Re: [PHP] MySql Injection advice

2009-07-12 Thread Zareef Ahmed
2009/7/12 Haig Dedeyan hdede...@videotron.ca On July 11, 2009 08:21:34 pm Haig Dedeyan wrote: On Sun, Jul 12, 2009 at 4:09 AM, Haig Dedeyan hdede...@videotron.ca wrote: On July 11, 2009 10:57:14 am Haig Dedeyan wrote: At 10:12 PM -0400 7/10/09, Haig Dedeyan wrote: [1]

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-12 Thread Lenin
On Sun, Jul 12, 2009 at 6:49 AM, Daniel Brown danbr...@php.net wrote: Sorry for TOP posting This mailing list also don't force us to be good :) FORCE, no. ENCOURAGE, yes. Particularly in long threads like this one. Check the rules. They're not just there to take up space

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-12 Thread Eddie Drapkin
On Sun, Jul 12, 2009 at 3:05 AM, Leninle...@phpxperts.net wrote: On Sun, Jul 12, 2009 at 6:49 AM, Daniel Brown danbr...@php.net wrote: Sorry for TOP posting This mailing list also don't force us to be good :)    FORCE, no.  ENCOURAGE, yes.  Particularly in long threads like this

Re: [PHP] A prepared statements question

2009-07-12 Thread Zareef Ahmed
On Sun, Jul 12, 2009 at 10:01 AM, Jason Carson ja...@jasoncarson.ca wrote: Hello everyone, I am having a problem getting my prepared statements working. Here is my setup... index.php - authenticate.php - admin.php 1)index.php has a login form on it so when someone enters their username

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-12 Thread Lenin
On Sun, Jul 12, 2009 at 2:08 PM, Eddie Drapkin oorza...@gmail.com wrote: 2) Why does every thread lately degrade into chatter about top/bottom posting? *looks RIGHT AT D. Brown* Ask him :D :P

Re: [PHP] RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-12 Thread Ashley Sheridan
I was using the php.net website for ages for syntax reference, saw the mailing list and figured why not. No amazing story, but now you're all stuck with me :p -- Thanks, Ash http://www.ashleysheridan.co.uk -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit:

Re: [PHP] HTTP headers and include()

2009-07-12 Thread Lenin
On Fri, Jul 10, 2009 at 12:49 PM, Michael A. Peters mpet...@mac.com wrote: James Colannino wrote: White space can cause this - make sure your code has ?php as the very top and ? at the very bottom, or the white space may trigger the web server to send a header and the white space as data

Re: [PHP] HTTP headers and include()

2009-07-12 Thread Ashley Sheridan
On Sunday 12 July 2009 12:01:12 Lenin wrote: On Fri, Jul 10, 2009 at 12:49 PM, Michael A. Peters mpet...@mac.com wrote: James Colannino wrote: White space can cause this - make sure your code has ?php as the very top and ? at the very bottom, or the white space may trigger the web

Re: [PHP] HTTP headers and include()

2009-07-12 Thread tedd
At 12:09 PM +0100 7/12/09, Ashley Sheridan wrote: On Sunday 12 July 2009 12:01:12 Lenin wrote: On Fri, Jul 10, 2009 at 12:49 PM, Michael A. Peters mpet...@mac.com wrote: James Colannino wrote: White space can cause this - make sure your code has ?php as the very top and ? at the

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-12 Thread tedd
At 5:16 AM +0530 7/12/09, Zareef Ahmed wrote: I always said : Being good and Being FORCED to be good are two different things... and PHP normally don't force us to be good that why PHP is the most popular programming language with a large code base which WORKS but not as per the standard or

Re: [PHP] MySql Injection advice

2009-07-12 Thread tedd
At 6:39 PM -0400 7/11/09, Haig Dedeyan wrote: [1] mysql_query(INSERT INTO phonedir (fname, lname) VALUES('$new_fname','$new_lname')) or die(mysql_error()); or [2] mysql_query(INSERT INTO phonedir (fname, lname)

