php-windows Digest 3 Aug 2004 07:57:32 -0000 Issue 2344

Topics (messages 24334 through 24340):

Re: PHP help: login.php T_ELSE error
        24334 by: Dylan Barber

Re: Unable to load php_mysql.dll
        24335 by: Chris
        24336 by: D_Angle
        24339 by: Nadim Attari

Login Scripts
        24337 by: Dylan Barber

Re: Hopefuly an easy one?
        24338 by: DvDmanDT

Re: php_printer extension patch
        24340 by: Philippe MAES

Administrivia:

To subscribe to the digest, e-mail:
        [EMAIL PROTECTED]

To unsubscribe from the digest, e-mail:
        [EMAIL PROTECTED]

To post to the list, e-mail:
        [EMAIL PROTECTED]


----------------------------------------------------------------------
--- Begin Message ---
most likely it needs to be 

elseif

no space!

Someone elsemight see something else

-----Original Message-----
From: server-matrix <[EMAIL PROTECTED]>
Sent: Jul 29, 2004 11:31 PM
To: [EMAIL PROTECTED]
Subject: [PHP-WIN] PHP help: login.php T_ELSE error

Please could somebody help me with this. I'm quite new to PHP. I can't seem
to find what needs to bechanged in this.

// session id check
if (!empty($HTTP_POST_VARS['sid']) || !empty($HTTP_GET_VARS['sid']))
{
 $sid = (!empty($HTTP_POST_VARS['sid'])) ? $HTTP_POST_VARS['sid'] :
$HTTP_GET_VARS['sid'];
}
else
{
 $sid = '';
}

if( isset($HTTP_POST_VARS['login']) || isset($HTTP_GET_VARS['login']) ||
isset($HTTP_POST_VARS['logout']) || isset($HTTP_GET_VARS['logout']) )
{
 if( ( isset($HTTP_POST_VARS['login']) || isset($HTTP_GET_VARS['login']) )
&& !$userdata['session_logged_in'] )
 {
  $username = isset($HTTP_POST_VARS['username']) ?
trim(htmlspecialchars($HTTP_POST_VARS['username'])) : '';
  $username = substr(str_replace("\\'", "'", $username), 0, 25);
  $username = str_replace("'", "\\'", $username);
  $password = isset($HTTP_POST_VARS['password']) ?
$HTTP_POST_VARS['password'] : '';

  $sql = "SELECT user_id, username, user_password, user_active, user_level
   FROM " . USERS_TABLE . "
   WHERE username = '" . str_replace("\\'", "''", $username) . "'";
  if ( !($result = $db->sql_query($sql)) )
  {
   message_die(GENERAL_ERROR, 'Error in obtaining userdata', '', __LINE__,
__FILE__, $sql);
  }

  if( $row = $db->sql_fetchrow($result) )
  {
   if( $row['user_level'] != ADMIN && $board_config['board_disable'] )
   {
    redirect(append_sid("index.$phpEx", true));
   }
   else
   {
    if( md5($password) == $row['user_password'] && $row['user_active'] )
    {
     $autologin = ( isset($HTTP_POST_VARS['autologin']) ) ? TRUE : 0;

     $session_id = session_begin($row['user_id'], $user_ip, PAGE_INDEX,
FALSE, $autologin);

     if( $session_id )
     {
      $url = ( !empty($HTTP_POST_VARS['redirect']) ) ? str_replace('&',
'&', htmlspecialchars($HTTP_POST_VARS['redirect'])) : "index.$phpEx";
      redirect(append_sid($url, true));
     }
     else
     {
      message_die(CRITICAL_ERROR, "Couldn't start session : login", "",
__LINE__, __FILE__);
     }
    }
    else
    {
     $redirect = ( !empty($HTTP_POST_VARS['redirect']) ) ?
str_replace('&', '&', htmlspecialchars($HTTP_POST_VARS['redirect'])) :
'';
     $redirect = str_replace('?', '&', $redirect);

               }
                           if (strstr(urldecode($redirect), "\n") ||
strstr(urldecode($redirect), "\r"))
               {
                  message_die(GENERAL_ERROR, 'Tried to redirect to
potentially insecure url.');
               }
     $template->assign_vars(array(
      'META' => "<meta http-equiv=\"refresh\"
content=\"3;url=login.$phpEx?redirect=$redirect\">")
     );

