php-general Digest 17 Jun 2008 06:33:33 -0000 Issue 5518

Topics (messages 275449 through 275467):

Re: How to prevent DoS on PHP script?
        275449 by: Nitsan Bin-Nun
        275451 by: Jim Lucas
        275452 by: Nitsan Bin-Nun
        275458 by: Nathan Nobbe
        275460 by: Wolf

Re: Canvas examples
        275450 by: Ray Hauge

looping through a database
        275453 by: Richard Kurth
        275459 by: Wolf
        275461 by: Richard Kurth
        275462 by: Wolf
        275465 by: paragasu

Re: Binary data in $_POST, not in $_FILES, why?
        275454 by: Jim Feniello
        275457 by: Kirk.Johnson.zootweb.com

Re: Strategy to protect images
        275455 by: Jonesy
        275456 by: Daniel Brown

mysqliconnect issue
        275463 by: Jason Pruim
        275464 by: Chris

conversion of unicode characters into utf-8
        275466 by: valsaraj

Re: Kindla 0T, but here goes...
        275467 by: Jason Norwood-Young

Administrivia:

To subscribe to the digest, e-mail:
        [EMAIL PROTECTED]

To unsubscribe from the digest, e-mail:
        [EMAIL PROTECTED]

To post to the list, e-mail:
        [EMAIL PROTECTED]


----------------------------------------------------------------------
--- Begin Message ---
Okay, I got the idea,
I think you can use PHP to write .htaccess file for IP blocking or something
like that (shared hosts allow this and I'm pretty sure that Apache .htaccess
are able to manage IP blocking).

HTH,
Nitsan

On 16/06/2008, Jim Lucas <[EMAIL PROTECTED]> wrote:
>
> Nitsan Bin-Nun wrote:
>
>> I think you can handle this with 2 pages, the first is checking whether
>> the
>> user is permitted to upload or not and if so passing him to the upload
>> form
>> with a simple (bool) $_SESSION variable which indicates his permissions.
>> If you will try to access the second page and the $_SESS variable won't
>> exist it will throw you back to page 1 to validate your permissions.
>>
>> Am I missing something? (its pretty simple..)
>>
>>
> Yes, PHP hasn't started yet.
>
> When someone tries to upload a file to a server, Apache is accepting the
> file first.  Once the file is completely uploaded, Apache hands off the
> processing to Apache.  Problem is, by this time the DoS has already
> happened.  Apache has waisted its time receiving the file.
>
> HTH
>>
>> On 16/06/2008, Per Jessen <[EMAIL PROTECTED]> wrote:
>>
>>> Jim Lucas wrote:
>>>
>>> Per Jessen wrote:
>>>>
>>>>> Michelle Konzack wrote:
>>>>>
>>>>> My biggest problem is, that the "/fileupload.php" was always
>>>>>> references
>>>>>> from outside my webspace.  OK, I was thinking  this  can  be  solved
>>>>>> by
>>>>>> using HTTP_REFERER which has then worked for some  days  but  NOW
>>>>>> those pigs are back and sending spoofed HTTP_REFERER.
>>>>>>
>>>>>> Since I have only a VHost @ISP I can not  go  deeper  into  the
>>>>>> Apache2 config what I have done when I was running my own server.
>>>>>>
>>>>>> Can anyone suggest me something, how to block requests from outside?
>>>>>>
>>>>> Check client IP-addresses?
>>>>>
>>>>>
>>>>> /Per Jessen, Zürich
>>>>>
>>>>>
>>>>> The problem that the OP is going to run into is the "Chicken before
>>>> the Egg" problem.  PHP will not start processing until the file upload
>>>> has already been completely uploaded.
>>>>
>>> I was about to say "Then let apache check it", but I hadn't read the
>>> last paragraph of the OPs question.
>>>
>>>
>>> /Per Jessen, Zürich
>>>
>>>
>>> --
>>> PHP General Mailing List (http://www.php.net/)
>>> To unsubscribe, visit: http://www.php.net/unsub.php
>>>
>>>
>>>
>>
>
> --
> Jim Lucas
>
>   "Some men are born to greatness, some achieve greatness,
>       and some have greatness thrust upon them."
>
> Twelfth Night, Act II, Scene V
>    by William Shakespeare
>
>

--- End Message ---
--- Begin Message ---
Nitsan Bin-Nun wrote:
Okay, I got the idea,
I think you can use PHP to write .htaccess file for IP blocking or something
like that (shared hosts allow this and I'm pretty sure that Apache .htaccess
are able to manage IP blocking).


