Re: [PHP] Re: MySQL and PHP weirdness - RESOLVED

2012-02-15 Thread Richard S. Crawford
This has been resolved. A previous programmer had snuck in a function that would convert the value of the "description" field to a date value if it contained the word "Date". This has been fixed. On Tue, Feb 14, 2012 at 5:44 PM, David Robley wrote: > Richard S. Crawford wrote: > > > Bear with m

[PHP] Re: MySQL and PHP weirdness

2012-02-14 Thread David Robley
Richard S. Crawford wrote: > Bear with me here. I have a problem with PHP and MySQL that's been > stumping me for a couple of days now. I'm not even sure how to describe > it, so I'll just do my best. > > There's a row in our bugs database that looks like every other row in the > table, but when

[PHP] Re: Swiftlet is quite possibly the smallest MVC framework you'll ever use.

2012-02-13 Thread Elbert F
Hi Simon, Moving the set_error_handler to index.php gives the developer the ability to remove it before pushing the site to a production environment. I agree that in most cases you don't want the live site to fail completely when it trips over an unset variable but I prefer to have it on by defaul

[PHP] Re: Swiftlet is quite possibly the smallest MVC framework you'll ever use.

2012-02-12 Thread Elbert F
Hi Paul, Swiftlet implements PSR-0, an unofficial standard that many of the larger frameworks seem to be adopting. It simply maps namespaces to a path, e.g. Foo\Bar\Baz translates to Foo/Bar/Baz.php. The advantage is that you should be able to drop in third-party libraries which are included by th

Re: [PHP] Re: How can I debug wsf/php in eclipse?

2012-02-07 Thread Ali Asghar Toraby Parizy
:( Thanks for your help. Is it the only way? On Tue, Feb 7, 2012 at 12:44 PM, Sharl.Jimh.Tsin wrote: > 在 2012-02-07二的 12:11 +0330,Ali Asghar Toraby Parizy写道: > > Can anybody help me in this regard? > > > > On Mon, Feb 6, 2012 at 10:15 PM, Ali Asghar Toraby Parizy < > > aliasghar.tor...@gmail.com>

Re: [PHP] Re: How can I debug wsf/php in eclipse?

2012-02-07 Thread Sharl.Jimh.Tsin
在 2012-02-07二的 12:11 +0330,Ali Asghar Toraby Parizy写道: > Can anybody help me in this regard? > > On Mon, Feb 6, 2012 at 10:15 PM, Ali Asghar Toraby Parizy < > aliasghar.tor...@gmail.com> wrote: > > > Hi. > > I'm developing a wsf/php web service. I'm using doc/lit messaging format > > and every th

[PHP] Re: How can I debug wsf/php in eclipse?

2012-02-07 Thread Ali Asghar Toraby Parizy
Can anybody help me in this regard? On Mon, Feb 6, 2012 at 10:15 PM, Ali Asghar Toraby Parizy < aliasghar.tor...@gmail.com> wrote: > Hi. > I'm developing a wsf/php web service. I'm using doc/lit messaging format > and every thing is OK. > But I don't know how i can debug my web services using ecl

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Marco Behnke
Am 06.02.12 21:55, schrieb Adam Richardson: > On Mon, Feb 6, 2012 at 3:44 PM, Marco Behnke wrote: > >> Am 06.02.12 17:23, schrieb Alain Williams: >> >> many places to see if things should be done. That is just as bad as >> lots of GOTO -- often when having to write something like that I will >> ha

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Matijn Woudt
On Mon, Feb 6, 2012 at 11:34 PM, Tim Streater wrote: > On 06 Feb 2012 at 20:51, Simon J Welsh wrote: > >> On 7/02/2012, at 9:44 AM, Marco Behnke wrote: >> >>> Am 06.02.12 17:23, schrieb Alain Williams: However: a few GOTOs can make things clearer. Think of a function that can fail in se

[PHP] Re: Long Live GOTO

2012-02-06 Thread Tim Streater
On 06 Feb 2012 at 20:51, Simon J Welsh wrote: > On 7/02/2012, at 9:44 AM, Marco Behnke wrote: > >> Am 06.02.12 17:23, schrieb Alain Williams: >>> However: a few GOTOs can make things clearer. Think of a function that >>> can fail in several different places (eg data validation, ...). But it >>>

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Stuart Dallas
On 6 Feb 2012, at 20:44, Marco Behnke wrote: > Am 06.02.12 17:23, schrieb Alain Williams: >> However: a few GOTOs can make things clearer. Think of a function that >> can fail in several different places (eg data validation, ...). But it >> is reading a file which needs to be closed before the fun