     $message = $lang['Error_login'] . '<br /><br />' .
sprintf($lang['Click_return_login'], "<a
href=\"login.$phpEx?redirect=$redirect\">", '</a>') . '<br /><br />' .
sprintf($lang['Click_return_index'], '<a href="' .
append_sid("index.$phpEx") . '">', '</a>');

     message_die(GENERAL_MESSAGE, $message);
    }
   }
  }
  else
  {
   $redirect = ( !empty($HTTP_POST_VARS['redirect']) ) ?
str_replace('&', '&', htmlspecialchars($HTTP_POST_VARS['redirect'])) :
"";
   $redirect = str_replace("?", "&", $redirect);

   $template->assign_vars(array(
    'META' => "<meta http-equiv=\"refresh\"
content=\"3;url=login.$phpEx?redirect=$redirect\">")
   );

   $message = $lang['Error_login'] . '<br /><br />' .
sprintf($lang['Click_return_login'], "<a
href=\"login.$phpEx?redirect=$redirect\">", '</a>') . '<br /><br />' .
sprintf($lang['Click_return_index'], '<a href="' .
append_sid("index.$phpEx") . '">', '</a>');

   message_die(GENERAL_MESSAGE, $message);
  }
 }
 else if( ( isset($HTTP_GET_VARS['logout']) ||
isset($HTTP_POST_VARS['logout']) ) && $userdata['session_logged_in'] )
 {
  if( $userdata['session_logged_in'] )
  {
   session_end($userdata['session_id'], $userdata['user_id']);
  }

  if (!empty($HTTP_POST_VARS['redirect']) ||
!empty($HTTP_GET_VARS['redirect']))
  {
   $url = (!empty($HTTP_POST_VARS['redirect'])) ?
htmlspecialchars($HTTP_POST_VARS['redirect']) :
htmlspecialchars($HTTP_GET_VARS['redirect']);
   $url = str_replace('&', '&', $url);
   redirect(append_sid($url, true));
  }
  else
  {
   redirect(append_sid("index.$phpEx", true));
  }
 }
 else
 {
  $url = ( !empty($HTTP_POST_VARS['redirect']) ) ? str_replace('&', '&',
htmlspecialchars($HTTP_POST_VARS['redirect'])) : "index.$phpEx";
  redirect(append_sid($url, true));

}


 //
 // Do a full login page dohickey if
 // user not already logged in
 //
**** else if( !$userdata['session_logged_in'] )  *****
 {
  $page_title = $lang['Login'];
  include($phpbb_root_path . 'includes/page_header.'.$phpEx);


**** That's the error line, Line 158
Parse error: parse error, unexpected T_ELSE in
/home/site/public_html/phpBB2/login.php on line 158

-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



---------------------------------------------------------------------------------------------
Dylan Barber                              :  AOL Messenger - dylanbarb
(CIW Professional, A+ Technician): MSN Messenger - [EMAIL PROTECTED]
Web Designer / Developer / Host
---------------------------------------------------------------------------------------------


Clip those URLs! - Short links are easier to remember.
http://clipurl.com

--- End Message ---
--- Begin Message ---
Nadim Attari wrote:

Hello,

I've installed PHP Version 5.0.0 (windows installer downloaded from php.net)
on Windows 2000 SP4. All works fine!
The configuration is as follows:

     System  Windows NT XXXXX 5.0 build 2195
     Build Date  Jul 13 2004 21:34:42
     Configure Command  cscript /nologo configure.js
"--enable-snapshot-build" "--with-gd=shared"
     Server API  CGI/FastCGI
     Virtual Directory Support  enabled
     Configuration File (php.ini) Path  C:\WINNT\php.ini
     PHP API  20031224
     PHP Extension  20040412
     Zend Extension  220040412
     Debug Build  no
     Thread Safety  enabled
     IPv6 Support  enabled
     Registered PHP Streams  php, file, http, ftp, compress.zlib
     Registered Stream Socket Transports  tcp, udp


Then i've uncommented the line "extension=php_mysql.dll" and set extension_dir = ".\ext"; I copied the unpacked "php_mysql.dll" file (again downloaded the binaries from php.net) into "ext" folder in PHP

Now i get the following:
"PHP Warning: PHP Startup: Unable to load dynamic library
'.\ext\php_mysql.dll' - Le module sp�cifi� est introuvable. in Unknown on
line 0"

Note that i've set
- cgi.force_redirect = 0;
- fastcgi.impersonate = 1;

Still the same problem. Any help please.

Nadim Attari
Alienworkers.com



I don't think that relative path is pointing to where you think it is (if it's pointing anywhere at all). Try setting the extension_dir to the full pathname of the ext dir. (like extension_dir = "C:\PHP\ext\" ) .

