Re: Re[6]: [PHP] Re: Security, Late Nights and Overall Paranoia

2005-07-11 Thread Jonathan Kart
I've been loosely following this thread, and have a question now. Isn't one advantage of a bbcode type solution that you can more easily avoid session hijacking vis cross site scripting? If you allow html, then you open the door for people to add eventhandlers. I guess you could always strip the

[PHP] PHP Build Tool / CVS management

2005-06-30 Thread Jonathan Kart
Hey everyone, wondering if anyone has any suggestions for a build management tool written in php to lay over a cvs repository. We're really looking for something along the lines of anthill -http://www.urbancode.com/projects/anthill/default.jsp but more php focused. Like an anthill-like tool usi

[PHP] COM integration problems

2005-06-15 Thread Jonathan Kart
Hi all, I'm trying to interface with verisign's payflow pro on windows using the COM workaround. This code was originally taken from an example listed with the manual as a workaound for the fact that the php pfpro functions are not supported on windows. It worked for some time until the server w