[PHP] Re: php and ssl
Schalk schrieb:
Greetings All,
I am currently implementing a form for a client that will run over
https. Now, all is good and well except, for some reason when the form
loads in IE the lock in the status bar displays for a short while and
then goes away, it is fine in Firefox though. The way I have the form
coded is something like this:
?php
// Handle POST method.
if ($_POST)
{ $name =
$_POST['name'];
$street_address = $_POST['street_address'];
$to = 'address';
$subject = subject;
$headers = MIME-Version: 1.0\r\n.
Content-type: text/html; charset=iso-8859-1\r\n.
From: .$name.\r\n.
Reply-to: .$email.\r\n.
Date: .date(r).\r\n;
// Compose message:
$message = message;
// Send message
mail($to, $subject, $message, $headers);
// Thank the generous user
echo h1Thank You!/h1;
}
else {
?
form name=donation_eng action=?php echo $_SERVER['PHP_SELF']; ?
method=post
fieldset
legendFill in your details/legend
table cellspacing=0 cellpadding=0 class=form-container
tr
td colspan=2
label for=nameName:
input name=name type=text id=name tabindex=1 size=35
maxlength=150 /
/label
/td /tr
/table
/fieldset
/form
?php
}
?
The page in question is here: https://www.epda.cc/donation_eng.php
Is there any reason why coding the form like this will cause IE to think
that the form is not secure and not loaded over https? Thank you in
advance!
Since you load it framewise. is there probably a problem with the loaded
frames?
It has nothing to do with PHP though.
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: php and ssl
Barry wrote: Schalk schrieb: Greetings All, I am currently implementing a form for a client that will run over https. Now, all is good and well except, for some reason when the form loads in IE the lock in the status bar displays for a short while and then goes away, it is fine in Firefox though. The way I have the form coded is something like this: The page in question is here: https://www.epda.cc/donation_eng.php Is there any reason why coding the form like this will cause IE to think that the form is not secure and not loaded over https? Thank you in advance! Since you load it framewise. is there probably a problem with the loaded frames? It has nothing to do with PHP though. Barry, Not sure what you mean by frames If you look at the HTML source there are no frames in there. Do you mean the fieldset? -- Kind Regards Schalk Neethling Web Developer.Designer.Programmer.President Volume4.Business.Solution.Developers emotionalize.conceptualize.visualize.realize Landlines Tel: +27125468436 US Tel: (440) 499-5484 Fax: +27125468436 Web email:[EMAIL PROTECTED] Global: www.volume4.com Messenger Yahoo!: v_olume4 AOL: v0lume4 MSN: [EMAIL PROTECTED] We support OpenSource Get Firefox!- The browser reloaded - http://www.mozilla.org/products/firefox/ The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error, please contact the sender and please delete all traces of this material from all devices. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: php and ssl
Schalk Neethling wrote: Barry wrote: Schalk schrieb: Greetings All, I am currently implementing a form for a client that will run over https. Now, all is good and well except, for some reason when the form loads in IE the lock in the status bar displays for a short while and then goes away, it is fine in Firefox though. The way I have the form coded is something like this: The page in question is here: https://www.epda.cc/donation_eng.php Is there any reason why coding the form like this will cause IE to think that the form is not secure and not loaded over https? Thank you in advance! Since you load it framewise. is there probably a problem with the loaded frames? It has nothing to do with PHP though. Barry, Not sure what you mean by frames If you look at the HTML source there are no frames in there. Do you mean the fieldset? Has anyone been able to see what might be causing the problem in IE? I am really stumped :( It may even be something simple but, I cannot see why the way the form is coded will cause this problem. Any thoughts on this will be much appreciated. Thanks! -- Kind Regards Schalk Neethling Web Developer.Designer.Programmer.President Volume4.Business.Solution.Developers -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Re: PHP and SSL Path Reference
In response to your first problem:
As long as allow_url_fopen is enabled in php.ini, you can use HTTP and FTP
URLs with most of the functions that take a filename as a parameter. In
addition, URLs can be used with the include(), include_once(), require() and
require_once() statements.
http://us3.php.net/manual/en/features.remote-files.php
--
Matt Grimm
Web Developer
The Health TV Channel, Inc.
(a non - profit organization)
3820 Lake Otis Parkway
Anchorage, AK 99508
907.770.6200 ext. 686
907.336.6205 (fax)
E-mail: [EMAIL PROTECTED]
Web: www.healthtvchannel.org
D.H. [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
PROBLEM 1
I am trying to implement SSL with PHP. When trying to use the include()
function
to insert an external PHP file, I am only able to make it work in the
local
directory
and without SSL.
I believe the following calls to external files should be correct;
however, the include function is not successfull with the complete
URL.
Example
include ('test.php'); works fine
include ('http://www.myURL.com/mySubdirectory/test.php');
does not work.
