Re: [PHP-DB] Secure database connectivity?
file by FTP for example). If you're really paranoid, put the
username/password outside your htroot into a separate file, say
passwords.inc and include it into php with
include('/secure/passwords.inc'), but this isn't really needed, and
BTW, it won't make the connection method more secure, or insecure.
Perhaps I'm paranoid.. don't think it's bad.
I would recommend putting it outside the htroot.. this will prevent people
from seeing it if someone screws up the serverconfig..
Another thing I wouldn't call it password.inc.. if someone would gain
access to your userdir they would first look for something with password or
passwd in it.. give it an unrelated name..
I must agree that it won't make your PHP script more secure since it's
parsed. But it's always a good thing to be carefull.
Bye,
B.
--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP-DB] Help with Apache+PHP4 on Windows ME
Hi, Does anybody know a solution? I am willing to show you my httpd.conf and php.ini if you like. httpd.conf would be helpful. only the relevant stuff like AddTpye application. Johannes -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP-DB] Help with Apache+PHP4 on Windows ME
Hi Brian it asked if I wanted to "Open or Save the file from the Current Location" instead of parsing it. It seems, that the Browser has a poroblem with the mime-type. Check wheather the default mime-type is set to text/html. Hop it helps Conni -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
RE: [PHP-DB] Advice On Building Dynamic MySQL Queries
I actually created an array of different conditions like:
$ConditionsArray = array("Var1 500","Var2 1800","ID=43");
and then:
$Conditions = join(" AND ", $ConditionsArray);
This constructs:
$Conditions = "Var1 500 AND Var2 1800 AND ID=43";
shrug Worked well for me.
Jonathan Hilgeman
-Original Message-
From: JD Daniels [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 19, 2001 10:41 AM
To: [EMAIL PROTECTED]
Subject: [PHP-DB] Advice On Building Dynamic MySQL Queries
I am building a query from a search form. This is the code I have now:
if (!empty($whereclause))
{
$whereclause=urldecode($whereclause);
$whereclause=stripslashes($whereclause);
}
extract($HTTP_POST_VARS);
if (!empty($Price))
{
if(empty($whereclause))
{
$whereclause.="Price$Price";
}
else
{
$whereclause.=" AND 'Price $Price";
}
}
if (!empty($Area))
{
if(empty($whereclause))
{
$whereclause.="Area LIKE '$Area'";
}
else
{
$whereclause.=" AND Area LIKE '$Area'";
}
}
if (!empty($MLS_Number))
{
if(empty($whereclause))
{
$whereclause.="MLS_Number LIKE
'$MLS_Number'";
}
else
{
$whereclause.=" AND MLS_Number LIKE
'$MLS_Number'";
}
}
if (!empty($File_Number))
{
if(empty($whereclause))
{
$whereclause.="File_Number LIKE
'$File_Number'";
}
else
{
$whereclause.=" AND File_Number LIKE
'$File_Number'";
}
}
if (!empty($Description))
{
if(empty($whereclause))
{
$whereclause.="Description LIKE
'%$Description%'";
}
else
{
$whereclause.=" AND Description LIKE
'%$Description%'";
}
}
$query="SELECT
lid,Price,Address,Area,Description,File_Number,Realtor_First_name FROM
listings LEFT JOIN areas ON (listings.aid=areas.aid) LEFT JOIN realtors ON
(listings.rid1=realtors.rid) LEFT JOIN prop_types ON
(listings.ptid=prop_types.ptid) LEFT JOIN prop_styles ON
(listings.psid=prop_styles.psid) WHERE $whereclause order by Price ASC";
#echo "$querybr";
if(empty($whereclause))
{
echo"centerh2You Did Not Specify Anything To Search
For!/h2br
a href=\"javascript:history.back()\"Back/a/center";
}
else
{
$results=$CONNECTION-Execute("$query") or
DIE($CONNECTION-ErrorMsg());
$results__numRows=0;
$results__totalRows=$results-RecordCount();
echo $results-Fields("aid");
echo "$querybrbr";
while ($results__numRows$results__totalRows)
{
#SNIP Display stuff
$results__numRows++;
$results-MoveNext();
}
$results-Close();
}
It Just became apparent that I am going to need to add a whole bunch more
search criteria.. Does anyone have any advice/suggestions for getting rid of
all those if statements?
JD
--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
[PHP-DB] nested ifs?