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Adam Richardson
On Mon, Feb 6, 2012 at 3:44 PM, Marco Behnke wrote: > Am 06.02.12 17:23, schrieb Alain Williams: > > However: a few GOTOs can make things clearer. Think of a function that > > can fail in several different places (eg data validation, ...). But it > > is reading a file which needs to be closed bef

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Simon J Welsh
On 7/02/2012, at 9:44 AM, Marco Behnke wrote: > Am 06.02.12 17:23, schrieb Alain Williams: >> However: a few GOTOs can make things clearer. Think of a function that >> can fail in several different places (eg data validation, ...). But it >> is reading a file which needs to be closed before the f

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Marco Behnke
Am 06.02.12 17:23, schrieb Alain Williams: > However: a few GOTOs can make things clearer. Think of a function that > can fail in several different places (eg data validation, ...). But it > is reading a file which needs to be closed before the function > returns. I have seen code where some $IsErr

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Larry Martell
On Mon, Feb 6, 2012 at 11:07 AM, Daniel Brown wrote: > On Mon, Feb 6, 2012 at 12:59, Larry Martell > wrote: >> >> I just pulled out my notes from that job - it took me 59 hours to do >> the conversion and remove the gotos and recursion, and another 67 >> hours for testing, verification, integrat

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Daniel Brown
On Mon, Feb 6, 2012 at 12:59, Larry Martell wrote: > > I just pulled out my notes from that job - it took me 59 hours to do > the conversion and remove the gotos and recursion, and another 67 > hours for testing, verification, integration, documentation, and > certification. And, having contr

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Larry Martell
On Mon, Feb 6, 2012 at 10:13 AM, Adam Richardson wrote: > On Mon, Feb 6, 2012 at 12:09 PM, Larry Martell > wrote: > >> >> The source is my own personal experience working for an avionics >> company and working with the FAA to get our code certified under the >> DO-178B standard. I never saw anythi

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Adam Richardson
On Mon, Feb 6, 2012 at 12:09 PM, Larry Martell wrote: > > The source is my own personal experience working for an avionics > company and working with the FAA to get our code certified under the > DO-178B standard. I never saw anything that said 'no GOTOs' but that's > what I was told. I was also t

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Larry Martell
On Mon, Feb 6, 2012 at 9:50 AM, Adam Richardson wrote: > On Mon, Feb 6, 2012 at 11:28 AM, Larry Martell > wrote: > >> On Mon, Feb 6, 2012 at 9:23 AM, Alain Williams wrote: >> > On Mon, Feb 06, 2012 at 11:12:53AM -0500, Jim Giner wrote: >> >> NO "GO"! >> >> As one who started back in the 70's with

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Robert Cummings
On 12-02-06 11:35 AM, Alain Williams wrote: On Mon, Feb 06, 2012 at 09:28:10AM -0700, Larry Martell wrote: On Mon, Feb 6, 2012 at 9:23 AM, Alain Williams wrote: If I survey my code I find that I use one GOTO in about 4,000 lines of code - that I do not find excessive. There are, however, pe

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Adam Richardson
On Mon, Feb 6, 2012 at 11:28 AM, Larry Martell wrote: > On Mon, Feb 6, 2012 at 9:23 AM, Alain Williams wrote: > > On Mon, Feb 06, 2012 at 11:12:53AM -0500, Jim Giner wrote: > >> NO "GO"! > >> As one who started back in the 70's with old style coding that utilized > GoTo > >> in Cobol, Fortran, et

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Alain Williams
On Mon, Feb 06, 2012 at 09:28:10AM -0700, Larry Martell wrote: > On Mon, Feb 6, 2012 at 9:23 AM, Alain Williams wrote: > > If I survey my code I find that I use one GOTO in about 4,000 lines of code > > - > > that I do not find excessive. > > > > There are, however, people who consider any GOTO

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Larry Martell
On Mon, Feb 6, 2012 at 9:23 AM, Alain Williams wrote: > On Mon, Feb 06, 2012 at 11:12:53AM -0500, Jim Giner wrote: >> NO "GO"! >> As one who started back in the 70's with old style coding that utilized GoTo >> in Cobol, Fortran, etc. and had to deal with "spaghetti code" written by >> even earlier

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Alain Williams
On Mon, Feb 06, 2012 at 11:12:53AM -0500, Jim Giner wrote: > NO "GO"! > As one who started back in the 70's with old style coding that utilized GoTo > in Cobol, Fortran, etc. and had to deal with "spaghetti code" written by > even earlier developers who never considered that someone else would ha

[PHP] Re: Long Live GOTO

2012-02-06 Thread Jim Giner
NO "GO"! As one who started back in the 70's with old style coding that utilized GoTo in Cobol, Fortran, etc. and had to deal with "spaghetti code" written by even earlier developers who never considered that someone else would have to maintain their code, I feel strongly that GoTo is not to be