As long as Apache allows .htaccess files

But...   even then what IP's would you write to this?

If a person changed their IP each time they access the script, then it still would not work.

I would have to say that I just don't think that PHP is going to be the medium in which this problem has to be handled.

HTH,
Nitsan

On 16/06/2008, Jim Lucas <[EMAIL PROTECTED]> wrote:
Nitsan Bin-Nun wrote:

I think you can handle this with 2 pages, the first is checking whether
the
user is permitted to upload or not and if so passing him to the upload
form
with a simple (bool) $_SESSION variable which indicates his permissions.
If you will try to access the second page and the $_SESS variable won't
exist it will throw you back to page 1 to validate your permissions.

Am I missing something? (its pretty simple..)


Yes, PHP hasn't started yet.

When someone tries to upload a file to a server, Apache is accepting the
file first.  Once the file is completely uploaded, Apache hands off the
processing to Apache.  Problem is, by this time the DoS has already
happened.  Apache has waisted its time receiving the file.

HTH
On 16/06/2008, Per Jessen <[EMAIL PROTECTED]> wrote:

Jim Lucas wrote:

Per Jessen wrote:
Michelle Konzack wrote:

My biggest problem is, that the "/fileupload.php" was always
references
from outside my webspace.  OK, I was thinking  this  can  be  solved
by
using HTTP_REFERER which has then worked for some  days  but  NOW
those pigs are back and sending spoofed HTTP_REFERER.

Since I have only a VHost @ISP I can not  go  deeper  into  the
Apache2 config what I have done when I was running my own server.

Can anyone suggest me something, how to block requests from outside?

Check client IP-addresses?


/Per Jessen, Zürich


The problem that the OP is going to run into is the "Chicken before
the Egg" problem.  PHP will not start processing until the file upload
has already been completely uploaded.

I was about to say "Then let apache check it", but I hadn't read the
last paragraph of the OPs question.


/Per Jessen, Zürich


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



--
Jim Lucas

  "Some men are born to greatness, some achieve greatness,
      and some have greatness thrust upon them."

Twelfth Night, Act II, Scene V
   by William Shakespeare





--
Jim Lucas

   "Some men are born to greatness, some achieve greatness,
       and some have greatness thrust upon them."

Twelfth Night, Act II, Scene V
    by William Shakespeare


--- End Message ---
--- Begin Message ---
Umm yes I don't think so too, but thats one of the only possibile options..
so give it a shot because you have nothing to loose (:

I also think he should speak to the server administrator / the guy he pays
him the money and ask what to do, I'm pretty sure that he had already
encountered something like this before.

