php-general Digest 8 Sep 2006 17:09:51 -0000 Issue 4336
Topics (messages 241472 through 241495):
IE session problem on one server only
241472 by: Larry Garfield
241481 by: Alex Turner
Directory Structure
241473 by: Manoj Singh
241476 by: Larry Garfield
241477 by: Robert Cummings
241479 by: Frank Arensmeier
Re: Strange server crash problem
241474 by: Robert Cummings
241475 by: Larry Garfield
241478 by: Robert Cummings
241487 by: Larry Garfield
readdir filenames with accents issue
241480 by: All U Want
How do I call an class?
241482 by: Sr. Paulo Ricardo
241483 by: Rafael Mora
241485 by: Satyam
241486 by: Satyam
PHP5 Session length changed
241484 by: Jens Kisters
241489 by: Ford, Mike
Execution time
241488 by: André Medeiros
241492 by: M. Sokolewicz
Testing PHP sites with JMeter
241490 by: Alex Turner
addFormat with Spreadsheet Excel Writer
241491 by: Jef Sullivan
Re: How to add user to linux using php
241493 by: Michelle Konzack
241495 by: Jon Anderson
Re: Quotes?
241494 by: Michelle Konzack
Administrivia:
To subscribe to the digest, e-mail:
[EMAIL PROTECTED]
To unsubscribe from the digest, e-mail:
[EMAIL PROTECTED]
To post to the list, e-mail:
[email protected]
----------------------------------------------------------------------
--- Begin Message ---
Another issue. :-) I've another site I've built that uses PHP sessions for
user authentication. When the user logs in with a user/pass, that is matched
against a record in the database and, if found, that user object is stored in
the session along with various other tracking data like the IP address, and
the session key is stored in the user table. Then when viewing a page, the
systems compares the session key against the user table and the IP address of
the request against the saved IP address. If anything doesn't match up
properly, the user is kicked out.
OK, all fine and dandy. It works correctly in both IE and Firefox on our test
server. On the live site, however, it works only in Firefox. In IE, it
accepts the initial login and displays the first page, but then the next time
the user clicks a link they are asked to login again, as if the session is
not being sent or saved properly. Both servers are running Linux and PHP
4.3.x.
We had issues before with the session not working correctly in IE, but I fixed
those with info from the php.net manual user comments. I'm at a loss as to
why it's only happening on the one server and not the other now. If it were
the other way around I wouldn't care, but the live site shouldn't break. :-)
Any idea what could be the problem?
--
Larry Garfield AIM: LOLG42
[EMAIL PROTECTED] ICQ: 6817012
"If nature has made any one thing less susceptible than all others of
exclusive property, it is the action of the thinking power called an idea,
which an individual may exclusively possess as long as he keeps it to
himself; but the moment it is divulged, it forces itself into the possession
of every one, and the receiver cannot dispossess himself of it." -- Thomas
Jefferson
--- End Message ---
--- Begin Message ---
Larry Garfield wrote:
Another issue. :-) I've another site I've built that uses PHP sessions for
user authentication. When the user logs in with a user/pass, that is matched
against a record in the database and, if found, that user object is stored in
the session along with various other tracking data like the IP address, and
the session key is stored in the user table. Then when viewing a page, the
systems compares the session key against the user table and the IP address of
the request against the saved IP address. If anything doesn't match up
properly, the user is kicked out.
OK, all fine and dandy. It works correctly in both IE and Firefox on our test
server. On the live site, however, it works only in Firefox. In IE, it
accepts the initial login and displays the first page, but then the next time
the user clicks a link they are asked to login again, as if the session is
not being sent or saved properly. Both servers are running Linux and PHP
4.3.x.
We had issues before with the session not working correctly in IE, but I fixed
those with info from the php.net manual user comments. I'm at a loss as to
why it's only happening on the one server and not the other now. If it were
the other way around I wouldn't care, but the live site shouldn't break. :-)
Any idea what could be the problem?
It sounds like the IE is putting different security/cookie settings for
your local and remote site.
AJ
--
www.deployview.com
www.nerds-central.com
www.project-network.com
--- End Message ---
--- Begin Message ---
Hello all,
I am developing a site in which i have to show the directory structure of
any server i.e the admin will enter any site name and i have to show the dir
structure of that site name.
Please help me to fix this.
Thanks & Regards
Manoj
--- End Message ---
--- Begin Message ---
On Friday 08 September 2006 00:12, Manoj Singh wrote:
> Hello all,
>
> I am developing a site in which i have to show the directory structure of
> any server i.e the admin will enter any site name and i have to show the
> dir structure of that site name.
