[PHP-DEV] Request : PHP & Symbian os

2003-03-09 Thread Hatem Ben
Greetings all, Have someone already tryed to use/compile/code PHP on Symbian OS ? Cheers, Hatem -- PHP Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] request data filter

2003-01-16 Thread Rasmus Lerdorf
>I cannot agree more. There is only so much you can do outside >the PHP (as I do in mod_security). I've finished the code. I'll run it through its paces here and commit it soon. -Rasmus -- PHP Development Mailing List To unsubscribe, visit: http://www.php.net/un

Re: [PHP-DEV] request data filter

2003-01-16 Thread Ivan Ristic
I suppose I could munge with the apache tables directly in a hook before the data is read by the standard treat_data hook, although for post data I am not sure I have any way to get in there before the ap_get_client_block() call and change what data ap_get_client_block() is going to see. I do

Re: [PHP-DEV] request data filter

2003-01-16 Thread Zeev Suraski
At 02:52 16/01/2003, Rasmus Lerdorf wrote: In trying to implement a security policy I need to pass all user-supplied data (GET/POST/Cookie) through a filter function which implements this security. This isn't all that hard to implement as an extension through new 4.3 treat_data and post_handler h

Re: [PHP-DEV] request data filter

2003-01-16 Thread Moriyoshi Koizumi
It looks like a mess indeed, and there seems a thought that encoding conversion and variable registration should be separated into two phases. However doing so doesn't make sense because some of multibyte characters contains "[", "]", or "=" and they cannot be handled properly in the ordinary query

Re: [PHP-DEV] request data filter

2003-01-16 Thread Maxim Maletsky
Rasmus Lerdorf <[EMAIL PROTECTED]> wrote... : > this would likely have different security policies, but I do think a > general hook is something that would be useful to all of PHP. > > A huge number of web apps today are extremely vulnerable to > cross-site-scripting attacks. Occasionally deve

Re: [PHP-DEV] request data filter

2003-01-15 Thread Rasmus Lerdorf
> You could have your custom C extension be called as one of the hooks. I suppose I could munge with the apache tables directly in a hook before the data is read by the standard treat_data hook, although for post data I am not sure I have any way to get in there before the ap_get_client_block() ca

Re: [PHP-DEV] request data filter

2003-01-15 Thread George Schlossnagle
You could have your custom C extension be called as one of the hooks. On Wednesday, January 15, 2003, at 09:42 PM, Rasmus Lerdorf wrote: On Wed, 15 Jan 2003, George Schlossnagle wrote: You consider running the apache_hooks code? This should be simple there. You mean do the filtering straig

Re: [PHP-DEV] request data filter

2003-01-15 Thread Rasmus Lerdorf
On Wed, 15 Jan 2003, George Schlossnagle wrote: > You consider running the apache_hooks code? This should be simple > there. You mean do the filtering straight from a PHP script that gets called from a hook? That's a lot of looping through a bunch of arrays. This has to happen on every requ

Re: [PHP-DEV] request data filter

2003-01-15 Thread George Schlossnagle
You consider running the apache_hooks code? This should be simple there. -- PHP Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] request data filter

2003-01-15 Thread Rasmus Lerdorf
In trying to implement a security policy I need to pass all user-supplied data (GET/POST/Cookie) through a filter function which implements this security. This isn't all that hard to implement as an extension through new 4.3 treat_data and post_handler hooks, however it gets messy when you throw m

[PHP-DEV] Request for change of configure.in and main/php_version.h

2002-04-10 Thread Joseph Tate
In order to accommodate different operating systems (most notably windows, which likes a "Major, Minor, Release, Build" release number) who use a different version numbering scheme, I've modified configure.in and the stock main/php_version.h to separate out the Major Minor Release &c. from PHP_VER

[PHP-DEV] Request: Scope variables, $GLOBALS and ???

2001-05-17 Thread Gustaf Björklund
The ability to get all variables within a certain scope would be a good thing to have I think. If it wouldn't be a huge overhead to make it available? Makes sense also to have class and function scopes available aswell as the $GLOBALS and $HTTP_POST/GET/COOKIE_VARS that are currently available.

