php-general Digest 13 Jul 2002 18:40:35 -0000 Issue 1462

Topics (messages 107495 through 107536):

Re: safe_mode
        107495 by: Liam MacKenzie

Re: Convert MySQL table into Access or Excell format
        107496 by: Alex Shi
        107497 by: Darren Young
        107498 by: Darren Young
        107499 by: Jason Wong
        107501 by: Alex Shi

Re: Restricting access using IPs
        107500 by: Michael Hall
        107502 by: Michael Hall

PHP install - what features?
        107503 by: olinux
        107504 by: Jason Wong

Multiple Tables -add, edit, delete
        107505 by: Paul Dionne
        107529 by: Analysis & Solutions
        107530 by: Analysis & Solutions

unsuscribe
        107506 by: gys

For Unsubscribe send a blank mail to ( [EMAIL PROTECTED])
        107507 by: Balaji Ankem

hello the list
        107508 by: Nicolas GUILLOU
        107511 by: Alberto Serra
        107520 by: Matt

how can this be? GET instead of POST -> db error
        107509 by: Andy
        107516 by: Dyon Beaart
        107518 by: Matt

New 2 PHP
        107510 by: George Ewing
        107512 by: vins

html entry within XML "database"
        107513 by: William S.
        107515 by: Cal Evans

configure failed after autoconf update
        107514 by: Steve Alberty

Re: How do I send files with HTTP socket post (PostToHost)
        107517 by: Peter

Re: Connecting LocalHost & Remote mySQL DB
        107519 by: John Holmes

php + javascript hard day together ?
        107521 by: David D
        107523 by: Jason Wong
        107531 by: David D

Re: Advice needed
        107522 by: Mike Tuller
        107528 by: Analysis & Solutions

Can this be done with mail()?
        107524 by: Manuel
        107533 by: Peter

recusive functions
        107525 by: Alexander Ross

mail() problem
        107526 by: Duncan
        107527 by: Chris Knipe

how to defend this atack?
        107532 by: Andy
        107534 by: Chris Shiflett

objects in an array
        107535 by: Alexander Ross

Install 2 php
        107536 by: Pierre

Administrivia:

To subscribe to the digest, e-mail:
        [EMAIL PROTECTED]

To unsubscribe from the digest, e-mail:
        [EMAIL PROTECTED]

To post to the list, e-mail:
        [EMAIL PROTECTED]


----------------------------------------------------------------------
--- Begin Message ---
<VirtualHost *>
DocumentRoot /home/scripts
ServerName scripts.blahblah.com
ErrorLog /home/nobody/logs/hosting/error.scripts.blahblah.com.log
CustomLog /home/nobody/logs/hosting/access.scripts.blahblah.com.log common

php_admin_flag safe_mode off  (or on)

</VirtualHost>





----- Original Message -----
From: "Chris Knipe" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, July 12, 2002 12:23 PM
Subject: [PHP] safe_mode


> Lo all,
>
> Does anyone have some examples, ideas, or references on how to setup php's
> safe_mode operation so that I can provide a reasonably secure environment
for
> hosting php3 and php4 (public web sites, with public users).
>
> This is for a public type hosting environment, so I'll definately need to
> protect the servers from malicious code (such as exec(rm... ), and
everything
> else that goes with it...
>
> Any pointers or web sites that may be of help will be appreciated
> tremendiously.
>
> --
> me
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>


--- End Message ---
--- Begin Message ---
"Jason Wong" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> On Saturday 13 July 2002 14:00, Alex Shi wrote:
> > "Jason Wong" <[EMAIL PROTECTED]> wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> >
> > > On Saturday 13 July 2002 13:31, Alex Shi wrote:
> > > > The thing is that, the MySQL table resides on a remote web server,
my
> > > > client want to download it and access it in Access.
> > >
> > > Doesn't matter, ODBC works across a network.
> >
> > But what can we do if the ISP closed 3306 port on their firewall?
>
> This thread is leading into non-PHP territory (ie you're better off asking
on
> the mysql list). Put simply, you can specify which port you want MySQL to
> use. However if the ISP only allows certain ports, eg SMTP, HTTP, _and_
> you're already using those ports, then you're stuck up a creek.
>
> Of course you can always ask your ISP to unblock that port. Why are _they_
> firewalling _your_ network anyway?

Sorry for the confusing...the "ISP" is the hosting company where my client's
web site hosted. That's why I need a php solution for this...

>
> --
> Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
> Open Source Software Systems Integrators
> * Web Design & Hosting * Internet & Intranet Applications Development *
>
> /*
> What we do not understand we do not possess.
> -- Goethe
> */
>

--- End Message ---
--- Begin Message ---
I seem to remember some Windows application that will do the conversion 
for you. I believe it's called mysql2access and the other way is 
access2mysql. IIRC, it's not open/free though.

On Sat, 13 Jul 2002, Alex Shi wrote:

> The thing is that, the MySQL table resides on a remote web server, my client
> want to download it and access it in Access.
> 
> Alex
> 
> > You can also use ODBC (Ships with Acess) to make a DSN connection to
> MySQL.
> > Access can retrieve data from any ODBC DSN.
> >
> > Jason White
> >
> > ----- Original Message -----
> > From: "Jason Wong" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Friday, July 12, 2002 9:48 PM
> > Subject: Re: [PHP] Convert MySQL table into Access or Excell format
> >
> >
> > > On Saturday 13 July 2002 06:48, Alex Shi wrote:
> > > > Hello,
> > > >
> > > > My client has a website and it support MySQL/PHP. The client want
> > > > to download the MySQL tables and then access them in Excell or
> > > > Access. So my question is, is it possible to convert MySQL table into
> > > > Access or Excell format? Thanks in advance for all answer!
> > >
> > > archives -> "mysql excel"
> > >
> > > --
> > > Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
> > > Open Source Software Systems Integrators
> > > * Web Design & Hosting * Internet & Intranet Applications Development *
> > >
> > > /*
> > > After years of research, scientists recently reported that there is,
> > > indeed, arroz in Spanish Harlem.
> > > */
> > >
> > >
> > > --
> > > PHP General Mailing List (http://www.php.net/)
> > > To unsubscribe, visit: http://www.php.net/unsub.php
> > >
> > >
> >
> 
> 
> 

--- End Message ---
--- Begin Message ---
Tunnel port 3306 over an SSH connection if you can get an SSH session to 
open to the remote.

