[fw-general] Zend http timeout

2010-10-25 Thread Daniel Latter
Hi All, I have to modify the timeout value in Zend/Http/Client.php for a web service i am building. Is there any way I can avoid editing Zend/Http/Client.php (config array) and instead pass the object to webservice server/client, say in a config array with the changed timeout value? Thanks

Re: [fw-general] Zend http timeout

2010-10-25 Thread Chris Riesen
Quote: http://framework.zend.com/manual/en/zend.http.client.html $client = new Zend_Http_Client(); $client-setUri('http://example.org'); $client-setConfig(array( 'maxredirects' = 0, 'timeout' = 30)); And most services you have a method to set the client. If it's a Zend_Service

Re: [fw-general] Zend http timeout

2010-10-25 Thread Daniel Latter
Thanks a bunch guys! Daniel. On 25 October 2010 10:40, Chris Riesen chris.rie...@gmail.com wrote: Quote: http://framework.zend.com/manual/en/zend.http.client.html $client = new Zend_Http_Client(); $client-setUri('http://example.org'); $client-setConfig(array( 'maxredirects' = 0,

[fw-general] Preventing XSS : Zend_Filter_Tags is enough?

2010-10-25 Thread robert mena
Hi, I'd like to know if is it safe to filter XSS use Zend_Filter_Tags if none of my fields is supposed to receive any HTML. I read somewhere (at padraic's blog?) that for more sophisticated filtering (like allowing certain tags/attributes) Zend_Filter_Tags is not the option. Regards.

Re: [fw-general] Preventing XSS : Zend_Filter_Tags is enough?

2010-10-25 Thread Hector Virgen
If HTML is not allowed, it's better to escape the value instead of strip out content that resembles HTML. -- *Hector Virgen* Sr. Web Developer Walt Disney Parks and Resorts Online http://www.virgentech.com On Mon, Oct 25, 2010 at 9:29 AM, robert mena robert.m...@gmail.com wrote: Hi, I'd

Re: [fw-general] Zend_Form - Unable to translate error messages post-validation

2010-10-25 Thread Hector Virgen
Thanks for the clarification, Thomas. I'll be sure to add translations prior to validating. -- *Hector Virgen* Sr. Web Developer Walt Disney Parks and Resorts Online http://www.virgentech.com

Re: [fw-general] Preventing XSS : Zend_Filter_Tags is enough?

2010-10-25 Thread robert mena
Hi Hector, Thanks for your reply. If I recall the 'general' advice should be filter input and escape output. I am looking for the filter part right now. On Mon, Oct 25, 2010 at 12:39 PM, Hector Virgen djvir...@gmail.com wrote: If HTML is not allowed, it's better to escape the value instead

Re: [fw-general] Preventing XSS : Zend_Filter_Tags is enough?

2010-10-25 Thread Hector Virgen
Then I guess it depends -- do you want to filter out all html, or allow html-like content to be displayed back to your users (escaped, of course)? Personally I prefer the latter because it allows users to write something like Strong tags look like this: strongcontent/strong The users will see

Re: [fw-general] Preventing XSS : Zend_Filter_Tags is enough?

2010-10-25 Thread robert mena
Hi Hector, In my case I'd like to have control over this. In most cases (like regular form variables/GET/hidden) I'd like to remove ALL html. Some fields (a few where I allow - via tinyMCE) should allow some tags to be used - like the strong. In a more recent blog (

Re: [fw-general] Preventing XSS : Zend_Filter_Tags is enough?

2010-10-25 Thread Matthew Weier O'Phinney
-- robert mena robert.m...@gmail.com wrote (on Monday, 25 October 2010, 03:39 PM -0400): In my case I'd like to have control over this. In most cases (like regular form variables/GET/hidden) I'd like to remove ALL html. Some fields (a few where I allow - via tinyMCE) should allow some tags