php-general Digest 12 Oct 2012 23:41:50 -0000 Issue 8004

Topics (messages 319430 through 319440):

Re: appreciation
        319430 by: Maciek Sokolewicz
        319431 by: David McGlone
        319432 by: Tim Streater

Re: Reaching the PHP mailing list owners
        319433 by: Helmut Tessarek
        319434 by: Daniel Brown
        319435 by: Helmut Tessarek
        319436 by: Daniel Brown
        319437 by: Matijn Woudt
        319438 by: Helmut Tessarek
        319439 by: Helmut Tessarek

Re: Beneficial site spamming framework
        319440 by: Ashley Sheridan

Administrivia:

To subscribe to the digest, e-mail:
        php-general-digest-subscr...@lists.php.net

To unsubscribe from the digest, e-mail:
        php-general-digest-unsubscr...@lists.php.net

To post to the list, e-mail:
        php-gene...@lists.php.net


----------------------------------------------------------------------
--- Begin Message ---
On 12-10-2012 06:10, tamouse mailing lists wrote:
if (
        ! is_dir($dirBase."/".$get_the_album) // this is not a directory
     || ! strpos($get_the_album, '.')         // directory name does
not contain a period
     || ! strpos($get_the_album, '\')         // directory name does
not contain a backslash
    )
    {

Don't use ! strpos() to check if it does not contain a character. The reason for this is that:
strpos('.text', '.') == false
This is because strpos('.something', '.') returns 0, which evaluates to false.

So instead, you should use:
strpos($get_the_album, '.') !== false to check if $get_the_album does not contain the character '.'

However, this is likely not what the OP wants. What he likely does want is to check if the filename is not '.' or '..'. Of course, there are numerous ways to do this. From very simple things like:
if ( $filename != '.' && $filename != '..')
to
if (false === array_search($filename, array('.','..')) {

As Lester mentioned, there are tons of ways to resolve a 'problem', and most of them are usually good.
--- End Message ---
--- Begin Message ---
On Thursday, October 11, 2012 11:10:46 PM tamouse mailing lists wrote:
> On Thu, Oct 11, 2012 at 8:02 PM, David McGlone <da...@dmcentral.net> wrote:
> > Dear everybody :-)
> > 
> > I wanted to thank everyone for helping me out on the stuff that I had been
> > trying to do in the last couple weeks. I know I was unorganized, confused,
> > flustered and burnt out. But after all the feedback, and getting a swift
> > kick in the arse from Jim and Govinda telling me not to let anyone
> > intimidate me, and quite a few other good points, I went back to my
> > original plan and used opendir. After I got this down and understood it,
> > It made me realize how glob worked and I wrote the same thing using glob
> > as I did with opendir. I feel good about this and what's even better, I
> > killed 2 birds with 1 stone.. LOL Anyway, I just wanted to let everyone
> > know I appreciated all the feedback. :-)
> > 
> > <!-- using opendir-->
> > $page = $_SERVER['PHP_SELF'];
> > 
> > //directories
> > $dirBase = "images/property_pics";
> > 
> > 
> > //get album
> > $get_the_album = $_GET['album'];
> > 
> > if (!$get_the_album){
> > echo "<p />Select an album:<p />";
> > $handle = opendir($dirBase);
> > while(($file = readdir($handle)) !==FALSE){
> > if(is_dir($dirBase."/".$file) && $file != "." && $file != ".."){
> > echo "<a href='$page?album=$file'>$file</a><br />";
> > }
> > }
> > closedir($handle);
> > }
> > else{
> > 
> > if(!is_dir($dirBase."/".$get_the_album) || strtr($get_the_album, ".")
> > !=NULL> 
> > || strtr($get_the_album, "\\") !=NULL){
> > 
> > echo "Album does not exist.";
> > }
> > 
> > 
> > else {
> > 
> > // echo "$get_the_album";
> > $handle = opendir($dirBase. "/" . @$get_the_album);
> > while(($file = readdir($handle)) !== FALSE){
> > if ($file != "." && $file != ".."){
> > 
> > 
> > echo "<div id='imageStack'><a href='$dirBase/$get_the_album/$file'
> > rel='lightbox[image]'><img src=$dirBase/$get_the_album/$file height='150'
> > width='150'></a><br /></div>";
> > 
> > }
> > }
> > closedir($handle);
> > }
> > 
> > }
> > 
> > <!--end of using opendir-->
> > 
> > <!start of using glob-->
> > function myglob(){
> > 
> >   $result = mysql_query("SELECT * FROM properties");
> >   
> >         while($row = mysql_fetch_array($result)){
> >         
> >          $MLS_No = $row['MLS_No'];
> >          
> >           }
> >       
> >       $images = glob('images/property_pics/' .$MLS_No.'/*');
> >       foreach ($images as $image){
> >       echo "<div id='imageStack'><a href='$image'
> >       rel='lightbox[MLS_No]'><img
> > 
> > src='$image' width='200' height='200'></a></div>";
> > 
> >   }
> > 
> > }
> > <!--end of using glob-->
> > --
> > David M.
> 
> Hi, David, glad you're sticking with it.
> 
> I don't understand what you're trying to do here, though:
> > if(!is_dir($dirBase."/".$get_the_album) || strtr($get_the_album, ".")
> > !=NULL> 
> > || strtr($get_the_album, "\\") !=NULL){
> > 
> > echo "Album does not exist.";
> > }