On Sat, 13 Jul 2002, Alex Shi wrote:

> "Jason Wong" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > On Saturday 13 July 2002 13:31, Alex Shi wrote:
> > > The thing is that, the MySQL table resides on a remote web server, my
> > > client want to download it and access it in Access.
> >
> > Doesn't matter, ODBC works across a network.
> 
> But what can we do if the ISP closed 3306 port on their firewall?
> 
> >
> > --
> > Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
> > Open Source Software Systems Integrators
> > * Web Design & Hosting * Internet & Intranet Applications Development *
> >
> > /*
> > The young lady had an unusual list,
> > Linked in part to a structural weakness.
> > She set no preconditions.
> > */
> >
> 
> 
> 

--- End Message ---
--- Begin Message ---
On Saturday 13 July 2002 14:51, Alex Shi wrote:

> > the mysql list). Put simply, you can specify which port you want MySQL to
> > use. However if the ISP only allows certain ports, eg SMTP, HTTP, _and_
> > you're already using those ports, then you're stuck up a creek.
> >
> > Of course you can always ask your ISP to unblock that port. Why are
> > _they_ firewalling _your_ network anyway?
>
> Sorry for the confusing...the "ISP" is the hosting company where my
> client's web site hosted. That's why I need a php solution for this...

OK, export mysql tables to CSV, import into Access.

-- 
Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *

/*
Try to be the best of whatever you are, even if what you are is no good.
*/

--- End Message ---
--- Begin Message ---
> > > the mysql list). Put simply, you can specify which port you want MySQL
to
> > > use. However if the ISP only allows certain ports, eg SMTP, HTTP,
_and_
> > > you're already using those ports, then you're stuck up a creek.
> > >
> > > Of course you can always ask your ISP to unblock that port. Why are
> > > _they_ firewalling _your_ network anyway?
> >
> > Sorry for the confusing...the "ISP" is the hosting company where my
> > client's web site hosted. That's why I need a php solution for this...
>
> OK, export mysql tables to CSV, import into Access.

okay thanks a lot!

>
> --
> Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
> Open Source Software Systems Integrators
> * Web Design & Hosting * Internet & Intranet Applications Development *
>
> /*
> Try to be the best of whatever you are, even if what you are is no good.
> */
>

--- End Message ---
--- Begin Message ---

$substring = substr($localip,0,9);

if ($substring == '192.168.0')
{
        // you're in
}


On Sat, 13 Jul 2002, Liam MacKenzie wrote:

> If I enter 192.168.0.13 (My IP) it works, I'm allowed in and any other IP
> isn't.
> However, I need to grant access to this whole network, not just me.  So I
> need 192.168.0.* to be able to access it, everyone else should get "Access
> Denied"
> 
> So I need to know how to write this bit:
> $localip = "192.168.0.13";
> so that it's the network, not just me.
> 
> I tried these but they didn't work:
> $localip = "192.168.0.0";
> $localip = "192.168.0.*";
> $localip = "192.168.0.0/24";
> 
> 
> Any other ideas?
> 
> Cheers
> 
> 
> 
> ----- Original Message -----
> From: "Jason Wong" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Saturday, July 13, 2002 3:49 PM
> Subject: Re: [PHP] Restricting access using IPs
> 
> 
> > On Saturday 13 July 2002 13:10, Liam MacKenzie wrote:
> > > Hey all, I'm looking to deny access to all IPs except those that fall
> into
> > > a specific IP range.  192.168.0.* in this case.
> > > Am I missing something out of this code, it don't work too well  ;-)
> >
> > HOW doesn't it work too well? It displays a picture of a naked guy instead
> of
> > the naked girl that you was expecting?
> >
> > > <?
> > > $localip = "192.168.0.13";
> > > if ($REMOTE_ADDR == $localip) {
> > > ?>
> > >
> > > Allowed!
> > >
> > > <?
> > > }
> > > else {
> > > ?>
> > >
> > > Denied!
> > >
> > > <?
> > > }
> > >
> > > ?>
> >
> >
> > --
> > Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
> > Open Source Software Systems Integrators
> > * Web Design & Hosting * Internet & Intranet Applications Development *
> >
> > /*
> > GOOD-NIGHT, everybody ... Now I have to go administer FIRST-AID to my
> > pet LEISURE SUIT!!
> > */
> >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, visit: http://www.php.net/unsub.php
> >
> >
> 
> 
> 
> 

-- 
--------------------------------
n   i   n   t   i  .   c   o   m
php-python-perl-mysql-postgresql
--------------------------------
Michael Hall     [EMAIL PROTECTED]
--------------------------------

--- End Message ---
--- Begin Message ---

Oops, wrong variable. That should be:

 $substring = substr($REMOTE_ADDR,0,9);
 
 if ($substring == '192.168.0')
 {
        // you're in
 }

Michael

> On Sat, 13 Jul 2002, Liam MacKenzie wrote:
> 
> > If I enter 192.168.0.13 (My IP) it works, I'm allowed in and any other IP
> > isn't.
> > However, I need to grant access to this whole network, not just me.  So I
> > need 192.168.0.* to be able to access it, everyone else should get "Access
> > Denied"
> > 
> > So I need to know how to write this bit:
> > $localip = "192.168.0.13";
> > so that it's the network, not just me.
> > 
> > I tried these but they didn't work:
> > $localip = "192.168.0.0";
> > $localip = "192.168.0.*";
> > $localip = "192.168.0.0/24";
> > 
> > 
> > Any other ideas?
> > 
> > Cheers
> > 
> > 
> > 
> > ----- Original Message -----
> > From: "Jason Wong" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Saturday, July 13, 2002 3:49 PM
> > Subject: Re: [PHP] Restricting access using IPs
> > 
> > 
> > > On Saturday 13 July 2002 13:10, Liam MacKenzie wrote:
> > > > Hey all, I'm looking to deny access to all IPs except those that fall
> > into
> > > > a specific IP range.  192.168.0.* in this case.
> > > > Am I missing something out of this code, it don't work too well  ;-)
> > >
> > > HOW doesn't it work too well? It displays a picture of a naked guy instead
> > of
> > > the naked girl that you was expecting?
> > >
> > > > <?
> > > > $localip = "192.168.0.13";
> > > > if ($REMOTE_ADDR == $localip) {
> > > > ?>
> > > >
> > > > Allowed!
> > > >
> > > > <?
> > > > }
> > > > else {
> > > > ?>
> > > >
> > > > Denied!
> > > >
> > > > <?
> > > > }
> > > >
> > > > ?>
> > >
> > >
> > > --
> > > Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
> > > Open Source Software Systems Integrators
> > > * Web Design & Hosting * Internet & Intranet Applications Development *
> > >
> > > /*
> > > GOOD-NIGHT, everybody ... Now I have to go administer FIRST-AID to my
> > > pet LEISURE SUIT!!
> > > */
> > >
> > >
> > > --
> > > PHP General Mailing List (http://www.php.net/)
> > > To unsubscribe, visit: http://www.php.net/unsub.php
> > >
> > >
> > 
> > 
> > 
> > 
> 
> 

-- 
--------------------------------
n   i   n   t   i  .   c   o   m
php-python-perl-mysql-postgresql
--------------------------------
Michael Hall     [EMAIL PROTECTED]
--------------------------------

--- End Message ---
--- Begin Message ---
Hi all,

I have searched the archive for a message subject
something like "PHP Wish List" and was unsuccessful.

I am going to have our new server setup and would like
to know which features should be enabled - I know a
few that I will need, but what features should i get
now that I will be requesting a recompile later on
for?

Here are the features I think will be best - am I
missing anything? 

do excess features slow down php?

--with-xml
-with-mysql
-with-gd -with-ttf
-with-pdflib
-with-pear
-with-openssl
-with-zlib
-with-curl
-enable-ftp
-with-mnoGoSearch
-enable-sockets
-enable-safe-mode
-with-exec-dir
--with-apache

Thanks much,
olinux


__________________________________________________
Do You Yahoo!?
Yahoo! Autos - Get free new car price quotes
http://autos.yahoo.com
--- End Message ---
--- Begin Message ---
On Saturday 13 July 2002 16:15, olinux wrote:

> I have searched the archive for a message subject
> something like "PHP Wish List" and was unsuccessful.

I doubt whether someone else's wishlist is of much use to _you_. Their needs 
are most likely different to yours.

> I am going to have our new server setup and would like
> to know which features should be enabled - I know a
> few that I will need, but what features should i get
> now that I will be requesting a recompile later on
> for?

Simply compile the features that you _need_ right now. Recompiling is trivial, 
so you can always add whatever you need, _when_ you need it.

> do excess features slow down php?

If they're not compiled as modules then most likely yes, as at the very least 
it results in a larger executable. Whether the slow down is noticeable, 
you'll have to benchmark for yourself.

-- 
Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *

/*
Everything might be different in the present if only one thing had
been different in the past.
*/

--- End Message ---
--- Begin Message ---
Hello all.  Hope you are doing well.

I would like some guidance here, meat of problem is in all caps:
tblContacts -basic contact information on companies/non-government 
organizations/media outlets...
tblCountriesOfOperation (tblContactsID, CountryID) -countries that 
tblContacts operate in.
tblIndustrySectorsOfOperation (tblContactsID, IndustryID) - Industry 
sectors that tblContacts operate in.

Would like a form to edit records.

Problem: How do I display all the tblCountriesOfOperation for one 
tblContacts record SO THAT MULTIPLE COUNTRIES CAN BE ADDED OR DELETED FOR 
THAT RECORD?

Same for tblIndustrySectorsOfOperation.

I assume that I have to output the list of Countries of Operation in a loop 
then loop back through it after use has made changes to see what records 
have been changed.

Or I guess I could present a dropdown of all remaining possible countries, 
after they click the data is refreshed and they are given the option of 
adding another country.

Recommendations, sample code, general help all apreciated.

thanks in advance,
Paul
--- End Message ---
--- Begin Message ---
Oh, yes!  I forgot about deleting countries that have been unchecked!  
Hmm...  Lock the table to prevent people from reading from it, delete 
all records for that company, then loop through and insert the new 
data, then unlock the table.

--Dan

-- 
               PHP classes that make web design easier
        SQL Solution  |   Layout Solution   |  Form Solution
    sqlsolution.info  | layoutsolution.info |  formsolution.info
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
 4015 7 Av #4AJ, Brooklyn NY     v: 718-854-0335     f: 718-854-0409
--- End Message ---
--- Begin Message ---
On Fri, Jul 12, 2002 at 10:57:08AM +0200, Paul Dionne wrote:
> 
> Problem: How do I display all the tblCountriesOfOperation for one 
> tblContacts record SO THAT MULTIPLE COUNTRIES CAN BE ADDED OR DELETED FOR 
> THAT RECORD?