[PHP] Re: Typecasting question

2012-02-05 Thread Shawn McKenzie
On 02/03/2012 10:11 AM, jas wrote: > array('private_key_type' => OPENSSL_KEYTYPE_RSA, > 'encrypt_key_cipher' => OPENSSL_CIPHER_3DES); Look like ints to me: var_dump(): array(2) { ["private_key_type"]=> int(0) ["encrypt_key_cipher"]=> int(4) } -- Thanks! -Shawn http://www.spidea

[PHP] Re: Time zone in date function

2012-01-31 Thread Jonesy
On Tue, 31 Jan 2012 17:15:48 +0100, Matijn Woudt wrote: > On Tue, Jan 31, 2012 at 4:22 PM, Jonesy wrote: >> >> Is there a reason _not_ to use viz: >> >>        putenv("TZ=America/Anguilla"); >>  ?? >> >> Or, is it simple "Just The Linux Way"(tm) , i.e. there's >> always more than one way to do a '

[PHP] Re: Cannot make bzip2 stream "on the fly"

2012-01-31 Thread Michael Shestero
Thank you for response. Script is server-side. It is to send a packed data as file (but the source isn't actually a file) via HTTP to client. bzcompress() are not suitable, because it cannot pack the stream on the fly (I have to store all amount of data in local variable before call it). My tas

Re: [PHP] Re: Time zone in date function

2012-01-31 Thread Matijn Woudt
On Tue, Jan 31, 2012 at 4:22 PM, Jonesy wrote: > On Tue, 31 Jan 2012 14:57:41 +1300, Simon J Welsh wrote: >> On 31/01/2012, at 2:55 PM, Ron Piggott wrote: >> >>> >>> On my clients account when I use ?echo date(?D, d M Y H:i:s');? the output >>> is 5 hours ahead of us.  How do I change it to my lo

[PHP] Re: Cannot make bzip2 stream "on the fly"

2012-01-31 Thread Maciek Sokolewicz
On 31-01-2012 15:34, Michael Shestero wrote: header("Content-Description: File Transfer"); header("Content-Disposition: attachment; filename=f.bzip2"); header("Content-Type: application/x-bzip2"); //header("Content-length: " . strlen($zippedfile) . "\n\n"); header("Content-Transfer-Encoding: bi

[PHP] Re: Time zone in date function

2012-01-31 Thread Jonesy
On Tue, 31 Jan 2012 14:57:41 +1300, Simon J Welsh wrote: > On 31/01/2012, at 2:55 PM, Ron Piggott wrote: > >> >> On my clients account when I use ?echo date(?D, d M Y H:i:s');? the output >> is 5 hours ahead of us. How do I change it to my local time? Is there a >> way to specify ?Eastern? tim

[PHP] Re: Time zone in date function

2012-01-31 Thread Ian
On 31/01/2012 01:55, Ron Piggott wrote: > > On my clients account when I use “echo date(‘D, d M Y H:i:s');” the output is > 5 hours ahead of us. How do I change it to my local time? Is there a way to > specify “Eastern” time zone? > > I expect this would work: > > echo date(‘D, d M Y H:i:s'

Re: [PHP] Re: Re: File upload in map drive with PHP

2012-01-28 Thread Jim Lucas
On 1/27/2012 5:41 PM, Michelle Konzack wrote: Merhaba Mehmet YAYLA, Am 2012-01-26 15:10:34, hacktest Du folgendes herunter: I'm using code this bellow. ...with an error! Select image: You can not use action="upload_file.php?upload=1" together wi

Re: [PHP] Re: ArrayInterator always true

2012-01-28 Thread Fatih P.
2012/1/28 Mihai Anghel If you enable notices you will see that PHP outputs this : Notice: ArrayIterator::next(): Array was modified outside object and internal position is no longer valid.This line seems to be the problem //Test if next stream is an option for ( $iterator->next(); $iterator->vali

Re: [PHP] Re: ArrayInterator always true

2012-01-28 Thread Mihai Anghel
If you enable notices you will see that PHP outputs this : Notice: ArrayIterator::next(): Array was modified outside object and internal position is no longer valid.This line seems to be the problem //Test if next stream is an option for ( $iterator->next(); $iterator->valid(); $iterator->next() )

Re: [PHP] Re: Re: File upload in map drive with PHP

2012-01-28 Thread Stuart Dallas
On 28 Jan 2012, at 01:41, Michelle Konzack wrote: > Merhaba Mehmet YAYLA, > > Am 2012-01-26 15:10:34, hacktest Du folgendes herunter: >> I'm using code this bellow. > > ...with an error! > >> > method="post"> >>Select image: >> > > You can not use >action=