Before I delete something from the database, I need to make sure that there
is only one entry, and not multiple ones. I can't do this via the database
itself, because of the need for multiple entries that bear different names,
but the same primary key (which I have since removed). I can't add names
as a part of the primary key-- they're used often because someone will
order multiple necessities on the same days and with the same order
number. Here's the problem since I'm forced into doing this in code,
how do I make a nested if that works or is it even possible???
This is the code that I have so far (please note, it is within a
function)... any ideas of how I can make it work?
$not_del = "SELECT FROM Orders WHERE req like '" . $GLOBALS["old_req"] . "'
AND source like '" . $GLOBALS["old_src"] . "' AND number = " .
$GLOBALS["old_num"];
$del = "DELETE FROM Orders WHERE req like '" . $GLOBALS["old_req"] . "' AND
source like '" . $GLOBALS["old_src"] . "' AND number = " . $GLOBALS["old_num"];
if (mysql_num_rows($not_del) != 1) {
$message .= "Multiple entries. Delete NOT allowed.";
} elseif (mysql_num_rows($not_del) == 1) {
if (mysql_query($del)) {
$message .= "Remove OK.";
} else {
$message .= "Remove NOT.";
}
}
return urlencode($message);
Thanks,
Liz
--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP-DB] mysql -- Commercial DBs, When will I need to upgrade?
Your DB needs sound more hardware intensive than anything. Your queries sound simple and I would bet you would never need to use anything but mysql. Also keep in mind that mysql/php/apache etc run on more than just PC's. There is some serious hardware out there that can handle unbelieveable amounts of trafficof course non of it is intel based :) If an Intel box can no longer handle the load, you can split your servers so you have one running a web server and another handling the DB, or simply move to some real hardware. (ie HP/Sun/IBM unix boxes). Larry H. Doug Schasteen wrote: I've been programming PHP w/ mysql for almost 2 years now for my company. We develop online testing and surveying software. We are currently running operations for a few specific companies where maybe 20-30 tests will be taken online per day (it requires pulling the test questions out of the database in random order, and then putting all of their answers into the database at the end of the test.) This is currently running on a shared webserver using php3 and mysql. Recently we've been talking about some projects that will require a lot more use. (Could be 100 people taking a test at once or it could be 1000 people taking a test at once. We don't know yet.) If anyone has had some experience with upgrading as your operations grow, I'd appreciate if you could answer ANY of the following questions: 1. At what point will mysql blow up (how many tests could be taken at once? How many rows of results could be stored in a table before it bogs down?) 2. At what point will we need a dedicated server instead of shared-hosting? 3. How fast of a server do we need? Will a 1ghz server outperform a 500mhz server when using apache-php-mysql? 4. If we need a new database, what is the next step above mysql? I have some experience with Oracle but it is too expensive. Is there anything inbetween that is friendly to PHP? 5. If MS-SQL is an option for a database-upgrade. What are the implications of switching our server to a win32-based server? Will we have problems with PHP on windows when all of our scripts were programmed for unix? I realize these are a lot of questions and that we probably need some consulting work done, but if any of you could share your knowledge on any one of those topics I would really appreciate it. I just need something to give me a head start in my research. Point me in the right direction! - Doug Schasteen [EMAIL PROTECTED] P.S. - if you know of any good articles online that compare different servers or databases please share. -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
RE: [PHP-DB] PHP On Linux
Try this: http://www.devshed.com/Server_Side/PHP/SoothinglySeamless/ Randy Rankin Ben Cairns wrote: I have nearly 18 Months devel on Windows, but we are now moving to Linux, I have never installed PHP On Linux before, so could someone pls give me an 'Installation Guide' to follow for PHP With MySQL Support, on Linux, Also, I would like to know what I have to do with MySQL: You know, what files go where etc... Thanks. -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED] -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP-DB] PHP On Linux
Much of the "how to" will depend on the linux you go with. For example, on red hat 7 its all there and installable via RPM's so many of the tutorials on setting it up dont apply unless you dont use the available RPMs and you install via source. If your new to Linux, you may want to just find one that does the install for you and then you dont really have to worry about it. One of the biggest obstacles to overcome comming from a windows environment is making sure your hardware is fully supported. Some devices can make installing linux a pain. Most linux distributions will have hardware compatability lists as well. Larry H Ben Cairns wrote: I have nearly 18 Months devel on Windows, but we are now moving to Linux, I have never installed PHP On Linux before, so could someone pls give me an 'Installation Guide' to follow for PHP With MySQL Support, on Linux, Also, I would like to know what I have to do with MySQL: You know, what files go where etc... Thanks. -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP-DB] Advice On Building Dynamic MySQL Queries
Thanks for the replies :)
Victor's suggestion put me on the right track. (I still have trouble with
language constructs)
Heres what I have now.. All I need to do is name my form fields with the
same name as the column names from the mysql table, and presto! now I can
just add/remove from the search form without changing the code. (I hope.. It
has worked so far).