Chris
--- End Message ---
--- Begin Message ---
Try copying libmysql.dll in php root folder to system32 folder in windows
(this works for IIS)

php_mysql.dll is dependent of libmysql.dll :)

had the same error message that the php_mysql.dll was missing but after I
copyed libmysql.dll to the system32 folder IIS started and worked correctly
:)
"Nadim Attari" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Hello,
>
> I've installed PHP Version 5.0.0 (windows installer downloaded from
php.net)
> on Windows 2000 SP4. All works fine!
> The configuration is as follows:
>
>       System  Windows NT XXXXX 5.0 build 2195
>       Build Date  Jul 13 2004 21:34:42
>       Configure Command  cscript /nologo configure.js
> "--enable-snapshot-build" "--with-gd=shared"
>       Server API  CGI/FastCGI
>       Virtual Directory Support  enabled
>       Configuration File (php.ini) Path  C:\WINNT\php.ini
>       PHP API  20031224
>       PHP Extension  20040412
>       Zend Extension  220040412
>       Debug Build  no
>       Thread Safety  enabled
>       IPv6 Support  enabled
>       Registered PHP Streams  php, file, http, ftp, compress.zlib
>       Registered Stream Socket Transports  tcp, udp
>
>
> Then i've uncommented the line "extension=php_mysql.dll" and set
> extension_dir = ".\ext";
> I copied the unpacked "php_mysql.dll" file (again downloaded the binaries
> from php.net) into "ext" folder in PHP
>
> Now i get the following:
> "PHP Warning: PHP Startup: Unable to load dynamic library
> '.\ext\php_mysql.dll' - Le module sp�cifi� est introuvable. in Unknown on
> line 0"
>
> Note that i've set
> - cgi.force_redirect = 0;
> - fastcgi.impersonate = 1;
>
> Still the same problem. Any help please.
>
> Nadim Attari
> Alienworkers.com

--- End Message ---
--- Begin Message ---
> Try copying libmysql.dll in php root folder to system32 folder in windows
> (this works for IIS)
>
> php_mysql.dll is dependent of libmysql.dll :)
>
> had the same error message that the php_mysql.dll was missing but after I
> copyed libmysql.dll to the system32 folder IIS started and worked
correctly
> :)

this works !!!! Thanks very much

nadim attari

--- End Message ---
--- Begin Message ---
I have been looking over how to build and some best practices of login and security 
scripts in PHP.  Could anybody direct to the one(s) they think are worth looking at?  
Mainly I am looking for ways to improve mine.

I would like to include .htaccess in the script but I havent found much about that 
anybody got a link of some scripts to look at?

---------------------------------------------------------------------------------------------
Dylan Barber                              :  AOL Messenger - dylanbarb
(CIW Professional, A+ Technician): MSN Messenger - [EMAIL PROTECTED]
Web Designer / Developer / Host
---------------------------------------------------------------------------------------------


Clip those URLs! - Short links are easier to remember.
http://clipurl.com

--- End Message ---
--- Begin Message ---
urlencode or rawurlencode.. The first one is what your browser user I
think..

-- 
// DvDmanDT
MSN: dvdmandt�hotmail.com
Mail: dvdmandt�telia.com
"Ross Honniball" <[EMAIL PROTECTED]> skrev i meddelandet
news:[EMAIL PROTECTED]
> Hi All,
>
> I'm just trying to link to a url with a parameter that contains spaces and
> other special characters. ie.
>
> <a href="http://localhost/apps/jc_areas.php?area=Arts Pol+His">
>
> which of course doesn't work (space and + sign are problems).
>
> Can someone please point me in the right direction to what php function
> escapes characters or whatever it has to do?
>
> Help much appreciated ... Ross
> .
> . Ross Honniball. JCU Bookshop Cairns, Qld, Australia.
> .

--- End Message ---
--- Begin Message --- Jason Barnett wrote:
Philippe Maes wrote:

For my work, i needed the printer extension (for windows), and some problems appeared to me when i used it:

- printer_draw_bmp function don't satisfy me because it not use printer resolution. I fixed it by adding 2 parameters (width and height).
- printer_set_option doesn't work. I fixed it by adding an option to validate the others one.


I tryed to contact previous maintener, but they don't answer me.

You can find my patch for the moment on http://tawanation.dyndns.org

Best Regards

- Philippe MAES -


I'm going to go check this out... because it's a cool idea and because I'm thinking about printing. But really, if this patch works as well as advertised then you should really submit the patch to php internals. That way everyone can benefit from your patch, not just those of us that actually read the newsgroup messages :)

The patch is include into pecl CVS now ;)

--- End Message ---

Reply via email to