It's suposed to be strstr. This was an attempt to make sure that nobody could 
get into any directories lower than the directory that contained the image 
folders. Funny thing is it was still working with my typos. There probably is 
a better way to do it, but by breaking it down is how I was able to understand 
it. anyway I fixed it and It should look like this:

if(!is_dir($dirBase."/".$get_the_album) || strstr($get_the_album, ".") !=NULL 
|| strstr($get_the_album, "/") !=NULL || strstr($get_the_album, "\\") !=NULL){
echo "Album does not exist.";
}


> > 
> > echo "Album does not exist.";
> > }
> 
> PHP function strtr takes 2 or 3 arguments, but if only supplying a
> simple string for argument 2, you *must* supply a string for argument
> 3 as well.
> 
> When I try this:
> 
> $ php -r '$s = strtr("a string","."); var_dump($s);'
> 
> This is the result:
> 
> PHP Warning:  strtr(): The second argument is not an array in Command
> line code on line 1
> PHP Stack trace:
> PHP   1. {main}() Command line code:0
> PHP   2. strtr() Command line code:1
> bool(false)
> 
> which indicates the strtr function call failed.
> 
> What is it you want to do there? Are to trying to see if
> $get_the_album contains a "." or a backslash? If so, you will want to
> use some sort of search or match facility, not the character
> substitution function of strtr. If so, something like this will work
> instead:
> 
> if (
>        ! is_dir($dirBase."/".$get_the_album) // this is not a directory
> 
>     || ! strpos($get_the_album, '.')         // directory name does
> 
> not contain a period
> 
>     || ! strpos($get_the_album, '\')         // directory name does
> 
> not contain a backslash
>    )
>    {
>       echo "Album does not exist.";
>    }
> 
> 
> If that isn't what you want to do, could you provide a simple sentence
> (not code) of what you want to do there?

Later when I get home from work about 1, I am going to run your example so I 
can see the differences.

 -- 
David M.


--- End Message ---
--- Begin Message ---
On 12 Oct 2012 at 12:36, Maciek Sokolewicz <tula...@php.net> wrote: 

> However, this is likely not what the OP wants. What he likely does want
> is to check if the filename is not '.' or
> '..'. Of course, there are numerous ways to do this. From very simple
> things like:
> if ( $filename != '.' && $filename != '..')

Personally if I have a loop looking at filenames in a directory, I'll start it 
with:

while (something)
     {

     if  ($filename=='.' || $filename=='..')  continue;

     // rest of loop

     }


That way, the unwanted cases don't clutter up the logic for the cases I 
do/might want.

--
Cheers  --  Tim

--- End Message ---
--- Begin Message ---
Well, this is useful.

First I get a a message that the owner of the list is available at
internals-ow...@lists.php.net and then I get another automated reply.