while (list ($key, $val) = each ($HTTP_POST_VARS))
{
if (!is_int($key) $key!="Submit" $key!="submit"
$key!="offset")
{
if (!empty($val))
{
if (!empty($whereclause))
{
if($key=="Price")
{
$whereclause.=" AND Price$val";
}else{
$whereclause.=" AND $key='$val'";
}
}
else
{
if($key=="Price")
{
$whereclause.=" Price$val";
}else{
$whereclause.=" $key='$val'";
}
}
}
}
}
Thnaks
JD
--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
[PHP-DB] Treelike data: adjacency list or nested sets?
Hello, I'm developing a system (with PHP-MySQL) in which I will have different articles published. Any given article can correspond to a category (or sub-category (or sub-sub-category)). Something like this: Cat 1 Sub 1.1 Sub-Sub 1.1.1 Sub-Sub 1.1.2 Sub 1.2 Sub 1.3 Cat 2 Sub 2.1 Sub 2.2 Sub-Sub 2.2.1 Sub-Sub 2.2.2 [etc] As per my research on this topic of publishing 'treelike information', there are two posibilities: a) Adjacency list id | parent | label 1 0 Cat 1 2 1 Sub 1.1 3 2 Sub 1.1.1 [so on...] b) Nested sets (as explained in the book JOE CELKO'S SQL FOR SMARTIES (Morgan-Kaufmann, 1999, second edition), that I don't have...) label | lft | rgt Cat 11 12 Sub 1.1 27 Sub 1.1.1 3 4 Sub 1.1.2 5 6 Sub 1.2 8 9 Sub 1.3 10 11 [so on...] Anybody is doing something like this that can share experience with us? I can not find a clue yet if one system is better than the other for what I need. I realized that the 'Nested Sets' system have a very good approach and is very easy to get all the sub (and sub-sub) categories on a given category (any record where lft is between lft and rgt: SELECT e1.* FROM example as e1, example as e2 WHERE e1.lft BETWEEN e2.lft AND e2.rgt AND e2.label = 'Cat 1'; ) But I'm having problems trying to find -as example- which are all the Categories (in the other system are all the records where parent = 0)... Any ideas? Regards, Tomas Garcia Ferrari Bigital http://bigital.com -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP-DB] Treelike data: adjacency list or nested sets?
I almost always use "adjacency lists" along with another table for the actual categorization of the info (in your case, published articles). I find the "nested sets" design limiting unless you have complete foreknowledge of your tree/categories when initially populating the table. If you have to modify the tree/categories later on, it can get hairy. Doug At 02:40 PM 4/20/01 +0200, Toms GarcY+0=a Ferrari wrote: Hello, I'm developing a system (with PHP-MySQL) in which I will have different articles published. Any given article can correspond to a category (or sub-category (or sub-sub-category)). Something like this: Cat 1 Sub 1.1 Sub-Sub 1.1.1 Sub-Sub 1.1.2 Sub 1.2 Sub 1.3 Cat 2 Sub 2.1 Sub 2.2 Sub-Sub 2.2.1 Sub-Sub 2.2.2 [etc] As per my research on this topic of publishing 'treelike information', there are two posibilities: a) Adjacency list id | parent | label 1 0 Cat 1 2 1 Sub 1.1 3 2 Sub 1.1.1 [so on...] b) Nested sets (as explained in the book JOE CELKO'S SQL FOR SMARTIES (Morgan-Kaufmann, 1999, second edition), that I don't have...) label | lft | rgt Cat 11 12 Sub 1.1 27 Sub 1.1.1 3 4 Sub 1.1.2 5 6 Sub 1.2 8 9 Sub 1.3 10 11 [so on...] Anybody is doing something like this that can share experience with us? I can not find a clue yet if one system is better than the other for what I need. I realized that the 'Nested Sets' system have a very good approach and is very easy to get all the sub (and sub-sub) categories on a given category (any record where lft is between lft and rgt: SELECT e1.* FROM example as e1, example as e2 WHERE e1.lft BETWEEN e2.lft AND e2.rgt AND e2.label = 'Cat 1'; ) But I'm having problems trying to find -as example- which are all the Categories (in the other system are all the records where parent = 0)... Any ideas? Regards, Tomas Garcia Ferrari Bigital http://bigital.com -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
[PHP-DB] PHP question needing info
I have a question that I need help with. The question is that how do I execute a script in PHP. __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP-DB] PHP question needing info
*begins dousing Paul S with water before the flames start* -Szii - Original Message - From: Paul S [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, April 20, 2001 3:04 PM Subject: [PHP-DB] PHP question needing info I have a question that I need help with. The question is that how do I execute a script in PHP. __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED] -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
[PHP-DB] New with MySQL 3.23: Commands out of sync error (2nd try)