Re: [PHP-DEV] request

2001-04-22 Thread Boian Bonev
> > You could have two classes both defining an innocent method toString(), > > for example, and with your suggestion, inheriting from those classes > > would cause a hard error? Why would "first encountered" definition > > change? > If anything that affected how classes were ordered changed, if t

Re: [PHP-DEV] request

2001-04-22 Thread Stanislav Malyshev
AZ>> Ok, do you suggest just throwing an error if the symbol is AZ>> ambiguous? Then you need to way to specify which of the parent AZ>> classes' method to use, C++ does it like this: AZ>> AZ>> obj->B::a(); // calls method a() defined in parent class B Yes, but in PHP it would be run-time error.

Re: [PHP-DEV] request

2001-04-22 Thread Stanislav Malyshev
AZ>> If that were so, then I'd expect a lot of Python people AZ>> complaining about it, which they are not.. Are they smarter? They probably see no point in complaining, since there's really not much chance it would be changed. Could be Stockholm syndrome too... -- Stanislav Malyshev, Zend Produ

Re: [PHP-DEV] request

2001-04-22 Thread Andrei Zmievski
At 12:54 PM 4/22/01 +0300, Stanislav Malyshev wrote: >Sure this is a hard error. And double sure using first method is wrong. >Why the first one is better than the second? The third? The 42th? The >toString function should or be overriden in inherited object, which >resolves the conflict, or uniqu

Re: [PHP-DEV] request

2001-04-22 Thread Andrei Zmievski
At 12:44 PM 4/22/01 +0300, Stanislav Malyshev wrote: >That would be what I call weirdness and would raise WTF factor >significantly. Changing some class declaration is some unrelated module >could then make all your code inside out and you have absolutely no >control on it and no means to prevent

Re: [PHP-DEV] request

2001-04-22 Thread Stanislav Malyshev
AZ>> You could have two classes both defining an innocent method AZ>> toString(), for example, and with your suggestion, inheriting AZ>> from those classes would cause a hard error? Why would "first Sure this is a hard error. And double sure using first method is wrong. Why the first one is bette

Re: [PHP-DEV] request

2001-04-22 Thread Stanislav Malyshev
AZ>> Alternatively, we could do the Python way: the base classes are AZ>> searched in depth-first order, and if the base classes define AZ>> the same symbol, the first encountered definition is used. That would be what I call weirdness and would raise WTF factor significantly. Changing some class

Re: [PHP-DEV] request

2001-04-22 Thread Andrei Zmievski
At 06:36 PM 4/21/01 -0400, Stig Sæther Bakken wrote: >Okay, what about this one: > >If two inherited classes define the same method, the inheriting class >has to redefine it. This way the inheriting class can be explicit in >how to combine or override the inherited methods. This would work if th

Re: [PHP-DEV] request

2001-04-21 Thread Stig Sæther Bakken
[Andrei Zmievski <[EMAIL PROTECTED]>] > On Sat, 21 Apr 2001, Chuck Hagenbuch wrote: > > This could result in really confusing and unpredictable behavior if "the first > > encountered definition" changed under any circumstances. I'd vote for making > > any name conflicts an error. > > You could

Re: [PHP-DEV] request

2001-04-21 Thread Chuck Hagenbuch
Quoting Andrei Zmievski <[EMAIL PROTECTED]>: > You could have two classes both defining an innocent method toString(), > for example, and with your suggestion, inheriting from those classes > would cause a hard error? Why would "first encountered" definition > change? If anything that affected h

Re: [PHP-DEV] request

2001-04-21 Thread Andrei Zmievski
On Sat, 21 Apr 2001, Chuck Hagenbuch wrote: > This could result in really confusing and unpredictable behavior if "the first > encountered definition" changed under any circumstances. I'd vote for making > any name conflicts an error. You could have two classes both defining an innocent method

Re: [PHP-DEV] request

2001-04-20 Thread Chuck Hagenbuch
Quoting Andrei Zmievski <[EMAIL PROTECTED]>: > Alternatively, we could do the Python way: the base classes are searched in > depth-first order, and if the base classes define the same symbol, the > first encountered definition is used. This could result in really confusing and unpredictable beh

Re: [PHP-DEV] request

2001-04-20 Thread Andrei Zmievski
At 09:41 PM 4/20/01 -0400, Stig Sæther Bakken wrote: >The idea is starting to grow on me. But I think name clashes should >be defined as errors, that is more consistent with the way function >and class declarations are done. Alternatively, we could do the Python way: the base classes are searche

