but when i try to open \bdoi_change\andar.html through internet explorer, i am getting page cannot be displayed. please help me out. diksha. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Preserving field values between pages/tags
Hi, I'm building a form page that has 3 tags for different types of fields (i.e. Personal details, location details, other). I want to preserve the values of the filled in fields as the user moves from section/tag to section/tag. I've tried making each tag a separate page and use the URL to pass values, as well as put it all on one page and hide fields (which became more trouble than it was worth!). Does anyone have a more practical/useful way of preserving field values from page-to-page... or hiding fields as a user clicks on each tag? Thanks, -Nelson -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] PHP 5
Your best bet is to view the recorded on-line seminars that Zeev Suraski gave on this subject. Go to: http://www.zend.com/iseminar.php View these ones: The Future of PHP and the Zend Engine 2 The Future of PHP and the Zend Engine 2 - Part 2 Examples and tutorials Brad __ Brad Young [EMAIL PROTECTED] Zend - The PHP Company -Original Message- From: Adrian Portsmouth [mailto:[EMAIL PROTECTED]] Sent: Monday, February 17, 2003 7:46 PM To: [EMAIL PROTECTED] Subject: [PHP] PHP 5 Hi, I have been checking out the books on Amazon.com and it seems there is a PHP5 book in the works due to be released on March the 4th. Does anyone know where I can find out information about this new release of PHP, what changes there are etc? TIA Adrian www.phpscriptsearch.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Is this an unique user name???
Ok... I am trying to have this registration page search a table in a db
to find out if the user name supplied is unique. Here is the syntax that
I used but it does not seem to work:
?
.
$var_UserName = addslashes($_POST['User_Name']);
.
$query = SELECT * FROM company_info WHERE UserName = ';
$query .= $var_UserName.';
$result = mysql_query($query);
// This is where the problem come in... I tried these two options, both
// failed.
//Opt1
$num_results = mysql_num_rows($result);
if( $num_results 0 ) //this user name is not unique
{ // exec the error methods }
else
{ // add record to db }
//Opt2
if( $results ) // To my knowlegde ;) this would be true if $results 0
{ // exec error }
else
{ // add record }
.
?
Is there something that I am missing? Or actually doing wrong? If
anybody would need to see the whole script I would be glad to supply on
demand.
Thank for your time,
-Alex
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Is this an unique user name???
Ok... I am trying to have this registration page search a table in a
db
to find out if the user name supplied is unique. Here is the syntax
that
I used but it does not seem to work:
?
.
$var_UserName = addslashes($_POST['User_Name']);
.
$query = SELECT * FROM company_info WHERE UserName = ';
$query .= $var_UserName.';
$result = mysql_query($query);
// This is where the problem come in... I tried these two options,
both
// failed.
//Opt1
$num_results = mysql_num_rows($result);
if( $num_results 0 ) //this user name is not unique
{ // exec the error methods }
else
{ // add record to db }
//Opt2
if( $results ) // To my knowlegde ;) this would be true if $results
0
{ // exec error }
else
{ // add record }
.
?
Is there something that I am missing? Or actually doing wrong? If
anybody would need to see the whole script I would be glad to supply
on
demand.
Thank for your time,
-Alex
just an alternative to do what you want:
$query = SELECT count(UserName) as user_num FROM company_info WHERE
UserName='$var_UserName';
$result = mysql_query();
$data = mysql_fetch_array($result);
$user_num = $data['user_num'];
if($user_num 1)
{
//if user is not unique
}
else
{
//if user is unique
}
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] $_SESSIONS and printing off..
Thanks,
But then another question;
if (isset($_SESSION['username']) !empty($_SESSION['username'])) {
echo 'Welcome '.$_SESSION['username'].', you are still logged in.';
I want also checked if the level of authentication = 2; for example
User Frank = level 1
User Rich = level 2
I've set $_SESSION['level'] to 2 but how can i check that with the above
line?
Thanks for your help,
Frank
- Original Message -
From: Rich Gray [EMAIL PROTECTED]
To: Frank Keessen [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Tuesday, February 18, 2003 11:53 AM
Subject: RE: [PHP] $_SESSIONS and printing off..
Er... well I've seen a lot worse code than that but maybe you could use
...
if (isset($_SESSION['username']) !empty($_SESSION['username'])) {
echo 'Welcome '.$_SESSION['username'].', you are still logged in.';
}
else {
header... etc etc
}
Rich
-Original Message-
From: Frank Keessen [mailto:[EMAIL PROTECTED]]
Sent: 18 February 2003 09:00
To: [EMAIL PROTECTED]
Subject: [PHP] $_SESSIONS and printing off..
Hi All,
I'm a little bit confused and it's maybe a newbie question but
maybe you can help me out;
A user is login in and after username password check it will
redirects to this page
?php
session_start();
if (isset($_SESSION['username'])){
$username = $_SESSION['username'];
echo 'Welcome, you are still loged in.';
echo $username;
}
else{
header ( Location: login.htm );
}
?
Question is; is this the way to print of his username?
$username = $_SESSION['username'];
Echo $username
Or has anyone some alternatives..
This is working o.k. but in my opinion it's a little bit quick and
dirty?
Thanks for the comments and suggestions!
Frank
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] $_SESSIONS and printing off..
Um... how about...
echo 'Welcome '.$_SESSION['username'].', you are still logged in and your
authentication level is '.(isset($_SESSION['level']) ? $_SESSION['level'] :
'unknown');
Or am I missing something here?
Rich
-Original Message-
From: Frank Keessen [mailto:[EMAIL PROTECTED]]
Sent: 18 February 2003 12:15
To: Rich Gray; [EMAIL PROTECTED]
Subject: Re: [PHP] $_SESSIONS and printing off..
Thanks,
But then another question;
if (isset($_SESSION['username']) !empty($_SESSION['username'])) {
echo 'Welcome '.$_SESSION['username'].', you are still logged in.';
I want also checked if the level of authentication = 2; for example
User Frank = level 1
User Rich = level 2
I've set $_SESSION['level'] to 2 but how can i check that with the above
line?
Thanks for your help,
Frank
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] compiling php with -DEAPI
i had compiled php php-4.3.0 for apache. When i start apache: httpd: [Tue Feb 18 15:13:49 2003] [warn] Loaded DSO /usr/libexec/libphp4.so uses plain Apache 1.3 API, this module might crash under EAPI! (please recompile it with -DEAPI) as wrote i had recompiled php: CFLAGS='-DEAPI' configure . RET and nothing had been changed. what should i do? php do not register variables submitted with url-name (host/index.php?param=value) ? php.ini contains: variables_order = EGPCS ; register_globals= On ; register_argc_argv = On ; what have i missed? how to fix it? Agri msg97343/pgp0.pgp Description: PGP signature
Re: [PHP] $_SESSIONS and printing off..
Uh, sorry for the bad explanation Rich.. Again;
?php
session_start();
if (isset($_SESSION['username']) !empty($_SESSION['username'])){
echo 'Welcome '.$_SESSION['username'].', you are still logged in.';
echo $_SESSION['woonplaats'];
}
else{
header ( Location: login.htm );
}
?
This is working fine. But i've set $_SESSION['level'] to value 2 (that's
done in the php file that calls this one). Now i want the above code to
check for the level and if is not equal to two than go to the else (back to
login.htm) statement..
better explained??? ;
Thanks,
Frank
- Original Message -
From: Rich Gray [EMAIL PROTECTED]
To: Frank Keessen [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Tuesday, February 18, 2003 1:25 PM
Subject: RE: [PHP] $_SESSIONS and printing off..
Um... how about...
echo 'Welcome '.$_SESSION['username'].', you are still logged in and your
authentication level is '.(isset($_SESSION['level']) ? $_SESSION['level']
:
'unknown');
Or am I missing something here?
Rich
-Original Message-
From: Frank Keessen [mailto:[EMAIL PROTECTED]]
Sent: 18 February 2003 12:15
To: Rich Gray; [EMAIL PROTECTED]
Subject: Re: [PHP] $_SESSIONS and printing off..
Thanks,
But then another question;
if (isset($_SESSION['username']) !empty($_SESSION['username'])) {
echo 'Welcome '.$_SESSION['username'].', you are still logged in.';
I want also checked if the level of authentication = 2; for example
User Frank = level 1
User Rich = level 2
I've set $_SESSION['level'] to 2 but how can i check that with the above
line?
Thanks for your help,
Frank
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] ishttp://username:password@localhost.com/secure_area/ secure ?
First things first, ANYTHING you do without https:// (SSL) is insecure. Anything you do with SSL is more secure, not secure. Which answers 90% or your questions. If you are stuck with the username:password@ in the URL, my guess is you could get your current URL, use parse_url to check if it has the uname and pass bits in it, and if so, rebuild the URL without them, and redirect... it could be quite messy, and I haven't thought it through tho!! BUT, my real advice is to choose EITHER http authentication (let them login via the usual pop-up), OR choose PHP based authentication with sessions. It's REALLY easy to write a script which can protect certain files from non-logged in members with PHP. Justin French on 18/02/03 10:22 PM, Shams ([EMAIL PROTECTED]) wrote: Hi, I have a PHP login scripts that takes the username and password and stores it in a session. Once verified as a valid user against a mySQL database, the user is redirected to a members area ( /secure_area ), using: http://username:[EMAIL PROTECTED]/secure_area/ This is so that .htaccess (which is in /secure_area won't pop up its own login/password box). However, i am having a couple of problems, first, once the user is redirected to the /secure_area folder, EVERY link on that page (and onwards) is prefixed with http://username:[EMAIL PROTECTED].. for everyone to see !!! and thus the password has been exposed. How can I stop it displaying the username and password ? And also, is this a secure way of logging in? (it is the only way I can figure out how to do it, so that PHP logs u in and passes username and password to .htaccess quietly). Many Thanks for any help! Shams -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] $_SESSIONS and printing off..