[PHP] Re: Re: File upload in map drive with PHP

2012-01-27 Thread Michelle Konzack
Merhaba Mehmet YAYLA, Am 2012-01-26 15:10:34, hacktest Du folgendes herunter: > I'm using code this bellow. ...with an error! > method="post"> > Select image: > You can not use action="upload_file.php?upload=1" together with method="post" and you ha

[PHP] Re: ArrayInterator always true

2012-01-27 Thread TCP
I've got a temporary fix but still the iterator always return true, still hope someone could help me out to point out the problem:) //parseOptions utilitiese by tgckpg function parseOptions ( $argStream, $handler ) { //Chop first useless argument -- argv[0] array_shift ( $argStream

RE: [PHP] Re: Getting Column Names from an AS400 Database

2012-01-27 Thread Cheryl Sullivan
@lists.php.net Subject: Re: [PHP] Re: Getting Column Names from an AS400 Database On 26-01-2012 16:40, Cheryl Sullivan wrote: > > Thanks for your response... I changed the $outval line to > > $outval = odbc_columns($rs, "DB#LIBNAME", "%", "TABLENAME", "%"

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Haluk Karamete
>>Re-read his example. He encodes the data in PHP. But decodes the data in >>SQL. So, if you echo the SQL statement, you would see a base64 encoded >>string that SQL then decodes. Got it this time! Up until reading your reply, I was reading Alex's example with my pseudo-code glasses. I did no

Re: [PHP] Re: File upload in map drive with PHP

2012-01-26 Thread Jim Lucas
On 01/26/2012 07:13 AM, Jim Giner wrote: You're using a GET in your script when your form is a POST. and if you look at the method value you will see that he is passing upload=1 in the URL. Which would be seen as a GET value. -- Jim Lucas http://www.cmsws.com/ http://www.cmsws.com/examples

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Jim Lucas
On 01/26/2012 06:46 AM, Haluk Karamete wrote: when we do b64e and then back b64d, you are saying. we get the org input all as clear text but this time as a string. because it is now a string, "(which by definition can not be executed)" what's the difference between b64e+b64d vs (string) casting

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Maciek Sokolewicz
On 26-01-2012 15:46, Haluk Karamete wrote: when we do b64e and then back b64d, you are saying. we get the org input all as clear text but this time as a string. because it is now a string, "(which by definition can not be executed)" what's the difference between b64e+b64d vs (string) casting the

RES: [PHP] Re: Getting Column Names from an AS400 Database

2012-01-26 Thread Alejandro Michelin Salomon
ect ? You check if has no errors in the connection processes? Alejandro M.S. -Mensagem original- De: Cheryl Sullivan [mailto:csull...@shh.org] Enviada em: quinta-feira, 26 de janeiro de 2012 13:41 Para: Jim Giner; php-general@lists.php.net Assunto: RE: [PHP] Re: Getting Column Names

Re: [PHP] Re: Getting Column Names from an AS400 Database

2012-01-26 Thread Maciek Sokolewicz
be resource, object given in D:\WAMP\www\directory\filename.php on line 13 -Original Message- From: Jim Giner [mailto:jim.gi...@albanyhandball.com] Sent: Thursday, January 26, 2012 10:31 AM To: php-general@lists.php.net Subject: [PHP] Re: Getting Column Names from an AS400 Database I

RE: [PHP] Re: Getting Column Names from an AS400 Database

2012-01-26 Thread Cheryl Sullivan
MP\www\directory\filename.php on line 13 -Original Message- From: Jim Giner [mailto:jim.gi...@albanyhandball.com] Sent: Thursday, January 26, 2012 10:31 AM To: php-general@lists.php.net Subject: [PHP] Re: Getting Column Names from an AS400 Database I'm thinking that it should read $rs = $conn-

[PHP] Re: Getting Column Names from an AS400 Database

2012-01-26 Thread Jim Giner
I'm thinking that it should read $rs = $conn->execute($q); $outval = odbc_columns($rs, "DB#LIBNAME", "%", "TABLENAME", "%"); You need to provide the results of the query to the odbc_columns, not the connection object. Just my guess since I've never used this. -- PHP General Mailing List (ht

Re: [PHP] Re: File upload in map drive with PHP

2012-01-26 Thread Stuart Dallas
On 26 Jan 2012, at 15:10, Mehmet YAYLA wrote: > > I'm using code this bellow. > > > if (!empty($_GET["upload"])) { >$uploaddir ="x:\\file/"; > >$uploadfile = $_FILES['userfile']['name']; > >print ""; > >if (move_uploaded_file($

