php-general Digest 29 Jul 2002 03:02:09 -0000 Issue 1492

Topics (messages 110052 through 110080):

Re: Extra spacing with <br> in HTML
        110052 by: Kevin Breit

Re: Help reg. create user and allocate space
        110053 by: Tech Support
        110060 by: Jason Wong

Re: Speed issues.
        110054 by: John Holmes
        110064 by: Yves Vrancken

Re: php 'mail()' security
        110055 by: Tech Support
        110056 by: John Holmes
        110062 by: Bob Lockie
        110066 by: Tech Support
        110072 by: Dennis Gearon

Re: running php with .html files?
        110057 by: Henry
        110063 by: Peter
        110067 by: Peter Janett

Re: PHP/MySQL Search Engine Query Question
        110058 by: Tech Support

Oracle 8i SQL Problem..
        110059 by: Frank S. Kicenko

Re: need help reg. User Accounts
        110061 by: Bob Lockie

REGEX for credit card number
        110065 by: Mike Mannakee

REGEX for phone #
        110068 by: Mike Mannakee

need help with uploading images
        110069 by: Deadsam
        110071 by: Oscar F
        110073 by: Deadsam

Adding slashes when magic quotes is off?
        110070 by: Leif K-Brooks

Re: How do I show the sourse code?
        110074 by: David Robley

David Steculorum/MIS/XLGroup is out of the office.
        110075 by: DSteculorum.xlserv.com

sessions and https
        110076 by: Mike Mannakee
        110077 by: Oscar F
        110078 by: Tom Rogers
        110079 by: Mike Mannakee

Logging out with authentication
        110080 by: Ray Todd Stevens

Administrivia:

To subscribe to the digest, e-mail:
        [EMAIL PROTECTED]

To unsubscribe from the digest, e-mail:
        [EMAIL PROTECTED]

To post to the list, e-mail:
        [EMAIL PROTECTED]


----------------------------------------------------------------------
--- Begin Message ---
On Sun, 2002-07-28 at 10:14, Justin French wrote:
> on 29/07/02 12:02 AM, Kevin Breit ([EMAIL PROTECTED]) wrote:
> 
> >> Aaaannny way, you can't modify WHAT php does in nl2br, but you can do
> >> something to the resulting code, like replacing "</li><br />" with "</li>":
> >> 
> >> <?
> >> $original = "<ul><li>Blar</li></ul>";
> >> $new = nl2br($original);
> >> $new = str_replace('</li><br />', '</li>', $new);
> >> ?>
> > 
> > Hmmm..you've got it backwards, but I see what you mean.  I'll tool
> > around with it tonight.
> 
> I don't think I did....
> 
> Manual Quote:
> 
> Description
> mixed str_replace ( mixed search, mixed replace, mixed subject)
> 
> So, we search for </li><br /> (the problem being the unnecessary <br />, and
> replace it with </li>.
> 
> Unless I'm misunderstanding the question/problem.
Oh wait, you're right!

Kevin
-- 
Kevin Breit <[EMAIL PROTECTED]>

--- End Message ---
--- Begin Message ---
Are you asking us how to write an entire online community program???

Jim Grill
Support
Web-1 Hosting
http://www.web-1hosting.net
----- Original Message -----
From: "umesh" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, July 28, 2002 6:40 AM
Subject: [PHP] Help reg. create user and allocate space


> Hi Gurus,
>
> I am using PHP-4.1.1, postgresql on Linux.
>
> I want the following functionality, I dont know how to implement it.
>
> Each time a new user registeres, I want to create mail account by the name
> he specifies and allocate him some space of the server, say 2mb.
>
> How this is incorporated ?
>
> Please help.
>
> Thanking you all in anticipation.
>
>
> Regards
>
> Umesh.
> *****************************
> Umesh A. Deshmukh.
> Manas Solutions Pvt. Ltd.
> [EMAIL PROTECTED]
> http://www.manas-solutions.com
> Ph. : 91+020+4006358,4223991/92
> *****************************
>
--- End Message ---
--- Begin Message ---
On Sunday 28 July 2002 19:40, umesh wrote:
> Hi Gurus,
>
> I am using PHP-4.1.1, postgresql on Linux.
>
> I want the following functionality, I dont know how to implement it.
>
> Each time a new user registeres, I want to create mail account by the name
> he specifies and allocate him some space of the server, say 2mb.
>
> How this is incorporated ?

  Manual -> Program Execution functions

These functions would allow PHP to call any system command or program. How you 
actually create the mail account and set quotas has nothing at all to do with 
PHP.

-- 
Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *

/*
Radial Telemetry Infiltration
*/
--- End Message ---
--- Begin Message ---
> I am new to PHP and trying to implement some PHP and MySQL on my
website.
> My
> website has a lot of tables and inside some of those tables, I want to
> display information that is drawn out of the MySQL database using PHP.
I
> was
> wondering what goes faster:
> 
> (A). Building the whole page normally up in HTML, doing the usual
<table>
> <td> and so forth, and then inside the <td> calling up the PHP in
order to
> display the information. For example: <td> <?php ...... ?> </td>
> 
> (B). Doing everything in the PHP document, also the 'building' of the
> tables, and then including the PHP script in the main page. For
example
> using printf("<tr><td>  and so forth.