Re: [PHP-DEV] request

2001-04-20 Thread Stig Sæther Bakken
[Andrei Zmievski <[EMAIL PROTECTED]>] > On Tue, 17 Apr 2001, Stanislav Malyshev wrote: > > Generally, since PHP is not a strongly typed language, it's not too hard > > to implement multiple inheritance, I guess. Question is - is it worth the > > effort? Does it need to be done? > > With multiple

Re: [PHP-DEV] request

2001-04-20 Thread Andrei Zmievski
On Tue, 17 Apr 2001, Stanislav Malyshev wrote: > Generally, since PHP is not a strongly typed language, it's not too hard > to implement multiple inheritance, I guess. Question is - is it worth the > effort? Does it need to be done? With multiple inheritance you have a way to implement interfaces

Re: [PHP-DEV] Request : Surface Userland version of zend_is_callable

2001-04-20 Thread Andrei Zmievski
On Tue, 17 Apr 2001, clayton collie wrote: > > Title says it. It seems like it would be a useful way of preventing certain > runtime errors with callbacks. It could be a pretty simple userland function.. but can be written in C as well. -Andrei When we eliminate the impossible, whatever remain

Re: [PHP-DEV] request

2001-04-17 Thread Chuck Hagenbuch
Quoting Stanislav Malyshev <[EMAIL PROTECTED]>: > I don't know why very these ones are the "biggest", but it's possible to > "resolve" them, taking into account that every resolution would be > necessarily imperfect, since the situation itself is no good. Okay, I've gone and refreshed my memory

[PHP-DEV] Request: Linking Script and executable

2001-04-17 Thread tu berlin
Hello everybody, is there a way to link my PHP-Scripts direct to the PHP-Binary, so that I get one binary executing the linked script. I think of putting the whole script in one variable and then, instead opening a file, execute it from there. I know this is not as performant as the Apache-Modu

Re: [PHP-DEV] R: [PHP-DEV] request

2001-04-17 Thread Zeev Suraski
Everyone - please read about this already hashed-beyond-a-reasonable-doubt topic in the mailing list archive. PHP 4.0 is not going to have destructors, ever. Its design simply doesn't allow for it. Zeev At 17:34 17/4/2001, Alberto wrote: >Yes, destructor ... it's a good thing to have... > >Da

[PHP-DEV] R: [PHP-DEV] request

2001-04-17 Thread Alberto
Why not resolve problems use ANSI C++ style? Chuck Hagenbuch <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED] > Quoting Stanislav Malyshev <[EMAIL PROTECTED]>: > > > Generally, since PHP is not a strongly typed language, it's not too hard > > to implement multiple inheritance, I guess. > >

Re: [PHP-DEV] request

2001-04-17 Thread Stanislav Malyshev
CH>> Admittedly, it's been a bit since my languages class, but I CH>> don't see how loose typing resolves the biggest problems with CH>> multiple inheritance: I don't know why very these ones are the "biggest", but it's possible to "resolve" them, taking into account that every resolution would b

Re: [PHP-DEV] request

2001-04-17 Thread Chuck Hagenbuch
Quoting Stanislav Malyshev <[EMAIL PROTECTED]>: > Generally, since PHP is not a strongly typed language, it's not too hard > to implement multiple inheritance, I guess. Admittedly, it's been a bit since my languages class, but I don't see how loose typing resolves the biggest problems with mult

[PHP-DEV] Request : Surface Userland version of zend_is_callable

2001-04-17 Thread clayton collie
Title says it. It seems like it would be a useful way of preventing certain runtime errors with callbacks. _ "Fried Ice-Cream is a reality !" - George Clinton -- PHP Development Mailing List To unsubscribe, e-mail: [EMAIL PROTECTED] F

[PHP-DEV] R: [PHP-DEV] request

2001-04-17 Thread Alberto
Yes, destructor ... it's a good thing to have... David Guerizec <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED] > > "Peter \"[DiSAStA]\" Petermann" <[EMAIL PROTECTED]> wrote: > > Hi stas, > > > > > JT>> > Ah, that's another way to say "When Andi and Zeev implement it" :-) > > > JT>> > > >

Re: [PHP-DEV] request

2001-04-17 Thread Stig Sæther Bakken
[David Guerizec <[EMAIL PROTECTED]>] > "Peter \"[DiSAStA]\" Petermann" <[EMAIL PROTECTED]> wrote: > > Hi stas, > > > > > JT>> > Ah, that's another way to say "When Andi and Zeev implement it" :-) > > > JT>> > > > JT>> Like..never? :) > > > Generally, since PHP is not a strongly typed language, i