At 13:33 18.02.2003, Frank Keessen said:
[snip]
This is working fine. But i've set $_SESSION['level'] to value 2 (that's
done in the php file that calls this one). Now i want the above code to
check for the level and if is not equal to two than go to the else (back to
login.htm) statement..
[snip]
?php
session_start();
if (isset($_SESSION['username']) !empty($_SESSION['username'])
$_SESSION['level'] == 2){
echo 'Welcome '.$_SESSION['username'].', you are still logged in.';
echo $_SESSION['woonplaats'];
}
else{
header ( Location: login.htm );
}
?
--
O Ernest E. Vogelsinger
(\)ICQ #13394035
^ http://www.vogelsinger.at/
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] How can you execute UNIX scripts from PHP
Hi everyone, How can you execute UNIX scripts from PHP. If somebody could let me know it would be great. Thanks Dave -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] PHP fileperms is not working
hi all, the file permission command is not working. any idea why? $filename = '\bdoi_change\andar.html'; printf(%0,(fileperms(\bdoi_change\andar.html) 0777)); diksha. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] How can you execute UNIX scripts from PHP
This one time, at band camp, [EMAIL PROTECTED] wrote: Hi everyone, How can you execute UNIX scripts from PHP. If somebody could let me know it would be great. if you have a shell script called blah.sh $script = 'blah.sh'; exec($script); system($script); // my favourite or if you like you could do `blah.sh` // backticks Kevin -- __ (_ \ _) ) | / / _ ) / _ | / ___) / _ ) | | ( (/ / ( ( | |( (___ ( (/ / |_| \) \_||_| \) \) Kevin Waterson Port Macquarie, Australia -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] PHP fileperms is not working
At 13:59 18.02.2003, DIKSHA NEEL said: [snip] hi all, the file permission command is not working. any idea why? $filename = '\bdoi_change\andar.html'; printf(%0,(fileperms(\bdoi_change\andar.html) 0777)); [snip] You need to use either forward slashes or double backslashes in file names: Either \\bdoi_change\\andar.html or /bdoi_change/andar.html Both will work regardless of the operating system you are using (*nix, windoze, or Mac) -- O Ernest E. Vogelsinger (\)ICQ #13394035 ^ http://www.vogelsinger.at/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] why won't this work?
Why won't this work? I have a form that people enter in a time to volunteer,
when the submit it, I call the same page and want the time to then show on
the page but I have to refresh it to see the time and sometimes it just
doesn't show up. It is like the page loads before all the sql statements
are run because if I print them and run them in mysql, I get results.
the test page is here...I know it is ugly...
http:\\peloke.webhop.org\mom\bikers.php
Thanks,
Eddie
?
if ($bikers){$SQL = insert into bbreak(name,time) values ('$name','$time')
;
$result = mysql_db_query($db,$SQL,$connection);
}
?
center
Please sign up for the hours that you can work. We need a minimum of 3
men there for each shift. They will be doing the tire pressure checks and
any other minor maintenance that might be required. Ladies are also urged to
come as we are hoping there will be women bikers that we can minister to in
whatever way is needed. Anyone can come anytime but we need to have enough
commitments that we know the break will be staffed adequately every shift.
We cannot give away anything that would compete with the drinks and
snacks that are sold at the rest stop but we can give away ice water and
possibly coffee. Thanks for your help!
br
br
SIGN Up
FORM name=bikers action=bikers.php method=post
Name input type='text' name='name' maxlength='25'
Time SELECT name=time
OPTION value=288 selectedFriday, February 28, 8
a.m.-12 p.m./OPTION
OPTION value=2812Friday, February 28, 12 p.m.-4
p.m./OPTION
OPTION value=284Friday, February 28, 4 p.m.-8
p.m./OPTION
OPTION value=18Saturday, March 1, 8 a.m.-12
p.m./OPTION
OPTION value=112Saturday, March 1, 12 p.m.-4
p.m./OPTION
OPTION value=14Saturday, March 1, 4 p.m.-8
p.m./OPTION
OPTION value=28Sunday, March 2, 8 a.m.-12
p.m./OPTION
OPTION value=212Sunday, March 2, 12 p.m.-4
p.m./OPTION
OPTION value=24Sunday, March 2, 4 p.m.-8 p.m./OPTION
/SELECT
INPUT type=submit value=SignUp name=bikers
br
br
center
table width='95%'
tr bgColor=#99td
?
$SQL = select * from bbreak where time=288 ;
$result = mysql_db_query($db,$SQL,$connection);
$myrow = mysql_fetch_array($result);
?
center
font face='arial' size='3' color='ff'Friday February 28th 8
AM to Noon
/td/tr
? while ($myrow = mysql_fetch_array($result)){
print trtdcenter;
print $myrow[name];
print /tr/td;
}
?
/table
table width='95%'
tr bgColor=#99td
?
$SQL1 = select * from bbreak where time=2812 ;
$result1 = mysql_db_query($db,$SQL1,$connection);
$myrow1 = mysql_fetch_array($result1);
?
center
font face='arial' size='3' color='ff'Friday February 28th 12
p.m to 4 p.m.
/td/tr
? while ($myrow1 = mysql_fetch_array($result1)){
print trtdcenter;
print $myrow1[name];
print /tr/td;
}
?
/table
table width='95%'
tr bgColor=#66td
?
$SQL2 = select * from bbreak where time=284;
$result2 = mysql_db_query($db,$SQL2,$connection);
$myrow2 = mysql_fetch_array($result2);
?
center
font face='arial' size='3' color='ff'Friday February 28th 4
p.m. to 8 p.m.
/td/tr
? while ($myrow2 = mysql_fetch_array($result2)){
print trtdcenter;
print $myrow2[name];
print /tr/td;
}
?
/table
table width='95%'
tr bgColor=#99td
?
$SQL3 = select * from bbreak where time=18;
$result3 = mysql_db_query($db,$SQL3,$connection);
$myrow3 = mysql_fetch_array($result3);
?
center
font face='arial' size='3' color='ff'Saturday March 1st 8 AM
to Noon
/td/tr
? while ($myrow3 = mysql_fetch_array($result3)){
print trtdcenter;
print $myrow3[name];
print /tr/td;
}
?
/table
table width='95%'
tr bgColor=#99td
?
$SQL4 = select * from bbreak where time=112;
$result4 = mysql_db_query($db,$SQL4,$connection);
$myrow4 = mysql_fetch_array($result4);
?
center
font face='arial' size='3' color='ff'Saturday March 1st 12
p.m to 4 p.m.
/td/tr
? while ($myrow4 = mysql_fetch_array($result4)){
print trtdcenter;
[PHP] refreshing scripts a problem
I'm having trouble with my php scripts running on my local machine. I'm running winXP, apache, and for the most part, everything runs ok. But sometimes the scripts will refresh rapidly for a few seconds, and then give up - This page cannot be displayed. It seems to happen more often when I'm sorting a query that i had run in phpMyAdmin, and sometimes in normal scripts as well. Everything works fine on a remote server. Is there a setting I can change here? this is getting really annoying. any help would be greatly appreciated. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] internal site search
hi guys, i wanna make an internal site search, i wanna search my internal html pages and php pages..and i have no clue how to do thatany help!!! Thx _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] script to check if server is up
Hi I have two servers on two different networks. I would like to implement some sort of a watchdog application between the two to inform me should either of the machines go down or has a connection problem. I was thinking along the line of using a PHP script running from cron on an hourly basis to ping the server as well as another server such as google.com (they seem to be always up) and to only raise the alarm when google can be reached, but NOT the other server. My only problem is with the actual recognition of a failed ping, or for that matter a successful one? Can anyone give me some brain food as to the code for detecting a up/down connection? pseudo code: make connection with server1 get result of connection_server1 make connection with google.com get result of connection_google if connection_google !connection_server1 sms me else chill out and a plus would be to do this ONLY if the result of the next cron-run is the same, ie, don't sms me if the problem has been fixed within an hour. I just don';t know what to use to make connection and get result of connection Thanks. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] internal site search
Great news, there is a new tool on the internet called a search engine. What you do is enter a search topic, press enter, and all kinds of links with articles related to your search are returned. Some say this might signal an end to mailing lists, which have been historically used to get answers to tough questions when all other resources have been exhausted. James -Original Message- From: rehab mostafa [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 18, 2003 8:35 AM To: [EMAIL PROTECTED] Subject: [PHP] internal site search hi guys, i wanna make an internal site search, i wanna search my internal html pages and php pages..and i have no clue how to do thatany help!!! Thx _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] why won't this work?
I did a View-Source on the generated code and got this for the Friday Feb 28 entry:
table width='95%'
tr bgColor=#99td
center
font face='arial' size='3' color='ff'Friday February 28th 8 AM to Noon
/td/tr
trtdcenterJohn/tr/tdtrtdcenter/tr/tdtrtdcenter/tr/td
/table
Look at the last trTD... line. Fix that, and your problems may go away.
- Original Message -
From: Edward Peloke [EMAIL PROTECTED]
To: Php-General@Lists. Php. Net [EMAIL PROTECTED]
Sent: Tuesday, February 18, 2003 7:24 AM
Subject: [PHP] why won't this work?
Why won't this work? I have a form that people enter in a time to volunteer,
when the submit it, I call the same page and want the time to then show on
the page but I have to refresh it to see the time and sometimes it just
doesn't show up. It is like the page loads before all the sql statements
are run because if I print them and run them in mysql, I get results.
the test page is here...I know it is ugly...
http:\\peloke.webhop.org\mom\bikers.php
Thanks,
Eddie
?
if ($bikers){$SQL = insert into bbreak(name,time) values ('$name','$time')
;
$result = mysql_db_query($db,$SQL,$connection);
}
?
center
Please sign up for the hours that you can work. We need a minimum of 3
men there for each shift. They will be doing the tire pressure checks and
any other minor maintenance that might be required. Ladies are also urged to
come as we are hoping there will be women bikers that we can minister to in
whatever way is needed. Anyone can come anytime but we need to have enough
commitments that we know the break will be staffed adequately every shift.