Use an option list with multiple selections.  My SQL Solution does this 
very simply.

In essence, when doing the record lookup to display, run a query 
against the countryies of operation table with the company id.  Loop 
through the recordset placing each row into an array, say 
$CountriesIn[]

Run a second query against the table of all countries and use that to
make an option list.  As you're looping through the option list
creation process, check the current() element of the $CountriesIn[]
array.  If it matches, print out a "selected" and do a next().  
(Simlarly, and probably better, you could skip the current()/next() by
doing an in_array().)

Now, when saving the changes after editing, loop through the array 
returned by the countries of operation option list doing an INSERT INTO 
query to the countries of operation table.  (The table should be 
primary keyed CompanyID and CountryID).  If the current query would 
create duplicate data, the database wouldn't insert the record, no 
problem.

Make sense?

--Dan

-- 
               PHP classes that make web design easier
        SQL Solution  |   Layout Solution   |  Form Solution
    sqlsolution.info  | layoutsolution.info |  formsolution.info
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
 4015 7 Av #4AJ, Brooklyn NY     v: 718-854-0335     f: 718-854-0409
--- End Message ---
--- Begin Message ---

--- End Message ---
--- Begin Message ---
Hi guys,

 To unsubscribe from the list send a mail to
[EMAIL PROTECTED]

Visit http://www.php.net/unsub.php .

Pls. Donot send a mail tp [EMAIL PROTECTED]

Best regards
Balaji




-----Original Message-----
From: gys [mailto:[EMAIL PROTECTED]] 
Sent: Saturday, July 13, 2002 5:03 PM
To: [EMAIL PROTECTED]
Subject: [PHP] unsuscribe




**************************Disclaimer************************************

Information contained in this E-MAIL being proprietary to Wipro Limited is 
'privileged' and 'confidential' and intended for use only by the individual
 or entity to which it is addressed. You are notified that any use, copying 
or dissemination of the information contained in the E-MAIL in any manner 
whatsoever is strictly prohibited.

***************************************************************************
--- End Message ---
--- Begin Message ---
i'm new and i'm trouble with this code :'( can U help me please ??

this is the code :

while ($cd_tbl = mysql_fetch_array ($result))
{
$cd_id = $cd_tbl['cd_id'];
$cd_oeuvre = $cd_tbl['cd_oeuvre'];
$cd_chef = $cd_tbl['cd_chef'];
$cd_compositeur = $cd_tbl['cd_compositeur'];

<-------------------partie concerne--------------------->
//-Debut Seth
//--------------------------
// name : _ALTERNANCE_COULEUR_
// desc : test de 'id' pour l'alternance de couleur
//--------------------------

if(is_int("$cd_id") = TRUE)
{
$bgcolor="#000000";
}
else
{
$bgcolor="#333333";
}
echo "<tr>";
echo "<td bgcolor="$bgcolor"><font face=Verdana size=1><b>$cd_id</b></font></td>";
echo "<td bgcolor="$bgcolor"><font face=Verdana 
size=1><b>$cd_compositeur</b></font></td>";
echo "<td bgcolor="$bgcolor"><font face=Verdana size=1><b>$cd_oeuvre</b></font></td>";
echo "<td bgcolor="$bgcolor"><font face=Verdana size=1><b>$cd_chef</b></font></td>";
echo "<td bgcolor="$bgcolor">";
echo "<a href=detail.php?cd_id=$cd_id><font face=Verdana size=1><b>Fiche 
complte</b></font></a>";
echo "</td>";
echo "</tr>";
}

//- Fin Seth


echo "</table>";
}

^lease help me !!!!!!!!!! :'(
thx !
Seth
--- End Message ---
--- Begin Message ---
!

Nicolas GUILLOU wrote:

You may either write:

> echo "<td bgcolor='$bgcolor'><font face=Verdana size=1><b>$cd_id</b></font></td>";

or

> echo "<td bgcolor=".$bgcolor."><font face=Verdana 
>size=1><b>$cd_compositeur</b></font></td>";





@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@

LoRd, CaN yOu HeAr Me, LiKe I'm HeArInG yOu?
lOrD i'M sHiNiNg...
YoU kNoW I AlMoSt LoSt My MiNd, BuT nOw I'm HoMe AnD fReE
tHe TeSt, YeS iT iS
ThE tEsT, yEs It Is
tHe TeSt, YeS iT iS
ThE tEsT, yEs It Is.......

--- End Message ---
--- Begin Message ---
> echo "<td bgcolor="$bgcolor"><font face=Verdana
size=1><b>$cd_id</b></font></td>";

Strings work differently when the outer quotes are double or single quotes.
Inside double quotes variables will be converted into their values.  Inside
single they will not.
So:
$var = 'Hello World';
echo "$var<br>\n";

will result in
Hello World<br><newline>

and:
$var = 'Hello World';
echo '$var<br>\n';

will result in
$var<br>\n  //actual two characters '\' and 'n' and not newline.

Inside double or single quotes, you can use the other quote:
$var = 'Hello "World"';
echo "$var<br>\n";
Hello "World"<br><newline>

$var = "Hello 'World'";
echo "$var<br>\n";
Hello 'World'<br><newline>

Your trouble is that you're using double quotes inside a double quoted
string and the second double quote that php encounters will terminate the
string. The next thing encountered is your variable $bgcolor, but that
syntax isn't correct.  php sees your string as three pieces:
1. "<td bgcolor="
2. $bgcolor
3. "><font face=Verdana size=1><b>$cd_id</b></font></td>";

So you could either convert the double quotes inside the string into single
quotes:
echo "<td bgcolor='$bgcolor'><font face=Verdana
size=1><b>$cd_id</b></font></td>";

or escape the double quotes like this:
echo "<td bgcolor=\"$bgcolor\"><font face=Verdana
size=1><b>$cd_id</b></font></td>";

or you could concatenate the three pieces:
echo "<td bgcolor=" . $bgcolor ."><font face=Verdana
size=1><b>$cd_id</b></font></td>";

I personally like all of the tag values double quoted so I'd
echo "<td bgcolor=\"$bgcolor"\><font face=\"Verdana\"
size=\"1\"><b>$cd_id</b></font></td>";


When php parses the outside double quoted string, it has to do extra work to
convert variables.  I generally use single quotes unless there's a variable
or special char to convert (like newline).  It doesn't really matter though,
it's fast anyway.