On 16/06/2008, Jim Lucas <[EMAIL PROTECTED]> wrote:
>
> Nitsan Bin-Nun wrote:
>
>> Okay, I got the idea,
>> I think you can use PHP to write .htaccess file for IP blocking or
>> something
>> like that (shared hosts allow this and I'm pretty sure that Apache
>> .htaccess
>> are able to manage IP blocking).
>>
>>
> As long as Apache allows .htaccess files
>
> But...   even then what IP's would you write to this?
>
> If a person changed their IP each time they access the script, then it
> still would not work.
>
> I would have to say that I just don't think that PHP is going to be the
> medium in which this problem has to be handled.
>
> HTH,
>> Nitsan
>>
>> On 16/06/2008, Jim Lucas <[EMAIL PROTECTED]> wrote:
>>
>>> Nitsan Bin-Nun wrote:
>>>
>>> I think you can handle this with 2 pages, the first is checking whether
>>>> the
>>>> user is permitted to upload or not and if so passing him to the upload
>>>> form
>>>> with a simple (bool) $_SESSION variable which indicates his permissions.
>>>> If you will try to access the second page and the $_SESS variable won't
>>>> exist it will throw you back to page 1 to validate your permissions.
>>>>
>>>> Am I missing something? (its pretty simple..)
>>>>
>>>>
>>>> Yes, PHP hasn't started yet.
>>>
>>> When someone tries to upload a file to a server, Apache is accepting the
>>> file first.  Once the file is completely uploaded, Apache hands off the
>>> processing to Apache.  Problem is, by this time the DoS has already
>>> happened.  Apache has waisted its time receiving the file.
>>>
>>> HTH
>>>
>>>> On 16/06/2008, Per Jessen <[EMAIL PROTECTED]> wrote:
>>>>
>>>> Jim Lucas wrote:
>>>>>
>>>>> Per Jessen wrote:
>>>>>
>>>>>> Michelle Konzack wrote:
>>>>>>>
>>>>>>> My biggest problem is, that the "/fileupload.php" was always
>>>>>>>
>>>>>>>> references
>>>>>>>> from outside my webspace.  OK, I was thinking  this  can  be  solved
>>>>>>>> by
>>>>>>>> using HTTP_REFERER which has then worked for some  days  but  NOW
>>>>>>>> those pigs are back and sending spoofed HTTP_REFERER.
>>>>>>>>
>>>>>>>> Since I have only a VHost @ISP I can not  go  deeper  into  the
>>>>>>>> Apache2 config what I have done when I was running my own server.
>>>>>>>>
>>>>>>>> Can anyone suggest me something, how to block requests from outside?
>>>>>>>>
>>>>>>>> Check client IP-addresses?
>>>>>>>
>>>>>>>
>>>>>>> /Per Jessen, Zürich
>>>>>>>
>>>>>>>
>>>>>>> The problem that the OP is going to run into is the "Chicken before
>>>>>>>
>>>>>> the Egg" problem.  PHP will not start processing until the file upload
>>>>>> has already been completely uploaded.
>>>>>>
>>>>>> I was about to say "Then let apache check it", but I hadn't read the
>>>>> last paragraph of the OPs question.
>>>>>
>>>>>
>>>>> /Per Jessen, Zürich
>>>>>
>>>>>
>>>>> --
>>>>> PHP General Mailing List (http://www.php.net/)
>>>>> To unsubscribe, visit: http://www.php.net/unsub.php
>>>>>
>>>>>
>>>>>
>>>>> --
>>> Jim Lucas
>>>
>>>  "Some men are born to greatness, some achieve greatness,
>>>      and some have greatness thrust upon them."
>>>
>>> Twelfth Night, Act II, Scene V
>>>   by William Shakespeare
>>>
>>>
>>>
>>
>
> --
> Jim Lucas
>
>   "Some men are born to greatness, some achieve greatness,
>       and some have greatness thrust upon them."
>
> Twelfth Night, Act II, Scene V
>    by William Shakespeare
>
>

--- End Message ---
--- Begin Message ---
On Mon, Jun 16, 2008 at 2:11 PM, Nitsan Bin-Nun <[EMAIL PROTECTED]> wrote:

> Umm yes I don't think so too, but thats one of the only possibile options..
> so give it a shot because you have nothing to loose (:
>
> I also think he should speak to the server administrator / the guy he pays
> him the money and ask what to do, I'm pretty sure that he had already
> encountered something like this before.


i would like to offer a suggestion, half as a question, because i have not
tried this approach yet myself.  the php curl extension supports http
authentication, via the option *CURLOPT_USERPWD*.  so a client script which
will supply the parameters and then ftp the file upon success shouldnt be
too bad to write.  the requirements being support for http authentication on
the server side, and php w/ curl support on the client side.

thoughts?

