[PHP] Issue with encrypted string created with Crypt_CBC and urls and mod_rewrite

2006-02-22 Thread Dan Rossi
hi there im having issue decoding an encoded string created with a pear package Crypt_CBC which i am encoding a uri into the string and sending to a rewrite url. The query string is not returning the encoded part of the url properly for some reason and not decoding properly. I have already

[PHP] PHP 5 DOM, XPath, UTF-8, and Form Input

2005-03-19 Thread C Drozdowski
I have been doing some testing and need confirmation that the following is correct. You have a DOMDocument that potentially contains UTF-8 encoded data (it might not however). You want to search it via DOMXpath-query() using a value that comes from a $_POST value. If the page that posts

Re: [PHP] Issue with encrypted string created with Crypt_CBC and urls and mod_rewrite

2006-02-22 Thread Dan Rossi
wrote: hi there im having issue decoding an encoded string created with a pear package Crypt_CBC which i am encoding a uri into the string and sending to a rewrite url. The query string is not returning the encoded part of the url properly for some reason and not decoding properly. I have

Re: [PHP] Lions and tigers and slashes, oh my!

2006-01-13 Thread Jochem Maas
Jay Blanchard wrote: [snip] hope the kick didn't break anything. :-) [/snip] Nah, just having a senior moment. Since it is a query string issue I converted the database (even though it is strictly a web database in this case) to 'Oil Gas'. The query string sees the ampersand and doesn't show

RE: [PHP] Re: amp; in Query String

2002-11-26 Thread Ernest E Vogelsinger
At 00:00 27.11.2002, Jonathan Rosenberg \(Tabby's Place\) said: [snip] Ok ... I take back what I said about amp; not working in a query string. It works just fine. [snip] Ahhh - and I just created a test page for all

Re: [PHP] URL

2004-07-21 Thread John W. Holmes
this, or not... any solucion ?? How about $_SERVER['QUERY_STRING']? That _should_ contain the current query string with the values still encoded, but I'm not sure on that. If they aren't still encoded, then just rebuild the query string by looping through $_GET. $url = $_SERVER['PHP_SELF

Re: [PHP] A problem about urlencode

2004-10-25 Thread raditha dissanayake
Teng Wang wrote: I have a url containing some multi-byte characters. So I need urlencode() to change these characters into the %xx form. However, when I encode the whole url string, / is also be encoded as %2F. How to solve this problem? I don't want to analyze the url string before/after

[PHP] Problems passing variables from Javascript to PHP

2003-06-17 Thread Daniel
Hello =) I'm embedding an SQL query constructed in Javascript to an URL and opening it in PHP where I try to execute it. Problem is, the string arrives garbled, with all the apostrophes escaped. This must be Javascript's type of safe url encoding, but how would I go about decoding it in PHP? I

[PHP] Re: PHP 5 DOM, XPath, UTF-8, and Form Input

2005-03-21 Thread Jason Barnett
C Drozdowski wrote: I have been doing some testing and need confirmation that the following is correct. You have a DOMDocument that potentially contains UTF-8 encoded data (it might not however). You want to search it via DOMXpath-query() using a value that comes from a $_POST value

Re: Re: [PHP] passing variables in javascript

2001-02-22 Thread Simon Garner
From: "Nicholas W. Miller" [EMAIL PROTECTED] H ... is there anyway to do this without requiring the page with the link to use PHP? Well if the string you're going to urlencode() is always going to be the same, then just run it through once, grab the encoded version and

[PHP] Decoding a URL without decoding values

2004-03-21 Thread Ben Ramsey
it to the query string, it looks like this: http://test.alpharetta.ga.us/index.php?m=linkscategory=Recreation+%26+Parksgo.x=22go.y=7 As you can see, there are already encoded entities in the URL, which are further encoded when passed through urlencode(). The problem I'm having is that when I

RE: [PHP] Question: urldecode

2004-12-09 Thread Stuart Felenstein
runs fine. I just know that I've seen the hex's normally converted in the browser bar. Further, I was assuming I should add the urldecode to the query string. As I had posted originally. From the example in the manual it appears I might to pass the params through a urldecode counter loop

RE: [PHP] Re: amp; in Query String

2002-11-29 Thread Malcolm Brownell
Looks fine in Opera 6.03 hth http://www.vogelsinger.at/test.php?par1=value1par2=value2par3=value3 Opera Version 6.03 Build 1107 Platform Win32 System Windows 98 Java Sun Java Runtime Environment 1.4 Testing the query string This is the full query string ($_SERVER['QUERY_STRING']): par1

Re: [PHP] URL encode

2005-02-23 Thread Jochem Maas
of html entity %ca so a user is entering '%carlos%'? firstly it _looks_ like you are adding the '%' signs in order to have this affect the way a search query is performed - if this is the case maybe you should consider wrapping the search term on the server side _after_ you have recieved the string? also

Re: [PHP] Question: urldecode

2004-12-09 Thread Richard Lynch
it there. You'll drive yourself crazy changing it here, where it's already in the system in a format you don't want. My *GUESS* is that you're taking the QUERY string and stuffing it into your database. Since you grab the raw query string, it's in Hex-encoded format. Maybe that's a Good Thing to store

RE: [PHP] 2 Qs: Passing current URL with session and how to avoid session timeout???