On 12.10.12 13:48 , PHP Lists Owner wrote:
> This is an automated response to your message to 
> "internals-ow...@lists.php.net"
> 
> If you are trying to post to one of the PHP mailing lists, the correct
> address looks something like php-gene...@lists.php.net.
> 
> If you are having problems unsubscribing, follow the directions
> located online at http://php.net/unsub
> 
> Thanks!
> 
> --- Your original email is below.
> 
> Hello,
> 
> Can you please explain to me how this can happen?
> My mail server only rejects mails which do not pass the clamav milter and I
> haven't seen any virus alerts in the mail log which would refer to the
> messages you have mentioned.
> 
> Cheers,
>  Helmut
> 
> 
> On 12.10.12 6:44 , internals-h...@lists.php.net wrote:
>> Hi! This is the ezmlm program. I'm managing the
>> intern...@lists.php.net mailing list.
>>
>> I'm working for my owner, who can be reached
>> at internals-ow...@lists.php.net.
>>
>>
>> Messages to you from the internals mailing list seem to
>> have been bouncing. I've attached a copy of the first bounce
>> message I received.
>>
>> If this message bounces too, I will send you a probe. If the probe bounces,
>> I will remove your address from the internals mailing list,
>> without further notice.
>>
>>
>> I've kept a list of which messages from the internals mailing list have 
>> bounced from your address.
>>
>> Copies of these messages may be in the archive.
>>
>> To retrieve a set of messages 123-145 (a maximum of 100 per request),
>> send an empty message to:
>>    <internals-get.123_...@lists.php.net>
>>
>> To receive a subject and author list for the last 100 or so messages,
>> send an empty message to:
>>    <internals-in...@lists.php.net>
>>
>> Here are the message numbers:
>>
>>    63243
>>    63245
>>    63244
>>    63246
>>
>> --- Enclosed is a copy of the bounce message I received.
>>
>> Return-Path: <>
>> Received: (qmail 81005 invoked from network); 30 Sep 2012 14:49:47 -0000
>> Received: from unknown (HELO lists.php.net) (127.0.0.1)
>>   by localhost with SMTP; 30 Sep 2012 14:49:47 -0000
>> Return-Path: <>
>> Received: from [127.0.0.1] ([local])
>>      by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with INTERNAL
>>      id 70/00-15389-30C58605 for <>; Sun, 30 Sep 2012 10:49:39 -0400
>> From: Mail Delivery System <mailer-dae...@pb1.pair.com>
>> To: internals-return-63243-tessarek=evermeet...@lists.php.net
>> Subject: Mail Delivery Failure
>> Message-Id: <6E/e1-13052-744d6...@pb1.pair.com>
>> Date: Sun, 30 Sep 2012 10:49:39 -0400
>>
>> This message was created automatically by the mail system (ecelerity).
>>
>> A message that you sent could not be delivered to one or more of its
>> recipients. This is a permanent error. The following address(es) failed:
>>
>>>>> tessa...@evermeet.cx (while not connected): 554 5.4.7 [internal] exceeded 
>>>>> max time without delivery
>>
>> ------ This is a copy of the headers of the original message. ------
>>
>> Return-Path: <internals-return-63243-tessarek=evermeet...@lists.php.net>
>> X-Host-Fingerprint: 76.75.200.58 pb1.pair.com  
>> Received: from [76.75.200.58] ([76.75.200.58:4337] helo=lists.php.net)
>>      by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
>>      id 6E/E1-13052-744D6605 for <tessa...@evermeet.cx>; Sat, 29 Sep 2012 
>> 06:58:15 -0400
>> Received: (qmail 1431 invoked by uid 1010); 29 Sep 2012 10:57:45 -0000
>> Mailing-List: contact internals-h...@lists.php.net; run by ezmlm
>> Precedence: bulk
>> list-help: <mailto:internals-h...@lists.php.net>
>> list-unsubscribe: <mailto:internals-unsubscr...@lists.php.net>
>> list-post: <mailto:intern...@lists.php.net>
>> List-Id: internals.lists.php.net
>> Delivered-To: mailing list intern...@lists.php.net
>> Received: (qmail 1417 invoked from network); 29 Sep 2012 10:57:45 -0000
>> Authentication-Results: pb1.pair.com smtp.mail=tyr...@gmail.com; spf=pass; 
>> sender-id=pass
>> Authentication-Results: pb1.pair.com header.from=tyr...@gmail.com; 
>> sender-id=pass
>> Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.160.42 
>> as permitted sender)
>> X-PHP-List-Original-Sender: tyr...@gmail.com
>> X-Host-Fingerprint: 209.85.160.42 mail-pb0-f42.google.com  
>> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
>>         d=gmail.com; s=20120113;
>>         h=mime-version:in-reply-to:references:date:message-id:subject:from:to
>>          :cc:content-type;
>>         bh=prZm0cGKMFMCkD/fbiF1tCeiDSlTMznmUQpVEygTdy0=;
>>         b=TOSHdETdaKP7G5Ou1eBP7tZVyMRgBjAmfZTyGJWi4L3mNrHEVponyIOiJFE9Vl9Qpq
>>          k9Th+dyyG39Yqh6QinwAz0CEa2NptoMgeKofnF5MxHxXlq0aykkArjJSBUaHFZxFpaVg
>>          3Pw8mm8Aw3a1FbsZTsbiEIRFPVcUiEJEWPzbATHgw0iS8WFXLH4qkcLYC2tUeGM13koQ
>>          rY926iqJEfnSsmegqWWs4GLYLiNOJQouvkyYDh+ZLUmHBTqSsubDdLXIB0TltnBJitvy
>>          B/4Jqbm6LmTXwWFqJEfx7HRMkFn90V71fxGYgvAC5VjWeyHLIOOgG7Vz2Nb1vlQ7DA3j
>>          GvEQ==
>> MIME-Version: 1.0
>> In-Reply-To: 
>> <CAB+pmfMcBS9BP=dqktf2eisawqcvtljok+rhgjqjfmxhe4h...@mail.gmail.com>
>> References: 
>> <CAB+pmfMcBS9BP=dqktf2eisawqcvtljok+rhgjqjfmxhe4h...@mail.gmail.com>
>> Date: Sat, 29 Sep 2012 12:57:39 +0200
>> Message-ID: 
>> <CAH-PCH526p=qvbhntx6wkfq6lrka0ib3up+woopgrd32nfk...@mail.gmail.com>
>> From: Ferenc Kovacs <tyr...@gmail.com>
>> To: Auburn Study <sse.auburn.st...@gmail.com>
>> Cc: php...@lists.php.net, PHP Internals <intern...@lists.php.net>
>> Content-Type: multipart/alternative; boundary=e89a8ff2555e7ce21f04cad50ab5
>> Subject: [PHP-DEV] Re: [PHP-QA] Buffer Overflow Vulnerability Study at 
>> Auburn University
>>
> 

-- 
regards Helmut K. C. Tessarek
lookup http://sks.pkqs.net for KeyID 0xC11F128D

/*
   Thou shalt not follow the NULL pointer for chaos and madness
   await thee at its end.
*/

--- End Message ---
--- Begin Message ---
    What is it you're trying to achieve with the below, Helmut?