We cannot give away anything that would compete with the drinks and
snacks that are sold at the rest stop but we can give away ice water and
possibly coffee. Thanks for your help!
br
br
SIGN Up
FORM name=bikers action=bikers.php method=post
Name input type='text' name='name' maxlength='25'
Time SELECT name=time
OPTION value=288 selectedFriday, February 28, 8
a.m.-12 p.m./OPTION
OPTION value=2812Friday, February 28, 12 p.m.-4
p.m./OPTION
OPTION value=284Friday, February 28, 4 p.m.-8
p.m./OPTION
OPTION value=18Saturday, March 1, 8 a.m.-12
p.m./OPTION
OPTION value=112Saturday, March 1, 12 p.m.-4
p.m./OPTION
OPTION value=14Saturday, March 1, 4 p.m.-8
p.m./OPTION
OPTION value=28Sunday, March 2, 8 a.m.-12
p.m./OPTION
OPTION value=212Sunday, March 2, 12 p.m.-4
p.m./OPTION
OPTION value=24Sunday, March 2, 4 p.m.-8 p.m./OPTION
/SELECT
INPUT type=submit value=SignUp name=bikers
br
br
center
table width='95%'
tr bgColor=#99td
?
$SQL = select * from bbreak where time=288 ;
$result = mysql_db_query($db,$SQL,$connection);
$myrow = mysql_fetch_array($result);
?
center
font face='arial' size='3' color='ff'Friday February 28th 8
AM to Noon
/td/tr
? while ($myrow = mysql_fetch_array($result)){
print trtdcenter;
print $myrow[name];
print /tr/td;
}
?
/table
table width='95%'
tr bgColor=#99td
?
$SQL1 = select * from bbreak where time=2812 ;
$result1 = mysql_db_query($db,$SQL1,$connection);
$myrow1 = mysql_fetch_array($result1);
?
center
font face='arial' size='3' color='ff'Friday February 28th 12
p.m to 4 p.m.
/td/tr
? while ($myrow1 = mysql_fetch_array($result1)){
print trtdcenter;
print $myrow1[name];
print /tr/td;
}
?
/table
table width='95%'
tr bgColor=#66td
?
$SQL2 = select * from bbreak where time=284;
$result2 = mysql_db_query($db,$SQL2,$connection);
$myrow2 = mysql_fetch_array($result2);
?
center
font face='arial' size='3' color='ff'Friday February 28th 4
p.m. to 8 p.m.
/td/tr
? while ($myrow2 = mysql_fetch_array($result2)){
print trtdcenter;
print $myrow2[name];
print /tr/td;
}
?
/table
table width='95%'
tr bgColor=#99td
?
$SQL3 = select * from bbreak where time=18;
$result3 = mysql_db_query($db,$SQL3,$connection);
$myrow3 = mysql_fetch_array($result3);
?
center
font face='arial' size='3' color='ff'Saturday March 1st 8 AM
to Noon
/td/tr
? while ($myrow3 = mysql_fetch_array($result3)){
print
[PHP] Re: internal site search
Windows? Linux? Rehab Mostafa [EMAIL PROTECTED] ÓÏÏÂÝÉÌ/ÓÏÏÂÝÉÌÁ × ÎÏ×ÏÓÔÑÈ ÓÌÅÄÕÀÝÅÅ: [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... hi guys, i wanna make an internal site search, i wanna search my internal html pages and php pages..and i have no clue how to do thatany help!!! -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] VC++ with PHP
Does anyone know how to start a PHP application through Visual C++ or C++, I can start it from Javascript, but now I need to start it from either Visual C++ or C++, or I could possibly use Java Thanks Christine -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] internal site search
On Tue, 18 Feb 2003 13:35:14 +, you wrote: i wanna make an internal site search, i wanna search my internal html pages and php pages..and i have no clue how to do thatany help!!! Choices 1. Embed a Google search that only searches within your site. Eg http://www.google.com/search?hl=enie=UTF-8oe=UTF-8q=search+engines+site%3Ayahoo.com 2. Buy an off-the-shelf product that will spider your site locally and create an index 3. Do your own plain-text search against your database (eg http://www.mysql.com/doc/en/Fulltext_Search.html) If you have significant content outside the database, you'll have to search the HTML, too. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] script to check if server is up
Hi Pete, You could use PHP's command line execution programs to execute the ping command, then either check the output or check the return status of ping, if you do this make sure you pass ping some parameters that will limit the timeout and retries otherwise your PHP script may hang waiting for ping to finish for a long time. Another thing you could do would be download a file from both servers from the web or ftp or open a socket connection to a service that is running on the machine (like port 80). If you go to hotscripts.com you may find something that does what you are looking for that already exists. Jason On Tue, 2003-02-18 at 06:17, Petre Agenbag wrote: Hi I have two servers on two different networks. I would like to implement some sort of a watchdog application between the two to inform me should either of the machines go down or has a connection problem. I was thinking along the line of using a PHP script running from cron on an hourly basis to ping the server as well as another server such as google.com (they seem to be always up) and to only raise the alarm when google can be reached, but NOT the other server. My only problem is with the actual recognition of a failed ping, or for that matter a successful one? Can anyone give me some brain food as to the code for detecting a up/down connection? pseudo code: make connection with server1 get result of connection_server1 make connection with google.com get result of connection_google if connection_google !connection_server1 sms me else chill out and a plus would be to do this ONLY if the result of the next cron-run is the same, ie, don't sms me if the problem has been fixed within an hour. I just don';t know what to use to make connection and get result of connection Thanks. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Protecting files
If the script is readable by the web server (which it must be in order to be parsed) and the web server only runs as one user (which it usually does) then your scripts will be readable by other users on the same server and anyone with command line or telnet/ssh access will have at least read-only source code access to your application. You generally do not have to worry about other sites seeing your source code because PHP is a server-side language so the source is parsed before any content is sent, you would mostly worry about this if a misconfiguration on the server resulted in .php files being sent as some other content type and not being parsed by PHP. Jason On Tue, 2003-02-18 at 00:00, Nate wrote: I wonder though, if they're on a the same server but different sites. Like a shared host environment. Aw the things the bewilder the mind. Nate Bryan Lipscy [EMAIL PROTECTED] wrote in message 01c2d710$81a68e20$6301a8c0@ukiuki">news:01c2d710$81a68e20$6301a8c0@ukiuki... That is called Cross-Site Scripting (XSS). I have not been able to get access to the variables via an XSS exploit. It appears that Apache renders the php code before sending off the requesting include function. I also like the .htaccess way of preventing user access to the scripts. This is also worthy of further investigation. Bryan -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] internal site search
I've found Mnogosearch to be very powerful, fast, and relatively easy to setup, of course I was not in a shared hosting environment. Jason On Tue, 2003-02-18 at 07:19, David Otton wrote: On Tue, 18 Feb 2003 13:35:14 +, you wrote: i wanna make an internal site search, i wanna search my internal html pages and php pages..and i have no clue how to do thatany help!!! Choices 1. Embed a Google search that only searches within your site. Eg http://www.google.com/search?hl=enie=UTF-8oe=UTF-8q=search+engines+site%3Ayahoo.com 2. Buy an off-the-shelf product that will spider your site locally and create an index 3. Do your own plain-text search against your database (eg http://www.mysql.com/doc/en/Fulltext_Search.html) If you have significant content outside the database, you'll have to search the HTML, too. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] How can you execute UNIX scripts from PHP
Hi Kevin, Thanks very much for your reply, but I'm having no luck with it. In the test that I'm doing, I'm using the same code as you provided. It's on a Solaris system the permissions ownership of the shell script is correct. The shell script is also located in the same directory as the php file. All the shell script is doing is creating a file works grand when run from the command line. Have you any ideas/thoughts on this? I'd really appreciate it! Thanks Dave -Original Message- From: Kevin Waterson [mailto:[EMAIL PROTECTED]] Sent: 18 February 2003 13:26 To: [EMAIL PROTECTED] Subject: Re: [PHP] How can you execute UNIX scripts from PHP This one time, at band camp, [EMAIL PROTECTED] wrote: Hi everyone, How can you execute UNIX scripts from PHP. If somebody could let me know it would be great. if you have a shell script called blah.sh $script = 'blah.sh'; exec($script); system($script); // my favourite or if you like you could do `blah.sh` // backticks Kevin -- __ (_ \ _) ) | / / _ ) / _ | / ___) / _ ) | | ( (/ / ( ( | |( (___ ( (/ / |_| \) \_||_| \) \) Kevin Waterson Port Macquarie, Australia -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] internal site search
On Tue, 18 Feb 2003 14:19:16 +, you wrote: On Tue, 18 Feb 2003 13:35:14 +, you wrote: i wanna make an internal site search, i wanna search my internal html pages and php pages..and i have no clue how to do thatany help!!! Choices 1. Embed a Google search that only searches within your site. Eg http://www.google.com/search?hl=enie=UTF-8oe=UTF-8q=search+engines+site%3Ayahoo.com I should have also mentioned Google's web services interface here http://www.google.com/apis/ It's a more professional-looking way to access Google's engine, but it's limited to 1000 searches a day and it's currently in beta. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Problem with array variables in forms
G'day, It appears that when the URL contains square brackets (i.e. %5B and %5D instead of [ and ]) then PHP doesn't parse the variables correctly. For example, http://www.offloadonline.com/test.php?personal[name]=johnpersonal[email]=john%40blah.com works (you might need to paste the URL into your browser) but http://www.offloadonline.com/test.php?personal%5Bname%5D=johnpersonal%5Bemail%5D=john%40blah.com fails. Appears to be a known bug. Rewrote my scripts to us $_REQUEST[] Chris. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Help with authentication 'design'