2003-01-18 Thread Chris Shiflett
--- Cal Evans [EMAIL PROTECTED] wrote: I usually just pass this kind of info around on the URL. http://mypage.com/mypage.php?prevURL=http://mypage.com/lastpage.php if I have to pass a full query string then I urlencode() it first and urldecode() it on the other side. Just as a bit

Re: [PHP] '' Sign in _GET Parameter

2003-08-22 Thread CPT John W. Holmes
when passing the name of the company in the parent script. The character separates variables in the query string, so it must be encoded if it appears in the data. Take a look at http://us2.php.net/urlencode ---John Holmes... -- PHP General Mailing List (http://www.php.net/) To unsubscribe

Re: [PHP] '' Sign in _GET Parameter

2003-08-22 Thread Pushpinder Singh Garcha
. The character separates variables in the query string, so it must be encoded if it appears in the data. Take a look at http://us2.php.net/urlencode ---John Holmes... -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List

Re: [PHP] '' Sign in _GET Parameter

2003-08-24 Thread AciD
one throw some light here. I am sure something minor is to be done when passing the name of the company in the parent script. The character separates variables in the query string, so it must be encoded if it appears in the data. Take a look at http://us2.php.net/urlencode ---John Holmes... -- PHP

Re: [PHP] URL

2004-07-21 Thread zareef ahmed
=valueanother_parameter=value the ?some_parameters=value are alredy present and i need to redirect them again... I know that are some fuctions to manage this, or not... any solucion ?? How about $_SERVER['QUERY_STRING']? That _should_ contain the current query string with the values still encoded

[PHP] Odd URL problem

2002-08-29 Thread Steve Lane
running RedHat 7.1, Apache 1.3.23, PHP 4.1.1, they seem to work fine. When it works, I click an encoded link in my mailer, and my browser tries to access the URL with a correct, decoded query string. When it fails, I get a message from the browser (IE 5+ only for this app) that says Attempt

RE: [PHP] Decoding a URL without decoding values

2004-03-22 Thread Ford, Mike [LSS]
processing. Before I urlencode() the URL and pass it to the query string, it looks like this: http://test.alpharetta.ga.us/index.php?m=linkscategory=Recrea tion+%26+Parksgo.x=22go.y=7 As you can see, there are already encoded entities in the URL, which are further encoded when passed

RE: [PHP] Question: urldecode

2004-12-09 Thread Ford, Mike
add the urldecode to the query string. I don't quite understand this -- if you mean the query string supplied to your script and manifesting in your $_GET array, then no, very unlikely, since this should have been taken care of by the Web server before it gets anywhere near PHP. If you're

Re: [PHP] how do I spoof a get request

2003-08-14 Thread Analysis Solutions
are the times it doesn't work? Are you always passing the same exact query string? If so, then their server is flaky. Or, if are you sending different info in the query string at different times, then you are likely not passing the info correctly. When constructing the query string, the values

[PHP] Very Large MySQL Query String

2002-05-06 Thread David Bouw
of is that the mysql query string is to long.. ?? (The data when encoded is about 1.3 MB of text).. This is the source code.. if (!($userfile_size == 0)) {$fd = fopen ($userfile, r); $contents = fread ($fd, filesize ($userfile)); fclose ($fd); unlink ($userfile); echo Eerste RAW

[PHP] Re: Very Large MySQL Query String

2002-05-06 Thread Julio Nobrega Trabalhando
es I run the function: chunk_split(base64_encode($binaryfile)); to encode it, this to transform the binary file to text.. (Works great!!!) When the query was called to insert the data, nothing happens, also no error from mysql... Only think I can think of is that the mysql query string is

Re: [PHP] Re: PHP] can't pass complete URL (part of the query string) from

2002-11-26 Thread Chris Shiflett
/displayem.php3?cat=5 olimit=0 zid=1 lid=1 The URL you want to set ref to needs to be URL encoded. You can use rawurlencode() to achieve this. You will know you have it right when your HTML form tag looks like this: form action=http://embitec.com/fishcart/email.php?ref=http%3A%2F%2Fembitec.com%2Ffishcart