>
> Please help me to fix this.
The following may prove useful:
http://us2.php.net/scandir
http://us2.php.net/manual/en/function.readdir.php
http://us2.php.net/manual/en/class.dir.php
http://us2.php.net/manual/en/spl (for very new PHP 5)
--
Larry Garfield AIM: LOLG42
[EMAIL PROTECTED] ICQ: 6817012
"If nature has made any one thing less susceptible than all others of
exclusive property, it is the action of the thinking power called an idea,
which an individual may exclusively possess as long as he keeps it to
himself; but the moment it is divulged, it forces itself into the possession
of every one, and the receiver cannot dispossess himself of it." -- Thomas
Jefferson
--- End Message ---
--- Begin Message ---
On Fri, 2006-09-08 at 10:42 +0530, Manoj Singh wrote:
> Hello all,
>
> I am developing a site in which i have to show the directory structure of
> any server i.e the admin will enter any site name and i have to show the dir
> structure of that site name.
Crawl baby, crawl! You need to load a page, grab the link references,
and then crawl each of those links. You will want to make sure you stay
on the same server (don't jump to URLs not matching the initial domain).
So that you don't bog down in recursion hell, I'd maintain a queue of
URLs still to be processed. And as you finish a page, grab the next
page. You are going to run into the problem of loops, in which case you
need a game plan for handling looped links. My suggestion is if the
target link already exists in your queue or processed list, then skip
it. So once you have all the links, just go ahead and split up the paths
into their respective parts and build the directory tree.
Cheers,
Rob.
--
.------------------------------------------------------------.
| InterJinn Application Framework - http://www.interjinn.com |
:------------------------------------------------------------:
| An application and templating framework for PHP. Boasting |
| a powerful, scalable system for accessing system services |
| such as forms, properties, sessions, and caches. InterJinn |
| also provides an extremely flexible architecture for |
| creating re-usable components quickly and easily. |
`------------------------------------------------------------'
--- End Message ---
--- Begin Message ---
I think that these kind of questions are very annoying - it is almost
rude to post this to a list.
Why don't you
a) show that you have done some thinking
b) have at least scanned the manual
c) have asked Google.
/frank
8 sep 2006 kl. 07.12 skrev Manoj Singh:
Hello all,
I am developing a site in which i have to show the directory
structure of
any server i.e the admin will enter any site name and i have to
show the dir
structure of that site name.
Please help me to fix this.
Thanks & Regards
Manoj
--- End Message ---
--- Begin Message ---
On Fri, 2006-09-08 at 00:05 -0500, Larry Garfield wrote:
> I'm not certain if this is a PHP problem per se, but as the problem manifests
> itself in PHP I'll give it a go.
>
> I've a PHP-based CMS for a site that I am maintaining. It's a large site
> with
> a few thousand pages. Most of them work fine. However, twice now we've run
> into a problem where a specific page will exhibit very odd behavior.
>
> When building the page, the script will seemingly terminate after it outputs
> about 4 KB of data. It's not exactly 4 KB, but it's always about 4 KB of
> data. If I add debugging information to the page, it will still stop at
> about 4 KB of data, which is then less "real" output.
>
> The damned thing is, the 4KB mark is reached while outputting the left-side
> navigation bar. The way the CMS is structured (I didn't write it), that
> happens before any page-specific content is even loaded. There shouldn't be
> anything different about the code there yet.
>
> I've been unable to figure out why it happens. Any idea what to check? I'm
> stumped.
>
> The server itself is (get this) a Windows/IIS box running PHP 4.0.6 (yes,
> really) and MS SQL server via ODBC. I unfortunately do not have direct
> access to the box, so I can't check server logs myself.
Binary search using error_log() and __LINE__ output to track down where
the thing dies.
Cheers,
Rob.
--
.------------------------------------------------------------.
| InterJinn Application Framework - http://www.interjinn.com |
:------------------------------------------------------------:
| An application and templating framework for PHP. Boasting |
| a powerful, scalable system for accessing system services |
| such as forms, properties, sessions, and caches. InterJinn |
| also provides an extremely flexible architecture for |
| creating re-usable components quickly and easily. |
`------------------------------------------------------------'
--- End Message ---
--- Begin Message ---
On Friday 08 September 2006 00:35, Robert Cummings wrote:
> > The damned thing is, the 4KB mark is reached while outputting the
> > left-side navigation bar. The way the CMS is structured (I didn't write
> > it), that happens before any page-specific content is even loaded. There
> > shouldn't be anything different about the code there yet.