Resend of previous message. Should I be posting this to a more technical list? - - - - - - - - I have just run into a strange problem that I'm having a hell of a time extricating myself from. Here's the story... Recently, I upgraded to MySQL 3.23.33, mainly to experiment with some of the new transactional capabilities. But a whole chunk of code which had always worked perfectly began failing. After adding evil debug code to display all MySQL error messages, I found that I was getting the following error when trying to retrieve data from a query result: "Commands out of sync; You can't run this command now" I looked up this error on the mysql site, and was taken to this page... http://www.mysql.com/doc/C/o/Commands_out_of_sync.html It mentions the need to use the command mysql_use_result(), but php doesn't support that. I understand that it's on the "to do" list. Does anyone else have experience with this problem? At the moment, it has me completely incapacitated, as moving back to MySQL 3.22 is not an option. The applications in question are seriously heavy with database usage, and can't really be slimmed down. (Another problem which may be related is that I have been getting unpredictable results connecting to the database with mysql_connect and pconnect -- sometimes it fails to connect for no apparent reason (about 1 time in 20, maybe (which is a lot))). Thanks in advance... Alex - - - - - - - - - - - - Alexander Fordyce [EMAIL PROTECTED] -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED] -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
[PHP-DB] wrapped?
I have articles in the db, and use a
wrap = "virtual": on my TEXTAREA
when submitting them. So, my data is
spaced out as I typed it.
Is there a way to display the 'row' as is?
So I want to get what I actually typed.
I tried an str_replace(" " ,"BR", $text), trying to be
sneaky and just add breaks, but, that didn't seem to work
too well.
Any suggestions?
thanks
bryan
[ bryan fitch . programmer . [EMAIL PROTECTED] ]
[PHP-DB] reword my question
How do I execute a shell script in php? I just started to use php and I am learning it on the fly for a project. __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
[PHP-DB] forget it
I found out that the PRE tag works sorry for the stupid question [ bryan fitch . programmer . [EMAIL PROTECTED] ]
RE: [PHP-DB] forget it
No problem... the other approach, along the lines of what you tried the first time, is to render the line breaks as HTML. PHP has a function to do that nicely... nl2br($str). -alex -Original Message- From: bryan [mailto:[EMAIL PROTECTED]] Sent: Friday, April 20, 2001 5:23 PM To: db Subject: [PHP-DB] forget it I found out that the PRE tag works sorry for the stupid question [ bryan fitch . programmer . [EMAIL PROTECTED] ] -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
[PHP-DB] calling a column into a popup
I'm creating a database where I'd like to relate a company name field to all the field in the database (mysql). what i'm trying to do is have a field pop up with all the current company names in a pop up list on a browser. so, for example, using a form i can enter all the data for a company including name, address, etc. what i'm trying to do is have a popup for the company so if the information is already entered it is there for selection or the person can enter a new company if it's not there. any ideas? thanks, beckie -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP-DB] reword my question
Read The Fine Manual? exec(); -Szii - Original Message - From: Paul S [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, April 20, 2001 4:13 PM Subject: [PHP-DB] reword my question How do I execute a shell script in php? I just started to use php and I am learning it on the fly for a project. __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED] -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
RE: [PHP-DB] reword my question
Compile a cgi binary by leaving out the --with-apache directive, then you can use that to execute scripts from the command line and elsewhere. There's a good article about this at... http://www.phpbuilder.com/columns/darrell2319.php3 Have fun... alex -Original Message- From: Paul S [mailto:[EMAIL PROTECTED]] Sent: Friday, April 20, 2001 4:14 PM To: [EMAIL PROTECTED] Subject: [PHP-DB] reword my question How do I execute a shell script in php? I just started to use php and I am learning it on the fly for a project. __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED] -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