Re[2]: [PHP] saving form data

2004-02-23 Thread Richard Davey
file attachments and attach CFI them to the emailed form results? Then how about in reverse? Add something to the end of the Perl script that passes the values to a PHP script? It could even do it via the query string, maybe also passing an md5 encoded password that only your two scripts know

Re: [PHP] saving form data

2004-02-23 Thread Charlie Fiskeaux II
to the emailed form results? Then how about in reverse? Add something to the end of the Perl script that passes the values to a PHP script? It could even do it via the query string, maybe also passing an md5 encoded password that only your two scripts know (in order to stop someone spoofing your script

[PHP] I18n problems: Working with double-byte languages

2002-01-14 Thread Junior, Ricardo
-byte string to its relative in UTF8 chars. Reverting this string encoded to UTF8 with utf8_decode function, the browser can display successfully the Korean chars (because the individual bytes of the double-byte string will be as them were before), but Oracle can't sort the strings properly because

[PHP] Re: I18n problems: Working with double-byte languages

2002-01-15 Thread Yasuo Ohgaki
converted each byte from double-byte string to its relative in UTF8 chars. Reverting this string encoded to UTF8 with utf8_decode function, the browser can display successfully the Korean chars (because the individual bytes of the double-byte string will be as them were before), but Oracle can't

RE: [PHP] Question: urldecode

2004-12-09 Thread Ford, Mike
forget what it's called, but query string looks like this: %5B%5D=3. I think the %5B and 5D should be []. Are you seeing the URL-encoded version *only* in your browser's Address/Location bar? If so, that's perfectly normal and nothing to worry about -- it should be automatically decoded by the Web

Re: [PHP] Lions and tigers and slashes, oh my!

2006-01-13 Thread Richard Lynch
data goes in your database: 'Oil Gas' When the category is clicked the query string shows just an ampersand, i.e. Filter=ProcessFilterKey=Oil%20%20GasOrder=ApplicationDirection=ASCcomm ents= and therefore just shows as an '' and the query only sees 'Oil'. Shows where? Until you tell us what

php-general Digest 26 May 2011 19:00:57 -0000 Issue 7329

2011-05-26 Thread php-general-digest-help
bytes  UTF-8 encoded character a single character How can it be break into the REAL bytes array that represent the UTF-8 string  and how  can we reassembled the bytes array  back to UTF-8? -- Best Regards, *Eli Orr* CTO Founder *LogoDial Ltd.* __ You can use mb_substr [1] with a UTF

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Maciek Sokolewicz
special. For MySQL however, it will have turned into 2 different operations, which will both be executed. It will first SELECT a FROM b, and then DROP TABLE b. Can this be resolved by casting the whole query to a string in PHP? No. It's already a string. However, if you base64_encode a part

Re: [PHP] Re: Very Large MySQL Query String

2002-05-07 Thread David Bouw
echo the query to screen and see that the uploaded file is encoded to a very nice (large) text-string.. Any other suggestions are greatly appreciated. With kind regards, David Bouw If I use the link to the file, i.e. file//C:\filedir\file.pdf or .txt or whatever how do I insert/update

[PHP] Re: Very Large MySQL Query String

2002-05-06 Thread Kirk Babb
nothing happens, also no error from mysql... Only think I can think of is that the mysql query string is to long.. ?? (The data when encoded is about 1.3 MB of text).. This is the source code.. if (!($userfile_size == 0)) {$fd = fopen ($userfile, r); $contents = fread ($fd, fil

Re: [PHP] Selecting Rows Based on Row Values Being in Array

2007-07-18 Thread kvigor
This is working so far but I need to add an additional search. This is what I have so far: $in_list = '.join(',',$cen_chiefs).'; $query_cen_chiefs = SELECT * FROM central WHERE CONCAT(strName,' ',strCity,' ',strState) IN({$in_list}) ORDER BY conName; I also need the query to return records

Re: [PHP] Selecting Rows Based on Row Values Being in Array

2007-07-02 Thread kvigor
the function above array_walk($list, 'mysql_clean'); # This will return a string formated like this. # '6blue40lbs','7orange50lbs','8orange60lbs','9purple70lbs' $IN_VALUE = '.join(',', $list).'; $SQL = SELECT * FROM my_Table WHERE CONCAT(value1, value2, value3) IN ({$IN_VALUE}); # The final query

Re: [PHP] Selecting Rows Based on Row Values Being in Array

2007-06-30 Thread Jim Lucas
how could I set up a query that would SELECT the entire row, if the row contained $varListof 3outOf_10Fields[1]. Open to any suggestions or work arounds. I'm playing with extract() but code is too crude to even post. I would suggest approaching the problem with a slightly different thought