-nathan

--- End Message ---
--- Begin Message ---
Michelle Konzack wrote:
************************************************************************
*       Do not Cc: me, because I READ THIS LIST, if I write here       *
*    Keine Cc: am mich, ich LESE DIESE LISTE wenn ich hier schreibe    *
************************************************************************

Hello,

on my "devel" server I have a script, which allow me  to  upload  Debian
packages which then are included in my private Debian mirror.

Now I have gotten several 1000 hits in the last days.  I call it DoS.

There are idiots who have tried to upload shit on my Webspace but  since
I check it to be ONLY Debian files they where not successful.

My biggest problem is, that the "/fileupload.php" was always  references
from outside my webspace.  OK, I was thinking  this  can  be  solved  by
using HTTP_REFERER which has then worked for some  days  but  NOW  those
pigs are back and sending spoofed HTTP_REFERER.

Since I have only a VHost @ISP I can not  go  deeper  into  the  Apache2
config what I have done when I was running my own server.

Can anyone suggest me something, how to block requests from outside?

Size limitation is not possibel, since some of my upload files are  very
huge and I must be able to  upload  files  without  Laptop  and  FTP/SCP
access.

There's a number of things you can try, depending on what EXACTLY they are doing.

If they are uploading things to your server which they then reference, it is a simple apache configuration that you could do. For instance, you can upload fine to my server, but once it is there, the system knows nothing about it. You can see the file all day long, but nothing is going to allow it to get served back to you.

If they are continuing to load the page, implement a simple login and page check for that specific page. Sure, apache loads the page, but that's done PDQ instead of letting them upload a file first. If the login works, great, give them the upload form, otherwise error them out. You could snag the IP address, browser type, other information and store it all in a DB, then do a quick check to see if the IP matches, followed by a browser and whatnot. It's overkill, but you should also see HOW they are doing it as well, and you could implement the block to work on a number of factors.

If they are uploading to just stall you out, talk to the ISP and let them know you are getting DDOS and get their network admins involved.

You could change the filename, but maybe that's too simple a suggestion? If it is for your personal use, rename the upload page to Michelles_dumb_upload_script.php or even have a cron job that randomly changes the name of the file and emails you the new name when it is done.

OH, and check your email sending server for dates and such. According to the headers, you sent the email this morning. But according to the dates on the sent email, you sent it on the 13th at 4:21 PM which is about 2 days and 15 hours and 32 minutes before you actually did.

Wolf


--- End Message ---
--- Begin Message ---
Richard Heyes wrote:
I guess the other browser doesn't do much with <canvas> ?

Nope. Eg:

<canvas id="foo">
    This gets shown on none supporting browsers, but not on supportive
    browsers.
</canvas>

MSIE just shows the text and doesn't do anything with the canvas.

One thing about using a canvas is bandwidth. If it's a big concern I would hazard a guess that a bar chart (for example) would cost less in terms of code required to build the image compared to JPGraph, and also less in terms of output (particularly if you were to use output compression).


Another idea for dynamic graphing could be:

http://solutoire.com/plotr/

It also uses the canvas element, but if you use excanvas for IE it'll work in most newer browsers. I've used it in a project to provide dynamic bar graphs from a queue so that they could see in semi-real time how many customer requests were in different queues. It was an internal app, or else I'd link it :(

--
Ray Hauge
www.primateapplications.com

--- End Message ---
--- Begin Message --- I am looping through a database of files that are numbers 1 through 10 if number 1 is in the database I what to print out the first table below if it is not then print the else section below. Then loop through the database to see if 2 through 10 are there and do the same thing. Of course what I am doing does not work. Should I move it all to an array and then loop through it. Or use a foreach loop.
Could you please give me an idea where to start looking

while($row=mysql_fetch_array($sql_result)){

if ($row["number"]==1) {
<tr>
<td> File 1</td>
<td>This is the file</td>
<td>Delete</td>
</tr>
}else{
<tr>
<td>File1</td>
<td></td>
<td>Add</td>
</tr>
}