RE: [PHP] Re: File upload in map drive with PHP

2012-01-26 Thread Mehmet YAYLA
print "Dosya yüklenemedi. Tekrar deneyiniz"; } print ""; } ?> Select image: > To: php-general@lists.php.net > From: jim.gi...@al

[PHP] Re: File upload in map drive with PHP

2012-01-26 Thread Jim Giner
Do you mean you are trying to do an upload of a file on a mapped drive, such as a network drive? Is this upload using an html form with an tag? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Haluk Karamete
when we do b64e and then back b64d, you are saying. we get the org input all as clear text but this time as a string. because it is now a string, "(which by definition can not be executed)" what's the difference between b64e+b64d vs (string) casting then? if you were to cast the original input int

Re: [PHP] Re: sql injection protection

2012-01-24 Thread Alex Nikitin
You don't need to store it in the database as b64, just undo the encoding into your inputs for the purpose of the explanation, this is language independent b64e - encoding function b64d - decoding function pseudo code given: bad_num = ') union select * from foo --' bad_str = "" good_num = 1234

Re: [PHP] Re: sql injection protection

2012-01-24 Thread Haluk Karamete
My reply is in >> delims. > question 1 > > If you use the PHP filters & sanitizations, and you plan on using PDO > with binded params, are you absolutely safe? And if not, why? What are > the other ways for them to still make it in - even with PD0 and bi

Re: [PHP] Re: Continued Problems Accessing *.php.net?

2012-01-24 Thread Stuart Dallas
On 24 Jan 2012, at 16:53, Al wrote: > Now, how about having the "some very talented folks" fix the severely > restricted access to the NNTP server. Rarely can I download more than about > 10 topics without a time out. > > Per your request several times over at least 2 years, I've filed bug repo

Re: [PHP] Re: Continued Problems Accessing *.php.net?

2012-01-24 Thread Daniel Brown
On Tue, Jan 24, 2012 at 11:53, Al wrote: > > Now, how about having the "some very talented folks" fix the severely > restricted access to the NNTP server. Rarely can I download more than about > 10 topics without a time out. > > Per your request several times over at least 2 years, I've filed bug

Re: [PHP] Re: sql injection protection

2012-01-24 Thread Alex Nikitin
> question 1 > > If you use the PHP filters & sanitizations, and you plan on using PDO > with binded params, are you absolutely safe? And if not, why? What are > the other ways for them to still make it in - even with PD0 and binded > params properly in place? Just curious. There are no known expl

[PHP] Re: Continued Problems Accessing *.php.net?

2012-01-24 Thread Al
On 1/23/2012 6:22 PM, Daniel Brown wrote: ALL: As you may have noticed, early this morning we got bored and decided to delete php.net from the Internet. After getting an estimated sixteen-point-four trillion complaints, we became overwhelmed and aggravated by your incessant need to

Re: [PHP] Re: sql injection protection

2012-01-24 Thread Haluk Karamete
4 questions... which is basically all it comes to.. After all this back and forth emails, I think we should nail down these questions cause they are still not completely covered in my mind. question 1 If you use the PHP filters & sanitizations, and you plan on using PDO with binded params, are

Re: [PHP] Re: sql injection protection

2012-01-23 Thread Alex Nikitin
Start off with the fact that that article is from 2006, and its written by a programmer... > I was simply asking expert opinion with the intention to learn. > There is so much docs out there (I mean not just out there but at top > security sites like owasp ) that recommends database specific escap

Re: [PHP] Re: sql injection protection

2012-01-23 Thread Haluk Karamete
I was simply asking expert opinion with the intention to learn. There is so much docs out there (I mean not just out there but at top security sites like owasp ) that recommends database specific escape solution as one of the viable alternatives. You make it seem like anyone who does not use PDO (

Re: [PHP] Re: sql injection protection

2012-01-23 Thread Alex Nikitin
There is so much no, answers are in line. > At the top of each php page which interacts with a database, just have > this one liner This has already been mentioned, but again, no, no connection if you are not actually interacting with the database. > $DBH = safe_connection("database_name_here");

[PHP] Re: Settings to Allow Precise File Upload Bytes

2012-01-20 Thread Dee Ayy
My browser is claiming it is still busy from a 1MB (1030001 bytes) upload where I was trying to find out if it is setting $_FILES['attachment']. Thanks Maciek. It makes sense that I should be looking at $_FILES['attachment']['error'] before the size. I'm just surprised it's still hanging. I'm u