Re: [PHP] RSS Feed Accented Characters

2011-09-30 Thread Richard Quadling
Versículo del Día: Pray For Others: Incoming Prayer Requests string(63) El Vers퀀culo del D퀀a: Pray For Others: Incoming Prayer Requests string(65) El Versículo del Día: Pray For Others: Incoming Prayer Requests notice that the correct strings are 2 bytes longer? The í is encoded as 0xC3AD or U

Re: [PHP] RSS Feed Accented Characters

2011-09-30 Thread Ron Piggott
: Incoming Prayer Requests string(65) El Versículo del Día: Pray For Others: Incoming Prayer Requests notice that the correct strings are 2 bytes longer? The í is encoded as 0xC3AD or U+00ED. -- Richard Quadling Twitter : EE : Zend : PHPDoc @RQuadling : e-e.com/M_248814.html : bit.ly/9O8vFY : bit.ly

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Jim Lucas
then? if you were to cast the original input into string using (string), wouldn't you be in the same shoes? Re-read his example. He encodes the data in PHP. But decodes the data in SQL. So, if you echo the SQL statement, you would see a base64 encoded string that SQL then decodes. also

Re: [PHP] Re: Very Large MySQL Query String

2002-05-06 Thread David Bouw
or maybe something I am overlooking..) I can though echo the query to screen and see that the uploaded file is encoded to a very nice (large) text-string.. Any other suggestions are greatly appreciated. With kind regards, David Bouw If I use the link to the file, i.e. file//C:\filedir

Re: [PHP] Re: Very Large MySQL Query String

2002-05-06 Thread Javier
Megabyte.. (I know have little more than a 1 MB..) I will try some things tomorrow, but I can't find out what the problem is.. (Column size, PHP-Mysql string length limitation or maybe something I am overlooking..) I can though echo the query to screen and see that the uploaded file is encoded

Re: [PHP] Thinking out loud - a continuation...

2012-03-21 Thread Adam Richardson
On Wed, Mar 21, 2012 at 2:39 PM, Jay Blanchard jay.blanch...@sigmaphinothing.org wrote: ... I have a project where I have multiple queries and each query uses the results from the previous query to get it's results. I need to do one of two things, either out put a multidimensional array

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Haluk Karamete
Re-read his example. He encodes the data in PHP. But decodes the data in SQL. So, if you echo the SQL statement, you would see a base64 encoded string that SQL then decodes. Got it this time! Up until reading your reply, I was reading Alex's example with my pseudo-code glasses. I did

[PHP] Re: PHP] can't pass complete URL (part of the query string)

2002-11-26 Thread Nicole Lallande
/fishcart/displayem.php3?cat=5 olimit=0 zid=1 lid=1 The URL you want to set ref to needs to be URL encoded. You can use rawurlencode() to achieve this. You will know you have it right when your HTML form tag looks like this: form action=http://embitec.com/fishcart/email.php?ref=http%3A%2F%2Fembitec.com

Re: [PHP] saving form data

2004-02-23 Thread Evan Nemerson
would I accept uploaded file attachments and attach CFI them to the emailed form results? Then how about in reverse? Add something to the end of the Perl script that passes the values to a PHP script? It could even do it via the query string, maybe also passing an md5 encoded password

Re: [PHP] Re: Secure data management

2011-10-04 Thread Tommy Pham
On Tue, Oct 4, 2011 at 4:11 PM, Stuart Dallas stu...@3ft9.com wrote: On 5 Oct 2011, at 00:04, Mark Kelly wrote: Hi. On Tuesday 04 Oct 2011 at 21:39 Stuart Dallas wrote: http://stut.net/2011/09/15/mysql-real-escape-string-is-not-enough/ Thanks. I followed this link through and read

Re: [PHP] Re: Secure data management

2011-10-04 Thread Stuart Dallas
On 5 Oct 2011, at 00:45, Tommy Pham wrote: On Tue, Oct 4, 2011 at 4:11 PM, Stuart Dallas stu...@3ft9.com wrote: On 5 Oct 2011, at 00:04, Mark Kelly wrote: Hi. On Tuesday 04 Oct 2011 at 21:39 Stuart Dallas wrote: http://stut.net/2011/09/15/mysql-real-escape-string-is-not-enough

Re: [PHP] Selecting Rows Based on Row Values Being in Array

2007-07-02 Thread Jim Lucas
','7orange50lbs','8orange60lbs','9purple70lbs' $IN_VALUE = '.join(',', $list).'; $SQL = SELECT * FROMmy_Table WHERE CONCAT(value1, value2, value3) IN ({$IN_VALUE}); # The final query string will look like this SELECT * FROMmy_Table WHERE CONCAT(value1

