[PHP-DEV] followup: mod_negotiation and php

2003-02-02 Thread Stephen van Egmond
As a followup, I'd like to document what worked (for me) to address the problem. The issue, in summary, is that mod_negotiation thinks that PHP produces content of type application/x-httpd-php. It usually produces text/html of course, but there's no way for it to know that. mod_negotiation has

[PHP-DEV] mod_negotiation and 406 and php

2003-01-31 Thread Stephen van Egmond
I'm using Apache mod_negotiation to eliminate file extensions from my site, e.g. http://tinyplanet.ca/services/development This works great for dynamic features too, as I get pathinfo for free. No more ?article_id=92 business for me. Anyway. Google hates my guts for doing this. Why?

Re: [PHP-DEV] Do database resources sleep at night?

2001-10-02 Thread Stephen van Egmond
John Lim ([EMAIL PROTECTED]) wrote: My suspicion is that persistent resources are only cleaned up when the child process dies, while non-persistent resources are closed immediately at the end of the page/script. Does anyone know the correct answer? Correct. If you can spare the time, I

Re: [PHP-DEV] Security Issues - a bit of my experience

2001-07-30 Thread Stephen van Egmond
Zeev Suraski ([EMAIL PROTECTED]) wrote: I don't think we can change the behavior of empty() at this stage... isempty()? -- PHP Development Mailing List http://www.php.net/ To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list

Re: [PHP-DEV] Security Issues - a bit of my experience

2001-07-29 Thread Stephen van Egmond
Rasmus Lerdorf ([EMAIL PROTECTED]) wrote: Think about whether in each of these cases it would have happened if the developers of the app had developed with E_NOTICE on. In a high number of these cases it probably wouldn't. And if this number is close to 100%, then it would point to the fact

[PHP-DEV] Security techniques

2001-07-29 Thread Stephen van Egmond
I was going to reply to Phil Driscoll's post (from Friday) about E_SECURITY warning level, but thought it might belong better in a different thread. This thread is for collecting some ideas for security enhancements that can happen in PHP, besides the already-known register_globals. My idea:

Re: [PHP-DEV] Proposal

2001-07-29 Thread Stephen van Egmond
Rasmus Lerdorf ([EMAIL PROTECTED]) wrote: How to get there... For 4.0.7: - We leave all default configuration settings as they are now. - We add $_GET, $_POST, $_COOKIE, $_ENV, $_SERVER and perhaps make them super-globals like $GLOBALS +1 - We add a new function, somewhat like

Re: [PHP-DEV] crontab support for PHP

2001-07-29 Thread Stephen van Egmond
Stig S. Bakken ([EMAIL PROTECTED]) wrote: Uhm, why not simply run PHP scripts from cron? Or did you want something inside a web server environment? I personally have been looking for something similar. AOLServer has this facility: http://www.aolserver.com/docs/tcldev/tapi-114.htm

Re: [PHP-DEV] Security techniques

2001-07-29 Thread Stephen van Egmond
Zeev Suraski ([EMAIL PROTECTED]) wrote: At 12:04 29/07/2001, Stephen van Egmond wrote: 2. when a uploaded file fails is_uploaded_file(). My English parser bailed out on this one :) How's your PHP parser doing? :) foreach $f ($HTTP_POST_FILES) { if (!is_uploaded_file($f

Re: [PHP-DEV] Security Issues - a bit of my experience

2001-07-29 Thread Stephen van Egmond
Zeev Suraski ([EMAIL PROTECTED]) wrote: - register_globals=on leads to insecure code, which was demonstrated time and time again in the past. - Once it's off, we're going to provide methods of accessing variables which are just as easy, and quite easier in case you access them from

[PHP-DEV] [emile@iris-advies.com: Re: [PHP-DEV] Adding URI Translation Handlers]

2001-06-22 Thread Stephen van Egmond
: [EMAIL PROTECTED] Subject: Re: [PHP-DEV] Adding URI Translation Handlers Stephen van Egmond wrote: One thing which I am bumping into is the need to do URI rewriting, kind of like what mod_perl does. I would like to implement this myself in mod_php, and I'm looking for some advice