On Fri, Oct 12, 2012 at 1:53 PM, Helmut Tessarek <tessa...@evermeet.cx> wrote:
> Well, this is useful.
>
> First I get a a message that the owner of the list is available at
> internals-ow...@lists.php.net and then I get another automated reply.
>
> On 12.10.12 13:48 , PHP Lists Owner wrote:
>> This is an automated response to your message to 
>> "internals-ow...@lists.php.net"
>>
>> If you are trying to post to one of the PHP mailing lists, the correct
>> address looks something like php-gene...@lists.php.net.
>>
>> If you are having problems unsubscribing, follow the directions
>> located online at http://php.net/unsub
>>
>> Thanks!
>>
>> --- Your original email is below.
>>
>> Hello,
>>
>> Can you please explain to me how this can happen?
>> My mail server only rejects mails which do not pass the clamav milter and I
>> haven't seen any virus alerts in the mail log which would refer to the
>> messages you have mentioned.
>>
>> Cheers,
>>  Helmut
>>
>>
>> On 12.10.12 6:44 , internals-h...@lists.php.net wrote:
>>> Hi! This is the ezmlm program. I'm managing the
>>> intern...@lists.php.net mailing list.
>>>
>>> I'm working for my owner, who can be reached
>>> at internals-ow...@lists.php.net.
>>>
>>>
>>> Messages to you from the internals mailing list seem to
>>> have been bouncing. I've attached a copy of the first bounce
>>> message I received.
>>>
>>> If this message bounces too, I will send you a probe. If the probe bounces,
>>> I will remove your address from the internals mailing list,
>>> without further notice.
>>>
>>>
>>> I've kept a list of which messages from the internals mailing list have
>>> bounced from your address.
>>>
>>> Copies of these messages may be in the archive.
>>>
>>> To retrieve a set of messages 123-145 (a maximum of 100 per request),
>>> send an empty message to:
>>>    <internals-get.123_...@lists.php.net>
>>>
>>> To receive a subject and author list for the last 100 or so messages,
>>> send an empty message to:
>>>    <internals-in...@lists.php.net>
>>>
>>> Here are the message numbers:
>>>
>>>    63243
>>>    63245
>>>    63244
>>>    63246
>>>
>>> --- Enclosed is a copy of the bounce message I received.
>>>
>>> Return-Path: <>
>>> Received: (qmail 81005 invoked from network); 30 Sep 2012 14:49:47 -0000
>>> Received: from unknown (HELO lists.php.net) (127.0.0.1)
>>>   by localhost with SMTP; 30 Sep 2012 14:49:47 -0000
>>> Return-Path: <>
>>> Received: from [127.0.0.1] ([local])
>>>      by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with INTERNAL
>>>      id 70/00-15389-30C58605 for <>; Sun, 30 Sep 2012 10:49:39 -0400
>>> From: Mail Delivery System <mailer-dae...@pb1.pair.com>
>>> To: internals-return-63243-tessarek=evermeet...@lists.php.net
>>> Subject: Mail Delivery Failure
>>> Message-Id: <6E/e1-13052-744d6...@pb1.pair.com>
>>> Date: Sun, 30 Sep 2012 10:49:39 -0400
>>>
>>> This message was created automatically by the mail system (ecelerity).
>>>
>>> A message that you sent could not be delivered to one or more of its
>>> recipients. This is a permanent error. The following address(es) failed:
>>>
>>>>>> tessa...@evermeet.cx (while not connected): 554 5.4.7 [internal] 
>>>>>> exceeded max time without delivery
>>>
>>> ------ This is a copy of the headers of the original message. ------
>>>
>>> Return-Path: <internals-return-63243-tessarek=evermeet...@lists.php.net>
>>> X-Host-Fingerprint: 76.75.200.58 pb1.pair.com
>>> Received: from [76.75.200.58] ([76.75.200.58:4337] helo=lists.php.net)
>>>      by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
>>>      id 6E/E1-13052-744D6605 for <tessa...@evermeet.cx>; Sat, 29 Sep 2012 
>>> 06:58:15 -0400
>>> Received: (qmail 1431 invoked by uid 1010); 29 Sep 2012 10:57:45 -0000
>>> Mailing-List: contact internals-h...@lists.php.net; run by ezmlm
>>> Precedence: bulk
>>> list-help: <mailto:internals-h...@lists.php.net>
>>> list-unsubscribe: <mailto:internals-unsubscr...@lists.php.net>
>>> list-post: <mailto:intern...@lists.php.net>
>>> List-Id: internals.lists.php.net
>>> Delivered-To: mailing list intern...@lists.php.net
>>> Received: (qmail 1417 invoked from network); 29 Sep 2012 10:57:45 -0000
>>> Authentication-Results: pb1.pair.com smtp.mail=tyr...@gmail.com; spf=pass; 
>>> sender-id=pass
>>> Authentication-Results: pb1.pair.com header.from=tyr...@gmail.com; 
>>> sender-id=pass
>>> Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.160.42 
>>> as permitted sender)
>>> X-PHP-List-Original-Sender: tyr...@gmail.com
>>> X-Host-Fingerprint: 209.85.160.42 mail-pb0-f42.google.com
>>> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
>>>         d=gmail.com; s=20120113;
>>>         
>>> h=mime-version:in-reply-to:references:date:message-id:subject:from:to
>>>          :cc:content-type;
>>>         bh=prZm0cGKMFMCkD/fbiF1tCeiDSlTMznmUQpVEygTdy0=;
>>>         b=TOSHdETdaKP7G5Ou1eBP7tZVyMRgBjAmfZTyGJWi4L3mNrHEVponyIOiJFE9Vl9Qpq
>>>          
>>> k9Th+dyyG39Yqh6QinwAz0CEa2NptoMgeKofnF5MxHxXlq0aykkArjJSBUaHFZxFpaVg
>>>          
>>> 3Pw8mm8Aw3a1FbsZTsbiEIRFPVcUiEJEWPzbATHgw0iS8WFXLH4qkcLYC2tUeGM13koQ
>>>          
>>> rY926iqJEfnSsmegqWWs4GLYLiNOJQouvkyYDh+ZLUmHBTqSsubDdLXIB0TltnBJitvy
>>>          
>>> B/4Jqbm6LmTXwWFqJEfx7HRMkFn90V71fxGYgvAC5VjWeyHLIOOgG7Vz2Nb1vlQ7DA3j
>>>          GvEQ==
>>> MIME-Version: 1.0
>>> In-Reply-To: 
>>> <CAB+pmfMcBS9BP=dqktf2eisawqcvtljok+rhgjqjfmxhe4h...@mail.gmail.com>
>>> References: 
>>> <CAB+pmfMcBS9BP=dqktf2eisawqcvtljok+rhgjqjfmxhe4h...@mail.gmail.com>
>>> Date: Sat, 29 Sep 2012 12:57:39 +0200
>>> Message-ID: 
>>> <CAH-PCH526p=qvbhntx6wkfq6lrka0ib3up+woopgrd32nfk...@mail.gmail.com>
>>> From: Ferenc Kovacs <tyr...@gmail.com>
>>> To: Auburn Study <sse.auburn.st...@gmail.com>
>>> Cc: php...@lists.php.net, PHP Internals <intern...@lists.php.net>
>>> Content-Type: multipart/alternative; boundary=e89a8ff2555e7ce21f04cad50ab5
>>> Subject: [PHP-DEV] Re: [PHP-QA] Buffer Overflow Vulnerability Study at 
>>> Auburn University
>>>
>>
>
> --
> regards Helmut K. C. Tessarek
> lookup http://sks.pkqs.net for KeyID 0xC11F128D
>
> /*
>    Thou shalt not follow the NULL pointer for chaos and madness
>    await thee at its end.
> */
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>