Re: [PHP-DEV] request

2001-04-17 Thread David Guerizec
"Peter \"[DiSAStA]\" Petermann" <[EMAIL PROTECTED]> wrote: > Hi stas, > > > JT>> > Ah, that's another way to say "When Andi and Zeev implement it" :-) > > JT>> > > JT>> Like..never? :) > > Generally, since PHP is not a strongly typed language, it's not too hard > > to implement multiple inherit

[PHP-DEV] R: [PHP-DEV] request

2001-04-17 Thread Alberto
For me , yes :) I work in a ISP, and we use PHP for all sites that need to be connected by a database. I'ts about one year we use it, and it's great. We have put all the reusable code into Classes, so we can reuse it many times without rewrite the same code. But in large projects, we see that mult

Re: [PHP-DEV] request

2001-04-17 Thread Jani Taskinen
On Tue, 17 Apr 2001, Stanislav Malyshev wrote: >JT>> > Ah, that's another way to say "When Andi and Zeev implement it" :-) >JT>> >JT>> Like..never? :) > >Generally, since PHP is not a strongly typed language, it's not too hard >to implement multiple inheritance, I guess. Question is - is it wort

Re: [PHP-DEV] request

2001-04-17 Thread Peter \"[DiSAStA]\" Petermann
Hi stas, > JT>> > Ah, that's another way to say "When Andi and Zeev implement it" :-) > JT>> > JT>> Like..never? :) > Generally, since PHP is not a strongly typed language, it's not too hard > to implement multiple inheritance, I guess. Question is - is it worth the > effort? Does it need to be

Re: [PHP-DEV] request

2001-04-17 Thread Stanislav Malyshev
JT>> > Ah, that's another way to say "When Andi and Zeev implement it" :-) JT>> JT>> Like..never? :) Generally, since PHP is not a strongly typed language, it's not too hard to implement multiple inheritance, I guess. Question is - is it worth the effort? Does it need to be done? -- Stanislav

Re: [PHP-DEV] request

2001-04-17 Thread Jani Taskinen
On Tue, 17 Apr 2001, Sebastian Bergmann wrote: >Stig Sæther Bakken wrote: >> > About classes and objects, will PHP have multiple inheritance >> > support? >> >> When there's peace in Jerusalem. > > Ah, that's another way to say "When Andi and Zeev implement it" :-) Like..never? :) --Jani --

[PHP-DEV] R: [PHP-DEV] request

2001-04-17 Thread Alberto
Who are Andi and Zeev? Ok, i've not study story enought. :) Sebastian Bergmann <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED] > Stig Sæther Bakken wrote: > > > About classes and objects, will PHP have multiple inheritance > > > support? > > > > When there's peace in Jerusalem. > >

Re: [PHP-DEV] request

2001-04-17 Thread Sebastian Bergmann
Stig Sæther Bakken wrote: > > About classes and objects, will PHP have multiple inheritance > > support? > > When there's peace in Jerusalem. Ah, that's another way to say "When Andi and Zeev implement it" :-) -- sebastian bergmann[EMAIL PROTECTED]

Re: [PHP-DEV] request

2001-04-17 Thread Stig Sæther Bakken
["Alberto" <[EMAIL PROTECTED]>] > About classes and objects, will PHP have multiple inheritance support ? When there's peace in Jerusalem. - Stig -- Stig Sæther Bakken <[EMAIL PROTECTED]> Fast Search & Transfer ASA, Trondheim, Norway -- PHP Development Mailing List

[PHP-DEV] request

2001-04-17 Thread Alberto
About classes and objects, will PHP have multiple inheritance support ? Thanks Alberto -- PHP Development Mailing List To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECT

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS whenregister_globals = on

2001-04-09 Thread Carsten Gehling
From: "Carsten Gehling" <[EMAIL PROTECTED]> Sent: Monday, April 09, 2001 9:31 AM Subject: Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS whenregister_globals = on > From: "Alexander Feldman" <[EMAIL PROTECTED]> > Sent: Friday, April 06, 2001 10

