php-windows Digest 11 Aug 2003 16:46:50 -0000 Issue 1865

Topics (messages 21108 through 21119):

Re: Randomize mySQL result array
        21108 by: Svensson, B.A.T. (HKG)

Re: Hack Q...
        21109 by: Nils Schmidt
        21110 by: Svensson, B.A.T. (HKG)

Apache web server problem
        21111 by: Ashish Borkar
        21113 by: Mikey

Session
        21112 by: Shahid
        21114 by: Svensson, B.A.T. (HKG)

Re: How to compile a win32 php extension module ???
        21115 by: Svensson, B.A.T. (HKG)
        21119 by: Daniel Beulshausen

PHP and BerkeleyDB
        21116 by: Rodney Green

Zip archive & File Encryption
        21117 by: UHL Fabrice

date question
        21118 by: Harpreet

Administrivia:

To subscribe to the digest, e-mail:
        [EMAIL PROTECTED]

To unsubscribe from the digest, e-mail:
        [EMAIL PROTECTED]

To post to the list, e-mail:
        [EMAIL PROTECTED]


----------------------------------------------------------------------
--- Begin Message ---
> BTW there is a nice MySQL Windows mailing list.

I wouldn't say that. Some of the authers there really need a lay... ;)

--- End Message ---
--- Begin Message --- I think it's an request of an robot or worm trying to get into your system by using known security bugs. I have requests similar to this one; most from with nimda infected IIS 5 servers, or others like:
"GET www.google.com". (don't know what's this about??)
If I'm wrong tell me! (I'm only 16)
And sorry for my bad english I'm from germany.
Nils



Jswalter wrote:
Is someone trying to hack my computer?

"GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir"

Any idea what this means?

walter





--- End Message ---
--- Begin Message ---
It seams like your system is exposed for an old worm named "Nimda".

(And I think you should follow another authors advivice and do a
reverse lookup on the IP# and contact the domain owner about this
incident.)

Check out http://www.cert.org/advisories/CA-2001-26.html for more
information and how to protect you. Your system should be patched
for this since this worm was around 2002 or something, but if not,
do download and install the securit patch.


CERT:

System FootPrint
The scanning activity of the Nimda worm produces the following log entries
for any web server listing on port 80/tcp: 
GET /scripts/root.exe?/c+dir
GET /MSADC/root.exe?/c+dir
GET /c/winnt/system32/cmd.exe?/c+dir
GET /d/winnt/system32/cmd.exe?/c+dir
GET /scripts/..%5c../winnt/system32/cmd.exe?/c+dir
GET /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c+dir
GET /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c+dir
GET
/msadc/..%5c../..%5c../..%5c/..\xc1\x1c../..\xc1\x1c../..\xc1\x1c../winnt/sy
stem32/cmd.exe?/c+dir
GET /scripts/..\xc1\x1c../winnt/system32/cmd.exe?/c+dir
GET /scripts/..\xc0/../winnt/system32/cmd.exe?/c+dir
GET /scripts/..\xc0\xaf../winnt/system32/cmd.exe?/c+dir
GET /scripts/..\xc1\x9c../winnt/system32/cmd.exe?/c+dir
GET /scripts/..%35c../winnt/system32/cmd.exe?/c+dir
GET /scripts/..%35c../winnt/system32/cmd.exe?/c+dir
GET /scripts/..%5c../winnt/system32/cmd.exe?/c+dir
GET /scripts/..%2f../winnt/system32/cmd.exe?/c+dir

Note: The first four entries in these sample logs denote attempts to connect
to the backdoor left by Code Red II, while the remaining log entries are
examples of exploit attempts for the Directory Traversal vulnerability. 

     //Anders

-----Original Message-----
From: jsWalter
To: [EMAIL PROTECTED]
Sent: 10-8-03 21:48
Subject: [PHP-WIN] Hack Q...

Is someone trying to hack my computer?

  "GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir"

Any idea what this means?

walter




-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

--- End Message ---
--- Begin Message ---
Hello ,
      I have installed Apache web server and PHP on a AIX machine.
I wrote a test script called test.php which had a call to
    phpinfo();
Then I added the file php to htdocs folder.
Then i went to a windows machine ,opened Internet Explorer and tried the URL

 http://192.200.8.19/test.php
where 192.200.8.19 is IP address of the AIX machine.

The browser instead of showing PHPINFO  showed me a messagebox
      " Do you want to download the file test.php "
what can be the problem???
Regards
Ashish



--- End Message ---
--- Begin Message ---
Have you added:

AddType application/x-httpd-php .php

to your httpd.conf?

You will need to restart Apache after doing this for it to take effect.