-- 
</Daniel P. Brown>
Network Infrastructure Manager
http://www.php.net/

--- End Message ---
--- Begin Message ---
Hello Daniel,

I wanted to get an answer to my question (which you would have seen, if you
actually had read the mail).

I got a mail that messages bounced from my mail server. So I sent a reply to
the list owner to get an explanation how this is possible, since my mail
server only rejects mails which are flagged by the clamav milter (and this did
not happen). But then, instead of an answer, I got an automated response,
which basically means only one thing: I don't give a damn about your problems
and buzz off. Mailing list owners are supposed to be real people, not bots.

I'm sorry, I was really irritated by this automated respone. It is not very
professional sending people to go in circles.

Cheers,
 Helmut

On 12.10.12 14:01 , Daniel Brown wrote:
>     What is it you're trying to achieve with the below, Helmut?
> 
> 
> On Fri, Oct 12, 2012 at 1:53 PM, Helmut Tessarek <tessa...@evermeet.cx> wrote:
>> Well, this is useful.
>>
>> First I get a a message that the owner of the list is available at
>> internals-ow...@lists.php.net and then I get another automated reply.
>>
>> On 12.10.12 13:48 , PHP Lists Owner wrote:
>>> This is an automated response to your message to 
>>> "internals-ow...@lists.php.net"
>>>
>>> If you are trying to post to one of the PHP mailing lists, the correct
>>> address looks something like php-gene...@lists.php.net.
>>>
>>> If you are having problems unsubscribing, follow the directions
>>> located online at http://php.net/unsub
>>>
>>> Thanks!
>>>
>>> --- Your original email is below.
>>>
>>> Hello,
>>>
>>> Can you please explain to me how this can happen?
>>> My mail server only rejects mails which do not pass the clamav milter and I
>>> haven't seen any virus alerts in the mail log which would refer to the
>>> messages you have mentioned.
>>>
>>> Cheers,
>>>  Helmut
>>>
>>>
>>> On 12.10.12 6:44 , internals-h...@lists.php.net wrote:
>>>> Hi! This is the ezmlm program. I'm managing the
>>>> intern...@lists.php.net mailing list.
>>>>
>>>> I'm working for my owner, who can be reached
>>>> at internals-ow...@lists.php.net.
>>>>
>>>>
>>>> Messages to you from the internals mailing list seem to
>>>> have been bouncing. I've attached a copy of the first bounce
>>>> message I received.
>>>>
>>>> If this message bounces too, I will send you a probe. If the probe bounces,
>>>> I will remove your address from the internals mailing list,
>>>> without further notice.
>>>>
>>>>
>>>> I've kept a list of which messages from the internals mailing list have
>>>> bounced from your address.
>>>>
>>>> Copies of these messages may be in the archive.
>>>>
>>>> To retrieve a set of messages 123-145 (a maximum of 100 per request),
>>>> send an empty message to:
>>>>    <internals-get.123_...@lists.php.net>
>>>>
>>>> To receive a subject and author list for the last 100 or so messages,
>>>> send an empty message to:
>>>>    <internals-in...@lists.php.net>
>>>>
>>>> Here are the message numbers:
>>>>
>>>>    63243
>>>>    63245
>>>>    63244
>>>>    63246
>>>>
>>>> --- Enclosed is a copy of the bounce message I received.
>>>>
>>>> Return-Path: <>
>>>> Received: (qmail 81005 invoked from network); 30 Sep 2012 14:49:47 -0000
>>>> Received: from unknown (HELO lists.php.net) (127.0.0.1)
>>>>   by localhost with SMTP; 30 Sep 2012 14:49:47 -0000
>>>> Return-Path: <>
>>>> Received: from [127.0.0.1] ([local])
>>>>      by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with INTERNAL
>>>>      id 70/00-15389-30C58605 for <>; Sun, 30 Sep 2012 10:49:39 -0400
>>>> From: Mail Delivery System <mailer-dae...@pb1.pair.com>
>>>> To: internals-return-63243-tessarek=evermeet...@lists.php.net
>>>> Subject: Mail Delivery Failure
>>>> Message-Id: <6E/e1-13052-744d6...@pb1.pair.com>
>>>> Date: Sun, 30 Sep 2012 10:49:39 -0400
>>>>