If your using arrays inside a double quoted string, you need to help php out
and use special coding. This code won't work:
$arr = array('fish' =>'Tuna','reptile' => 'Snake','rodent' => 'mouse');
echo "$arr['fish']<br>\n";

This will work:
$arr = array('fish' =>'Tuna','reptile' => 'Snake','rodent' => 'mouse');
echo "{$arr['fish']}<br>\n";  // note the curly braces around the array


--- End Message ---
--- Begin Message ---
Hi everybody,

I am just trying to find out how some db errors happened during a user was
browsing my web app.

This is out of the Apache log:

GET /subapp_profiles/act_upload_image.php HTTP/1.1" 200 160
POST /subapp_profiles/act_upload_image.php HTTP/1.1" 302 5

I do not have a clue where this GET request could come from. This has caused
a empty sql statement and therefore a db error. How can could this be
achieved? By clicking back in the browser window? I dont think so since the
same user was on another site before.

Has anybody a idea on that?

Andy


--- End Message ---
--- Begin Message ---
I dont know what causus it, but I have a kind of a solution for your
problem...

you probably have something like $_GET["myvar"] in your query, try to do
something like this :
$_VARS="_$REQUEST_METHOD";
$_VARS=$$_VARS;

And then instead of using the _GET, you use the _VARS...


"Andy" <[EMAIL PROTECTED]> schreef in bericht
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi everybody,
>
> I am just trying to find out how some db errors happened during a user was
> browsing my web app.
>
> This is out of the Apache log:
>
> GET /subapp_profiles/act_upload_image.php HTTP/1.1" 200 160
> POST /subapp_profiles/act_upload_image.php HTTP/1.1" 302 5
>
> I do not have a clue where this GET request could come from. This has
caused
> a empty sql statement and therefore a db error. How can could this be
> achieved? By clicking back in the browser window? I dont think so since
the
> same user was on another site before.
>
> Has anybody a idea on that?
>
> Andy
>
>


--- End Message ---
--- Begin Message ---
> This is out of the Apache log:
>
> GET /subapp_profiles/act_upload_image.php HTTP/1.1" 200 160
> POST /subapp_profiles/act_upload_image.php HTTP/1.1" 302 5
>
> I do not have a clue where this GET request could come from. This has
caused
> a empty sql statement and therefore a db error. How can could this be
> achieved? By clicking back in the browser window? I dont think so since
the
> same user was on another site before.

The GET is coming from the person on the browser is requesting the page the
either via a link or directly typing it in.  That's how the HTTP works,
right?  Almost all web requests are GETs.  When a person clicks on a link on
www.mysite.com whose href="/subapp_profiles/act_upload_image.php", the
browser will send (at least) the following to the server:

GET /subapp_profiles/act_upload_image.php HTTP/1.1\r\n
Accept: */*\r\n
User-Agent: Mozilla (blah; blah)\r\n
Host: www.mysite.com\r\n
Connection: Keep-Alive\r\n
\r\n

The web server on the other end will then fulfill that reques if it can.
The 200 on the end of your log entry for the GET indicates success.

So what happens is:
1. browser requests the formact_upload_image.php  via GET.
2. Web server sends the data.
3. Browser Displays the form
4. person clicks submit on your act_upload_image.php  which has a method of
POST and server gets the posted data.

The solution is to check $_SERVER['REQUEST_METHOD'] and only process the
form if the method is POST.


--- End Message ---
--- Begin Message ---
Hi Everyone.

Yup.. another dummy who can't suss out php.

I'm running win2000 server and have installed php (by the book), also have mysql 
running.

Can seem to get php recognised though?

Check out http://www.geeing.com/source/chapter01/

Says can't find page.. but is defo there.

I can run this page on my redhat 7.3 server but not windows?  Anyone help?

Thanks in advance
George.

--- End Message ---
--- Begin Message ---
OK
For one you don't have an index.php file.
I can't see the others coz you have pwd protected everything.

What exactly is the error.... ???



"George Ewing" <[EMAIL PROTECTED]> wrote in message
000c01c22a64$b3c14840$6401a8c0@pavilion">news:000c01c22a64$b3c14840$6401a8c0@pavilion...
Hi Everyone.

Yup.. another dummy who can't suss out php.

I'm running win2000 server and have installed php (by the book), also have
mysql running.

Can seem to get php recognised though?

Check out http://www.geeing.com/source/chapter01/

Says can't find page.. but is defo there.

I can run this page on my redhat 7.3 server but not windows?  Anyone help?

Thanks in advance
George.




--- End Message ---
--- Begin Message ---
I am experimenting with using an XML file as a
database. One of the things I do is provide
a way of adding records to the database by an
html form.

This seems to work out well so far unless one
of the fields in a record contains an html
reference. The result is a Sablotron parse error.

What is the best way around this? Should I
validate the form before it is submitted so that
html references are rejected? How would I do this?

-- 
Bill
Amsterdam, NL
--- End Message ---
--- Begin Message ---
As a general rule of thumb you should ALWAYS validate the information posted
as a form before sending it on to whatever backend you are using.