Hi, I've searched the archives, bit it's not helping me much purely because it's not specific PHP code I'm after, but rather help with a login system design. So far I've got a PHP_AUTH based login which checks against a MySQL database, and if the user's details are correct it updates the database with their IP and login time, then creates sessions variables for their username and security level (for admins, mods etc). However, the more I read, the more I worry about security, so I want to try and get this as good as I can possibly get it with security my main concern. What I hope to achieve is some reusable code. All the tutorials and sample code I look at say don't use this in a production environment because it's not secure. When I'm happy with what I've got I'll make the code available, hopefully this will be a joint effort and any credit will be given. So far the steps I have are; Set $auth to false Are PHP_AUTH_USER and PHP_AUTH_PW set ? Yes - Connect to database check user/pw exists in database if they do then set $auth to true Is $auth false ? Yes - Display login box with header(); No - update database with ip and time create sessions variables forward to next page I'm after two things; ideas for a better (more comprehensive) design and potential security holes. Are sessions a bad idea ? Should I store them in my database ? Is the initial HTTP authentication a bad idea (because of either security or browser compatability) and can I make the HTTP authentication more secure ? Should I stick with a regular login form ? Is checking for a username session variable on each following page enough ? Hopefully this is relevant here. Thanks, Nick This private and confidential e-mail has been sent to you by Egg. The Egg group of companies includes Egg Banking plc (registered no. 2999842), Egg Financial Products Ltd (registered no. 3319027) and Egg Investments Ltd (registered no. 3403963) which carries out investment business on behalf of Egg and is regulated by the Financial Services Authority. Registered in England and Wales. Registered offices: 1 Waterhouse Square, 138-142 Holborn, London EC1N 2NA. If you are not the intended recipient of this e-mail and have received it in error, please notify the sender by replying with 'received in error' as the subject and then delete it from your mailbox. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] How can you execute UNIX scripts from PHP
My mistake Kevin, I did not put the full path of the shell script into the $script variable. Thanks very much for your help Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 18 February 2003 14:21 To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [PHP] How can you execute UNIX scripts from PHP Hi Kevin, Thanks very much for your reply, but I'm having no luck with it. In the test that I'm doing, I'm using the same code as you provided. It's on a Solaris system the permissions ownership of the shell script is correct. The shell script is also located in the same directory as the php file. All the shell script is doing is creating a file works grand when run from the command line. Have you any ideas/thoughts on this? I'd really appreciate it! Thanks Dave -Original Message- From: Kevin Waterson [mailto:[EMAIL PROTECTED]] Sent: 18 February 2003 13:26 To: [EMAIL PROTECTED] Subject: Re: [PHP] How can you execute UNIX scripts from PHP This one time, at band camp, [EMAIL PROTECTED] wrote: Hi everyone, How can you execute UNIX scripts from PHP. If somebody could let me know it would be great. if you have a shell script called blah.sh $script = 'blah.sh'; exec($script); system($script); // my favourite or if you like you could do `blah.sh` // backticks Kevin -- __ (_ \ _) ) | / / _ ) / _ | / ___) / _ ) | | ( (/ / ( ( | |( (___ ( (/ / |_| \) \_||_| \) \) Kevin Waterson Port Macquarie, Australia -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] Help with authentication 'design'
Oops, just remembered something else; are PHP_AUTH_USER and PHP_AUTH_PW
handled at the client side or sent in clear text back to the server for
processing ? Basically what I'm doing is once they are set is doing a select
from a database like so;
$result=mysql_query(SELECT * FROM users WHERE
username='.$_SERVER['PHP_AUTH_USER'].' AND
password='.md5($_SERVER['PHP_AUTH_PW']).', $dbconn) or die ('Unable to
execute query.');
Would this pass both variables in clear text back to the server ? If so
would it be better to do this;
$result=mysql_query(SELECT * FROM users WHERE
md5(username=)'.md5($_SERVER['PHP_AUTH_USER']).' AND
password='.md5($_SERVER['PHP_AUTH_PW']).', $dbconn) or die ('Unable to
execute query.');
Would this then pass both variables after being hashed with md5 ? Am I
barking up the wrong tree ? Or just plain barking ;oD
Thanks,
Nick
-Original Message-
From: Clarkson, Nick
Sent: 18 February 2003 14:36
To: '[EMAIL PROTECTED]'
Subject: [PHP] Help with authentication 'design'
Hi,
I've searched the archives, bit it's not helping me much purely because
it's not specific PHP code I'm after, but rather help with a login system
design. So far I've got a PHP_AUTH based login which checks against a
MySQL database, and if the user's details are correct it updates the
database with their IP and login time, then creates sessions variables for
their username and security level (for admins, mods etc). However, the
more I read, the more I worry about security, so I want to try and get
this as good as I can possibly get it with security my main concern. What
I hope to achieve is some reusable code. All the tutorials and sample code
I look at say don't use this in a production environment because it's not
secure. When I'm happy with what I've got I'll make the code available,
hopefully this will be a joint effort and any credit will be given.
So far the steps I have are;
Set $auth to false
Are PHP_AUTH_USER and PHP_AUTH_PW set ?
Yes - Connect to database
check user/pw exists in database
if they do then set $auth to true
Is $auth false ?
Yes - Display login box with header();
No - update database with ip and time
create sessions variables
forward to next page
I'm after two things; ideas for a better (more comprehensive) design and
potential security holes. Are sessions a bad idea ? Should I store them in
my database ? Is the initial HTTP authentication a bad idea (because of
either security or browser compatability) and can I make the HTTP
authentication more secure ? Should I stick with a regular login form ? Is
checking for a username session variable on each following page enough ?
Hopefully this is relevant here.
Thanks,
Nick
This private and confidential e-mail has been sent to you by Egg.
The Egg group of companies includes Egg Banking plc
(registered no. 2999842), Egg Financial Products Ltd (registered
no. 3319027) and Egg Investments Ltd (registered no. 3403963) which
carries out investment business on behalf of Egg and is regulated
by the Financial Services Authority.
Registered in England and Wales. Registered offices: 1 Waterhouse Square,
138-142 Holborn, London EC1N 2NA.
If you are not the intended recipient of this e-mail and have
received it in error, please notify the sender by replying with
'received in error' as the subject and then delete it from your
mailbox.
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] Help with authentication 'design'
Nick, md5 is a hashing function, not an encryption function. You need anti-replay if you want the password transfer to be secure On Tue, 18 Feb 2003, Clarkson, Nick wrote: Would this pass both variables in clear text back to the server ? If so would it be better to do this; [cut] Would this then pass both variables after being hashed with md5 ? Am I barking up the wrong tree ? Or just plain barking ;oD -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Sessions and IP ports
Has anyone noticed that different port numbers creates additional session ids? So if someone is browsing the site, and the remote port number changes, additional sessions are created... Is this the expected behaviour??? www.xxx.yyy.zz,3941 www.xxx.yyy.zz,3940 -- Gerard Samuel http://www.trini0.org:81/ http://test1.trini0.org:81/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] Help with authentication 'design'
Hi, Could you be more specific ? I thought md5 was a one-way hash, so you couldn't get back to the original string, so was secure. Do you mean anti-replay as in IPSEC anti-replay ? If so how do I build the equivalent in PHP ? I know very little about hashing, encryption etc. so any info would be appreciated. Thanks, Nick -Original Message- From: Peter Hicks [mailto:[EMAIL PROTECTED]] Sent: 18 February 2003 14:43 To: Clarkson, Nick Cc: '[EMAIL PROTECTED]' Subject: RE: [PHP] Help with authentication 'design' Nick, md5 is a hashing function, not an encryption function. You need anti-replay if you want the password transfer to be secure On Tue, 18 Feb 2003, Clarkson, Nick wrote: Would this pass both variables in clear text back to the server ? If so would it be better to do this; [cut] Would this then pass both variables after being hashed with md5 ? Am I barking up the wrong tree ? Or just plain barking ;oD This private and confidential e-mail has been sent to you by Egg. The Egg group of companies includes Egg Banking plc (registered no. 2999842), Egg Financial Products Ltd (registered no. 3319027) and Egg Investments Ltd (registered no. 3403963) which carries out investment business on behalf of Egg and is regulated by the Financial Services Authority. Registered in England and Wales. Registered offices: 1 Waterhouse Square, 138-142 Holborn, London EC1N 2NA. If you are not the intended recipient of this e-mail and have received it in error, please notify the sender by replying with 'received in error' as the subject and then delete it from your mailbox. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] internal site search
hi, if you can use Perl scripting in your site, have a look at this script http://www.fluffy.co.uk/fs/ it will not be of any help for the php pages , but will be fine for the html. HTH t. -Message d'origine- De : David Otton [mailto:[EMAIL PROTECTED]] Envoye : mardi 18 fevrier 2003 15:19 A : [EMAIL PROTECTED] Objet : Re: [PHP] internal site search On Tue, 18 Feb 2003 13:35:14 +, you wrote: i wanna make an internal site search, i wanna search my internal html pages and php pages..and i have no clue how to do thatany help!!! Choices 1. Embed a Google search that only searches within your site. Eg http://www.google.com/search?hl=enie=UTF-8oe=UTF-8q=search+engines+site%3Ayahoo.com 2. Buy an off-the-shelf product that will spider your site locally and create an index 3. Do your own plain-text search against your database (eg http://www.mysql.com/doc/en/Fulltext_Search.html) If you have significant content outside the database, you'll have to search the HTML, too. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] function getting redeclared
Hi,
I have a problem where I am getting the following error, and I was
wondering if anyone has seen this one before and can help me out.
Fatal error: Cannot redeclare isvalidphonenumber() (previously
declared in /home/bluekomo/public_html//classes/Registrant.class:360)
in /home/bluekomo/public_html//classes/Registrant.class on line 360
I have a script, registration.php, which calls require_once on the
Registrant.class file mentioned in the above error message. The
Registrant::setPhone() method is called more than once. Since it is
called more than once, the function isValidPhoneNumber() defined
within setPhone() is defined more than once, which I suspect is the
source of the problem. Does PHP not allow you to define a function
within a function and then call the enclosing function more than once?
Here is the relevant section of code:
354 /**
355 * sets the phone property
356 */
357 function setPhone($phone) {
358 // TODO: determine if these formats are acceptable
359 // TODO: account for extensions (separate form field?)
