RE: [PHP-DB] PHP Security Basics - web seminar

2007-06-14 Thread Lasitha Alawatta
Hi All, If you would like to download the presentation you can find it here: http://www.zend.com/webinar Reg., Lasitha -Original Message- From: Chris [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 30, 2007 11:14 AM To: Lasitha Alawatta Cc: php-db@lists.php.net Subject: Re: [PHP-DB

Re: [PHP-DB] PHP Security Basics - web seminar

2007-05-30 Thread Chris
Lasitha Alawatta wrote: Hi All, “PHP Security Basics - Must-Knows for Everyone” Presenter: John Coggeshall, Zend Solutions Consultant Target audience: Anyone who believes Security is important in Web Application development and deployment Duration: 45 minutes, including Q&A Secur

RE: [PHP-DB] PHP Security and Code Design

2002-07-10 Thread Hutchins, Richard
Thanks, Adam. All clear now. Rich -Original Message- From: Adam Alkins [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 10, 2002 4:28 PM To: [EMAIL PROTECTED] Subject: Re: [PHP-DB] PHP Security and Code Design > I understand that this applies to data put into a form to be submitted

Re: [PHP-DB] PHP Security and Code Design

2002-07-10 Thread Adam Alkins
> I understand that this applies to data put into a form to be submitted to a > database (or another page, I guess), but does it also apply to > variable/value pairs passed along the URL from a hyperlink ( href="foo/bar.php?thisVar=thisVal>Click here.)? I couldn't quite get it > from the explanati

RE: [PHP-DB] PHP security

2001-02-21 Thread php3
Addressed to: "s.budd" <[EMAIL PROTECTED]> [EMAIL PROTECTED] ** Reply to note from "s.budd" <[EMAIL PROTECTED]> Wed, 21 Feb 2001 10:03:33 - > > > But if the database is on another machine then the password is sent as plain > text over the internet, no? No. MySQL encrypts the p

RE: [PHP-DB] PHP security

2001-02-21 Thread s.budd
But if the database is on another machine then the password is sent as plain text over the internet, no? -Original Message- From: Ben Cairns [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 21, 2001 10:06 AM To: [EMAIL PROTECTED] Subject: RE: [PHP-DB] PHP security Anything

RE: [PHP-DB] PHP security

2001-02-21 Thread Ben Cairns
Anything contained within the PHP open & close Tags ( ) is parsed out server side. In order for them to read the source of the file, they must have console access. Try and get a password from www.mywapfone.net/index.php That page does a DB connect using your script. You cannot see my Passwor

RE: [PHP-DB] PHP security

2001-02-21 Thread s.budd
moreover , even if they cant see the text of the page, Your password is going over the internet in plain text. -Original Message- From: Don [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 20, 2001 7:24 PM To: php-db list Subject: [PHP-DB] PHP security I am writing aome PHP scripts

Re: [PHP-DB] PHP security

2001-02-20 Thread Ron Brogden
At 01:50 PM 2/20/2001 -0600, you wrote: >As far as I know, you can not download PHP programs without access to >download them. Meaning you need an account on the webserver, so they would >need your account user and pass before they could steal your mysql user and >pass. The main issue is that (es

RE: [PHP-DB] PHP security

2001-02-20 Thread Ben - FCP
[mailto:[EMAIL PROTECTED]] Sent: 20 February 2001 19:51 To: Don; php-db list Subject: Re: [PHP-DB] PHP security As far as I know, you can not download PHP programs without access to download them. Meaning you need an account on the webserver, so they would need your account user and pass before they coul

Re: [PHP-DB] PHP security

2001-02-20 Thread Doug Schasteen
As far as I know, you can not download PHP programs without access to download them. Meaning you need an account on the webserver, so they would need your account user and pass before they could steal your mysql user and pass. I don't know how frontpage works, but it would probably have to call on