> >
> > I've been unable to figure out why it happens. Any idea what to check?
> > I'm stumped.
> >
> > The server itself is (get this) a Windows/IIS box running PHP 4.0.6 (yes,
> > really) and MS SQL server via ODBC. I unfortunately do not have direct
> > access to the box, so I can't check server logs myself.
>
> Binary search using error_log() and __LINE__ output to track down where
> the thing dies.
Binary search? I must be using a different definition than you are, since I
don't know what a binary search would do for me when trying to track down a
problem with output. :-)
I suppose it is possible that it's dying at some point other than where the
output is stopping. I've localized where the output stops; it's always at
the end of a given loop iteration in the code that generates the sidebar; at
the end of the loop that passes the 4 KB mark, it seems.
--
Larry Garfield AIM: LOLG42
[EMAIL PROTECTED] ICQ: 6817012
"If nature has made any one thing less susceptible than all others of
exclusive property, it is the action of the thinking power called an idea,
which an individual may exclusively possess as long as he keeps it to
himself; but the moment it is divulged, it forces itself into the possession
of every one, and the receiver cannot dispossess himself of it." -- Thomas
Jefferson
--- End Message ---
--- Begin Message ---
On Fri, 2006-09-08 at 00:44 -0500, Larry Garfield wrote:
> On Friday 08 September 2006 00:35, Robert Cummings wrote:
>
> > > The damned thing is, the 4KB mark is reached while outputting the
> > > left-side navigation bar. The way the CMS is structured (I didn't write
> > > it), that happens before any page-specific content is even loaded. There
> > > shouldn't be anything different about the code there yet.
> > >
> > > I've been unable to figure out why it happens. Any idea what to check?
> > > I'm stumped.
> > >
> > > The server itself is (get this) a Windows/IIS box running PHP 4.0.6 (yes,
> > > really) and MS SQL server via ODBC. I unfortunately do not have direct
> > > access to the box, so I can't check server logs myself.
> >
> > Binary search using error_log() and __LINE__ output to track down where
> > the thing dies.
>
> Binary search? I must be using a different definition than you are, since I
> don't know what a binary search would do for me when trying to track down a
> problem with output. :-)
Binary search to track down a problem with output means you place log
info at three points in the code, 2 that you are certain lie outside the
error condition, and the 3rd to cut the problem space in two. Then
depending on what gets output you know in which half of the problem
space the error exists. Then you take again divide the problem space
until you find the exact location of the bug.
> I suppose it is possible that it's dying at some point other than where the
> output is stopping. I've localized where the output stops; it's always at
> the end of a given loop iteration in the code that generates the sidebar; at
> the end of the loop that passes the 4 KB mark, it seems.
I didn't realize you had already tracked down the location. Have you
tried displaying errors? If you're worried about a production site you
could install a custom error handler that displays the error based on
the REMOTE_ADDR value. That won't help you though if a segfault is
occurring. Are the PHP versions the same between machines?
Cheers,
Rob.
--
.------------------------------------------------------------.
| InterJinn Application Framework - http://www.interjinn.com |
:------------------------------------------------------------:
| An application and templating framework for PHP. Boasting |
| a powerful, scalable system for accessing system services |
| such as forms, properties, sessions, and caches. InterJinn |
| also provides an extremely flexible architecture for |
| creating re-usable components quickly and easily. |
`------------------------------------------------------------'
--- End Message ---
--- Begin Message ---
On Friday 08 September 2006 01:22, Robert Cummings wrote:
> > > Binary search using error_log() and __LINE__ output to track down where
> > > the thing dies.
> >
> > Binary search? I must be using a different definition than you are,
> > since I don't know what a binary search would do for me when trying to
> > track down a problem with output. :-)
>
> Binary search to track down a problem with output means you place log
> info at three points in the code, 2 that you are certain lie outside the
> error condition, and the 3rd to cut the problem space in two. Then
> depending on what gets output you know in which half of the problem
> space the error exists. Then you take again divide the problem space
> until you find the exact location of the bug.
>
> > I suppose it is possible that it's dying at some point other than where
> > the output is stopping. I've localized where the output stops; it's
> > always at the end of a given loop iteration in the code that generates
> > the sidebar; at the end of the loop that passes the 4 KB mark, it seems.