360 function isValidPhoneNumber($num) {
361 $valid = false;
362 if (preg_match('!\d{9,9}!', $num)) {
363 $valid = true;
364 }
365 if (preg_match('!\(?\d\d\d\)?-?\s*\d\d\d-?\s*\d\d\d\d!',
366 $num)) {
367
368 $valid = true;
369 }
370
371 return $valid;
372 }
373
374 if (isValidPhoneNumber($phone)) {
375 $this-phone = $phone;
376 }
377 }
I am using PHP 4.3.0 on a RedHat machine with Apache 1.3.x.
Thanks for your help, it's been a while since I've used PHP!
Erik
--
Erik Price
email: [EMAIL PROTECTED]
jabber: [EMAIL PROTECTED]
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] File upload problem
There may be several reasons why it doesn't work but the first thing I noticed is that
action is blank. You need to have this defined.
John M [EMAIL PROTECTED] wrote:Hello,
I have the code below. It's a simple file upload. But it doesn't work.
Before the line if(isset( $Submit )) is an echo which can I read. But after
choosing a file and press a submit nothing happens. Why is if(isset(
$Submit )) always false? Maybe my apache or php config is wrong?
I use WinXp Prof, Apache 2.0.43, PHP 4.2.3, safe_mode is on , upload_tmp_dir
is c:\tmp\ and upload_max_filesize is 2M in PHP config file.
Thanks!
[input]
[input]
echo Before submit
\n;
if(isset( $Submit ))
{
echo After submit
\n;
if ($_FILES['imagefile']['type'] == image/gif){
copy ($_FILES['imagefile']['tmp_name'],
files/.$_FILES['imagefile']['name'])
or die (Could not copy);
echo Name: .$_FILES['imagefile']['name'].;
}
else {
echo ;
echo Could Not Copy, Wrong Filetype
(.$_FILES['imagefile']['name'].);
}
}
?
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
~ Manuel Ochoa ~
Seven days is too long to wait for a gun!
Re: [PHP] Help with authentication 'design'
I've searched the archives, bit it's not helping me much purely because it's not specific PHP code I'm after, but rather help with a login system design. So far I've got a PHP_AUTH based login which checks against a MySQL database, and if the user's details are correct it updates the database with their IP and login time, then creates sessions variables for their username and security level (for admins, mods etc). However, the more I read, the more I worry about security, so I want to try and get this as good as I can possibly get it with security my main concern. What I hope to achieve is some reusable code. All the tutorials and sample code I look at say don't use this in a production environment because it's not secure. When I'm happy with what I've got I'll make the code available, hopefully this will be a joint effort and any credit will be given. So far the steps I have are; Set $auth to false Are PHP_AUTH_USER and PHP_AUTH_PW set ? Yes - Connect to database check user/pw exists in database if they do then set $auth to true Is $auth false ? Yes - Display login box with header(); No - update database with ip and time create sessions variables forward to next page I'm after two things; ideas for a better (more comprehensive) design and potential security holes. Are sessions a bad idea ? Should I store them in my database ? Is the initial HTTP authentication a bad idea (because of either security or browser compatability) and can I make the HTTP authentication more secure ? Should I stick with a regular login form ? Is checking for a username session variable on each following page enough ? I would recommend not using the client's IP address for any kind of authentication. It is well known that some large ISPs (AOL) use proxies so one client could have two different IP addresses in two subsequent requests. Sessions are not a bad idea. The default file storage works well unless you want them in a database for some reason (possibly a server farm with load balancing and you don't want sticky sessions). If you are worried about sending passwords as plain text you could either use SSL or JavaScript to create a hash of the password instead. This has been discussed recently. Client authentication is the real risk here. Using the built in session management will set either a cookie or URL variable that is used to lookup session information. I would recommend using this method and combining it with another check of some sort. That way if cookies are stolen or a URL is e-mailed or bookmarked with a PHPSESSID in it, you still have a chance of avoiding a client interfering with another client's session. One possible way of doing this would be to create a sort of fingerprint (like an md5 hash) of the client based on the HTTP headers that the client sends. Then store the fingerprint in a session variable and check it on each request. User-Agent and Accept-Language might be good choices. Here are some others to choose from: http://www.w3.org/Protocols/rfc2616/rfc2616-sec5.html#sec5.3 HTH, Brad -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] php.ini for UNIX sendmail????
Hi! What is the appropriate filepath with the flag command for the sendmail on the UNIX machine?? I send an email to yahoo and got the error message which I'm going to paste it here... --clip-- - The following addresses had permanent fatal errors - [EMAIL PROTECTED] --- The transcript of the session follows --- ... while talking to mx2.mail.yahoo.com.: MAIL From:root@chevy SIZE=40 501 Syntax error in parameters or arguments 501 [EMAIL PROTECTED] Data format error --clip-- One thing I know for sure is that the sendmail is working and that hte PHP code is working. I don't think I did the bad php command. Could it be the sendmail command be set wrong??? Thanks, FletchSOD -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] php.ini for UNIX sendmail????
Umm, are you asking for Sendmail's path? It's usually /usr/bin/sendmail -t -i but you can verify where it is on your system by typing where sendmail. On Tue, 2003-02-18 at 10:25, Scott Fletcher wrote: Hi! What is the appropriate filepath with the flag command for the sendmail on the UNIX machine?? I send an email to yahoo and got the error message which I'm going to paste it here... --clip-- - The following addresses had permanent fatal errors - [EMAIL PROTECTED] --- The transcript of the session follows --- ... while talking to mx2.mail.yahoo.com.: MAIL From:root@chevy SIZE=40 501 Syntax error in parameters or arguments 501 [EMAIL PROTECTED] Data format error --clip-- One thing I know for sure is that the sendmail is working and that hte PHP code is working. I don't think I did the bad php command. Could it be the sendmail command be set wrong??? Thanks, FletchSOD -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc signature.asc Description: This is a digitally signed message part
RE: [PHP] function getting redeclared
-Original Message- From: Erik Price [mailto:[EMAIL PROTECTED]] Sent: 18 February 2003 15:14 I have a script, registration.php, which calls require_once on the Registrant.class file mentioned in the above error message. The Registrant::setPhone() method is called more than once. Since it is called more than once, the function isValidPhoneNumber() defined within setPhone() is defined more than once, which I suspect is the source of the problem. Does PHP not allow you to define a function within a function and then call the enclosing function more than once? Well, it kinda does, but as it doesn't limit the scope in any way there's not really any point. Besides, it can lead to the kind of problems you're experiencing. Just declare the two functions sequentially in your include file. Cheers! Mike - Mike Ford, Electronic Information Services Adviser, Learning Support Services, Learning Information Services, JG125, James Graham Building, Leeds Metropolitan University, Beckett Park, LEEDS, LS6 3QS, United Kingdom Email: [EMAIL PROTECTED] Tel: +44 113 283 2600 extn 4730 Fax: +44 113 283 3211 -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] php.ini for UNIX sendmail????
Here's is the response to the command, 'where sendmail'. bash: where: command not found So, I don't have a where command but I did the phpinfo() and it showed . --clip-- Directive || Local Value || master value sendmail_from || no value || no value sendmail_path || /usr/sbin/sendmail -t -i || /usr/sbin/sendmail -t -i --clip-- I don't have email problem when I send email to anywhere, the only problem is the yahoo itself... Thanks... Adam Voigt [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Umm, are you asking for Sendmail's path? It's usually /usr/bin/sendmail -t -i but you can verify where it is on your system by typing where sendmail. On Tue, 2003-02-18 at 10:25, Scott Fletcher wrote: Hi! What is the appropriate filepath with the flag command for the sendmail on the UNIX machine?? I send an email to yahoo and got the error message which I'm going to paste it here... --clip-- - The following addresses had permanent fatal errors - [EMAIL PROTECTED] --- The transcript of the session follows --- ... while talking to mx2.mail.yahoo.com.: MAIL From:root@chevy SIZE=40 501 Syntax error in parameters or arguments 501 [EMAIL PROTECTED] Data format error --clip-- One thing I know for sure is that the sendmail is working and that hte PHP code is working. I don't think I did the bad php command. Could it be the sendmail command be set wrong??? Thanks, FletchSOD -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc
Re: [PHP] php.ini for UNIX sendmail????
Oh, ok, well how about your PHP code then (the actual mail() line)? On Tue, 2003-02-18 at 10:34, Scott Fletcher wrote: Here's is the response to the command, 'where sendmail'. bash: where: command not found So, I don't have a where command but I did the phpinfo() and it showed . --clip-- Directive || Local Value || master value sendmail_from || no value || no value sendmail_path || /usr/sbin/sendmail -t -i || /usr/sbin/sendmail -t -i --clip-- I don't have email problem when I send email to anywhere, the only problem is the yahoo itself... Thanks... Adam Voigt [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Umm, are you asking for Sendmail's path? It's usually /usr/bin/sendmail -t -i but you can verify where it is on your system by typing where sendmail. On Tue, 2003-02-18 at 10:25, Scott Fletcher wrote: Hi! What is the appropriate filepath with the flag command for the sendmail on the UNIX machine?? I send an email to yahoo and got the error message which I'm going to paste it here... --clip-- - The following addresses had permanent fatal errors - [EMAIL PROTECTED] --- The transcript of the session follows --- ... while talking to mx2.mail.yahoo.com.: MAIL From:root@chevy SIZE=40 501 Syntax error in parameters or arguments 501 [EMAIL PROTECTED] Data format error --clip-- One thing I know for sure is that the sendmail is working and that hte PHP code is working. I don't think I did the bad php command. Could it be the sendmail command be set wrong??? Thanks, FletchSOD -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc signature.asc Description: This is a digitally signed message part
[PHP] ankord php text editor
anyone use the php expert editor from Ankord? If so, what do you think? Thanks, Eddie -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] php.ini for UNIX sendmail????