}

--- End Message ---
--- Begin Message ---
Richard Kurth wrote:
I am looping through a database of files that are numbers 1 through 10 if number 1 is in the database I what to print out the first table below if it is not then print the else section below. Then loop through the database to see if 2 through 10 are there and do the same thing. Of course what I am doing does not work. Should I move it all to an array and then loop through it. Or use a foreach loop.
Could you please give me an idea where to start looking

while($row=mysql_fetch_array($sql_result)){

if ($row["number"]==1) {
<tr>
<td> File 1</td>
<td>This is the file</td>
<td>Delete</td>
</tr>
}else{
<tr>
<td>File1</td>
<td></td>
<td>Add</td>
</tr>
}

}


What is the query being executed?

Seriously, this needs more information. On the upside, it LOOKS like it should work, however...

Here's what I use to get 1 random quote from a table I have:
------------------------------------------
$query="select quote from quotes where id=$id";
$query_res = mysql_query($query) or die(mysql_error());
if (mysql_num_rows($query_res) < 1)
{ //print message
 $display_block = "<P>Something blew up.</P>";
}
else
{ //get info and build Quote display
 $Quote = mysql_fetch_array($query_res);
 echo $Quote['quote'];
}


It could be as simple as the " not working where you really need ' but that depends on what/how you are doing things.

Wolf



--- End Message ---
--- Begin Message ---
Wolf wrote:
Richard Kurth wrote:
I am looping through a database of files that are numbers 1 through 10 if number 1 is in the database I what to print out the first table below if it is not then print the else section below. Then loop through the database to see if 2 through 10 are there and do the same thing. Of course what I am doing does not work. Should I move it all to an array and then loop through it. Or use a foreach loop.
Could you please give me an idea where to start looking

while($row=mysql_fetch_array($sql_result)){

if ($row["number"]==1) {
<tr>
<td> File 1</td>
<td>This is the file</td>
<td>Delete</td>
</tr>
}else{
<tr>
<td>File1</td>
<td></td>
<td>Add</td>
</tr>
}

}


What is the query being executed?

Seriously, this needs more information. On the upside, it LOOKS like it should work, however...

Here's what I use to get 1 random quote from a table I have:
------------------------------------------
$query="select quote from quotes where id=$id";
$query_res = mysql_query($query) or die(mysql_error());
if (mysql_num_rows($query_res) < 1)
{ //print message
 $display_block = "<P>Something blew up.</P>";
}
else
{ //get info and build Quote display
 $Quote = mysql_fetch_array($query_res);
 echo $Quote['quote'];
}


It could be as simple as the " not working where you really need ' but that depends on what/how you are doing things.

Wolf



This is the query being executed
$sql = "SELECT * FROM table WHERE members_id =" . $_SESSION["members_id"];
$sql_result = mysql_query($sql) or die(mysql_error());

--- End Message ---
--- Begin Message ---
Richard Kurth wrote:
Wolf wrote:
Richard Kurth wrote:
Could you please give me an idea where to start looking

while($row=mysql_fetch_array($sql_result)){

if ($row["number"]==1) {
<tr>
<td> File 1</td>
<td>This is the file</td>
<td>Delete</td>
</tr>
}else{
<tr>
<td>File1</td>
<td></td>
<td>Add</td>
</tr>
}

}


What is the query being executed?
<!-- SNIP -->


This is the query being executed
$sql = "SELECT * FROM table WHERE members_id =" . $_SESSION["members_id"];
$sql_result = mysql_query($sql) or die(mysql_error());

That still pretty much tells me nothing.

Does your table named table exist?
Does your script connect or error?
What DOES output to your screen?
Does the schema for your table contain numbers?

What happens when you use $row['number']?

Or are you just hoping for someone to write your code?

As written, your code will fail due to having PHP interspersed with HTML code. As such, you either need to echo or exit out of the PHP areas and then continue.