RELATED PROBLEM 2
When emplementing the SSL I am using my IP's certificate. Using their
certificate, I can
establish an SSL connection directly...ie.
https://www.myIPDomain.com/myLoginID/mySubdirectories/test.php
inserted into my browser establishes an SSL connection and the php test
script works fine.
When I reference this test script from another PHP script using the
include() or require() function, the
script does display the contents of the reference. The code is as
follows:
File 1 with external reference:
https://www.myIPDomain.com/myLoginID/mySubdirectories/testinclude.php
File 1 Contents:
?PHP
echo Following should be the display of the Test File;
include
'https://wwwmyIPDomain.com/myLoginID/mySubdirectories/testinclude.php;;
?
File2 (file I am trying to include):
https://www.myIPDomain.com/myLoginID/mySubdirectories/test.php
Contents:
?PHP
echo bbrbrThis is the contents of the Test PHP Fileb;
?
When I call File 1, I can only get the following output:
Following should be the display of the Test File
I think it is a matter of relative vs absolute references...but not sure.
Using the following setup
Hardware -- SunOS www1 5.7 Generic_106541-12 sun4u
Apache ver 1.3.26
PHP ver 4.3.1
Any suggestions are appreciated...
Regards,
D.H.
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Re: PHP and SSL Path Reference
Hello,
On 12/29/2003 06:37 PM, D.H. wrote:
PROBLEM 1
I am trying to implement SSL with PHP. When trying to use the include()
function
to insert an external PHP file, I am only able to make it work in the local
directory
and without SSL.
I believe the following calls to external files should be correct;
however, the include function is not successfull with the complete
URL.
Example
include ('test.php'); works fine
include ('http://www.myURL.com/mySubdirectory/test.php');
does not work.
I am not sure why you want to do this because it is very slow. Anyway,
if you do not allow to open remote URL files in your configuration file
php.ini, that may be the reason.
You may also want to this HTTP client class that can work if you have
configuration restrictons. It lets you retrieve pages with either http
or https URLs.
http://www.phpclasses.org/httpclient
RELATED PROBLEM 2
When emplementing the SSL I am using my IP's certificate. Using their
certificate, I can
establish an SSL connection directly...ie.
https://www.myIPDomain.com/myLoginID/mySubdirectories/test.php
inserted into my browser establishes an SSL connection and the php test
script works fine.
When I reference this test script from another PHP script using the
include() or require() function, the
script does display the contents of the reference. The code is as follows:
File 1 with external reference:
https://www.myIPDomain.com/myLoginID/mySubdirectories/testinclude.php
File 1 Contents:
?PHP
echo Following should be the display of the Test File;
include
'https://wwwmyIPDomain.com/myLoginID/mySubdirectories/testinclude.php;;
?
File2 (file I am trying to include):
https://www.myIPDomain.com/myLoginID/mySubdirectories/test.php
Contents:
?PHP
echo bbrbrThis is the contents of the Test PHP Fileb;
?
When I call File 1, I can only get the following output:
Following should be the display of the Test File
I think it is a matter of relative vs absolute references...but not sure.
I think you are confused. When you ask for remote data that way, you
will get the contents of the page that is generated by that script, not
the script itself. If you could do what you want that way, anybody could
steal the PHP source code of all sites.
OTOH, if you have PHP script source code retrieval support enabled, you
can try what you want asking for this url (notice phps extension), but
you have to enable support in your server.
https://www.myIPDomain.com/myLoginID/mySubdirectories/test.phps
--
Regards,
Manuel Lemos
Free ready to use OOP components written in PHP
http://www.phpclasses.org/
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Re: [PHP-WIN] SSL Support for PHP....
On Friday, June 14, 2002, 9:13:59 AM, Brian McGarvie wrote: How does IIS fair against Apache with servring multiple sites? each site will be like... http://customername.ourdomain.co.uk Both are capable of serving multiple sites without any issues that I am aware of. Also - more an IIS/Apache Q, how do you configure the above to work in both IIS and Apache? In IIS you set the host header for the site when you set the IP for the site. In Apache you use the NameVirtualHost directive. See the MSIIS and Apache docs for more detailed instructions. We arenot using ASP - yet, but might do at a later date... can IIS and Apache live together? if so how would you confirue a site who's PHP is served with Apache and ASP with IIS. IIS and Apache can live together happily. You have to disable connection pooling for IIS (can't remember how - there is a knowledge-base article on the MS site that gives full details). Why would you want to have Apache serve PHP and IIS serve ASP for the same site? Why not just have IIS do both? SSL Certificates... how do they work on Apache? IIS is a simple Wizard, I've not had to set SSL up before. Dunno, never used SSL with Apache. Sorry. I hope that helps. -- Stuart -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] RE: [PHP-WIN] SSL Support for PHP....