Re: [PHP] MySql Injection advice

2009-07-12 Thread tedd
Hi gang: I am top posting only to show that the following post makes no sense as to who said what. At what point here Zareef, did you think you were helping anyone? Or is this more of your I'm going to do whatever I want attitude? I would hate to review code with such lack of forethought

Re: [PHP] MySql Injection advice

2009-07-12 Thread tedd
At 9:26 PM -0400 7/11/09, Haig Dedeyan wrote: @Tedd - I will be looking into prepared statements eventually but I still want to understand escaping. Haig: I'm not the one pushing the prepared statements, that's someone else. However, I can see how you might think that considering how

[PHP] Re: RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-12 Thread tedd
At 11:11 PM -0400 7/11/09, D.M.Jackson wrote: I'll try not to be a nuisance with frivolous questions and go to the docs and search engines first. Mark: First, welcome to the list. Second, there are no frivolous questions. If you have a question, just ask. Third, searching the docs and SE

Re: [PHP] Re: RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-12 Thread tedd
At 11:17 PM -0500 7/11/09, Adam Shannon wrote: Hello, I've been a developer for a little over a year now (I started when I just turned 16), frankly I love coding and helping out others. I joined the list as my second mailing list (WHATWG is first), mailing lists just provide a different

Re: [PHP] RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-12 Thread tedd
At 8:54 AM +0100 7/12/09, Ashley Sheridan wrote: I was using the php.net website for ages for syntax reference, saw the mailing list and figured why not. No amazing story, but now you're all stuck with me :p -- Thanks, Ash Ash: You've been here longer than 90 days, right? Apparently your

Re: [PHP] RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-12 Thread Ashley Sheridan
On Sunday 12 July 2009 14:32:01 tedd wrote: At 8:54 AM +0100 7/12/09, Ashley Sheridan wrote: I was using the php.net website for ages for syntax reference, saw the mailing list and figured why not. No amazing story, but now you're all stuck with me :p -- Thanks, Ash Ash: You've been

Re: [PHP] RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-12 Thread Daniel Brown
On Sun, Jul 12, 2009 at 09:45, Ashley Sheridana...@ashleysheridan.co.uk wrote: Yeah, I'll put it down to old age and not my reading laziness! You're just lucky Tedd got to you first, Ash. I was going to fairy-slap you for messing up the rotation! You've been here, what, about a year now?

Re: [PHP] MySql Injection advice

2009-07-12 Thread Zareef Ahmed
On Sun, Jul 12, 2009 at 6:32 PM, tedd tedd.sperl...@gmail.com wrote: Hi gang: I am top posting only to show that the following post makes no sense as to who said what. At what point here Zareef, did you think you were helping anyone? Or is this more of your I'm going to do whatever I want

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-12 Thread Daniel Brown
On Sun, Jul 12, 2009 at 03:08, Eddie Drapkinoorza...@gmail.com wrote: Two things: 1) I've never head of an email list changing their rules to cater to a fringe crowd, like Nokia 6020 users. 2) Why does every thread lately degrade into chatter about top/bottom posting? *looks RIGHT AT D.

Re: [PHP] RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-12 Thread Ashley Sheridan
On Sunday 12 July 2009 15:54:27 Daniel Brown wrote: On Sun, Jul 12, 2009 at 09:45, Ashley Sheridana...@ashleysheridan.co.uk wrote: Yeah, I'll put it down to old age and not my reading laziness! You're just lucky Tedd got to you first, Ash. I was going to fairy-slap you for messing up

Re: [PHP] RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-12 Thread Still Learnin'
Daniel P. Brown wrote: What I would like to know is how you found out about this list. I had seen it and the others on php.net. When I decided to get serious about programming in general and PHP in particular, I signed up. Lurked for a while. Then finally posted when I had an issue I