Here's the command... --clip-- mail([EMAIL PROTECTED], the subject, $message, From: webmaster@$SERVER_NAME\r\n .Return-Path: [EMAIL PROTECTED] .Reply-To: webmaster@$SERVER_NAME\r\n .X-Mailer: PHP/ . phpversion()); --clip-- The bad thing is that when I send the mail. I never get an email back when something is not working right by using the return-path. Adam Voigt [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Oh, ok, well how about your PHP code then (the actual mail() line)? On Tue, 2003-02-18 at 10:34, Scott Fletcher wrote: Here's is the response to the command, 'where sendmail'. bash: where: command not found So, I don't have a where command but I did the phpinfo() and it showed . --clip-- Directive || Local Value || master value sendmail_from || no value || no value sendmail_path || /usr/sbin/sendmail -t -i || /usr/sbin/sendmail -t -i --clip-- I don't have email problem when I send email to anywhere, the only problem is the yahoo itself... Thanks... Adam Voigt [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Umm, are you asking for Sendmail's path? It's usually /usr/bin/sendmail -t -i but you can verify where it is on your system by typing where sendmail. On Tue, 2003-02-18 at 10:25, Scott Fletcher wrote: Hi! What is the appropriate filepath with the flag command for the sendmail on the UNIX machine?? I send an email to yahoo and got the error message which I'm going to paste it here... --clip-- - The following addresses had permanent fatal errors - [EMAIL PROTECTED] --- The transcript of the session follows --- ... while talking to mx2.mail.yahoo.com.: MAIL From:root@chevy SIZE=40 501 Syntax error in parameters or arguments 501 [EMAIL PROTECTED] Data format error --clip-- One thing I know for sure is that the sendmail is working and that hte PHP code is working. I don't think I did the bad php command. Could it be the sendmail command be set wrong??? Thanks, FletchSOD -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc
Re: [PHP] php.ini for UNIX sendmail????
Well your missing your \r\n at the end of your return path. On Tue, 2003-02-18 at 10:57, Scott Fletcher wrote: Here's the command... --clip-- mail([EMAIL PROTECTED], the subject, $message, From: webmaster@$SERVER_NAME\r\n .Return-Path: [EMAIL PROTECTED] .Reply-To: webmaster@$SERVER_NAME\r\n .X-Mailer: PHP/ . phpversion()); --clip-- The bad thing is that when I send the mail. I never get an email back when something is not working right by using the return-path. Adam Voigt [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Oh, ok, well how about your PHP code then (the actual mail() line)? On Tue, 2003-02-18 at 10:34, Scott Fletcher wrote: Here's is the response to the command, 'where sendmail'. bash: where: command not found So, I don't have a where command but I did the phpinfo() and it showed . --clip-- Directive || Local Value || master value sendmail_from || no value || no value sendmail_path || /usr/sbin/sendmail -t -i || /usr/sbin/sendmail -t -i --clip-- I don't have email problem when I send email to anywhere, the only problem is the yahoo itself... Thanks... Adam Voigt [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Umm, are you asking for Sendmail's path? It's usually /usr/bin/sendmail -t -i but you can verify where it is on your system by typing where sendmail. On Tue, 2003-02-18 at 10:25, Scott Fletcher wrote: Hi! What is the appropriate filepath with the flag command for the sendmail on the UNIX machine?? I send an email to yahoo and got the error message which I'm going to paste it here... --clip-- - The following addresses had permanent fatal errors - [EMAIL PROTECTED] --- The transcript of the session follows --- ... while talking to mx2.mail.yahoo.com.: MAIL From:root@chevy SIZE=40 501 Syntax error in parameters or arguments 501 [EMAIL PROTECTED] Data format error --clip-- One thing I know for sure is that the sendmail is working and that hte PHP code is working. I don't think I did the bad php command. Could it be the sendmail command be set wrong??? Thanks, FletchSOD -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc signature.asc Description: This is a digitally signed message part
RE: [PHP] Re: recursion?????
% The benefit of checking in javascript(which I suspect is enabled in most Not me! Not me! Not me! It is by no means ubiquitous. Anyone who even moderately considers security will have it turned off. The latest survey I've seen indicates that about 11% of browsers have JS disabled. About the same percent have cookies disabled. Kirk -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] php.ini for UNIX sendmail????
Well, okay, even with the '\r\n' path, I still have problem. Here's the new script and I retested it. --clip-- $message = This is a test; mail([EMAIL PROTECTED], the subject, $message, From: webmaster@$SERVER_NAME\r\n .Return-Path: [EMAIL PROTECTED]\r\n .Reply-To: webmaster@$SERVER_NAME\r\n .X-Mailer: PHP/.phpversion().\r\n); --clip-- So far, I never got the email at yahoo and I never got the email at abcoa.com. Adam Voigt [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Well your missing your \r\n at the end of your return path. On Tue, 2003-02-18 at 10:57, Scott Fletcher wrote: Here's the command... --clip-- mail([EMAIL PROTECTED], the subject, $message, From: webmaster@$SERVER_NAME\r\n .Return-Path: [EMAIL PROTECTED] .Reply-To: webmaster@$SERVER_NAME\r\n .X-Mailer: PHP/ . phpversion()); --clip-- The bad thing is that when I send the mail. I never get an email back when something is not working right by using the return-path. Adam Voigt [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Oh, ok, well how about your PHP code then (the actual mail() line)? On Tue, 2003-02-18 at 10:34, Scott Fletcher wrote: Here's is the response to the command, 'where sendmail'. bash: where: command not found So, I don't have a where command but I did the phpinfo() and it showed . --clip-- Directive || Local Value || master value sendmail_from || no value || no value sendmail_path || /usr/sbin/sendmail -t -i || /usr/sbin/sendmail -t -i --clip-- I don't have email problem when I send email to anywhere, the only problem is the yahoo itself... Thanks... Adam Voigt [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Umm, are you asking for Sendmail's path? It's usually /usr/bin/sendmail -t -i but you can verify where it is on your system by typing where sendmail. On Tue, 2003-02-18 at 10:25, Scott Fletcher wrote: Hi! What is the appropriate filepath with the flag command for the sendmail on the UNIX machine?? I send an email to yahoo and got the error message which I'm going to paste it here... --clip-- - The following addresses had permanent fatal errors - [EMAIL PROTECTED] --- The transcript of the session follows --- ... while talking to mx2.mail.yahoo.com.: MAIL From:root@chevy SIZE=40 501 Syntax error in parameters or arguments 501 [EMAIL PROTECTED] Data format error --clip-- One thing I know for sure is that the sendmail is working and that hte PHP code is working. I don't think I did the bad php command. Could it be the sendmail command be set wrong??? Thanks, FletchSOD -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc
[PHP] Set Current Array Pointer
Hi Folks, is it possible to set the pointer of an array to a specific key or value of the array, so i can write an array navi- gation script? Maybe there is a way to use pos() to set it to a specific place in the array, but i dont know how. Please help me. Sascha -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] register_globals On
I'm thinking of running a shopping cart package (osCommerce)
that requires
register_globals to be enabled. With all the warnings about
security with
register_globals enabled I'm worried.
How dangerous is it?
The key defensive step is to initialize all of your session variables at the
time you create them, like so:
$isAdmin = '';
session_register('isAdmin');
PHP will do the rest ;)
Kirk
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Set Current Array Pointer
is it possible to set the pointer of an array to a specific key or value of the array, so i can write an array navi- gation script? Maybe there is a way to use pos() to set it to a specific place in the array, but i dont know how. Well, you can always access the array elements using a numerical index. And you can use whatever method is most convenient to set that index. Alternately, you can look into current() and next(). Chris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] function getting redeclared
On Tuesday, February 18, 2003, at 10:27 AM, Ford, Mike [LSS] wrote: I have a script, registration.php, which calls require_once on the Registrant.class file mentioned in the above error message. The Registrant::setPhone() method is called more than once. Since it is called more than once, the function isValidPhoneNumber() defined within setPhone() is defined more than once, which I suspect is the source of the problem. Does PHP not allow you to define a function within a function and then call the enclosing function more than once? Well, it kinda does, but as it doesn't limit the scope in any way there's not really any point. Besides, it can lead to the kind of problems you're experiencing. Just declare the two functions sequentially in your include file. Okay, so PHP stores all functions that are not class methods in a global namespace? Or does it even do this with methods? Just curious so I don't depend on anything I'm used to from other languages thanks! Erik -- Erik Price email: [EMAIL PROTECTED] jabber: [EMAIL PROTECTED] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] ankord php text editor
Tell us what the url of Ankord is. I use HtmlKit (http://www.htmlkit.com) its the best FREE editor available out there. :) -awlad - Original Message - From: Edward Peloke [EMAIL PROTECTED] To: Php-General@Lists. Php. Net [EMAIL PROTECTED] Sent: Tuesday, February 18, 2003 3:46 PM Subject: [PHP] ankord php text editor anyone use the php expert editor from Ankord? If so, what do you think? Thanks, Eddie -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: recursion?????
On Tuesday, February 18, 2003, at 10:58 AM, Johnson, Kirk wrote: The latest survey I've seen indicates that about 11% of browsers have JS disabled. About the same percent have cookies disabled. Too many for my tastes. Probably 8% of browsers have JS and cookies disabled for a reason (knowingly) and therefore can be considered the most dangerous segment of users. (Knowledge being power and all.) Erik -- Erik Price email: [EMAIL PROTECTED] jabber: [EMAIL PROTECTED] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] php.ini question.....
HI all... At last I got safe-mode turned off (Gott sei dank!). But I'm still having a problem. I can only read Mysql DBs. I can not open a DB to update. All I can see is that there must be something wrong with either the way I complied PHP or the php.ini file. When I complied PHP I used --with-mysql. Is this enough or do I need a dir name? If a dir name what? Is there any special thing I need in PHP.ini to update mysql? Lastly, how can I make PHP read php.ini without rebooting? BTW I'm using SuSE 8.1 Pro, netscape, and KDE. Thanks, JIM -- Jim Hatridge Linux User #88484 -- BayerWulf Linux System # 129656 The Recycled Beowulf Project Looking for throw-away or obsolete computers and parts to recycle into a Linux super computer -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] MySQL DB Schema
Greetings all, Is there an easy way to pull out the schema of a MySQL for viewing?? Thanks Phillip -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] php.ini question.....