Wolf


--- End Message ---
--- Begin Message ---
i am not sure what u want to do, for this case you need to tell us
about your database table
structure. i quess you have table like this.. assume the table name is
table1 and there are ten
column in it file1..file10 respectively

|table1         |
|member_id |
|file1            |
|file2            |
|file3            |
|   :              |
|file10          |

while($row =  mysql_fecth_array($sql_result))
{
      echo display_file($row['file1']);
      echo display_file($row['file2']);
      :
      echo display_file($row['file10']);

}

function display_file($filename)
{
       if file not exist or null etc
              return           add file here link
      else
              return          display file, delete file

}

this is the idea. of course maybe not what you want, unless you can tell us what
really you want to do or what you got..

On 6/17/08, Wolf <[EMAIL PROTECTED]> wrote:
> Richard Kurth wrote:
>> Wolf wrote:
>>> Richard Kurth wrote:
>>>> Could you please give me an idea where to start looking
>>>>
>>>> while($row=mysql_fetch_array($sql_result)){
>>>>
>>>> if ($row["number"]==1) {
>>>> <tr>
>>>> <td> File 1</td>
>>>> <td>This is the file</td>
>>>> <td>Delete</td>
>>>> </tr>
>>>> }else{
>>>> <tr>
>>>> <td>File1</td>
>>>> <td></td>
>>>> <td>Add</td>
>>>> </tr>
>>>> }
>>>>
>>>> }
>>>
>>>
>>> What is the query being executed?
> <!-- SNIP -->
>
>>>
>> This is the query being executed
>> $sql = "SELECT * FROM table WHERE members_id =" . $_SESSION["members_id"];
>> $sql_result = mysql_query($sql) or die(mysql_error());
>>
> That still pretty much tells me nothing.
>
> Does your table named table exist?
> Does your script connect or error?
> What DOES output to your screen?
> Does the schema for your table contain numbers?
>
> What happens when you use $row['number']?
>
> Or are you just hoping for someone to write your code?
>
> As written, your code will fail due to having PHP interspersed with HTML
> code.  As such, you either need to echo or exit out of the PHP areas and
> then continue.
>
> Wolf
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

--- End Message ---
--- Begin Message ---
Anyone know if PHP keys off the content-disposition for form pre-processing
to populate the $_FILES array?
In my html form example, the raw data looks like:
Content-Disposition: form-data; name="resp"; filename="tada.wav"
Content-Type: audio/x-wav

But the form posting from the voicexml browser/server looks like:

Content-Disposition: form-data; name="recording"
Content-Type: audio/x-wav

That's the only difference I have found so far, so I was wondering if php
parses form elements that have the filename attribute on the
Content-Disposition item.  The bad side of that is that from what I can
tell, Content-Disposition isn't a standard/requirement, just an RFC.

Thanks,
-jim





--- End Message ---
--- Begin Message ---
"Jim Feniello" <[EMAIL PROTECTED]> wrote on 06/16/2008 03:16:02 PM:

> Anyone know if PHP keys off the content-disposition for form 
pre-processing
> to populate the $_FILES array?

I believe that the $_FILES array is only populated when the <form> tag 
contains 'enctype="multipart/form-data"' and there is an input field of 
type "file" in the form, but I am not going to guarantee that ;)

Kirk


--- End Message ---
--- Begin Message ---
On Sun, 15 Jun 2008 14:07:14 -0400, tedd wrote:
> At 4:11 PM +0100 6/15/08, Richard Heyes wrote:
>>>But, a sophisticated user will find a way around that.
>>
>>A less sophisticated one will use the PrintScr key... :-)
>
> Must be a windozes thing.  :-)

Nope.  Works a treat in KDE in linux.

Jonesy


--- End Message ---
--- Begin Message ---
On Mon, Jun 16, 2008 at 5:23 PM, Jonesy <[EMAIL PROTECTED]> wrote:
> On Sun, 15 Jun 2008 14:07:14 -0400, tedd wrote:
>> At 4:11 PM +0100 6/15/08, Richard Heyes wrote:
>>>>But, a sophisticated user will find a way around that.
>>>
>>>A less sophisticated one will use the PrintScr key... :-)
>>
>> Must be a windozes thing.  :-)
>
> Nope.  Works a treat in KDE in linux.