=C=

*
* Cal Evans
* The Virtual CIO
* http://www.calevans.com
*


-----Original Message-----
From: William S. [mailto:[EMAIL PROTECTED]]
Sent: Saturday, July 13, 2002 7:37 AM
To: php
Subject: [PHP] html entry within XML "database"


I am experimenting with using an XML file as a
database. One of the things I do is provide
a way of adding records to the database by an
html form.

This seems to work out well so far unless one
of the fields in a record contains an html
reference. The result is a Sablotron parse error.

What is the best way around this? Should I
validate the form before it is submitted so that
html references are rejected? How would I do this?

--
Bill
Amsterdam, NL

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


--- End Message ---
--- Begin Message ---
Hi,

after my systemtools update to autoconf 2.52, automake 1.6.2, libtool 
1.4.2, bison 1.35
php (cvs tree) configure failed with this strange message:

---
checking for Apache 2.0 module support via DSO through APXS... 
./configure: line 3848: syntax error near unexpected token 
`PHP_AP_EXTRACT_VERSION($APXS_HTTPD)'
./configure: line 3848: `  PHP_AP_EXTRACT_VERSION($APXS_HTTPD)'
----

but i have only requested:
./cvsclean
./buildconf
./configure --with-apxs=/usr/local/apache/current/bin/apxs

on my other system, with exactly the same configuration the configure 
script works fine.

Can anyone please help?

Thanks in advance,

Steve
--- End Message ---
--- Begin Message ---
can you not open the file in binary mode and then transfer it as you would
with ASCII?


"Kevin Stone" <[EMAIL PROTECTED]> wrote in message
070301c229d5$42420130$6501a8c0@kevin">news:070301c229d5$42420130$6501a8c0@kevin...
> Okay enough answering questions this week, now I have a question to ask.
:)
>
> I have a situation where two web servers need to share files with one
> another.  FTP is not an option.  So I am resorting to HTTP socket
> connection.  I am able to open the connection (using Rasmus's PostToHost
> function) to PHP scripts running on both servers and send structured
queries
> back and forth.  This was easy.  The queries can trigger actions so that I
> can communicate seamlessly and do work.  But I cannot for the life of me
> figure out how to send whole files (mostly image files).  There's
obviously
> more to it than just sending the ASCII conversion.
>
> I really don't have any meaningful code to show you.  The code is all
> standard anyway so if you know what I'm talking about then you have
probably
> coded it yourself at one point or another.  Are there any tutorials or
> examples out there that will show me how to send files using fsocketopen()
> and POST method?
>
> Much thanks!
> Kevin Stone
> Helpelf, Inc.
>


--- End Message ---
--- Begin Message ---
> Exactly.. that IS the problem.
> You see, my mySQL DB on the Server/Internet, on my
> website.. it DOES NOT allow Remote Host Connection.
> That's why i need to use a PHP page, that too based on
> the server. Because i need to move tabel data on my
> Client/My Computer to the Tables on my Website mySQL.

Just use mysqldump, like someone else suggested. Dump your local
database, upload it, and import it. 

Any PHP solution isn't going to be 100% dependable, because you will run
into the 30 second time limit on scripts. You can't really get that many
queries done in 30 seconds...

---John Holmes...

--- End Message ---
--- Begin Message ---
Hi all,

I can manage this script to work.
Js warn about listid[], he doesnt like [] in a var name !
Php needs them to collect an array from form checkboxes.

Here is my source :

<!doctype html public "-//W3C//DTD HTML 4.0 //EN">
<html>
<head>
       <title>Title here!</title>


<SCRIPT LANGUAGE="JavaScript">
<!-- Begin
var checkflag = "false";
function check(field) {
if (checkflag == "false") {
for (i = 0; i < field.length; i++) {
field[i].checked = true;
}
checkflag = "true";
return "nowhere"; }
else {
for (i = 0; i < field.length; i++) {
field[i].checked = false;
}
checkflag = "false";
return "everywhere"; }
}
</script>
</head>
<body>

<?
print_r($listid); // what in listid ?
?>

<form name=test action=check.php>

<input type=button value="partout"
onClick="this.value=check(this.form.listid[])"><br>

<input type="checkbox" name="listid[]" value="1">1<br>
<input type="checkbox" name="listid[]" value="2">2<br>
<input type="submit">
</form>

<script>
var obj=eval('document.test.listid[]');
alert(obj); // no object !

</script>
</body>
</html>

Thanks.




--- End Message ---
--- Begin Message ---
On Saturday 13 July 2002 23:37, David D wrote:
> Hi all,
>
> I can manage this script to work.
> Js warn about listid[], he doesnt like [] in a var name !

There's nothing you can do about that.

> Php needs them to collect an array from form checkboxes.

You'll just have to rename your checkboxes to something like listid_1, 
listid_2 etc. Then loop:

  # Untested code, use with caution

  for ($i = 1; $i < $number_of_checkboxes; $i++) {
    if (isset($_GET["listid_$i"])) {
      echo "listid_$i is checked<br>";
    }
  }


-- 
Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *

/*
Bunker's Admonition:
        You cannot buy beer; you can only rent it.
*/

--- End Message ---
--- Begin Message ---
I hack js no need to change in php :

<SCRIPT LANGUAGE="JavaScript">
<!-- Begin
var checkflag = "false";
// on va se ballader parmis les elements de formualire et toucher
// au case a cocher
function check(formulaire) {
if (checkflag == "false") {
for (i = 0; i < formulaire.length; i++) {
    if (formulaire.elements[i].type.toLowerCase() == 'checkbox') {
        formulaire.elements[i].checked = true;
    }
}
checkflag = "true";
return "Nulpart"; }
else {
for (i = 0; i < formulaire.length; i++) {
    if (formulaire.elements[i].type.toLowerCase() == 'checkbox') {
        formulaire.elements[i].checked = false;
    }
}
checkflag = "false";
return "Partout"; }
}
</script>


I pass teh form to the function and scan its elements


--- End Message ---
--- Begin Message ---
After much thought, I think I have figured out what I am going to do. I am
going to create on the first page, a place to add the hardware type, and
that will add a row to the database, and create the key I need. It will then
go to another page where I can enter the information, and I will have the
key to be able to do the volume stuff that I want. So I would have a
dropdown menu to select the type of hardware and and add hardware button
only.