Basically then there is no real reason for Apache over IIS on win2k server? I am the admin of the Webservers, but the overall network manager would like to keep it MS-centric just because all the rest is. With our leased line we aqquired 16 ips, so in the IIS config I would just use that IP and keep it port 80? (I will read the manual, I will read the manual, I will read the manual!) SSL is a must for a few of the 'sites' that will be getting ran. As for ASP *shudder* I personally don't plan on using it, tho I might experiment with asp.net but thats a by-the-by. I'm kinda trying to verify that using IIS with PHP isapi module is as secure as Apache? Heres a strange one tho jist on the side: I installed Apache2/PHP on my own machine (used for writing code etc) and copied the application to an apache location, and ran it, but... there is supposedly files missing according to apache, all is as on the other machine - files/code wise. One last item I need some advise with... is IIS able to handle LOTS of sites accross multiple servers? as we have lots of clients so in the future will possibly need a machine to load-balance etc and seperate database serving machines - databases primarily MsSQL/Access/MySQL. Btw, thanks Stuart, thats kinda making me feel easier about keeping it IIS. -Original Message- From: Stuart Dallas [mailto:[EMAIL PROTECTED]] Sent: 14 June 2002 10:52 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [PHP-WIN] SSL Support for PHP On Friday, June 14, 2002, 9:13:59 AM, Brian McGarvie wrote: How does IIS fair against Apache with servring multiple sites? each site will be like... http://customername.ourdomain.co.uk Both are capable of serving multiple sites without any issues that I am aware of. Also - more an IIS/Apache Q, how do you configure the above to work in both IIS and Apache? In IIS you set the host header for the site when you set the IP for the site. In Apache you use the NameVirtualHost directive. See the MSIIS and Apache docs for more detailed instructions. We arenot using ASP - yet, but might do at a later date... can IIS and Apache live together? if so how would you confirue a site who's PHP is served with Apache and ASP with IIS. IIS and Apache can live together happily. You have to disable connection pooling for IIS (can't remember how - there is a knowledge-base article on the MS site that gives full details). Why would you want to have Apache serve PHP and IIS serve ASP for the same site? Why not just have IIS do both? SSL Certificates... how do they work on Apache? IIS is a simple Wizard, I've not had to set SSL up before. Dunno, never used SSL with Apache. Sorry. I hope that helps. -- Stuart -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Re: [PHP-WIN] SSL Support for PHP....
On Friday, June 14, 2002, 11:07:24 AM, Brian McGarvie wrote: Basically then there is no real reason for Apache over IIS on win2k server? Not now Apache 2 is here. Apache 1.x has always been considered by the Apache group as beta code and therefore not suitable for use in a production environment. I have been using Apache 2 for development on Win2k since it was first released to the public and I will upgrade my public server as soon as PHP releases a production version of their module. I have IIS on the same server and have never had a problem with them co-existing. With our leased line we aqquired 16 ips, so in the IIS config I would just use that IP and keep it port 80? In the site configuration, click on the Advanced... button next to the IP address. Make sure that each entry has the IP address, port 80 and the host header set to the site domain name. (I will read the manual, I will read the manual, I will read the manual!) A very good idea ;o) SSL is a must for a few of the 'sites' that will be getting ran. As I said, I have not experience with SSL on Apache, but on IIS it is as simple as following a wizard. I'm kinda trying to verify that using IIS with PHP isapi module is as secure as Apache? A web server is only as secure as it's administrator is anal. I personally believe that IIS on Win2k can be made as secure as Apache on any platform, but not a lot of people agree with that. As for how secure PHP is, most of that will depend on the scripts rather than the server/PHP interface you're using. Heres a strange one tho jist on the side: I installed Apache2/PHP on my own machine (used for writing code etc) and copied the application to an apache location, and ran it, but... there is supposedly files missing according to apache, all is as on the other machine - files/code wise. What files did it say were missing? Were they scripts, modules, what? One last item I need some advise with... is IIS able to handle LOTS of sites accross multiple servers? as we have lots of clients so in the future will possibly need a machine to load-balance etc and seperate database serving machines - databases primarily MsSQL/Access/MySQL. Again, here is where my experience falls short. I have not yet had a chance to be involved in a load-balanced project. However, I would expect that there would be little difference whether you implement it using IIS or Apache. Btw, thanks Stuart, thats kinda making me feel easier about keeping it IIS. No problem. Don't get me wrong, I think the ?AMP combination (Linux/FreeBSD/etc, Apache, MySQL and PHP) is unbeatable as a server platform, but I strongly believe that, done properly, IIS on Win2k is still a strong platform. The problem is that MS have (purposefully) made IIS accessible to the average PC user which I think is one of the main reasons that it has *that* reputation. -- Stuart -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