Re: [PHP] Re: Help! Made a boo-boo encrypting credit cards

2011-03-04 Thread Richard Quadling
there is a character that appears in about 10% of my encryptions that's not being encoded properly??? Can you come up with a phony CC number that fails the decryption? If so, please post:  $cc_number  binhex($iv)  binhex($cc_encrypt)  binhex($row['encrypt_iv']))  binhex($row['cc_encrypt'])) More

Re: [PHP] Re: Secure data management

2011-10-04 Thread Tommy Pham
: http://stut.net/2011/09/15/mysql-real-escape-string-is-not-enough/ Thanks. I followed this link through and read the full message (having missed it the first time round), and while I find the idea of using base64 to sanitise text interesting I can also forsee a few difficulties

Re: [PHP] Selecting Rows Based on Row Values Being in Array

2007-07-01 Thread kvigor
code. I'm asking because I don't know where we're telling the code to compare the values. You stated... and create one string from them Where do I give the name to the string? So this is where I am so far: $sql = SELECT* FROM table WHERE CONCAT(size,color,weight) IN( ); Jim Lucas [EMAIL

php-general Digest 5 Oct 2011 07:40:35 -0000 Issue 7505

2011-10-05 Thread php-general-digest-help
, data_base64 varchar(150) NOT NULL COLLATE utf8_general_ci ); TRUNCATE test.base64; -- FLUSH TABLES; FLUSH PRIVILEGES; RESET QUERY CACHE; INSERT INTO test.base64 (data_, data_base64) VALUES ('string to encode 2',BASE64_DECODE('c3RyaW5nIHRvIGVuY29kZSAy')); /* 0.046 sec */ -- FLUSH TABLES; FLUSH

php-general Digest 25 May 2011 14:38:59 -0000 Issue 7328

2011-05-25 Thread php-general-digest-help
['txt'] from String to integer and then it can't get my $num it is int in my mysql how can i correct $query1? ---End Message--- ---BeginMessage--- Hi, I've a simply idea... If you have integer in your mysql, don't use at that field in the query... Try this: $query=select * from patient where id=.$id

Re: [PHP] File To Blob Corruption

2009-11-14 Thread German Geek
Hi, Could it have something to do with an eof character being encoded or something like that? Do you really need to store the files in the DB? It uses more processing power if stored in the DB because on retrieval, you have to unescape the string and return it. Modern filesystems are optimised

Re: [PHP] File To Blob Corruption

2009-11-15 Thread Ashley Sheridan
On Sun, 2009-11-15 at 16:43 +1300, German Geek wrote: Hi, Could it have something to do with an eof character being encoded or something like that? Do you really need to store the files in the DB? It uses more processing power if stored in the DB because on retrieval, you have to unescape

Re: [PHP] Re: Secure data management

2011-10-04 Thread Stuart Dallas
04 Oct 2011 at 21:39 Stuart Dallas wrote: http://stut.net/2011/09/15/mysql-real-escape-string-is-not-enough/ Thanks. I followed this link through and read the full message (having missed it the first time round), and while I find the idea of using base64 to sanitise text interesting

Re: [PHP] Re: Secure data management

2011-10-04 Thread Tommy Pham
wrote: On 5 Oct 2011, at 00:04, Mark Kelly wrote: Hi. On Tuesday 04 Oct 2011 at 21:39 Stuart Dallas wrote: http://stut.net/2011/09/15/mysql-real-escape-string-is-not-enough/ Thanks. I followed this link through and read the full message (having missed it the first time round

php-general Digest 25 Oct 2008 22:28:28 -0000 Issue 5755

2008-10-25 Thread php-general-digest-help
), that go along with that group and return them the same time the producer group is returned. Right now, my PHP/SQL query string is: $query = 'SELECT * FROM wine WHERE MATCH(producer, varietal, appellation, designation, region, vineyard, subregion, country, vintage) AGAINST

[PHP] Re: Newbie Question

2001-11-21 Thread Lee Willmann
textarea form element to get the data. It inserts into the DB as basically a single line regardless of the ENTER keystrokes in the data. Now, when I pull it back out I use this: $query = SELECT * FROM message WHERE msg_id = '$msg_id'; $query_result = mysql_query($query); $query_row = mysql_fetch_array

php-general Digest 2 Jul 2007 12:14:09 -0000 Issue 4880

2007-07-02 Thread php-general-digest-help
'); # This will return a string formated like this. # '6blue40lbs','7orange50lbs','8orange60lbs','9purple70lbs' $IN_VALUE = '.join(',', $list).'; $SQL = SELECT * FROMmy_Table WHERE CONCAT(value1, value2, value3) IN ({$IN_VALUE}); # The final query string will look like

php-general Digest 2 Jul 2007 00:06:55 -0000 Issue 4879

2007-07-01 Thread php-general-digest-help
the values. You stated... and create one string from them Where do I give the name to the string? So this is where I am so far: $sql = SELECT* FROM table WHERE CONCAT(size,color,weight) IN( ); Jim Lucas [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] K. Hayes wrote: Will do. Thanks