Re: [PHP] MySql Injection advice

2009-07-12 Thread tedd
At 8:24 PM +0530 7/12/09, Zareef Ahmed wrote: On Sun, Jul 12, 2009 at 6:32 PM, tedd mailto:tedd.sperl...@gmail.comtedd.sperl...@gmail.com wrote: Hi gang: I am top posting only to show that the following post makes no sense as to who said what. At what point here Zareef, did you think you

Re: [PHP] MySql Injection advice

2009-07-12 Thread Zareef Ahmed
On Sun, Jul 12, 2009 at 8:42 PM, tedd tedd.sperl...@gmail.com wrote: At 8:24 PM +0530 7/12/09, Zareef Ahmed wrote: On Sun, Jul 12, 2009 at 6:32 PM, tedd mailto:tedd.sperl...@gmail.com tedd.sperl...@gmail.com wrote: Hi gang: I am top posting only to show that the following post makes no

Re: [PHP] HTTP headers and include()

2009-07-12 Thread Zareef Ahmed
On Fri, Jul 10, 2009 at 12:54 PM, James Colannino ja...@colannino.orgwrote: Eddie Drapkin wrote: HTTP headers are sent and finalized after the first bit of output. I had the same problem before and it turned out to be because I had a close tag ? at the end of a file followed by some

[PHP] Re: RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-12 Thread pan
Daniel P. Brown wrote: What I would like to know is how you found out about this list. Hi, I've been using php in a unix enviroment from the beginning and always found sufficient and useful information without using news.php.net . Recently I've begun maintaining a mixed OS system and have

[PHP] Establishing PHP Session From a Different Host

2009-07-12 Thread Daniel Kolbo
Hello, How does one continue a php session on a different domain (domain B) than the domain (domain A) that started the session? That is, I want to hand-off a session to another domain, but I do not see how to do this as one cannot set a cookie for another domain (for valid reasons). I was

Re: [PHP] Establishing PHP Session From a Different Host

2009-07-12 Thread Daniel Brown
On Sun, Jul 12, 2009 at 12:37, Daniel Kolbokolb0...@umn.edu wrote: Hello, How does one continue a php session on a different domain (domain B) than the domain (domain A) that started the session? Simple answer: you don't. Extended answer: you can, but only if the domains reside on

Re: [PHP] HTTP headers and include()

2009-07-12 Thread James Colannino
Zareef Ahmed wrote: You should get a headers already sent output started at kind of error if you have enabled error reporting with display_errors ON. Actually, I did. I just didn't think to mention it in my first post. The thing was that it said it was coming from one of my includes,

Re: [PHP] Re: RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-12 Thread Per Jessen
pan wrote: Recently I've begun maintaining a mixed OS system and have a need to use php on windows (mostly to encourage the shop to move everything off windows) . The information and support of php on windows is not as good. Thus, I sought more sources and decided to use news.php.net.

Re: [PHP] HTTP headers and include()

2009-07-12 Thread Zareef Ahmed
On Sun, Jul 12, 2009 at 11:27 PM, James Colannino ja...@colannino.orgwrote: Zareef Ahmed wrote: You should get a headers already sent output started at kind of error if you have enabled error reporting with display_errors ON. Actually, I did. I just didn't think to mention it in my

Re: [PHP] Establishing PHP Session From a Different Host

2009-07-12 Thread Daniel Kolbo
Daniel Brown wrote: On Sun, Jul 12, 2009 at 12:37, Daniel Kolbokolb0...@umn.edu wrote: Hello, How does one continue a php session on a different domain (domain B) than the domain (domain A) that started the session? Simple answer: you don't. Extended answer: you can, but only if

Re: [PHP] A prepared statements question

2009-07-12 Thread Jason Carson
Hello everyone, I am having a problem getting my prepared statements working. Here is my setup... index.php - authenticate.php - admin.php 1)index.php has a login form on it so when someone enters their username the form redirects to another page I call authenticate.php. 2)In the