[PHP] Re: Settings to Allow Precise File Upload Bytes

2012-01-20 Thread Maciek Sokolewicz
Answers are inside the mail On 20 January 2012 21:18, Dee Ayy wrote: > Obviously I don't want a Flash/Gears solution. > > FYI: Your #6 should be: > The server uploads... > No, the server downloads, the client uploads. Downloading is performed by the receiving end (in this case, the server), whil

Re: [PHP] Re: Settings to Allow Precise File Upload Bytes

2012-01-20 Thread Jim Lucas
On 01/20/2012 12:18 PM, Dee Ayy wrote: Obviously I don't want a Flash/Gears solution. FYI: Your #6 should be: The server uploads... Actually, from the perspective that he described it, his phrasing would be correct. The server is actually receiving from the client the data. This data is be

[PHP] Re: Settings to Allow Precise File Upload Bytes

2012-01-20 Thread Dee Ayy
Obviously I don't want a Flash/Gears solution. FYI: Your #6 should be: The server uploads... Even though I do not want a Flash/Gears solution, I would be happy with your #8 stating: I won't fail silently, I'll report the problem to the user. Do you know the correct settings on any applicable LAM

[PHP] Re: Settings to Allow Precise File Upload Bytes

2012-01-20 Thread Maciek Sokolewicz
Your problem here is the fact that you do not seem to grasp what is hapenning when a file is being uploaded, hence your question. So let me explain: 1. A user goes to your page by entering it into the browser. 2. The page is downloaded to the client, and the connection is closed. 3. The user cho

[PHP] Re: SOAP

2012-01-18 Thread Carlos Medina
Am 17.01.2012 11:55, schrieb DPRJ Sistemas (OK Cosméticos): > Hello! > > > > I am looking for some help on Web Services (SOAP) client. > > > > Is there anyone here who has already worked with such client? > > > > Thank you > > > > Deleo > > Yes Me Regards Carlos Medina -- PHP

Re: [PHP] Re: sql injection protection

2012-01-17 Thread Haluk Karamete
Thanks Alex. I re-read Ross's reply but I don't think you and him ( and even me ) is saying something different. It's all about validating the input. In my dictionary of programming vocabulary, validation is not just validating user input but also sanitizing it. You summed it up nicely by saying p

Re: [PHP] Re: sql injection protection

2012-01-17 Thread Alex Nikitin
Haluk, don't listen to Ross, escaping fails, it was and is a bad solution to an old and still largely unresolved problem. The problem is and has been that of language interoperability, and we have been and continue failing at making a good way for languages to talk to each other, but because this i

[PHP] Re: sql injection protection

2012-01-17 Thread Ross McKay
On Mon, 16 Jan 2012 19:34:09 -0800, Haluk Karamete wrote: >I understand some ways are better than others in this one, and it >looks like the PDO based implementations shine the most as far as SQL >Injection. PDO is one way (and happens to be the one I prefer), but there are others. Essentially, y

[PHP] Re: advise needed on a mysql select library function

2012-01-13 Thread Haluk Karamete
I'm leaning towards this; function bp_select($db_name,$sql,&$result) { bp_conn($db_name,$db_server,$db_username,$db_pass); //with that, I pass the $db_name and the rest gets byRef'ed by the bp_conn! and I keep the bp_conn in a sep. file $link = mysql_connect($db_server,

[PHP] Re: advise on simplfying session usage

2012-01-12 Thread Jim Giner
You're kidding us aren't you? session("age") =90 versus $_SESSION['age']=90 (btw you left out a keystroke) That's a difference of 2 keystrokes. And you're looking to save keystrokes? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: srand questions

2012-01-12 Thread Jim Giner
The manual notes some of your concerns - especially the lack of a need to do a 'seeding' and (since 5.2.1) the presence of a new algorithm that generates a unique sequence regardless if the 'seed' is repeated. Furthermore, since there is no need to do a seed, I would guess that each call to the

Re: [PHP] Re: http_referer. what's wrong with that?

2012-01-12 Thread Stuart Dallas
On 12 Jan 2012, at 14:10, Jonesy wrote: > On Thu, 12 Jan 2012 17:11:25 +1100, Ross McKay wrote: >> On Wed, 11 Jan 2012 21:27:58 -0800, Haluk Karamete wrote: >> >>> [...] >>> Notice: Undefined index: HTTP_REFERER in >>> D:\Hosting\5291100\html\blueprint\bp_library.php on line 16 >>> die; >>> [...]

[PHP] Re: http_referer. what's wrong with that?

2012-01-12 Thread Jonesy
On Thu, 12 Jan 2012 17:11:25 +1100, Ross McKay wrote: > On Wed, 11 Jan 2012 21:27:58 -0800, Haluk Karamete wrote: > >>[...] >>Notice: Undefined index: HTTP_REFERER in >>D:\Hosting\5291100\html\blueprint\bp_library.php on line 16 >>die; >>[...] >>But I'm still curious, what configuration am I missin

Re: [PHP] Re: http_referer. what's wrong with that?