>>>> This message was created automatically by the mail system (ecelerity).
>>>>
>>>> A message that you sent could not be delivered to one or more of its
>>>> recipients. This is a permanent error. The following address(es) failed:
>>>>
>>>>>>> tessa...@evermeet.cx (while not connected): 554 5.4.7 [internal] 
>>>>>>> exceeded max time without delivery
>>>>
>>>> ------ This is a copy of the headers of the original message. ------
>>>>
>>>> Return-Path: <internals-return-63243-tessarek=evermeet...@lists.php.net>
>>>> X-Host-Fingerprint: 76.75.200.58 pb1.pair.com
>>>> Received: from [76.75.200.58] ([76.75.200.58:4337] helo=lists.php.net)
>>>>      by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
>>>>      id 6E/E1-13052-744D6605 for <tessa...@evermeet.cx>; Sat, 29 Sep 2012 
>>>> 06:58:15 -0400
>>>> Received: (qmail 1431 invoked by uid 1010); 29 Sep 2012 10:57:45 -0000
>>>> Mailing-List: contact internals-h...@lists.php.net; run by ezmlm
>>>> Precedence: bulk
>>>> list-help: <mailto:internals-h...@lists.php.net>
>>>> list-unsubscribe: <mailto:internals-unsubscr...@lists.php.net>
>>>> list-post: <mailto:intern...@lists.php.net>
>>>> List-Id: internals.lists.php.net
>>>> Delivered-To: mailing list intern...@lists.php.net
>>>> Received: (qmail 1417 invoked from network); 29 Sep 2012 10:57:45 -0000
>>>> Authentication-Results: pb1.pair.com smtp.mail=tyr...@gmail.com; spf=pass; 
>>>> sender-id=pass
>>>> Authentication-Results: pb1.pair.com header.from=tyr...@gmail.com; 
>>>> sender-id=pass
>>>> Received-SPF: pass (pb1.pair.com: domain gmail.com designates 
>>>> 209.85.160.42 as permitted sender)
>>>> X-PHP-List-Original-Sender: tyr...@gmail.com
>>>> X-Host-Fingerprint: 209.85.160.42 mail-pb0-f42.google.com
>>>> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
>>>>         d=gmail.com; s=20120113;
>>>>         
>>>> h=mime-version:in-reply-to:references:date:message-id:subject:from:to
>>>>          :cc:content-type;
>>>>         bh=prZm0cGKMFMCkD/fbiF1tCeiDSlTMznmUQpVEygTdy0=;
>>>>         
>>>> b=TOSHdETdaKP7G5Ou1eBP7tZVyMRgBjAmfZTyGJWi4L3mNrHEVponyIOiJFE9Vl9Qpq
>>>>          
>>>> k9Th+dyyG39Yqh6QinwAz0CEa2NptoMgeKofnF5MxHxXlq0aykkArjJSBUaHFZxFpaVg
>>>>          
>>>> 3Pw8mm8Aw3a1FbsZTsbiEIRFPVcUiEJEWPzbATHgw0iS8WFXLH4qkcLYC2tUeGM13koQ
>>>>          
>>>> rY926iqJEfnSsmegqWWs4GLYLiNOJQouvkyYDh+ZLUmHBTqSsubDdLXIB0TltnBJitvy
>>>>          
>>>> B/4Jqbm6LmTXwWFqJEfx7HRMkFn90V71fxGYgvAC5VjWeyHLIOOgG7Vz2Nb1vlQ7DA3j
>>>>          GvEQ==
>>>> MIME-Version: 1.0
>>>> In-Reply-To: 
>>>> <CAB+pmfMcBS9BP=dqktf2eisawqcvtljok+rhgjqjfmxhe4h...@mail.gmail.com>
>>>> References: 
>>>> <CAB+pmfMcBS9BP=dqktf2eisawqcvtljok+rhgjqjfmxhe4h...@mail.gmail.com>
>>>> Date: Sat, 29 Sep 2012 12:57:39 +0200
>>>> Message-ID: 
>>>> <CAH-PCH526p=qvbhntx6wkfq6lrka0ib3up+woopgrd32nfk...@mail.gmail.com>
>>>> From: Ferenc Kovacs <tyr...@gmail.com>
>>>> To: Auburn Study <sse.auburn.st...@gmail.com>
>>>> Cc: php...@lists.php.net, PHP Internals <intern...@lists.php.net>
>>>> Content-Type: multipart/alternative; boundary=e89a8ff2555e7ce21f04cad50ab5
>>>> Subject: [PHP-DEV] Re: [PHP-QA] Buffer Overflow Vulnerability Study at 
>>>> Auburn University
>>>>
>>>
>>
>> --
>> regards Helmut K. C. Tessarek
>> lookup http://sks.pkqs.net for KeyID 0xC11F128D
>>
>> /*
>>    Thou shalt not follow the NULL pointer for chaos and madness
>>    await thee at its end.
>> */
>>
>> --
>> PHP General Mailing List (http://www.php.net/)
>> To unsubscribe, visit: http://www.php.net/unsub.php
>>
> 
> 
> 

-- 
regards Helmut K. C. Tessarek
lookup http://sks.pkqs.net for KeyID 0xC11F128D

/*
   Thou shalt not follow the NULL pointer for chaos and madness
   await thee at its end.
*/

--- End Message ---
--- Begin Message ---
On Fri, Oct 12, 2012 at 2:19 PM, Helmut Tessarek <tessa...@evermeet.cx> wrote:
> Hello Daniel,
>
> I wanted to get an answer to my question (which you would have seen, if you
> actually had read the mail).