Re: [PHP] MySql Injection advice

2009-07-12 Thread Nisse Engström
On Sat, 11 Jul 2009 21:26:36 -0400, Haig Dedeyan wrote: On Sun, Jul 12, 2009 at 4:09 AM, Haig Dedeyan hdede...@videotron.ca wrote: mysql_query(INSERT INTO phonedir (fname, lname) VALUES('$new_fname','$new_lname')) or die(mysql_error()); I won;t be using 2x escapes but I just need to know

Re: [PHP] MySql Injection advice

2009-07-12 Thread Paul M Foster
On Sun, Jul 12, 2009 at 09:07:45AM -0400, tedd wrote: snip As for prepared statements, I'm no authority on them, but from what I've read they are not going to be something I'll be practicing anytime soon. Aside from Stuart's comments about slowness, what else have you read that makes you

Re: [PHP] A prepared statements question

2009-07-12 Thread Nisse Engström
On Sun, 12 Jul 2009 15:25:15 -0400 (EDT), Jason Carson wrote: For anyone reading this thread, here is the final code that I used... $link = mysqli_connect($hostname, $username, $password, $database); $stmt = mysqli_prepare($link, SELECT * FROM administrators WHERE adminusers=?);

Re: [PHP] A prepared statements question

2009-07-12 Thread Eddie Drapkin
 if (   $link = mysqli_connect($hostname, $username, $password, $database)       $stmt = mysqli_prepare($link, $q)               mysqli_stmt_bind_param($stmt, s, $adminuser)               mysqli_stmt_execute($stmt)               mysqli_stmt_store_result($stmt))  {    $count =

Re: [PHP] PHP/mysql equivalent of PEAR's tableInfo()??

2009-07-12 Thread Govinda
On Sat, Jul 11, 2009 at 19:57, Govindagovinda.webdnat...@gmail.com wrote: I have been using PEAR's tableInfo() to remind myself about the columns in the table.. but now I want to see as much data as possible about the table and its contents *without* using PEAR. (I.e. just using built in

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-12 Thread Paul M Foster
On Sat, Jul 11, 2009 at 11:23:11AM -0400, Daniel Brown wrote: snip I used $html =HTML because it then syntax-highlights as HTML+PHP in Vim, and as many know, almost everything I do is from the command line and Vim. Vim FTW! (And mutt for the pwnage!) Paul -- Paul M. Foster -- PHP

Re: [PHP] PHP/mysql equivalent of PEAR's tableInfo()??

2009-07-12 Thread Daniel Brown
Top-posting. This would be an excellent question for Prune (CC'd) to field, based on the error message. Prune? On Sun, Jul 12, 2009 at 17:49, Govindagovinda.webdnat...@gmail.com wrote: On Sat, Jul 11, 2009 at 19:57, Govindagovinda.webdnat...@gmail.com wrote: I have been using

Re: [PHP] A prepared statements question

2009-07-12 Thread Daniel Brown
2009/7/12 Eddie Drapkin oorza...@gmail.com: This is just my opinion, of course :) Which is welcome. Preferrably, on the php-db@ list, but welcome nonetheless. ;-P -- /Daniel P. Brown daniel.br...@parasane.net || danbr...@php.net http://www.parasane.net/ || http://www.pilotpig.net/ Check

Re: [PHP] phpscriptor.com

2009-07-12 Thread Paul M Foster
On Sat, Jul 11, 2009 at 08:14:35AM -0700, PHPScriptor wrote: Ok this may look like spam but what the hell... I'm the owner of phpscriptor.com, I had bigg plans with this domainname but... well yes, no time. So I'm selling it. I don't want to make profit out of it. So for, lets say 200

Re: [PHP] PHP/mysql equivalent of PEAR's tableInfo()??

2009-07-12 Thread Zareef Ahmed
On Mon, Jul 13, 2009 at 3:19 AM, Govinda govinda.webdnat...@gmail.comwrote: On Sat, Jul 11, 2009 at 19:57, Govindagovinda.webdnat...@gmail.com wrote: I have been using PEAR's tableInfo() to remind myself about the columns in the table.. but now I want to see as much data as possible about