HTH,

Mikey

>===== Original Message From "Ashish Borkar" <[EMAIL PROTECTED]> 
=====
>Hello ,
>      I have installed Apache web server and PHP on a AIX machine.
>I wrote a test script called test.php which had a call to
>    phpinfo();
>Then I added the file php to htdocs folder.
>Then i went to a windows machine ,opened Internet Explorer and tried the URL
>
> http://192.200.8.19/test.php
>where 192.200.8.19 is IP address of the AIX machine.
>
>The browser instead of showing PHPINFO  showed me a messagebox
>      " Do you want to download the file test.php "
>what can be the problem???
>Regards
>Ashish
>
>
>
>--
>PHP Windows Mailing List (http://www.php.net/)
>To unsubscribe, visit: http://www.php.net/unsub.php


--- End Message ---
--- Begin Message ---
hi to all
how can i track that a particular session is still active or not. so how can
i get it.

pls help me out

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Shahid Sheikh
[ : : I N F O R M A T I C  S Y S T E M S  : : ]
Mumbai
India
Tel:91-22-56318528
Alternate email id : [EMAIL PROTECTED]
Hotmail Id: [EMAIL PROTECTED]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^


--- End Message ---
--- Begin Message ---
> how can i track that a particular session is still active or not.
> so how can i get it.

Ever heard "I think therefore I am!" ? ;)



        bool connection_aborted();
        bool connnection_timeout();

        0/1/2 connection_status();

        0 = normal, 1 = aborted, 2 = timeout

--- End Message ---
--- Begin Message ---
Create a Win32 DLL project in VC++ that export symbols, and then
just fill in the code you want. This will create the libs you need
for the other project.....

> -----Original Message-----
> From: Ika Oscaos [mailto:[EMAIL PROTECTED]
> Sent: Sunday, August 10, 2003 12:38 PM
> To: [EMAIL PROTECTED]
> Subject: [PHP-WIN] Re: How to compile a win32 php extension module ???
> 
> 
> Hello,
> 
> Thanks for your proposition, but I prefer to try to compile it by myself, I
> want to learn how to do this, I have VC++, but I don't know how to use it
> for compiling this module as a PHP DLL. I'm looking for a personn who has
> already done this .
> 
> Thank you.
> 
> --
> Ika
> 
> "Dvdmandt" <[EMAIL PROTECTED]> a ecrit dans le message de
> news:[EMAIL PROTECTED]
> > I'd use VC++ and compile it... I think I can do it if you send the
> source...
> > Not sure though, never compiled myself before... HMm.. Yes, I have...
> > Well...
> >
> > You make a project and compile I think...
> >
> > -- 
> > // DvDmanDT
> > MSN: [EMAIL PROTECTED]
> > Mail: [EMAIL PROTECTED]
> > "Ika Oscaos" <[EMAIL PROTECTED]> skrev i meddelandet
> > news:[EMAIL PROTECTED]
> > > Hello,
> > >
> > > I have developed a php extension module. I can compile it with Linux. I
> > can
> > > build a module.so file. I search a documentation for creating the same
> > > module (module.dll) for Win32 plateform. Is there a documentation that
> > > explain how to compile an extension module for win32 ?
> > >
> > > Thanks for your Help
> > >
> > > --
> > > Ika
> > >
> > >
> >
> >
> 
> 
> 
> -- 
> PHP Windows Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
> 

--- End Message ---
--- Begin Message --- At 12:37 10.08.2003 +0200, you wrote:

Hello,

Thanks for your proposition, but I prefer to try to compile it by myself, I
want to learn how to do this, I have VC++, but I don't know how to use it
for compiling this module as a PHP DLL. I'm looking for a personn who has
already done this .

what do you want to know exactly? how to create a vc workspace suitable for a php extension?
if so, take a look at your ext/skel folder ( or http://cvs.php.net/cvs.php/php-src/ext/skeleton ) there should be a sample workspace, otherwise look at the other already existing extensions. there isn't any real magic behind it...
post left over questions to this list.


grüsse aus berlin,
daniel

/*--
Daniel Beulshausen - [EMAIL PROTECTED]
Using PHP on Windows? http://www.php4win.com



--- End Message ---
--- Begin Message ---
Greetings!

I'm looking at using BerkeleyDB along with PHP. This is a bit off topic but
is there a WIN32 binary distribution of BerkeleyDB somewhere out there? I've
looked but haven't had any luck in finding it. I don't have Visual C++ to
compile the source. If someone knows of a precompiled source please send me
a link.

Thanks!
Rod

********************************************
  CinchHost.com - Web Hosting Made Easier
     ASP, PHP, CGI, WEBMAIL, And More
 Packages as Low as $9.99 - No Set Up fees
        http://www.cinchhost.com/
********************************************


--- End Message ---
--- Begin Message ---
hi all,

I am looking for a php class for creating zip encrypted files archives.

does anyone have an idea ?

thanks

UF

--- End Message ---
--- Begin Message ---
I use the below sql statement to add one day to the date
select DATEADD(day,1,'2003-08-11 23:59:59') as datered

It returns
$expir="Aug 12 2003 11:59PM"

To convert the format to YYYY-MM-DD I use
 $expir=date('Y-m-d', $expir);

The new value returned is 1969-12-31. What am i doing wrong. The only thing
I want to do is convert my date to a YYYY-MM-DD format.

Please help.

Thanks,

Harpreet


--- End Message ---

Reply via email to