On Tue, 18 Feb 2003 17:38:28 +0100, you wrote: At last I got safe-mode turned off (Gott sei dank!). But I'm still having a problem. I can only read Mysql DBs. I can not open a DB to update. You have to connect to MySQL with a username and password. First check that the user you're connecting as has permission to do UPDATEs as well as SELECTs. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: recursion?????
Kirk -- ...and then Johnson, Kirk said... % [quoting me] % % Not me! Not me! Not me! % % It is by no means ubiquitous. Anyone who even moderately considers % security will have it turned off. % % The latest survey I've seen indicates that about 11% of browsers have JS % disabled. Hmmm... Less than I thought; I was under the impresssion that it was up nearer 20%. % % About the same percent have cookies disabled. Yeah. Just as I do :-) % % Kirk HAND :-D -- David T-G * There is too much animal courage in (play) [EMAIL PROTECTED] * society and not sufficient moral courage. (work) [EMAIL PROTECTED] -- Mary Baker Eddy, Science and Health http://justpickone.org/davidtg/ Shpx gur Pbzzhavpngvbaf Qrprapl Npg! msg97395/pgp0.pgp Description: PGP signature
Re: [PHP] php.ini for UNIX sendmail????
Found the solution to the problem, Take a look at this at http://forums.devshed.com/archive/5/2002/09/4/43013 .. Very useful. Adam Voigt [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Well your missing your \r\n at the end of your return path. On Tue, 2003-02-18 at 10:57, Scott Fletcher wrote: Here's the command... --clip-- mail([EMAIL PROTECTED], the subject, $message, From: webmaster@$SERVER_NAME\r\n .Return-Path: [EMAIL PROTECTED] .Reply-To: webmaster@$SERVER_NAME\r\n .X-Mailer: PHP/ . phpversion()); --clip-- The bad thing is that when I send the mail. I never get an email back when something is not working right by using the return-path. Adam Voigt [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Oh, ok, well how about your PHP code then (the actual mail() line)? On Tue, 2003-02-18 at 10:34, Scott Fletcher wrote: Here's is the response to the command, 'where sendmail'. bash: where: command not found So, I don't have a where command but I did the phpinfo() and it showed . --clip-- Directive || Local Value || master value sendmail_from || no value || no value sendmail_path || /usr/sbin/sendmail -t -i || /usr/sbin/sendmail -t -i --clip-- I don't have email problem when I send email to anywhere, the only problem is the yahoo itself... Thanks... Adam Voigt [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Umm, are you asking for Sendmail's path? It's usually /usr/bin/sendmail -t -i but you can verify where it is on your system by typing where sendmail. On Tue, 2003-02-18 at 10:25, Scott Fletcher wrote: Hi! What is the appropriate filepath with the flag command for the sendmail on the UNIX machine?? I send an email to yahoo and got the error message which I'm going to paste it here... --clip-- - The following addresses had permanent fatal errors - [EMAIL PROTECTED] --- The transcript of the session follows --- ... while talking to mx2.mail.yahoo.com.: MAIL From:root@chevy SIZE=40 501 Syntax error in parameters or arguments 501 [EMAIL PROTECTED] Data format error --clip-- One thing I know for sure is that the sendmail is working and that hte PHP code is working. I don't think I did the bad php command. Could it be the sendmail command be set wrong??? Thanks, FletchSOD -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc -- Adam Voigt ([EMAIL PROTECTED]) The Cryptocomm Group My GPG Key: http://64.238.252.49:8080/adam_at_cryptocomm.asc
Re: [PHP] MySQL DB Schema
On Tue, 18 Feb 2003 09:23:52 -0800, you wrote: Greetings all, Is there an easy way to pull out the schema of a MySQL for viewing?? You want the tables and the relationships between them? Not easy to get the links because of the lack of foreign keys in MySQL. If you want a table, DESC tablename. If you want to capture the create statements for the tables, mysqldump -d databasename filename.sql -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] inserting BR
I believe you are looking for pre/pre. I may be mistaken though. -- me - Original Message - From: Michael P. Carel [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, February 18, 2003 10:36 AM Subject: [PHP] inserting BR hi to all, I'm having problem posting messages that have paragraph. It's doesnt appear to have one when being viewd in the page? Any idea on how to post this properly without manually inserting a BR tags in the text box before it is being store in the database. Thanks in advance. mike -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] MySQL DB Schema
On Tuesday, February 18, 2003, at 12:23 PM, Phillip S. Baker wrote: Is there an easy way to pull out the schema of a MySQL for viewing?? If you have access to the command line (either directly or via the system() function), try this: bash 2.05 $ mysqldump -t databasename --user=username --password Erik -- Erik Price email: [EMAIL PROTECTED] jabber: [EMAIL PROTECTED] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] File upload problem
Try
if(isset($_REQUEST[Submit]))
If that doesn't work, perhaps you could just diagnose this by
print_r'ing the variables you are getting from the form:
(at the very top of your code, put):
die(print_r($_REQUEST));
-Chris
-Original Message-
From: Manuel Ochoa [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 18, 2003 7:04 AM
To: John M; [EMAIL PROTECTED]
Subject: Re: [PHP] File upload problem
There may be several reasons why it doesn't work but the first thing I
noticed is that action is blank. You need to have this defined.
John M [EMAIL PROTECTED] wrote:Hello,
I have the code below. It's a simple file upload. But it doesn't work.
Before the line if(isset( $Submit )) is an echo which can I read. But
after
choosing a file and press a submit nothing happens. Why is if(isset(
$Submit )) always false? Maybe my apache or php config is wrong?
I use WinXp Prof, Apache 2.0.43, PHP 4.2.3, safe_mode is on ,
upload_tmp_dir
is c:\tmp\ and upload_max_filesize is 2M in PHP config file.
Thanks!
[input]
[input]
echo Before submit
\n;
if(isset( $Submit ))
{
echo After submit
\n;
if ($_FILES['imagefile']['type'] == image/gif){
copy ($_FILES['imagefile']['tmp_name'],
files/.$_FILES['imagefile']['name'])
or die (Could not copy);
echo Name: .$_FILES['imagefile']['name'].;
}
else {
echo ;
echo Could Not Copy, Wrong Filetype
(.$_FILES['imagefile']['name'].);
}
}
?
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
~ Manuel Ochoa ~
Seven days is too long to wait for a gun!
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] MySQL DB Schema
On Tuesday, February 18, 2003, at 12:39 PM, David Otton wrote: You want the tables and the relationships between them? Not easy to get the links because of the lack of foreign keys in MySQL. You can add a comment to your table with the COMMENT modifier, which gives you 60 characters to describe your table's relationship to other tables. (In a table named registrants, you could have the comment registrants.user_id = users.user_id ) http://www.mysql.com/doc/en/CREATE_TABLE.html Erik -- Erik Price email: [EMAIL PROTECTED] jabber: [EMAIL PROTECTED] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] highlight_string for VB, CPP or .NET source code?
Hello all PHP offers the fantastic function highlight_string to highlight PHP source code. I was wondering whether anyone had written a function to highlight Visual Basic, CPP or .NET source code. Alternatively, would anyone have any suggestions on how to write such a function. Ideally, the output of this function / these functions would look very similar to that of highlight_string. Thank you in advance for any light that you could shed on this subject. All the best Stefen Lars _ The new MSN 8: advanced junk mail protection and 2 months FREE* http://join.msn.com/?page=features/junkmail -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] escaping quotes for redisplay
Hi, I am running into a problem, that I'm certain I've had before but for some reason don't remember how to handle. If anyone can advise me on what to do here, that would be great. I have a PHP script that accepts some user input and validates it, and if the validation fails, it re-displays the form. In the form, the text fields' value attributes are set to the user's input so that the user doesn't have to fill everything out again. The whole system works great, and I'm sure you've all seen it a hundred times before. The problem happens when a user enters a single quote, such as in the string O'Reilly. Re-displaying this value in the value attribute of the form, like this: input type='text' name='publisher' value='O'Reilly' / is clearly invalid HTML, and it shows when the page is rendered in the user's browser (only the O gets through). If I turn on magic_quotes_gpc or use addslashes, the output is like so: input type='text' name='publisher' value='O\'Reilly' / And of course, when rendered, simply allows the O\ to get through. I can solve this problem by using double-quotes instead of single-quotes for my attributes, and that is probably what I'm going to have to do. However, this means I can't let users enter double quotes, or the same thing will happen. In other fields, double-quotes might be necessary. Is there any other solution? Thanks, Erik PS: I am using htmlentities() on the output before displaying it in the browser, but it doesn't apply to singlequotes. I suppose I could str_replace it, but I'm wondering how other people handle this situation -- Erik Price email: [EMAIL PROTECTED] jabber: [EMAIL PROTECTED] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
RE: [PHP] ankord php text editor
www.ankord.com -Original Message- From: Awlad Hussain [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 18, 2003 11:38 AM To: Php-General@Lists. Php. Net Subject: Re: [PHP] ankord php text editor Tell us what the url of Ankord is. I use HtmlKit (http://www.htmlkit.com) its the best FREE editor available out there. :) -awlad - Original Message - From: Edward Peloke [EMAIL PROTECTED] To: Php-General@Lists. Php. Net [EMAIL PROTECTED] Sent: Tuesday, February 18, 2003 3:46 PM Subject: [PHP] ankord php text editor anyone use the php expert editor from Ankord? If so, what do you think? Thanks, Eddie -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] escaping quotes for redisplay
On Tue, 18 Feb 2003 13:10:33 -0500, you wrote: input type='text' name='publisher' value='O'Reilly' / input type=text name=blah value=aaquot;aa -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Problem with sessions
I have RedHat 8, Apache 2, PHP 4.2.2 My problem is with sessions, 1. page -index.html- html body form name=frmlogin method=post action=login.php input type=text name=txtlogin input type=text name=txtpassword input type=submit name=Click /form /body /html 2. page -login.php- ?php start_session(); ... some code for retrieve the user id from database in postgresql $id_user = some user id; ... $_SESSION[UID] = $id_usuario; ? from here i am to do a redirec to another page called, main.php where is the menu options i do it so.. script language=JavaScript window.location=main.php /script 3. page ?php session_start(); echo $_SESSION[UID] ? ... ... some menu options... ... ... This work very well, but when i open twice mozilla browsers and login with diferent users, i always keep the same session id, and sessions vars for two browsers... i don't know how to resolve this problem... I NEED HELP :-) Sidar Lopez Cruz - Cero Riesgo, S.A.