Re: [PHP] Re: Secure data management

2011-10-04 Thread Stuart Dallas
, 2011 at 4:11 PM, Stuart Dallas stu...@3ft9.com wrote: On 5 Oct 2011, at 00:04, Mark Kelly wrote: Hi. On Tuesday 04 Oct 2011 at 21:39 Stuart Dallas wrote: http://stut.net/2011/09/15/mysql-real-escape-string-is-not-enough/ Thanks. I followed this link through and read the full message

Re: [PHP] Re: Secure data management

2011-10-04 Thread Tommy Pham
wrote: On 5 Oct 2011, at 00:45, Tommy Pham wrote: On Tue, Oct 4, 2011 at 4:11 PM, Stuart Dallas stu...@3ft9.com wrote: On 5 Oct 2011, at 00:04, Mark Kelly wrote: Hi. On Tuesday 04 Oct 2011 at 21:39 Stuart Dallas wrote: http://stut.net/2011/09/15/mysql-real-escape-string-is-not-enough

php-general Digest 1 Apr 2006 17:45:41 -0000 Issue 4047

2006-04-01 Thread php-general-digest-help
string(4) but it is completely empty for all other purposes. by the way, is this the correct way to send an encoded value over the internet for a href tag, as a get request? the $converted_search is what is output from the iconv functions centerh3search from a href='http://nlpweb.kaist.ac.kr

php-general Digest 30 Nov 2002 12:31:53 -0000 Issue 1735

2002-11-30 Thread php-general-digest-help
Brehmer ]- Re: First PHP 126508 by: -[ Rene Brehmer ]- imap_open authentication failure 126509 by: Dumdeedum Re: amp; in Query String 126511 by: Malcolm Brownell test for ascii or binary string 126513 by: Jonathan Sharp 126514 by: Jonathan Sharp

php-general Digest 1 Mar 2003 16:29:34 -0000 Issue 1912

2003-03-01 Thread php-general-digest-help
') as dept_date1 from mytable where ('dept_date1' BETWEEN '2003-02-01' AND '2003-02-10') The above query is valid but returns 0 because 'dept_date1' is treated as a string. I want dept_date1 to be treated as date so that it can be compared. I hope it is possible... Thank you! -Dhaval

Re: [PHP] [newbie] Can PHP be a security risk if it's just connecting to MySQL?

2004-05-19 Thread John W. Holmes
one might run. Is it possible that if one has taken at least that much precaution that a user could still enter malicious script held in a TEXT column? Escaping the data so it's safe to put into a database query is only part of the solution. It really depends on how the data goes into the query

php-general Digest 2 Sep 2011 09:48:19 -0000 Issue 7466

2011-09-02 Thread php-general-digest-help
(and possibly with the server-code). 2011/9/1 richard gray r...@richgray.com I am hoping there's a SOAP expert on the list as this is driving me mad and Google doesn't come up with much help ... I am trying to build a fairly simple web service in SOAP -- the client sends a string SKU to query

php-general Digest 30 Jun 2007 13:16:14 -0000 Issue 4877

2007-06-30 Thread php-general-digest-help
, then it will compare each string in the IN (...) portion to each entry in the $list array(). Let me know if you need any further help one other thing, make sure that you run each of the values in the $list array() through mysql_real_escape_string(). That way it is all nicely encoded for the SQL statement

php-general Digest 4 May 2007 11:11:10 -0000 Issue 4772

2007-05-04 Thread php-general-digest-help
} $result= $db-query($sql); } /* [EMAIL PROTECTED] get [EMAIL PROTECTED] This function returns a link to the file based on the id [EMAIL PROTECTED] string $file_id The id of the file in the database [EMAIL PROTECTED] object $db The database handle [EMAIL PROTECTED] void */ static

php-general Digest 4 Mar 2001 21:30:04 -0000 Issue 547

2001-03-04 Thread php-general-digest-help
php-general Digest 4 Mar 2001 21:30:04 - Issue 547 Topics (messages 42494 through 42525): Re: Stripping HTML selectively? 42494 by: Steve Edberg NETSCAPE Screws QUERY STRING!! 42495 by: Thomas Edison Jr. 42498 by: Meir Kriheli - MKsoft 42499 by: Juanma

php-general Digest 15 Nov 2009 10:20:08 -0000 Issue 6443

2009-11-15 Thread php-general-digest-help
--- ---BeginMessage--- Hi, Could it have something to do with an eof character being encoded or something like that? Do you really need to store the files in the DB? It uses more processing power if stored in the DB because on retrieval, you have to unescape the string and return it. Modern filesystems

Re: [PHP] $_GET and multiple spaces.