2012-01-11 Thread Matt Neimeyer
While perhaps unlikely in "common users" it is also possible to prevent your browser from sending the referrer. IIRC, the referrer can also get mangled when passing through HTTPS (although I don't remember on which side, HTTP->HTTPS or HTTPS->HTTP or both) Matt On Thu, Jan 12, 2012 at 1:11 AM, Ro

[PHP] Re: http_referer. what's wrong with that?

2012-01-11 Thread Ross McKay
On Wed, 11 Jan 2012 21:27:58 -0800, Haluk Karamete wrote: >[...] >Notice: Undefined index: HTTP_REFERER in >D:\Hosting\5291100\html\blueprint\bp_library.php on line 16 >die; >[...] >But I'm still curious, what configuration am I missing so that >http_referer is treated like that? You only get an

Re: [PHP] Re: php sendmail_from

2012-01-09 Thread Matijn Woudt
On Mon, Jan 9, 2012 at 8:50 PM, alexus wrote: > using Drupal > If you're using Drupal to send the mail, or any module installed in Drupal, than there are most likely settings in Drupal (module) that allow you to set the from address. If these functions call the mail command with a different From

[PHP] Re: php sendmail_from

2012-01-09 Thread Jim Giner
I guess I'm asking to see your code pertaining to sending the email. Telling us about a couple of ini settings doesn't really present us a picture of your problem. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: php sendmail_from

2012-01-09 Thread alexus
using Drupal On Mon, Jan 9, 2012 at 2:48 PM, Jim Giner wrote: > And how are you generating the email? > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > -- http://alexus.org/ -- PHP General Mailing List (http://www.php.net/) T

[PHP] Re: php sendmail_from

2012-01-09 Thread Jim Giner
And how are you generating the email? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: New to mac and trying to define a php.ini file.

2012-01-04 Thread Phil Dobbin
On 4/1/12 14:09, "Richard Quadling" wrote: > Where do I put my php.ini file for a MacBook Air? I've only had it 2 > days and having trouble with the date.timezone setting. > > I've also had to install xampp (recommended - no idea about it) for > Apache with PHP. > > Different versions of PHP no

Re: [PHP] re: More Error Reporting Problems

2012-01-02 Thread Marco Behnke
Am 30.12.2011 17:11, schrieb Floyd Resler: On Dec 30, 2011, at 11:05 AM, Matt Graham wrote: I'm still not sure why they aren't displaying. But as long as I have a place to find them I'm cool with that. Maybe anything in your web application overrides display_errors? -- Marco Behnke Dipl.

Re: [PHP] re: More Error Reporting Problems

2011-12-30 Thread Floyd Resler
On Dec 30, 2011, at 11:05 AM, Matt Graham wrote: > From: Floyd Resler >> I'm still having problems with error reporting and I'm not sure why. >> php.ini section: >> error_reporting = E_ALL & ~E_DEPRECATED >> display_errors = On >> log_errors = On >> error_log = /var/log/php_errors.log > >> Erro

[PHP] re: More Error Reporting Problems

2011-12-30 Thread Matt Graham
From: Floyd Resler > I'm still having problems with error reporting and I'm not sure why. > php.ini section: > error_reporting = E_ALL & ~E_DEPRECATED > display_errors = On > log_errors = On > error_log = /var/log/php_errors.log > Errors are neither getting displayed nor recorded in my error log

[PHP] Re: Need Part-time Coder

2011-12-28 Thread Jonesy
On Tue, 27 Dec 2011 17:29:27 -0500, John R. Cornell II wrote: > > Email PHP sample for consideration Thanks for (perhaps) the last LMAOROFL Posting of 2011! -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: [php] static html search engine for php static html site

2011-12-26 Thread Jim Lucas
On 12/26/2011 5:37 PM, Izo duwa wrote: > the whole site is in php and all content should be searchable. I have tried > zoom site search [http://www.wrensoft.com/zoom/] but the result was not > good. I just need a simple site search functionality that I can install > on a share hosting. it should

Re: [PHP] Re: Question regarding passwords/security

2011-12-23 Thread Curtis Maurand
Store everything in the database in an encrypted form. Stuart Dallas wrote: > On 22 Dec 2011, at 19:34, Paul M Foster wrote: > >> I have concerns that the items in a session buffer can be copied and >> used to spoof legitimate logins. This is harder to do when the info is >> held in a database

