Re[2]: [nyphp-talk] Injection Attack, any ideas?

2007-11-16 Thread mikesz
Hello Daniel, > A delayed FYI: > The term "injection attack" generally means "SQL injection attack", hence > so many people here talking about properly escaping data heading to your > database. Sometimes it means "HTML injection attack", leading to others > talking about how to escape HTML when

Re: [nyphp-talk] call command-line script asynchronously

2007-11-16 Thread Daniel Convissor
Hi Marc: On Sat, Nov 10, 2007 at 08:39:27PM +0800, Marc Antony Vose wrote: > > Which function for calling a command line script doesn't make your > script stop and wait? I use exec(). http://php.net/exec. Make sure to use the escape functions as needed. --Dan -- T H E A N A L Y S I S

Re: [nyphp-talk] Injection Attack, any ideas?

2007-11-16 Thread Daniel Convissor
Hi Rob: On Mon, Nov 12, 2007 at 04:26:54PM -0500, Rob Marscher wrote: > > But it's expensive to escape it every time someone views the page. > Therefore, it's recommended to filter it on input but store the > filtered version This approach is flawed because disgruntled people who have serve

Re: [nyphp-talk] Injection Attack, any ideas?

2007-11-16 Thread Daniel Convissor
Mike: On Wed, Nov 07, 2007 at 12:31:17PM +0800, [EMAIL PROTECTED] wrote: > > I just noticed that this client has been getting regular injection > attacks that have been failing because it is a comment spammer and the > INSERT query is failing on a duplicate key error. A delayed FYI: The term "in

Re: [nyphp-talk] Er, Dutch?

2007-11-16 Thread Urb LeJeune
I'm been getting Dutch for several weeks. Urb Dr. Urban A. LeJeune, President E-Government.com 800-204-9545 ___ New York PHP Community Talk Mailing List http://lists.nyphp.org/mailman/listinfo/talk NYPHPCon 2006 Presentations Online http://www.nyphp

Re: [nyphp-talk] Er, Dutch?

2007-11-16 Thread Gary Mort
Steve Manes wrote: Is www.php.net defaulting to Dutch for anybody else this morning? Working fine for me. ___ New York PHP Community Talk Mailing List http://lists.nyphp.org/mailman/listinfo/talk NYPHPCon 2006 Presentations Online http://www.nyphpcon

Re: [nyphp-talk] Er, Dutch?

2007-11-16 Thread David Krings
Steve Manes wrote: selyah wrote: *//* works fine for me I can get English but only if I select "Brazilian Portuguese". "English" doesn't even appear in the pulldown. Weird. Maybe my browser is sending a funky language request header. Nah, that must be the continental drift... ;) ___

Re: [nyphp-talk] Er, Dutch?

2007-11-16 Thread Steve Manes
selyah wrote: *//* works fine for me I can get English but only if I select "Brazilian Portuguese". "English" doesn't even appear in the pulldown. Weird. Maybe my browser is sending a funky language request header. ___ New York PHP Community

Re: [nyphp-talk] detecting Java Script from within a PHP script.

2007-11-16 Thread csnyder
On 11/16/07, Urb LeJeune <[EMAIL PROTECTED]> wrote: > It there a way to detect if a user's browser has Java Script enabled > from within a PHP script? This might work: if ( !window.location.search ) { window.location = window.location.href+"?js=1"; } Look for $_GET['js'] in your scr

Re: [nyphp-talk] detecting Java Script from within a PHP script.

2007-11-16 Thread Jon Baer
Hmm, was under the impression latest Browscap libraries already did a similar technique but does not look like it is the case @ all. Good call. - Jon On Nov 16, 2007, at 10:46 AM, csnyder wrote: On Nov 16, 2007 9:54 AM, Jon Baer <[EMAIL PROTECTED]> wrote: Browscap ... http://garetjax.in

RE: [nyphp-talk] Er, Dutch?.... Er, No!

2007-11-16 Thread Fee, Patrick J (US SSA)
It did not redirect for me. Patrick J. Fee Systems Engineering Services Technology Solutions & Services Tel: (301) 231-1418 Cel: (240) 401-6820 Fax: (301) 231-2635 [EMAIL PROTECTED] "Instead of being concerned that you have

Re: [nyphp-talk] Er, Dutch?

2007-11-16 Thread selyah
works fine for me - Original Message From: Steve Manes <[EMAIL PROTECTED]> To: NYPHP Talk Sent: Friday, November 16, 2007 10:44:06 AM Subject: [nyphp-talk] Er, Dutch? Is www.php.net defaulting to Dutch for anybody else this morning? When I search on functions I get redirected

[nyphp-talk] Er, Dutch?

2007-11-16 Thread Steve Manes
Is www.php.net defaulting to Dutch for anybody else this morning? When I search on functions I get redirected to us2.php.net and get the text in Dutch. Did Drupal buy out php.net? dirname (PHP 4, PHP 5) dirname — Geeft de foldernaam van het pad terug Beschrijving string dirname ( string $p

Re: [nyphp-talk] detecting Java Script from within a PHP script.

2007-11-16 Thread csnyder
On Nov 16, 2007 9:54 AM, Jon Baer <[EMAIL PROTECTED]> wrote: > Browscap ... > > http://garetjax.info/projects/browscap/ > > - Jon I don't think that will tell you whether js is enabled, just whether the browser is capable of it according to the browsecap.ini database. -- Chris Snyder http://chx

Re: [nyphp-talk] detecting Java Script from within a PHP script.

2007-11-16 Thread Jon Baer
Browscap ... http://garetjax.info/projects/browscap/ - Jon On Nov 16, 2007, at 9:00 AM, Urb LeJeune wrote: Sorry about the last message, I accidently hit the send button. It there a way to detect if a user's browser has Java Script enabled from within a PHP script? Urb Dr.

[nyphp-talk] detecting Java Script from within a PHP script.

2007-11-16 Thread Urb LeJeune
At 06:43 AM 11/13/2007, you wrote: [EMAIL PROTECTED] wrote: too (security and quality never got any space on the project priority list obviously). From my experience that is true for 90% of all software projects. Only documentation ranks lower. But using every spanking new unproven technolog

[nyphp-talk] detecting Java Script from within a PHP script.

2007-11-16 Thread Urb LeJeune
Sorry about the last message, I accidently hit the send button. It there a way to detect if a user's browser has Java Script enabled from within a PHP script? Urb Dr. Urban A. LeJeune, President E-Government.com 800-204-9545 ___ New