>
> I didn't realize you had already tracked down the location. Have you
> tried displaying errors? If you're worried about a production site you
> could install a custom error handler that displays the error based on
> the REMOTE_ADDR value. That won't help you though if a segfault is
> occurring. Are the PHP versions the same between machines?
What I did was along the lines of:
print "<pre style='display:none">Got here</pre>\n";
That way I could see it by looking at the code, but normal people visiting any
other page on the site wouldn't notice a difference. That's how I was able
to determine that it was output size-based. The more of those lines I added,
the sooner in the code it died; always somewhere around the 4 KB mark.
I'll see about error logging to the database instead to see if it's dying
completely or just the output it crashing.
Our development server is an IIS/PHP 4.3 environment. The live server is a
4.0.6 box sitting behind a proxy server as well, which could be part of the
problem. The whole thing is a mess, I agree. :-)
--
Larry Garfield AIM: LOLG42
[EMAIL PROTECTED] ICQ: 6817012
"If nature has made any one thing less susceptible than all others of
exclusive property, it is the action of the thinking power called an idea,
which an individual may exclusively possess as long as he keeps it to
himself; but the moment it is divulged, it forces itself into the possession
of every one, and the receiver cannot dispossess himself of it." -- Thomas
Jefferson
--- End Message ---
--- Begin Message ---
Hi,
I'm creating a file browsing site but don't know how to list properly
filenames containing accents (french, spanish, etc). I've been
browsing the archives but couldn't find a fix.
foreach ($files as $file) {
echo $file;
}
For example:
Filename: sábado-1.mov
Link: saÌbado-1.mov
I would appreciate any help.
Regards,
Luis.
PS - If it helps I'm working on OS X and PHP 4.4.1
--- End Message ---
--- Begin Message ---
Good morning.
How do I call an class?
Its correct?
$Class = new Class();
or
$class = new Class();
Att,
'É um orgulho ter você como nosso cliente'
____________________________
Paulo Ricardo
Programador (Desenvolvedor)
ArgoHost.net
Hospedagem Web com Facilidade
<http://www.argohost.net/> http://www.argohost.net
Suporte Telefônico: (85) 3264-9944 / (11) 4063-4844
E-mail: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
--- End Message ---
--- Begin Message ---
Hi!
I think u are confused, the variable name doesnt have anything to do with
the Class name...
So you can have something like this:
$myvar = new shuttle();
$jjj = new ISS();
u just need to be sure that u are using the exact name of the class, it
doesnt matter the variable name,
hope u get clear!
bye, from Venezuela
Rafa
On 9/8/06, Sr. Paulo Ricardo <[EMAIL PROTECTED]> wrote:
Good morning.
How do I call an class?
It's correct?
$Class = new Class();
or
$class = new Class();
Att,
'É um orgulho ter você como nosso cliente'
____________________________
Paulo Ricardo
Programador (Desenvolvedor)
ArgoHost.net
Hospedagem Web com Facilidade
<http://www.argohost.net/> http://www.argohost.net
Suporte Telefônico: (85) 3264-9944 / (11) 4063-4844
E-mail: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
--- End Message ---
--- Begin Message ---
I find that politeness is always good, nevertheless using 'o senhor' to
refer to Class1 is a little too much.
Now, I am not sure what your question actually is. Are you wondering about
naming conventions? Your example seems to indicate so.
The most frequent is to have class names with the first letter in uppercase
while variables are all lowercase with words separated by underscores or
what is called camelcase, the first word all lowercase and then you use
uppercase for the first letter of each word with no undescores. An object,
that is, the instance of a class, is a variable, thus it follows the
conventions for variables. Thus:
$my_class = new Class(); using traditional PHP conventions or
$myClass = new Class(); using camel case.
If that was not your question and you find it hard to state it in English,
feel free to contact me privately, though I can answer you only in Spanish,
my Portuguese being too primitive.
Satyam
----- Original Message -----
From: "Sr. Paulo Ricardo" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Friday, September 08, 2006 3:14 PM
Subject: [PHP] How do I call an class?
Good morning.
How do I call an class?
It's correct?
$Class = new Class();
or
$class = new Class();
Att,
'É um orgulho ter você como nosso cliente'
____________________________
Paulo Ricardo
Programador (Desenvolvedor)
ArgoHost.net
Hospedagem Web com Facilidade
<http://www.argohost.net/> http://www.argohost.net
Suporte Telefônico: (85) 3264-9944 / (11) 4063-4844
E-mail: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
--- End Message ---
--- Begin Message ---
I find that politeness is always good, nevertheless using 'o senhor' to
refer to Class1 is a little too much.