Re: [PHP] Re: Question regarding passwords/security

2011-12-22 Thread Al
On 12/22/2011 2:54 PM, Stuart Dallas wrote: On 22 Dec 2011, at 19:34, Paul M Foster wrote: I have concerns that the items in a session buffer can be copied and used to spoof legitimate logins. This is harder to do when the info is held in a database. Storing stuff in a database is no more s

Re: [PHP] Re: Question regarding passwords/security

2011-12-22 Thread Stuart Dallas
On 22 Dec 2011, at 19:34, Paul M Foster wrote: > I have concerns that the items in a session buffer can be copied and > used to spoof legitimate logins. This is harder to do when the info is > held in a database. Storing stuff in a database is no more secure, it simply requires one single extra

Re: [PHP] Re: Question regarding passwords/security

2011-12-22 Thread Paul M Foster
On Thu, Dec 22, 2011 at 12:55:41PM -0500, Al wrote: > > > On 12/22/2011 10:05 AM, Paul M Foster wrote: > >Not sure how to ask this question... I've always eschewed consulting a > >database on page loads to determine if a user is logged in, primarily > >because of latency issues. For example, you

[PHP] Re: Question regarding passwords/security

2011-12-22 Thread Al
On 12/22/2011 10:05 AM, Paul M Foster wrote: Not sure how to ask this question... I've always eschewed consulting a database on page loads to determine if a user is logged in, primarily because of latency issues. For example, you could store a nonce like the session ID in a table for a user whe

Re: [PHP] Re: Preferred Syntax

2011-12-18 Thread Robert Cummings
On 11-12-17 09:42 AM, Eric Butera wrote: Hi Adam, Thanks for the reply, noted! I was coming from the angle that I've had to deal with a lot of code that is 2000 lines of php/html/javascript inside heredocs, mixed quote escaping, etc. I was hoping to prevent that from becoming a new thing in th

Re: [PHP] Re: Preferred Syntax

2011-12-17 Thread Ross McKay
On Fri, 16 Dec 2011 23:53:46 -0500, Eric Butera wrote: >To all the people who responded to this thread: >It is 2011 - please stop writing code like this. > >To the OP: >I'm glad you're asking questions and realizing you're not happy with >your current abilities and suspect there's a better way. I

Re: [PHP] Re: Preferred Syntax

2011-12-17 Thread Eric Butera
On Sat, Dec 17, 2011 at 12:59 AM, Adam Richardson wrote: > On Fri, Dec 16, 2011 at 11:53 PM, Eric Butera wrote: >> >> To all the people who responded to this thread: >> It is 2011 - please stop writing code like this. >> >> To the OP: >> I'm glad you're asking questions and realizing you're not h

Re: [PHP] Re: Preferred Syntax

2011-12-16 Thread Adam Richardson
On Fri, Dec 16, 2011 at 11:53 PM, Eric Butera wrote: > To all the people who responded to this thread: > It is 2011 - please stop writing code like this. > > To the OP: > I'm glad you're asking questions and realizing you're not happy with > your current abilities and suspect there's a better way

Re: [PHP] Re: Preferred Syntax

2011-12-16 Thread Eric Butera
On Thu, Dec 15, 2011 at 5:46 PM, Ross McKay wrote: > Jim Lucas wrote: > >>I second this example, with one minor change, I would add '{' and '}' around >>variables. >> >>echo <<>>   href="/mypage.php/{$page_id}">{$page_name} >>HTML; >> >>This works for $variables, $objects, and variable functions c

Re: [PHP] Re: Preferred Syntax

2011-12-15 Thread Ross McKay
Jim Lucas wrote: >I second this example, with one minor change, I would add '{' and '}' around >variables. > >echo << href="/mypage.php/{$page_id}">{$page_name} >HTML; > >This works for $variables, $objects, and variable functions calls. But doesn't >work if you try to call functions directly (

Re: [PHP] Re: Preferred Syntax

2011-12-15 Thread Jim Lucas
On 12/14/2011 11:50 PM, Ross McKay wrote: > On Wed, 14 Dec 2011 07:59:46 -0500, Rick Dwyer wrote: > >> Can someone tell me which of the following is preferred and why? >> >> echo "$page_name"; >> >> echo "".$page_name.""; >> [...] > > Just to throw in yet another possibility: > > echo << h

Re: [PHP] Re: Preferred Syntax

2011-12-15 Thread Louis Huppenbauer
Another nice way would be sprintf. So your string really is just a string and nothing more. I don't know how it would affect performance, but just for the eye I find it much simpler. echo sprintf("%s", $page_id, $page_name); 2011/12/15 Robert Cummings > On 11-12-15 02:50 AM, Ross McKay wrote: >

<    4   5   6   7   8   9   10   11   12   13   >