[PHP-DEV] Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1

Can you post this to php.announce as well? Marko Karppinen wrote: > >PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 > > > Issued on: July 22, 2002 > Software: PHP versions 4.2.0 and 4.2.1 > Platforms: All > > >The PHP Group has learned of a serious security vu

Re: [PHP-DEV] Seeking Comments - Regarding header()

Chris Shiflett wrote: > I have a few sites where I deliberately violate the HTTP spec in this > way to get around a bug in IE (I know, shame on me). I've been using > relative URLs in a "Location" header for years with no crashes that I > know of. > > There must be something unique in your confi

Re: [PHP-DEV] PHP web farms (i.e. why msession or something like it)

Yasuo Ohgaki wrote: > Marcus Börger wrote: >> At 03:52 30.05.2002, Yasuo Ohgaki wrote: >> >> From my expirience postgres is slower if you use referential integrity >> (what you should do) >> but this you cannot do in mysql (and therefore it is some kind of data >> storage but not a real rdbms).

Re: [PHP-DEV] PHP web farms (i.e. why msession or something like

[EMAIL PROTECTED] wrote: > MySQL's table locking during update pretty much make sure that > performance will degrade under heavy load with many connections. > It's not actually as bad as you think. With a table like this, the table locking actually has a very minimal effect on it. In any case,

Re: [PHP-DEV] PHP web farms (i.e. why msession or something like it)

[EMAIL PROTECTED] wrote: >> I agree that msession is better than using MySQL or PostgreSQL as a >> session manager. However, most people who use PHP on web farms >> already have some sort of database set up, so it seems logical to me >> to be able to use it for storing sessions. MySQL actual

Re: [PHP-DEV] PHP web farms (i.e. why msession or something like it)

[EMAIL PROTECTED] wrote: > The problem with using databases are they they are expensive and they are > slow. > > A generalized PostgreSQL session manager would be cool, I have actually > been thinking about such an extension. Using the schema from the PG > msession plugin, it would be fairly eas

Re: [PHP-DEV] PHP web farms (i.e. why msession or something like it)

any (or at least several) databases. Built-in MySQL session support is definitely needed. Right now I don't run any web farms, but I used to work for a company with 125+ web servers, so I understand the problem. Steve Meyers -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Feature Request: Session Module

4, 2002 at 06:20:28PM -0600, Steve Meyers wrote : >> I just tried ext/shmop, and without even using it, the fact that it is >> compiled in to php causes it to segfault on every request. >> >> Here's my ./configure line >> >> ./configure --with-mysql=/usr --wi

Re: [PHP-DEV] Feature Request: Session Module

I just tried ext/shmop, and without even using it, the fact that it is compiled in to php causes it to segfault on every request. Here's my ./configure line ./configure --with-mysql=/usr --with-pgsql --enable-ftp --with-ldap --with-gmp --disable-pear --enable-shmop --enable-apc --with-apache=

Re: [PHP-DEV] $_USER -- just a thought

Try get_defined_vars() Hank Marquardt wrote: > Allow me to elaborate -- > > I basically am looking for whatever is *not* in the existing $_ arrays. > The application is to save state in a 'crash and burn' function as much > as possible about the crash event ... I'm serializing it all and writin

Re: [PHP-DEV] sockets

On Sun, 2002-04-28 at 22:43, Jason Greene wrote: > In the case of a socket you are selecting on has errored, the socket > will show up as readable. You then can perform a socket_read/recv, and > you should receive NULL (errored socket), then you can call > socket_last_error to receive the errno. >

Re: [PHP-DEV] sockets

There's only one thing it's missing -- the equivalent of socket_get_status(), which is not part of the extension, despite the name. If I set my socket to nonblocking, the only way to tell if it has died is to try to write to it, which isn't always a desirable thing to do :) Unless there's ano

RE: Re[2]: [PHP-DEV] Major Bug in multiple MySQL Connections?

Or use a simple database wrapper, that will save you coding time anyway. Try PHPLIB's wrappers, for example. They handle doing the database select for you, you just have to do the query. Rasmus Lerdorf wrote: > So use mysql_db_query() > > On Mon, 22 Apr 2002, Matthew Walker wrote: > >> Sin

Re: [PHP-DEV] PHP and Threads

If you have a very limited number of messages that could be passed, you could use signals. For example, child 1 would send a signal to the parent, and the parent would then signal all of the other children. If you have more complex messages that need to be passed, that won't work, of course.

[PHP-DEV] Re: call_user_func_array bug

Sam Liddicott wrote: > want to patch swig so that methods shadow classes can take variable > numbers of arguments.  The shadow methods need to pass on the same number > of arguments using get_args() and call_user_func_array, but can't because If I remember right, you have to use array($object, $

[PHP-DEV] Re: Questionable behaviour of variable variables

{""} = "bar"; $GLOBALS[$varname]->$varname = "foo"; ?> Any difference to what you did? Should PHP spit out warnings every time a developer does something that it considers stupid? Most languages fully support the user shooting themselves in the foot -- PHP is not alone in this :) -- PHP

Re: [PHP-DEV] socket_get_status(...)