2008-01-14 Thread Jochem Maas
:-) it was specifically written for the task of making request parameter names as generated by http_build_query() usable in the name attribute of input tags and have them behave as they would if found in a GET query string. the only reason I remember all this about http_build_query() is because

Re: [PHP] authentication problems!

2004-01-20 Thread Scott Taylor
Regards, Scott Taylor [EMAIL PROTECTED] wrote: there are a couple of different ways to do this. the http basic approach will work just fine. with http basic the id/pw are passed in the headers in an encoded string, so i'm not certain about your: if using HTML, the username password is easily

php-general Digest 22 Mar 2012 05:56:41 -0000 Issue 7738

2012-03-21 Thread php-general-digest-help
not explain how to get it or run it. If you can help me in this question I am thankful for your time. Karl ---End Message--- ---BeginMessage--- This is a continuation of the nested query thing I posted to the list a while back. I was finally able to output a nested unordered array that worked out

php-general Digest 22 May 2011 14:31:08 -0000 Issue 7323

2011-05-22 Thread php-general-digest-help
not work in real cases I had. We are using XMLs in our system but when you edit the XML with a text editor and put the XML heading of UTF-8 ?xml version=1.0 encoding=UTF-8? it DOES NOT assure the text inside is encoded in UTF-8 so but maybe (many cases) t other iso-xxx method. My question

php-general Digest 2 May 2004 10:48:04 -0000 Issue 2739

2004-05-02 Thread php-general-digest-help
that uses lots of German text, and the letters with umlauts don't sort correctly. I'm using the mb_* functions in a few places (to adapt an ASCII-encoded database to XML output for flash, which is always expected to be in UTF-8), but none of them seems to be made for string comparison. thanks, -mike

php-general Digest 15 Feb 2003 08:32:44 -0000 Issue 1884

2003-02-15 Thread php-general-digest-help
McCulligh recursion? 135619 by: Alex Davis 135620 by: Bas Jobsen 135631 by: David Freeman Re: How does PHP transforms an integer on a string? like 3 onto three 135622 by: Tom Rogers redirect 135623 by: Alex Davis 135625 by: Greg Donald SQL Query

php-general Digest 22 Mar 2004 01:22:55 -0000 Issue 2660

2004-03-21 Thread php-general-digest-help
I urlencode() the URL and pass it to the query string, it looks like this: http://test.alpharetta.ga.us/index.php?m=linkscategory=Recreation+%26+Parksgo.x=22go.y=7 As you can see, there are already encoded entities in the URL, which are further encoded when passed through urlencode

php-general Digest 22 Mar 2004 13:23:02 -0000 Issue 2661

2004-03-22 Thread php-general-digest-help
%2526%2BParks%26go.x%3D22%26go.y%3D7 As you can gather, I'm trying to pass a URL to another script for some processing. Before I urlencode() the URL and pass it to the query string, it looks like this: http://test.alpharetta.ga.us/index.php?m=linkscategory=Recrea tion+%26+Parksgo.x=22go.y

php-general Digest 8 Oct 2008 10:11:05 -0000 Issue 5724

2008-10-08 Thread php-general-digest-help
and print it (this one is very rarely used!). ---End Message--- ---BeginMessage--- Dan Joseph wrote: On Thu, Oct 2, 2008 at 12:35 PM, Jason Pruim [EMAIL PROTECTED] wrote: SQLTEST: SELECT * FROM `timeStore` WHERE`timein` BETWEEN 1222315200 AND 122292 Could not perform query

php-general Digest 1 May 2008 07:55:49 -0000 Issue 5434

2008-05-01 Thread php-general-digest-help
. However just doing a quick google on nusoap attachments (without the quotes) has mention of people sending MIME attachments and one listing an issue with DIME encoded attachments yet another explaining that he solved the DIME encoded issue and referred to wrox book open source webservices page 315 which

php-general Digest 23 Aug 2003 06:02:48 -0000 Issue 2253

2003-08-23 Thread php-general-digest-help
the sign in 'PSG Inc.' Now the query works fine. Can some one throw some light here. I am sure something minor is to be done when passing the name of the company in the parent script. The character separates variables in the query string, so it must be encoded if it appears in the data. Take

php-general Digest 14 May 2009 09:19:17 -0000 Issue 6120

2009-05-14 Thread php-general-digest-help
die with a 500 Server Error message and the php processor would never even see the xml. From what I can gather (really not a whole lot of data out there), fastcgi under IIS 6.0 doesn't seem to handle chunked transfer-encoded data...(it seems like such a major flaw that I'm wondering if I