    I briefly glanced, and no more, because anyone with any idea of
Internet etiquette knows not to forward an entire bunch of junk to a
public and wholly-unrelated mailing list.  Had you considered the
appropriate options, such as reading about how to contact us, you'd
have gotten a response.  Note that the tone of your reply here has
already changed the tenor of this entire discussion now.

> I got a mail that messages bounced from my mail server. So I sent a reply to
> the list owner to get an explanation how this is possible, since my mail
> server only rejects mails which are flagged by the clamav milter (and this did
> not happen). But then, instead of an answer, I got an automated response,
> which basically means only one thing: I don't give a damn about your problems
> and buzz off. Mailing list owners are supposed to be real people, not bots.

    And, for the most part, we are (save for a few sentient androids).
 However, go to news.php.net and look at those bounce messages.  Note
it's all consecutive, within a relatively small window of time.  Then,
using your own suggestion about reading the email, look at the bounce
response: the messages were undeliverable up to a time threshold, when
the server gave up.  Sounds like there was an issue connecting to your
SMTP system during that window.  If you have the appropriate access,
you might want to review your mail logs during this window.

> I'm sorry, I was really irritated by this automated respone. It is not very
> professional sending people to go in circles.

    Well, as the adage goes, you'll catch more flies with honey than
with vinegar.  And considering this is the very first message I've
ever seen from you, it sounds like either (a) you didn't follow the
proper protocol, or (b) there's something in the process we need to
review.  If you think the issue lies on our end, you can submit a bug
at https://bugs.php.net/ and detail the steps to reproduce the issue.
If it is indeed something we need to correct, believe me, we will.  We
don't deliberately attempt to mislead or frustrate people, despite how
it might have seemed.

-- 
</Daniel P. Brown>
Network Infrastructure Manager
http://www.php.net/

--- End Message ---
--- Begin Message ---
On Fri, Oct 12, 2012 at 8:42 PM, Daniel Brown <danbr...@php.net> wrote:
> On Fri, Oct 12, 2012 at 2:19 PM, Helmut Tessarek <tessa...@evermeet.cx> wrote:
>> Hello Daniel,
>>
>> I wanted to get an answer to my question (which you would have seen, if you
>> actually had read the mail).
>
>     I briefly glanced, and no more, because anyone with any idea of
> Internet etiquette knows not to forward an entire bunch of junk to a
> public and wholly-unrelated mailing list.  Had you considered the
> appropriate options, such as reading about how to contact us, you'd
> have gotten a response.  Note that the tone of your reply here has
> already changed the tenor of this entire discussion now.
>
>> I got a mail that messages bounced from my mail server. So I sent a reply to
>> the list owner to get an explanation how this is possible, since my mail
>> server only rejects mails which are flagged by the clamav milter (and this 
>> did
>> not happen). But then, instead of an answer, I got an automated response,
>> which basically means only one thing: I don't give a damn about your problems
>> and buzz off. Mailing list owners are supposed to be real people, not bots.
>
>     And, for the most part, we are (save for a few sentient androids).
>  However, go to news.php.net and look at those bounce messages.  Note
> it's all consecutive, within a relatively small window of time.  Then,
> using your own suggestion about reading the email, look at the bounce
> response: the messages were undeliverable up to a time threshold, when
> the server gave up.  Sounds like there was an issue connecting to your
> SMTP system during that window.  If you have the appropriate access,
> you might want to review your mail logs during this window.
>
>> I'm sorry, I was really irritated by this automated respone. It is not very
>> professional sending people to go in circles.
>
>     Well, as the adage goes, you'll catch more flies with honey than
> with vinegar.  And considering this is the very first message I've
> ever seen from you, it sounds like either (a) you didn't follow the
> proper protocol, or (b) there's something in the process we need to
> review.  If you think the issue lies on our end, you can submit a bug
> at https://bugs.php.net/ and detail the steps to reproduce the issue.
> If it is indeed something we need to correct, believe me, we will.  We
> don't deliberately attempt to mislead or frustrate people, despite how
> it might have seemed.
>
> --
> </Daniel P. Brown>
> Network Infrastructure Manager
> http://www.php.net/
>

Did you really need to use that many words? The answer is pretty
simple, he's using a crappy mail server..

--- End Message ---
--- Begin Message ---
Hello Daniel,

>     I briefly glanced, and no more, because anyone with any idea of
> Internet etiquette knows not to forward an entire bunch of junk to a
> public and wholly-unrelated mailing list.  Had you considered the
> appropriate options, such as reading about how to contact us, you'd
> have gotten a response.  Note that the tone of your reply here has
> already changed the tenor of this entire discussion now.

Hmm, that's funny. I sent the mail to the addresses which were listed in the
replies I got. The first mail suggested to use the ml owner, which I did. Then
I got another reply which said the following:

---
This is an automated response to your message to "internals-ow...@lists.php.net"

If you are trying to post to one of the PHP mailing lists, the correct
address looks something like php-gene...@lists.php.net.