Wez Furlong wrote: > Hi Sean, > > socket_get_status is unlikely to ever work with socket resources > from the sockets extension. > You should be using things like the select() function to test the > status of your sockets if you are dealing with them on such a low > level. > > --Wez. This is a

Re: [PHP-DEV] The PHP Platform

of > their things. My library is also open-source and I've told them they can > add them and they never did. In fact, I wanted that to happen since that > would provide more tools to everyone. > > - Original Message - > From: "Steve Meyers" <[EMAIL PRO

Re: [PHP-DEV] The PHP Platform

Ken Egervari wrote: > I agree with you friend. Everything is always in beta as far as I am > concerned. Everything evolves. But PEAR has been around for how long > now? I think its time it started to evolve a little faster and its goals > be > re-evaluated. When PHP 5 supports a simular langua

Re: [PHP-DEV] Anyone wrote persistent variable extension?

>> $_PERSISTENT could store data key'd to the script that stored it. >> $_PERSISTENT_GLOBAL (probably a better name can be found) could just >> store data accessable to any script under a certain document root. You >> definitly do not want to share persistent data across document roots (ie >> vir

[PHP-DEV] sockets: half documentation problem, half feature request

I've been trying to figure out how to know when a connection is dead when the socket is non-blocking. It seems to return the same error code (11) whether the connection is dead or if no data is waiting. On the socket_read() manual page, it says to see also socket_get_status(), which sounds l

Re: [PHP-DEV] Re: aggergate vs MI

If MI can be emulated using aggregation, how hard would it be to add the syntax for MI to the language, but have it implement it using aggregation? Zeev Suraski wrote: > At 00:44 09/04/2002, brad lafountain wrote: >>If aggregation is included then i see it is absoulty necessary to include >>MI

Re: Re[2]: [PHP-DEV] webserver in PHP

I'd still like to see your project, as a basic framework for a server without any specific protocol implemented. That sounds pretty cool actually. Daniel Lorch wrote: > hi, > >> A better way to do the method that you are trying to to do is to set a >> signal handler for SIGCHLD that waits on

Re: [PHP-DEV] FW: [PHP-CVS] cvs: php4 /ext/odbc birdstep.c config.m4 php_birstep.h php_odbc.c php_odbc.h php_velocis.h setup.stub velocis.c /main build-defs.h.in

[EMAIL PROTECTED] wrote: > On Mon, 4 Mar 2002, James Cox wrote: > >> if anyone has access to a Birdstep server (velocis) can you QA this? I'm >> waiting on seeing if the Birdstep company will send me a copy of their >> product - however it's just name changes.. > > It should get tested anyway,

[PHP-DEV] Re: No announce for PHP 4.1.2

Yasuo Ohgaki wrote: > Hi, whoever relased PHP 4.1.2. > > It is announced in freshmeast. > However, there is no announce message in php.announce (yet) :) > There was also no announcement for the security bugfix to PHP. IMO, this is a serious oversight. -- PHP Development Mailing List

Re: [PHP-DEV] Re: unset($_SESSION[...]) vs. register_globals=On

I think you're missing something here, Yasuo. Hans is talking about unregistering a single session variable, not the entire session array. He's talking about unset($_SESSION['varname']), not unset($_SESSION). Yasuo Ohgaki wrote: > Hans Spath wrote: >> Yasuo Ohgaki wrote: >> >>> Hans Spath w

[PHP-DEV] Re: Disable magic quote by default.

Lars Torben Wilson wrote: > On Sat, 2002-02-16 at 18:01, Yasuo Ohgaki wrote: >> Yasuo Ohgaki wrote: >> > Stefan Esser wrote: >> > > Hmmm btw... This idea just came to my mind and i don't know if it >> > would be >> > > too much overhead, but what about keeping track of what variables >> > > go

[PHP-DEV] Re: Behaviour of $array1 + $array2

Yasuo Ohgaki wrote: > Markus Fischer wrote: > >> Can someone point me where the following behaviour is documented: >> >> $ php -q >> > $foo = array(27 => 'Ene'); >> $bar = array(-1 => 'Mene'); >> >> $baz = $foo + $bar; >> >> var_dump($baz); >> ?> >> array(2

[PHP-DEV] Re: Bug #14933: regular expression problem

It's probably the double quotes. Either use single quotes, or double backslashes. For example, "([\\da-z8]{1,})" [EMAIL PROTECTED] wrote: > From: [EMAIL PROTECTED] > Operating system: Win ME > PHP version: 4.1.1 > PHP Bug Type: Documentation problem > Bug description: r

[PHP-DEV] Re: Bug #14917: When using array_merge w/numbers & assoc array the numbers are changed to 0,1..