    Status:  Myth.

    This is only if you have KDE configured to bind the key to an
external application such as KSnapshot, which is not the default.

    Unless, of course, your distro does it by default, which is always
possible.... but in general, it's not the case.  ;-P

-- 
</Daniel P. Brown>
Dedicated Servers - Intel 2.4GHz w/2TB bandwidth/mo. starting at just
$59.99/mo. with no contract!
Dedicated servers, VPS, and hosting from $2.50/mo.

--- End Message ---
--- Begin Message --- Okay, So I'm going to just assume that my issue is the fact that I'm tired... and my mind won't work properly.

[Mon Jun 16 22:27:58 2008] [error] PHP Warning: mysqli_connect() expects parameter 5 to be long, string given

Now parameter 5 is the database name, I echoed out each of the parameters and everything looks right...

here's the line that's causing the problem:

mysqli_connect($link, $server, $username, $password, $database) or die('Connection failed in dbmysqliconnect.php');

Any ideas?

--- End Message ---
--- Begin Message ---
Jason Pruim wrote:
> Okay, So I'm going to just assume that my issue is the fact that I'm
> tired... and my mind won't work properly.
> 
> [Mon Jun 16 22:27:58 2008] [error] PHP Warning:  mysqli_connect()
> expects parameter 5 to be long, string given
> 
> Now parameter 5 is the database name, I echoed out each of the
> parameters and everything looks right...
> 
> here's the line that's causing the problem:
> 
>         mysqli_connect($link, $server, $username, $password, $database)
> or die('Connection failed in dbmysqliconnect.php');

No, #5 is the port number (http://www.php.net/mysqli_connect).

You want:

$link = mysqli_connect($server, $user, $pass, $dbname);

$link can't be passed to mysqli_connect because it doesn't exist yet ;)

-- 
Postgresql & php tutorials
http://www.designmagick.com/

--- End Message ---
--- Begin Message ---
Hi,
I am using code 
$val = htmlentities($val, ENT_QUOTES, "UTF-8");

but it's not working in version 5.2.0. Is there any additional configuration
needed for this. it's working well in 5.2.2. Could you please help me???
-- 
View this message in context: 
http://www.nabble.com/conversion-of-unicode-characters-into-utf-8-tp17878398p17878398.html
Sent from the PHP - General mailing list archive at Nabble.com.


--- End Message ---
--- Begin Message ---
On Fri, 2008-06-13 at 16:32 -0500, Boyd, Todd M. wrote:
> > -----Original Message-----
> > From: Daniel Brown [mailto:[EMAIL PROTECTED]
> > Sent: Friday, June 13, 2008 4:13 PM
> > To: Ryan S
> > Cc: php php
> > Subject: Re: [PHP] Kindla 0T, but here goes...
> > 
> > On Fri, Jun 13, 2008 at 4:49 PM, Ryan S <[EMAIL PROTECTED]> wrote:
> > >
> > > when the user clicks on any of those links i do a quick trip to the
> > DB via ajax and update the div with all the artists that his choice
> > merits... same thing when he clicks the bands name... this time i
> > display all of their songs... and here's where i am stumped... when he
> > clicks any of those songs... it should start playing in the background
> > WITHOUT reloading the whole page... is this possible or am i just
> > barking up the wrong tree?
> > 
> >     Most sites, such as Project Playlist (now just Playlist.com) use
> > Flash for this.
> > 
> >     Check it out:
> > 
> >         http://www.playlist.com/
> 
> I agree with Daniel. Your most likely solution is to use a Flash player
> (or similar implementation) and populate a portion of your page with the
> object via AJAX (which you are already apparently comfortable with).

Or make your own Flash player with Ming and PHP. Working on that myself
at the moment.


--- End Message ---

Reply via email to