Re: [PHP-DEV] Adding URI Translation Handlers

2001-06-22 Thread Stephen van Egmond
Brian Moon ([EMAIL PROTECTED]) wrote: I am still not clear on your problem with the rewriting. I don't see what the number of files in the templates has to do with anything. Can you elaborate more on that. Maybe some examples of what the request would be and how you would rewrite it and

Re: [PHP-DEV] RE: 4.0.5: Merge Request

2001-04-25 Thread Stephen van Egmond
John Donagher ([EMAIL PROTECTED]) wrote: Someone mentioned the idea of bug-squashing parties; I think that's a great idea, although since the project's developers are all over the world it may be a little tricky to organize (I'm not fixing bugs at 10AM). Debian's bug parties are weekend-long

Re: [PHP-DEV] 4.0.5: Merge Request

2001-04-25 Thread Stephen van Egmond
Andi Gutmans ([EMAIL PROTECTED]) wrote: For the QA guys it might be nice to be able to flag certain bugs in the bug database and then automatically create a summary page which could be sent to php-dev. However, I think it would take too much time to get started. Maybe just manually

Re: [PHP-DEV] 4.0.5: Merge Request

2001-04-24 Thread Stephen van Egmond
Andi Gutmans ([EMAIL PROTECTED]) wrote: features (also because it has enough additional features already which are enough for another minor version), but the developers need to actually go through the bugs database and work on those crash bugs. It's not that easy to get everyone to work on

[PHP-DEV] further notes on bug squashing parties

2001-04-24 Thread Stephen van Egmond
Looking at the RC bugs graph: http://master.debian.org/~wakkerma/bugs/ you'll see two precipitous drops in the number of RC bugs. Those are bug parties. - Steve -- PHP Development Mailing List http://www.php.net/ To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail:

Re: [PHP-DEV] timezones and thread safety

2001-04-17 Thread Stephen van Egmond
James L. Pine ([EMAIL PROTECTED]) wrote: I'm running php as an apache 1.x module, so I just hacked in a userspace tzset(TZ) function, but this would be bad for systems that need to play nicely with threads. I'm a little bit baffled about why you would want to change the time zone while a

[PHP-DEV] write access to Zend

2001-03-22 Thread Stephen van Egmond
I have some patches for Zend (TSRM, in particular, to get threads running on the BeOS). I already have a CVS account for php.net, but it's not valid for Zend. What am I missing? Should I just post them? -- ,,, (. .) +--ooO-(_)-Ooo --- -- - - - - | Stephen van

Re: [PHP-DEV] Re: Dear Friends Future Millionaire:

2001-02-06 Thread Stephen van Egmond
Rasmus Lerdorf ([EMAIL PROTECTED]) wrote: What we are not interested in is stopping people who are not subscribed to the lists directly from participating. A lot of people read the lists via nntp or through various web gateways. You can rant all you want about the spam, but until you come

[PHP-DEV] Did anyone apply that BeOS patch?

2001-01-16 Thread Stephen van Egmond
I'm not seeing it in current CVS. Could someone confirm that they applied it? Are there any objections? -- ,,, (. .) +--ooO-(_)-Ooo --- -- - - - - | Stephen van Egmond http://bang.dhs.org/ -- PHP Development Mailing List http://www.php.net/ To unsubscribe, e

[PHP-DEV] patch for current CVS to build on BeOS

2001-01-14 Thread Stephen van Egmond
Attached is the diffs to current CVS to enable PHP4 to build under the BeOS. Tested with BeOS r5.0.3 under Intel architecture. The BeOS release currently requires "--without-mysql" due to differences in the networking stack which are currently being addressed by Be. Index: configure.in

[PHP-DEV] preferred format for patches?

2001-01-13 Thread Stephen van Egmond
--- -- - - - - | Stephen van Egmond http://bang.dhs.org/ -- PHP Development Mailing List http://www.php.net/ To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]