This is well documented in the comments for array_merge() in the manual. A workaround is given -- the '+' operator is overloaded to do an associative array merge when two arrays are given. Blaine McDonnell wrote: > From: [EMAIL PROTECTED] > Operating system: BSD & Windows > PHP ve

[PHP-DEV] Re: Bug #14928 Updated: Session variables are lost when using header() redirection(identical to #14636)

Actually, I looked at the alleged dupe, and it was solved by setting session.auto_start to 0 in php.ini. This report says that he cannot solve the problem by doing that, so it is probably different in solution although similar in symptoms. [EMAIL PROTECTED] wrote: > ID: 14928 > Updated by: s

[PHP-DEV] Re: Bug #14872 Updated: Garbage being returned when displaying contents of a url

[EMAIL PROTECTED] wrote: > ID: 14872 > User updated by: [EMAIL PROTECTED] > Reported By: [EMAIL PROTECTED] > Status: Bogus > Bug Type: Sockets related > Operating System: RedHat Linux > PHP Version: 4.0.6 > New Comment: > > Steve, > > Thanks for the clarification. > > I posted this question in

[PHP-DEV] Re: Bug #14872 Updated: Garbage being returned when displaying contents of a url

> i don't know about the performance loss > but the hex numbers you get are just what > you requested > The performance loss is also due to using HTTP/1.1, which defaults to having keepalive on. Until you tell it to close the connection or it times out (about 2 seconds), it will keep it open.

[PHP-DEV] Re: Bug #14864 Updated: Object and sessions, no way!

My word, I didn't remember PHP developers being so rude to people... The problem is that the php.ini had session.auto_start=1, at least that would be my guess. I think that bug (and I think it is a bug) has come up several times before. Even with the auto-start, it shouldn't start until afte

[PHP-DEV] Re: Bug #13505: The word "New" alone causes compilation to abort while "New_" allows compile.

You had the words New With Warranty in your code, and it wasn't in quotes. In fact your sprintf doesn't make much sense at all, since there are no %'s in it. The keyword "new" is used for instantiating objects, i.e. $obj = new class(); If you're going to use strings, put them in quotes:

[PHP-DEV] Re: Bug #13441: Evaluation of {$ in strings

This behavior is clearly documented in the manual under "Migrating from PHP 3.0 to PHP 4.0" http://www.php.net/manual/en/migration4.strings.php <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > From: [EMAIL PROTECTED] > Operating system: linux > PHP

Re: [PHP-DEV] Bug #11805 Updated: missing 3600 seconds between 10/13/2001 and 10/15/2001

ever, I think that's just Daylight Savings Time... I'm guessing that this bug report somehow relates to daylight savings, and thus it isn't really a bug at all. -- Steve Meyers <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... >

Re: [PHP-DEV] Scripting Shootout - PHP ranked 24/29

Of course, there are also several of his test cases missing -- which affects php heavily. > > Thought you all might be interested in this benchmarking shootout: > > I've talked to the author of the "benchmark" a couple of > weeks ago and he of course did not build PHP with > enabled o

Re: [PHP-DEV] Fix for bugs 8808, 8821, 9130, and possibly 10209

my head :) > Also, what does CS_PUBLIC mean? Does it translate to __declspec(dllexport)? > If so maybe we should be removing the static? > > Andi > > At 02:34 PM 5/22/2001 -0600, Steve Meyers wrote: > >The sybase_ct extension does not work on Windows. The following two simpl

[PHP-DEV] Fix for bugs 8808, 8821, 9130, and possibly 10209

The sybase_ct extension does not work on Windows. The following two simple changes are necessary for it to eliminate the segfault. Would it be possible to put these changes into the 4.0.6 branch? Thanks! In ext/sybase_ct/php_sybase_ct.c, around line 200, change these two lines: static CS_RETC

Re: [PHP-DEV] Bug #10765 Updated: timeout doesn't work

>From the manual for fsockopen: Depending on the environment, the Unix domain or the optional connect timeout may not be available. -- Steve Meyers <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > ID: 10765 > Updated by: snipe

Re: [PHP-DEV] Bug #10570: PHP 4.0.5 - Cannot connect to mySQL database

I had the same problem when I first compiled 4.0.5, using the built-in MySQL libraries. I changed my configure line to use --with-mysql=/usr/local/mysql and it worked fine after that. I had the same problem on two different boxes. Seems kind of odd that they didn't catch this one... <[EMAIL PR

RE: [PHP-DEV] PHP 4.0 Bug #9386: set_error_handler() doesn't always catch errors

It seems to me that the problem is that it hasn't parsed and executed the auto_prepend_file before the parse error occurs in the main script. Would it be possible to execute the auto_prepend_file before parsing the main script, or would that break functionality? Steve Meyers Build Ma