Now, I am not sure what your question actually is. Are you wondering about
naming conventions? Your example seems to indicate so.
The most frequent is to have class names with the first letter in uppercase
while variables are all lowercase with words separated by underscores or
what is called camelcase, the first word all lowercase and then you use
uppercase for the first letter of each word with no undescores. An object,
that is, the instance of a class, is a variable, thus it follows the
conventions for variables. Thus:
$my_class = new Class(); using traditional PHP conventions or
$myClass = new Class(); using camel case.
If that was not your question and you find it hard to state it in English,
feel free to contact me privately, though I can answer you only in Spanish,
my Portuguese being too primitive.
Satyam
----- Original Message -----
From: "Sr. Paulo Ricardo" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Friday, September 08, 2006 3:14 PM
Subject: [PHP] How do I call an class?
Good morning.
How do I call an class?
It's correct?
$Class = new Class();
or
$class = new Class();
Att,
'É um orgulho ter você como nosso cliente'
____________________________
Paulo Ricardo
Programador (Desenvolvedor)
ArgoHost.net
Hospedagem Web com Facilidade
<http://www.argohost.net/> http://www.argohost.net
Suporte Telefônico: (85) 3264-9944 / (11) 4063-4844
E-mail: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
--- End Message ---
--- Begin Message ---
Hi,
we validate all incoming parameters and that includes checking if the
phpsession ID is only numbers and letters and is 32 Bytes long.
This worked for some PHP5 Servers but we just encountered an 5.1.2 that
issued sessionIDs that were 26 Bytes long.
I cant find any note about that in either of the PHP5 changelogs.
Question : What lengths are valid for PHP Sesssions is it possible to
encounter valid sessions with a length other than 26 and 32?
PHPinfo :
http://neu.karnevalservice.de/dbcTrade/phpinfo.php
thanks
Jens
--- End Message ---
--- Begin Message ---
> -----Original Message-----
> From: Jens Kisters [mailto:[EMAIL PROTECTED]
> Sent: 08 September 2006 14:53
>
> we validate all incoming parameters and that includes checking if the
> phpsession ID is only numbers and letters and is 32 Bytes long.
> This worked for some PHP5 Servers but we just encountered an
> 5.1.2 that
> issued sessionIDs that were 26 Bytes long.
> I cant find any note about that in either of the PHP5 changelogs.
>
> Question : What lengths are valid for PHP Sesssions is it possible to
> encounter valid sessions with a length other than 26 and 32?
Yes.
Originally, session IDs were MD5 hashes 128 bits long, encoded
4-bits-per-character to give a 32-character session id.
PHP 5 introduced the settings session.hash_function and
session.hash_bits_per_character; with these, you can have an MD5 (128 bits) or
SHA-1 (160 bits) hash, encoded 4, 5 or 6 bits per character. There are 6
possible combinations of these settings, giving 5 possible session id lengths
of 40, 32, 27, 26 and 22 characters.
Cheers!
Mike
---------------------------------------------------------------------
Mike Ford, Electronic Information Services Adviser,
Learning Support Services, Learning & Information Services,
JG125, James Graham Building, Leeds Metropolitan University,
Headingley Campus, LEEDS, LS6 3QS, United Kingdom
Email: [EMAIL PROTECTED]
Tel: +44 113 283 2600 extn 4730 Fax: +44 113 283 3211
To view the terms under which this email is distributed, please go to
http://disclaimer.leedsmet.ac.uk/email.htm
--- End Message ---
--- Begin Message ---
Hello everyone.
This may seem as a silly question, but I went through the
documentation and it wasn't explicit on this issue, at least for me.
Let's say that I'm on an 128kb/s upload. I need to upload an 100mb
file through a POST. PHP has, by default, 90 seconds execution limit
time.
So, the question is, when I hit the submit button, does it start
timing? Or does it start timing when the PHP gets the FULL POST
headers?
Thanks in advance,
André
--- End Message ---
--- Begin Message ---
André Medeiros wrote:
Hello everyone.
This may seem as a silly question, but I went through the
documentation and it wasn't explicit on this issue, at least for me.
Let's say that I'm on an 128kb/s upload. I need to upload an 100mb
file through a POST. PHP has, by default, 90 seconds execution limit
time.
So, the question is, when I hit the submit button, does it start
timing? Or does it start timing when the PHP gets the FULL POST
headers?
Thanks in advance,
André
It doesn't start timing until the request has been fully recieved and
control handed over to PHP. So, until your file has been fully uploaded,
PHP won't even have started to do anything, and as such the execution
times hasn't started ticking either.