This would also allow me to make this front end more customizable. For
instance if I have a drop down that contains workstation, server, printer,
etc. I could write the code so that when workstation is selected, and I hit
add, it brings up the page to enter workstation information. If I select
printer, then I can enter printer information. If later I decide to add
other items, even if they aren't computer related, I could with ease.

If anyone see a problem with this idea, let me know. I think this would
work, but I haven't started coding yet.

Mike

----- Original Message -----
From: "Alberto Serra" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Friday, July 12, 2002 10:35 PM
Subject: Re: [PHP] Advice needed


> !
>
> Mike Tuller wrote:
> > So I would have the progressive key inside the addvolume window? Can you
> > explain how to go about doing this?
>
> How you organize your HTML output should *never* interfere with the way
> you organize your data, they are two different things and must be kept
> well separated. In a perfect world design, process flow and datamodeling
> should be free to evolve without stepping into each other's way. It's
> obviously impossible to fully meet this condition in the real world, but
> one should always try and get as close to it as he can.
>
> Just do this:
>
> Think of your data as a temporary table, in which you have two keys:
> 1) the real key, whenever available (will be blank on the stuff you
> haven't written in the database yet)
> 2) a progressive key, assigned by your php scripts by some means
>
> You just have the two keys constantly in your forms as hidden fields, so
> that at process time you can still tell which is which when it comes to
> relations, even if you do not have an already established relation
> system (which is the case on new data).
>
> So:
> you load your hdw components, they all have a db id already, so your
> dataset will look like this:
>
> 1) hdw 1, its real id, your own internal key (say 1), rest of the data
> 2) hdw 2, its real id, your own internal key (say 2), rest of the data
> ...
>
> you add a new component and save the result on a temporary table, now
> your temporary dataset is:
>
> 1) hdw 1, its real id, your own internal key (say 1), rest of the data
> 2) hdw 2, its real id, your own internal key (say 2), rest of the data
> 3) hdw new, no real id, your own internal key (say 3), rest of the data
> ...
>
> You add a new volume and stock the data on a second temporary table,
> which contains:
>
> 1) vol 1, no real id, your own hdw internal key (should be 3 since you
> are adding to the last new hdw), your own internal volume id (say 1),
> rest of the data
>
> You can repeat this step all over as much as you want (like fully
> building up a number of new disks, volumes or whatever), and have it as
> multilayered as you want (it will just take as many temporary tables as
> are the real tables involved).
>
> Once your user finally reviews his/her data (say you entered a totally
> new system, reviewed it and felt satisfied with it) he will have a
> "fire" button somewhere.
>
> At this point your final script just takes the data off the temporary
> tables and uses them to build the real thing.
>
> Notice that this way you also sort of implemented a transaction. Not a
> real one, since it will not protect you if your final script fails at
> runtime. Yet you can be sure no unconsistent data from unterminated
> sessions will ever enter your stable datamodel, and that's were 99.99%
> of the risk would come from.
>
> 
> 
> 
>
>
> @-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@
>
> LoRd, CaN yOu HeAr Me, LiKe I'm HeArInG yOu?
> lOrD i'M sHiNiNg...
> YoU kNoW I AlMoSt LoSt My MiNd, BuT nOw I'm HoMe AnD fReE
> tHe TeSt, YeS iT iS
> ThE tEsT, yEs It Is
> tHe TeSt, YeS iT iS
> ThE tEsT, yEs It Is.......
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>


--- End Message ---
--- Begin Message ---
On Sat, Jul 13, 2002 at 11:13:38AM -0500, Mike Tuller wrote:
> After much thought, I think I have figured out what I am going to do. I am
> going to create on the first page, a place to add the hardware type, and
> that will add a row to the database, and create the key I need. It will then
> go to another page where I can enter the information

Sounds like you could end up with a situation with incomplete input
validation.  If certain fields are required, you might not get them
when someone enters the first entry, but doesn't do the rest of the 
entry procedure.  Not that big a deal if you're the person doing all 
the entry, I guess.

--Dan

-- 
               PHP classes that make web design easier
        SQL Solution  |   Layout Solution   |  Form Solution
    sqlsolution.info  | layoutsolution.info |  formsolution.info
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
 4015 7 Av #4AJ, Brooklyn NY     v: 718-854-0335     f: 718-854-0409
--- End Message ---
--- Begin Message ---

I need to query a database and return a resultset. A php script will then sort through 
the data and send the data to the browser in the form of a table.

Is it possible to gather the the results with html tags and store them in a variable 
so that the results can be emailed to someone? If so, how would this be done?



---------------------------------
Do You Yahoo!?
Yahoo! Autos - Get free new car price quotes
--- End Message ---
--- Begin Message ---
Yes. I'm sure you could just mail out the table in an email. You'd have to
do it as a multipart email (i think that's what it's called) as just mailing
out the html code wouldn't show as a table in a mail client.
Here's the source of a HTML spam I got this morning - should give you an
idea how to do it.  Note: you still mail out using the mail() function.