php-general Digest 23 Feb 2004 17:11:59 -0000 Issue 2607

2004-02-23 Thread php-general-digest-help
by: Jason Merrique Re: Slight cleaning of code needed in str_replace command. 178521 by: Dave G 178524 by: Jason Wong Split a string on a space, not in side an HTML tag. 178522 by: Stuart Gilbert Character Encoding Problem 178523 by: roland 178526 by: Lucian Cozma

php-general Digest 21 May 2001 13:20:48 -0000 Issue 699

2001-05-21 Thread php-general-digest-help
c query, because plpgsql assumes that there is valid / parseable query (and not a string containing a query) after the IN. ( the skeleton for iterating on the result of dynamic queries) FOR record | row IN EXECUTE text_expression LOOP statements END LOOP; so you may use this as follows:

php-general Digest 20 May 2002 03:20:44 -0000 Issue 1355

2002-05-19 Thread php-general-digest-help
time()+3600); ? Also can some one please tell me why this is bringing back a problem on a windows server. ?php if($skin==black) { $skin=#00; $text=#FF; }; if($skin==white) { $skin=#FF; $text=#00; }; ? ---End Message--- ---BeginMessage--- Not sure about the query string thi

php-general Digest 15 Sep 2006 18:39:46 -0000 Issue 4349

2006-09-15 Thread php-general-digest-help
query for that date in the dates table using this: SELECT * FROM dates WHERE date = '$start_string' I get the date record I expect. The second query above cannot seem to look for a date that equals the supplied string (BTW, all data has been escaped prior to interpolation in the query string

php-general Digest 10 Sep 2002 15:53:46 -0000 Issue 1577

2002-09-10 Thread php-general-digest-help
noticed that your first variable in the query string (which begins after the ? character) begins with an , which is a separator character. I'm not sure what's going on there, but it should be something more like this: header(Location: http://192.168.254.14/show_products_html.php?ma

php-general Digest 24 Jul 2008 10:08:38 -0000 Issue 5586

2008-07-24 Thread php-general-digest-help
this is the right group for this type of problem: I am using hash_hmac to provide me with a sha1 encoded hash string. The problem is as follows: $hash = hash_hmac('sha1

php-general Digest 19 Jan 2003 03:23:15 -0000 Issue 1831

2003-01-18 Thread php-general-digest-help
_SELF'];?Go Back/a as to #2: I usually just pass this kind of info around on the URL. http://mypage.com/mypage.php?prevURL=http://mypage.com/lastpage.php if I have to pass a full query string then I urlencode() it first and urldecode() it on the other side. This survives sessions expiring. =C= * *

php-general Digest 28 Jul 2009 15:25:54 -0000 Issue 6254

2009-07-28 Thread php-general-digest-help
in a database query. Of course the ease and convenience of this method will depend to a great extent on what version of PHP is available on the server. For the OP, have you read up much on SQL injection? If not, here's a decent place to start: http://www.owasp.org/index.php/SQL_injection Ben ---End

php-general Digest 5 May 2012 22:35:42 -0000 Issue 7802

2012-05-05 Thread php-general-digest-help
up a form or a use a POST to get the info. This page should describes how to use a standard GET query to get the info you want: https://developers.google.com/maps/documentation/distancematrix/ Setting up the proper URL to call, you can activate it using file_get_contents provided you have

php-general Digest 24 Nov 2007 16:38:40 -0000 Issue 5145

2007-11-24 Thread php-general-digest-help
wind up with a query similar to: UPDATE table_01 SET field_a = 'New value here', updated=CURDATE() WHERE primary_key=12345 I thought that, to keep the table updating to a minimum, this approach made the most sense. However, seeing the two hugely different performance times has made

php-general Digest 19 May 2002 14:18:19 -0000 Issue 1354

2002-05-19 Thread php-general-digest-help
close($f); ? miguel ---End Message--- ---BeginMessage--- I have the following code for a mySQL query in php: $text = "sort_text"; $query = "SELECT code FROM links ORDER BY $text WHERE ".$text." like '".$l."%'"; $result = mysql_query($query) or die(

php-general Digest 12 May 2010 16:09:15 -0000 Issue 6740

2010-05-12 Thread php-general-digest-help
do so well with query strings, but it'd be a little silly to think their owners didn't realize this and left things exactly the way they were back in 2002 ... wouldn't it? My $0.02, Kevin Kinsey ---End Message--- ---BeginMessage--- On 12 May 2010 07:10, Kevin Kinsey k...@daleco.biz wrote: Ashley

  1   2   >