- tul
--- End Message ---
--- Begin Message ---
All,
Sorry if this is a little off topic. I have been writing tutorials on
load and regression testing web applications with JMeter. I have just
posted the first. These are being do to help people in TPN, but I am
able to make them public.
As the testing is all being done on PHP based web apps, I thought it
might be of interest.
Cheers
AJ
The first is here, there will be more as time goes on:
http://nerds-central.blogspot.com/2006/08/pushing-envelope-with-jmeter.html
--
www.deployview.com
www.nerds-central.com
www.project-network.com
--- End Message ---
--- Begin Message ---
Greetings all,
Thanks for the help with the Spreadsheet Excel Writer yesterday.
I was wondering if anyone knew of problems with the addFormat()
within the writer and PHP 5.0. I have followed the examples for
setting up a specific format but it is not being recognized.
Here is what I have tried...
$format_bold =& $workbook->addFormat();
$format_bold->SetBold();
And
$title_format =& $workbook->addFormat(array('fontfamily' => 'Arial',
'size' => 13,
'color' => 'black',
'bgcolor' => '#C0C0C0',
'bold' => 1)
);
Neither have worked. The error I get is pointing to the
Writer/Worksheet.php
file, line 1242 indicating that it cannot be converted. Yet, this same
code
was used in another application that is running PHP 4.2
Jef Sullivan
Programmer
Progrexion
work (801) 828-1745
moble (801) 682-9727
[EMAIL PROTECTED]
Research | Marketing | Sales Generation
This email and its contents are confidential. If you are not the
intended recipient, delete this email and, do not use or
disclose the information contained within or its attachments.
Thank you.
--- End Message ---
--- Begin Message ---
Am 2006-09-05 08:36:21, schrieb Jon Anderson:
> Or create a simple shell/perl/php/whatever wrapper for adduser, and
> allow sudo for that wrapper by the web server user only.
>
> For example, you could create a wrapper that only allows one
> alphanumeric argument for the username, and another for the password.
That would not be POSIX compliant...
A USERNAME must be:
^[A-Za-z_][-_.A-Za-z0-9]*
So the allowed chars should at least:
-_.A-Za-z0-9
But his can be easily checked in PHP.
And ONLY after this passed to your wraper script.
Note: I do this too on a public server and I asume, you know
I have hackattemts, even if you can not know it.
Greetings
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSM LinuxMichi
0033/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
--- End Message ---
--- Begin Message ---
Michelle Konzack wrote:
Am 2006-09-05 08:36:21, schrieb Jon Anderson:
Or create a simple shell/perl/php/whatever wrapper for adduser, and
allow sudo for that wrapper by the web server user only.
For example, you could create a wrapper that only allows one
alphanumeric argument for the username, and another for the password.
That would not be POSIX compliant...
A USERNAME must be:
^[A-Za-z_][-_.A-Za-z0-9]*
So the allowed chars should at least:
-_.A-Za-z0-9
IMO, what characters you allow in usernames on your systems is unrelated
to POSIX. It's a policy decision. POSIX merely defines what compliant
operating systems (and components) must support.
I only allow usernames with 5-8 alphabetic characters on systems that I
manage - as a human, I'm not POSIX compliant? ;-)
But his can be easily checked in PHP.
And ONLY after this passed to your wraper script.
They can also be easily checked from your wrapper with sed, wc, grep,
etc. - if your web server is compromised, you don't want to allow the
person to execute a script that doesn't properly check it's input
parameters. (That's my paranoia talking. :-)
jon
--- End Message ---
--- Begin Message ---
Am 2006-09-05 23:12:43, schrieb Gustav Wiberg:
> I want to save this to a string...
>
> <script language="javascript">
> var uri = 'http://impse.tradedoubler.com/imp/img/16352388/1122503?' + new
^^^^^^^^^^^^^^^^^^^^^^
> String (Math.random()).substring (2, 11);
> document.write('<a
> href="http://clk.tradedoubler.com/click?p=48859&a=1122503&g=16352388";
^^^^^^^^^^^^^^^^^^^^
Is this YOUR Domain? Keep in mind, if I find you, you are dead!
I will give you bach those around 26.000 Spams you have
sent to my Servers and my accout I use for writing here.
> Best regards
> /Gustav Wiberg
> Stammis Internet
^^^^^^^
Spelling error? - Maybe: "Spaming Internet"
Greetings
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSM LinuxMichi
0033/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
--- End Message ---