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS whenregister_globals = on

2001-04-09 Thread Carsten Gehling
From: "Alexander Feldman" <[EMAIL PROTECTED]> Sent: Friday, April 06, 2001 10:46 PM > Hm, very strange. You are absolutely right - I do not see any problems as > well. Not only with the current cvs but with the older phps also... But I > am sure I have seen some time ago exactly what was describ

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS whenregister_globals = on

2001-04-06 Thread Alexander Feldman
On Fri, 6 Apr 2001, Sascha Schumann wrote: > > It is simpler. > > Chuck is talking about another problem which I agree has not > been addressed yet properly. > > > We should just leave the array $HTTP_SESSION_VARS in the > > case when register_globals is on. Currently when the variables a

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS whenregister_globals = on

2001-04-06 Thread Sascha Schumann
> It is simpler. Chuck is talking about another problem which I agree has not been addressed yet properly. > We should just leave the array $HTTP_SESSION_VARS in the > case when register_globals is on. Currently when the variables are registered > they *are* removed from the $HTTP_SESSIO

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS whenregister_globals = on

2001-04-06 Thread Alexander Feldman
On Fri, 6 Apr 2001, Chuck Hagenbuch wrote: > Quoting Sascha Schumann <[EMAIL PROTECTED]>: > > > >- but that does make it really > > > messy to write code that works with either setting. > > > > Yes. Feel free to propose a solution which solves your > > problem and which is compatible to

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS when register_globals = on

2001-04-06 Thread Chuck Hagenbuch
Quoting Sascha Schumann <[EMAIL PROTECTED]>: > >- but that does make it really > > messy to write code that works with either setting. > > Yes. Feel free to propose a solution which solves your > problem and which is compatible to existing scripts. What about adding session_set_var (an

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS whenregister_globals = on

2001-04-06 Thread Sascha Schumann
> Possibly not - can the original poster comment? He wrote If register_globals is set to on, you cannot access $HTTP_SESSION_VARS any longer. Instead you can get the values through implicit created variables or through the $GLOBALS array. 'access' and 'get' sound like read operations to

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS when register_globals = on

2001-04-06 Thread Chuck Hagenbuch
Quoting Sascha Schumann <[EMAIL PROTECTED]>: > On Fri, 6 Apr 2001, Chuck Hagenbuch wrote: > > > Quoting Sascha Schumann <[EMAIL PROTECTED]>: > > > > > Unless a bug has slipped in, HTTP_SESSION_VARS get always > > > created. If you enable register_globals, variables with > > > global

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS whenregister_globals = on

2001-04-05 Thread Sascha Schumann
> If register_globals is set to on, you cannot access $HTTP_SESSION_VARS any > longer. Instead you can get the values through implicit created variables or > through the $GLOBALS array. Unless a bug has slipped in, HTTP_SESSION_VARS get always created. If you enable register_globals, var

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS when register_globals = on

2001-04-05 Thread Andi Gutmans
Yes, what you're saying definitely makes sense and I think it should be fixed. Andi At 09:20 PM 4/5/2001 +0200, Carsten Gehling wrote: >One of the IMHO stranger behaviors in PHP is what happens to the >$HTTP_SESSION_VARS array when changing register_globals from off to on. > >If register_globals

RE: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS when register_globals = on

2001-04-05 Thread Chris Newbill
+1 -Chris -Original Message- From: Alexander Feldman [mailto:[EMAIL PROTECTED]] Sent: Thursday, 05 April, 2001 1-44 pM To: Carsten Gehling Cc: [EMAIL PROTECTED] Subject: Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS when register_globals = on This makes sense. The

Re: [PHP-DEV] Request for new feature: $HTTP_SESSION_VARS whenregister_globals = on

2001-04-05 Thread Alexander Feldman
This makes sense. The behaviour quoted below creates difficulties when writing portable scripts (not to depend on the value of register_globals). Rgds: -- Alex On Thu, 5 Apr 2001, Carsten Gehling wrote: > One of the IMHO stranger behaviors in PHP is what happens to the > $HTTP_SESSION_VARS arr

[PHP-DEV] Request for new feature: $HTTP_SESSION_VARS when register_globals = on

2001-04-05 Thread Carsten Gehling
One of the IMHO stranger behaviors in PHP is what happens to the $HTTP_SESSION_VARS array when changing register_globals from off to on. If register_globals is set to on, you cannot access $HTTP_SESSION_VARS any longer. Instead you can get the values through implicit created variables or through