If you are having problems unsubscribing, follow the directions
located online at http://php.net/unsub
---

So the only address that actually seemed to be working was
php-gene...@lists.php.net

How do you expect me to investigate how to contact the mailing list owners
other than reading the mails I get from the mailing list.

You wrote that 'anyone with any idea of Internet etiquette knows not to
forward an entire bunch of junk to a public and wholly-unrelated mailing list'.
You know, you could also say the following:

Anyone with any idea of Internet etiquette knows that if you send an automated
reply, you also include a correct address to which you can reply to.

Using only addresses that return additional canned responses is against the
Internet etiquette.

It is not my fault that the only address that worked was a totally unrelated
public mailing list.

>     And, for the most part, we are (save for a few sentient androids).
>  However, go to news.php.net and look at those bounce messages.  Note
> it's all consecutive, within a relatively small window of time.  Then,
> using your own suggestion about reading the email, look at the bounce
> response: the messages were undeliverable up to a time threshold, when
> the server gave up.  Sounds like there was an issue connecting to your
> SMTP system during that window.  If you have the appropriate access,
> you might want to review your mail logs during this window.

Ok. This makes sense since the mail server was down for several days due to a
HW problem.
But this is something which can happen and I find it rather concerning getting
an email which states that I might be removed w/o further notice.
If the system knows that mails were undeliverable during a certain period,
then there is no reason for sending me a warning. If this happens for 14
consecutive days, then it makes sense to send an email.

>     Well, as the adage goes, you'll catch more flies with honey than
> with vinegar.  And considering this is the very first message I've
> ever seen from you, it sounds like either (a) you didn't follow the
> proper protocol, or (b) there's something in the process we need to
> review.  If you think the issue lies on our end, you can submit a bug
> at https://bugs.php.net/ and detail the steps to reproduce the issue.
> If it is indeed something we need to correct, believe me, we will.  We
> don't deliberately attempt to mislead or frustrate people, despite how
> it might have seemed.

I was one of the original developers of the native ibm_db2 driver for PHP. I
also subscribed to the internal mailing list at that time, because I wanted to
work on PHP itself. Unfortunately most developers started to be quite
condescending in this list and thus I never really posted anything to that list.

-- 
regards Helmut K. C. Tessarek
lookup http://sks.pkqs.net for KeyID 0xC11F128D

/*
   Thou shalt not follow the NULL pointer for chaos and madness
   await thee at its end.
*/

--- End Message ---
--- Begin Message ---
Hi Daniel,

Do you see what I mean by condescending?

On 12.10.12 14:45 , Matijn Woudt wrote:
> Did you really need to use that many words? The answer is pretty
> simple, he's using a crappy mail server..
> 

-- 
regards Helmut K. C. Tessarek
lookup http://sks.pkqs.net for KeyID 0xC11F128D

/*
   Thou shalt not follow the NULL pointer for chaos and madness
   await thee at its end.
*/

--- End Message ---
--- Begin Message ---
On Fri, 2012-10-12 at 01:59 +0200, Maciek Sokolewicz wrote:

> On 11-10-2012 22:18, Ashley Sheridan wrote:
> >>> I've been getting spam comments on my personal blog (runs on
> >>> self-written PHP blog software). I'd like to test some methods I've
> >>> devised to prevent or block it. Does anyone know of a very
> >> lightweight
> >>> framework for simulating an automated "form fill-out" on a site?
> >>> Something where you could just add some code to designate the site
> >> for
> >>> the "attack" and then what fields you wanted to send?
> >>>
> >>> This should be a relatively simple task for PHP and curl, but I'm not
> >>> really familiar with the headers and that part of the HTTP
> >> conversation.
> >>> Yes, I know this is a risky question for a public list. Feel free to
> >>> contact me privately if you think the answer shouldn't be in the
> >>> archives of a public list. Likewise, if you can point me to a source
> >> of
> >>> quickly absorbable research on the subject. I frankly don't know how
> >> I'd
> >>> google such a thing.
> >>>
> >>> Paul
> >>>
> >>> --
> >>> Paul M. Foster
> >>> http://noferblatz.com
> >>> http://quillandmouse.com
> >>>
> >>> --
> >>> PHP General Mailing List (http://www.php.net/)
> >>> To unsubscribe, visit: http://www.php.net/unsub.php
> >>>
> >
> > To avoid having to create your own anti-spam system, I recommend Akismet, 
> > which weights posts allowing you to set a rejection threshold. The great 
> > thing is that it is constantly improving over time.
> >
> I've recently looked into the more modern captcha systems. I personally 
> can't stand the "standard" captcha of having to decipher what characters 
> are present on a distorted image. The last few years I've noticed that 
> more and more often I can't decipher what an image is supposed to say. 
> And after a few tries of unsuccesful replying what the image says, I 
> just give up. This seems to be a reverse-Turing-test by now. Computers 
> being able to guess better than humans.
> 
> Anyway, I wrote my own captcha system. I've noticed that simple things 
> like "what is the capital of the USA?" and then being able to choose 
> "Hong-Kong, Washington or Rome" or a question like "Is water wet or 
> dry?" work very very well. Just make up a bunch of these, and then 
> randomly pick one to have people answer on your blog. It completely 
> stopped registration spam on my forum. Simply because bots don't 
> understand such questions.
> 
> - Tul


There's a slight irony that this message got posted to the list 5 times,
given the topic :p

-- 
Thanks,
Ash
http://www.ashleysheridan.co.uk



--- End Message ---

Reply via email to