Received: from xmail02.nationala-1advertising.com ([208.236.10.104]) by
mc2-f11.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.4905);
  Sat, 13 Jul 2002 02:38:25 -0700
Received: (qmail 22574 invoked from network); 12 Jul 2002 23:51:55 -0000
Received: from unknown (HELO CAMPAIGN) (208.236.10.4)
  by 0 with SMTP; 12 Jul 2002 23:51:55 -0000
From: AccuLotto <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: WIN $10,000 in 6 months - Guaranteed! [EMAIL PROTECTED]
Date: Fri, 12 Jul 2002 19:54:23 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="Boundary.11111111.11111111"
Return-Path: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 13 Jul 2002 09:38:25.0416 (UTC)
FILETIME=[09287880:01C22A51]

--Boundary.11111111.11111111
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

This message can only be viewed in HTML

--Boundary.11111111.11111111
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

<HTML><HEAD><TITLE></TITLE></HEAD>

<BODY>
<CENTER>
<A HREF="http://www.acculotto.com/p.pl/M2"; TARGET="_blank">

<IMG SRC="http://208.236.11.23/custom/acculotto/images/acculotto.gif";
BORDER="0"></A>
</CENTER>

<p>
<center>
<font face="Verdana, Arial, Helvetica, sans-serif" size="1">If the above
links
do not work or appear, simply copy this URL and paste it into your browser's
address field:<br> </font><font face="Verdana, Arial, Helvetica, sans-serif"
size="1" color="#FFFFFF">
<a href="http://www.acculotto.com/p.pl/M2"; TARGET="_blank">
http://www.acculotto.com/p.pl/M2</a></font><br><br><br></center>
<HR SIZE=1 width="90%">
<p>

<p align="justify"><font size="-2">

Note: This email was sent to you because you registered at Free.com and
subscribed to this newsletter. The email address was then verified and the
agreement confirmed by someone responding from your email address that
required confirmation of registration. This is a double opt-in list and can
NOT in any way be construed as spam. If you wish to unsubscribe from
Free.com, please click the link below:<br>
<a href="http://www.Free.com/OptOut.asp?o=227825";>Unsubscribe Here</a><br>
and you will never receive another wonderful, free offer from us! Please
note, it may take up to a week for you to be removed from our database.<br>
<hr>
</body>
</html>


--Boundary.11111111.11111111--




"Manuel" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>
> I need to query a database and return a resultset. A php script will then
sort through the data and send the data to the browser in the form of a
table.
>
> Is it possible to gather the the results with html tags and store them in
a variable so that the results can be emailed to someone? If so, how would
this be done?
>
>
>
> ---------------------------------
> Do You Yahoo!?
> Yahoo! Autos - Get free new car price quotes


--- End Message ---
--- Begin Message ---
Does  exit() in a recursive function exit the entire function, of does it
only exit that iteration of teh function??  Thanks


--- End Message ---
--- Begin Message ---
Hi,

i am currently having some problems with the mail() function, because emails don't get 
send, or if they do, they arrive with a huge delay. (~ 5% of mail() sent emails arrive)
This only happens, if i try to email s.o. outside my network.

Does anyone have an idea, what might cause this problem?
Could it be the ISP, or do i need to add additional info, when i call the mail() 
function in order to send emails outside my network?

This is what i used to test if the emails get sent or not:

<?
mail([EMAIL PROTECTED],"test-subject","Test-content","From: 
[EMAIL PROTECTED]\r\n"."Reply-To:[EMAIL PROTECTED]\r\n");
?>

Regards,

Duncan
--- End Message ---
--- Begin Message ---
> Does anyone have an idea, what might cause this problem?
> Could it be the ISP, or do i need to add additional info, when i call the
mail() function in order to send emails outside my network?

Could be your ISP...

> This is what i used to test if the emails get sent or not:

> <?
> mail([EMAIL PROTECTED],"test-subject","Test-content","From:
[EMAIL PROTECTED]\r\n"."Reply-To:[EMAIL PROTECTED]\r\n");
> ?>

Mail from [EMAIL PROTECTED] may be your problem, if the ISP is doing sender
address verification (which is more than likely the case).

Try sending the mail from a valid exisiting email address, and see if that
may help you.


--- End Message ---
--- Begin Message ---
Hi there,

I am getting from time to time such GET requests. I think this is kind of a
atack against the webserver. DNS maybe. Here is the log entry:

218.5.149.77 - - [13/Jul/2002:19:57:09 +0200] "GET
/default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
HTTP/1.0" 400 321

can anybody tell me more about this. How could this harm the server or
application installed and what can I do against it?

Thank you for any help on that,

Andy




--- End Message ---
--- Begin Message ---
This looks like a variant of the code red worm and will only bother you 
if you are running IIS, which I would hope you are not. :-)

218.5.149.77 is apparently running an infected IIS Web server. You might 
want to let them know.

Happy hacking.

Chris

andy wrote:

>Hi there,
>
>I am getting from time to time such GET requests. I think this is kind of a
>atack against the webserver. DNS maybe. Here is the log entry:
>
>218.5.149.77 - - [13/Jul/2002:19:57:09 +0200] "GET
>/default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
>NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
>NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
>NNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
>u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
>HTTP/1.0" 400 321
>

--- End Message ---
--- Begin Message ---
I have an array filled with objects.  Each object has a method called
"display".

I have

$var = $arr[0];
$var->display();

but I keep getting an error.  What am I doing wrong?
(I do a print_r of the array immediately before this code and there is an
object at array[0])


Thanks
Alex


--- End Message ---
--- Begin Message ---
Hi, 

I want to install 2 different php4 on my webserver (RH 7.1) for having 2
different php.ini (to stop some function for some vhost) and call him
with different extension with the addhandler directive in the vhost of
apache. ( I have php in cgi and suexec )

Thanks for your responses, 

Pierre 

--- End Message ---

Reply via email to