[PHP] application security
Hey Everyone, There have been a couple of threads lately about application security. A while ago I wrote a short article that digs into this a bit and explores one way of increasing security. I cleaned it up this morning and put it up on my site if anyone is interested. http://robinsontech.com/articles/web_app_security.php If you have any comments on it I would like to hear them. And a quick thanks to Chris Shiflett for his input. Cheers, Brad -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] I have a problem with MsSQL
Jimmy, In response to your mail of Monday 17 February 2003 at 18:54:02: JH My problem is the characters in spanish: JH example: JH Construcción (Data of MsSQL Server) JH Result in web with PHP: JH Construcci¢n Are you aware of HTML codes like the following - some are the common ones most people know, but there are some rarer characters too? ® reg;© copy; ¡ iexcl; ¢ cent; £ pound; ¤ curren; ¥ yen;¦ brvbar; § sect; ¨ uml; ª ordf; « laquo; ¬ not; shy;¯ macr; ° deg;± plusmn; ² sup2; ³ sup3; ´ acute; µ micro; ¶ para; · middot; ¸ cedil; ¹ sup1; º ordm; » raquo; ¼ frac14; ½ frac12; ¾ frac34; ¿ iquest; × times; Ø Oslash; Þ THORN; ÷ divide; ø oslash; þ thorn; euro; Ð ETH;æ aelig; è egrave; é eacute; ç ccedil; ü uuml; ö ouml; amp; lsquo; rsquo; quot; ' #39; lt; gt; ndash; mdash; Maybe you can str_replace or strtr (or some other similar function) to get your international characters in the MySQL data converted to HTML? -- Best regards, James. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re[2]: [PHP] FTP not enabled in RedHat 7.x distro
Martin, In response to your mail of Monday 17 February 2003 at 18:10:31: MM Use phpinfo() to know how your PHP was compiled. If it comes as a MM module, you should see a --enable-feature=shared. Don't know it MM ftp support can be compiled as shared, but Indeed - I think the doc's maybe (!) indicate that FTP is shared (loadable from a DLL) under MS-Windows, but only seems to be available using --enable-ftp under Unix ... but no sign of that option in the phpinfo() function. Hm. Doesn't seem to make absolute sense! I'll keep looking into it some more I guess... -- Best regards, James. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re[4]: [PHP] FTP not enabled in RedHat 7.x distro
Martin, In response to your mail of Monday 17 February 2003 at 18:27:05: MM My RH 7.3 php (distributed by RH) has --enable-ftp, so it was MM compiled with the ftp support. MM Check yor sintax. Could have a typo somewhere. Very weird - I thought RedHat would have enabled it too. I did copy-and-paste the problem command to check I was searching for the right one. Here's the error, just for clarity: - Fatal error: Call to undefined function: ftp_connect() in /home/www/script.php on line 2 ...and the line in question is like... ?php ftp_connect(); ? Anyway, maybe I should check the RH distro. Can you run the following on your box for me so I can compare please? rpm -qa | grep -i php | sort ; uname -mrspv Here's what my system shows for the above... php-4.1.2-7.1.6 php-imap-4.1.2-7.1.6 php-mysql-4.1.2-7.1.6 Linux 2.4.18-19.7.x #1 Thu Dec 12 09:00:42 EST 2002 i686 unknown Maybe even try an rpm -qi php for more details on that package. Thanks in advance. -- Best regards, James. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Re: php.ini question.....
HI All On Tuesday 18 February 2003 18:32, David Otton wrote: On Tue, 18 Feb 2003 17:38:28 +0100, you wrote: At last I got safe-mode turned off (Gott sei dank!). But I'm still having a problem. I can only read Mysql DBs. I can not open a DB to update. You have to connect to MySQL with a username and password. First check that the user you're connecting as has permission to do UPDATEs as well as SELECTs. At the command line I have no problem with Mysql... JIM -- Jim Hatridge Linux User #88484 -- BayerWulf Linux System # 129656 The Recycled Beowulf Project Looking for throw-away or obsolete computers and parts to recycle into a Linux super computer -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Wrong version displayed after upgrading to php-4.2.3
Hi, I upgraded PHP from 4.0.3pl1 to php-4.2.3 on my Apache/1.3.14 using 'apxs' and I did not received any errors during the configure and make. The installation seems to have gone just fine. However, when I load a phpinfo.php document I get the 4.0.3pl1 version displayed??? What can be wrong and what test or steps do I need to perform to correct this? Regards, Normand J. Charette PathFinder Software/Affiliate Software [EMAIL PROTECTED] www.AffiliateSoftware.net -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Problem with sessions
This work very well, but when i open twice mozilla browsers and login with diferent users, i always keep the same session id, and sessions vars for two browsers... i don't know how to resolve this problem... Use two different browsers, for example, both Mozilla and Netscape. The session cookie (with the session ID) is being shared by the two windows of your one Mozilla browser. Hence the confusion. Larry -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Wrong version displayed after upgrading to php-4.2.3
I upgraded PHP from 4.0.3pl1 to php-4.2.3 on my Apache/1.3.14 using 'apxs' and I did not received any errors during the configure and make. The installation seems to have gone just fine. However, when I load a phpinfo.php document I get the 4.0.3pl1 version displayed??? What can be wrong and what test or steps do I need to perform to correct this? I suspect the previous PHP installation is still cached. Do a make distclean or remove the config.cache file before you configure/make. Larry -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] running code on my machine wile serving other domain?
Hi there, I am wondering if I could anyhow run php code on my machine and pull the html code to another domain? Example: I do have a webapp where I do not want to give away the code to customers They want to have the same webapp, with the same database, but with their front end design Is something like this possible? If yes, please give me a hint where to look for a solution. Thanx in advance! -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Wrong version displayed after upgrading to php-4.2.3
if you did a 'make install' and didn't receive any errors, then I'd suggest making sure you restarted the Apache daemon, if that still resolves to the older version, then check the paths to the /path/to/apache/libexec/libphp.so You can look at the date/time stamp of the file to determine if the PHPv4.2.3 install overwrote the older one successfully or not. If you still have problems, then you might need to check the path you are giving to the --with-apxs for compiling PHP. HTH, Jason k Larson PathFinder Software wrote: Hi, I upgraded PHP from 4.0.3pl1 to php-4.2.3 on my Apache/1.3.14 using 'apxs' and I did not received any errors during the configure and make. The installation seems to have gone just fine. However, when I load a phpinfo.php document I get the 4.0.3pl1 version displayed??? What can be wrong and what test or steps do I need to perform to correct this? Regards, Normand J. Charette PathFinder Software/Affiliate Software [EMAIL PROTECTED] www.AffiliateSoftware.net -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Using mail() function in php.ini (Unix/Linux)
For those of you who don't know it or are struggling with the problem with the slow sending of hte e-mail behind the firewall. This problem doesn't alway lie with the DNS itself. The workaround to the problem is the hostname resolution or the alias to the hostname. Just open up the /etc/hosts file using either vi or emac and add this ... (Substitute the term in the bracket for something else) --clip-- IP Addresshostnamedomain name --clip-- Do not use the dot between the hostname and the domain name. Just like this as you normally see in most host files Ip Addresshostname 1host nickname or secondary name Enjoy. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Re: function getting redeclared
Hi Erik,
You may want to re-investigate using nested functions for this purpose, it
seems a bit illogical. The main reason is that it clutters up the source.
If you want a private function, use docblock tag @access private to let
other users know that it should not be accessed directly, or wait for php 5
when you can declare a method to be private/protected.
Having said that, if you are still into nested functions, try using
if (!method_exists($this,'isValidPhoneNumber'))
{
..
}
Greg
Erik Price [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Hi,
I have a problem where I am getting the following error, and I was
wondering if anyone has seen this one before and can help me out.
Fatal error: Cannot redeclare isvalidphonenumber() (previously
declared in /home/bluekomo/public_html//classes/Registrant.class:360)
in /home/bluekomo/public_html//classes/Registrant.class on line 360
I have a script, registration.php, which calls require_once on the
Registrant.class file mentioned in the above error message. The
Registrant::setPhone() method is called more than once. Since it is
called more than once, the function isValidPhoneNumber() defined
within setPhone() is defined more than once, which I suspect is the
source of the problem. Does PHP not allow you to define a function
within a function and then call the enclosing function more than once?
Here is the relevant section of code:
354 /**
355 * sets the phone property
356 */
357 function setPhone($phone) {
358 // TODO: determine if these formats are acceptable
359 // TODO: account for extensions (separate form field?)
360 function isValidPhoneNumber($num) {
361 $valid = false;
362 if (preg_match('!\d{9,9}!', $num)) {
363 $valid = true;
364 }
365 if (preg_match('!\(?\d\d\d\)?-?\s*\d\d\d-?\s*\d\d\d\d!',
366 $num)) {
367
368 $valid = true;
369 }
370
371 return $valid;
372 }
373
374 if (isValidPhoneNumber($phone)) {
375 $this-phone = $phone;
376 }
377 }
I am using PHP 4.3.0 on a RedHat machine with Apache 1.3.x.
Thanks for your help, it's been a while since I've used PHP!
Erik
--
Erik Price
email: [EMAIL PROTECTED]
jabber: [EMAIL PROTECTED]
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] NULL character help
http://www.psikon.com/vartest.php http://www.psikon.com/vartest.phps how can I get rid of that null character or am I forced to use sub_str in this case? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