(A) will be faster, generally. Plus it's easier to read and find the PHP
snippets in the HTML, than it is to read an entire page of print/echo
statements. And it'll generally open neatly in a graphical HTML editor,
too.

---John Holmes...

--- End Message ---
--- Begin Message ---
Thanks for the help, guys . I appreciate it. And Bas, thanks for that link.
Interesting material for a novice PHP-user as myself.

Yves Vrancken


--- End Message ---
--- Begin Message ---
There is no substitute for good data verification such as strip_tags() or
some regular expressions to limit valid input. I also would recomend
checking the referrer to be sure someone doesn't hijack you form and try to
modify it and submit it from a remote location. Here is an example:

if (validReferrer() === false)
 die("invalid referrer");

function validReferrer()
{
 $_valid_referrers =
array("www.yoursite.com","www2.yoursite.com","yoursite.com");
 $referer = str_replace('//', '/', $_SERVER['HTTP_REFERER']);
 $ref = explode('/', $referer);
 if ( in_array($ref[1], $_valid_referrers) )
  return true;
 else
  return false;
}

Jim Grill
Support
Web-1 Hosting
http://www.web-1hosting.net
----- Original Message -----
From: "Dennis Gearon" <[EMAIL PROTECTED]>
To: "Bob Lockie" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Saturday, July 27, 2002 10:54 PM
Subject: Re: [PHP] php 'mail()' security


> What I meant was, how to sanitize the input on the forms so that
> malicious stuff cannot be put as commands, etc. in the email address, or
> body, or 'extra' field of the 'mail()' function in PHP.
> --
> -----------------------------------------------------------------
> Joy is just a thing (to be).. raised on,
> Love is just the way to Live and Die,
> John Denver.
> -----------------------------------------------------------------
> He lost a friend, but kept his Memory (also John Denver),
> Thank you...John Corones...my friend always.
> -----------------------------------------------------------------
> Look lovingly upon the present,
> for it holds the only things that are forever true.
> -----------------------------------------------------------------
> Sincerely, Dennis Gearon (Kegley)
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
>


--- End Message ---
--- Begin Message ---
HTTP_REFERRER can be spoofed quite easily with some browsers. 

The best way to handle this is to provide as much of your own data as
possible, and validate anything you do end up using from the user.

For instance, use your own subject, make sure the To: address comes from
you (a file or database, whatever), etc... Make sure anything coming
from the user, that you put into the headers, subject, from, reply-to,
etc... do not have any line breaks. A simple str_replace or something to
remove them, or pop up an error if they are there, will work.

The less user data you can use the better. It gives them less of a
chance to insert extra headers, which is pretty much the only threat. If
there's a possibility of the email not being shown as plain text, then
you'll want to use striptags() like others mentioned. 

---John Holmes...

> -----Original Message-----
> From: Tech Support [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, July 28, 2002 10:57 AM
> To: Dennis Gearon; Bob Lockie
> Cc: [EMAIL PROTECTED]
> Subject: Re: [PHP] php 'mail()' security
> 
> There is no substitute for good data verification such as strip_tags()
or
> some regular expressions to limit valid input. I also would recomend
> checking the referrer to be sure someone doesn't hijack you form and
try
> to
> modify it and submit it from a remote location. Here is an example:
> 
> if (validReferrer() === false)
>  die("invalid referrer");
> 
> function validReferrer()
> {
>  $_valid_referrers =
> array("www.yoursite.com","www2.yoursite.com","yoursite.com");
>  $referer = str_replace('//', '/', $_SERVER['HTTP_REFERER']);
>  $ref = explode('/', $referer);
>  if ( in_array($ref[1], $_valid_referrers) )
>   return true;
>  else
>   return false;
> }
> 
> Jim Grill
> Support
> Web-1 Hosting
> http://www.web-1hosting.net
> ----- Original Message -----
> From: "Dennis Gearon" <[EMAIL PROTECTED]>
> To: "Bob Lockie" <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Saturday, July 27, 2002 10:54 PM
> Subject: Re: [PHP] php 'mail()' security
> 
> 
> > What I meant was, how to sanitize the input on the forms so that
> > malicious stuff cannot be put as commands, etc. in the email
address, or
> > body, or 'extra' field of the 'mail()' function in PHP.
> > --
> > -----------------------------------------------------------------
> > Joy is just a thing (to be).. raised on,
> > Love is just the way to Live and Die,
> > John Denver.
> > -----------------------------------------------------------------
> > He lost a friend, but kept his Memory (also John Denver),
> > Thank you...John Corones...my friend always.
> > -----------------------------------------------------------------
> > Look lovingly upon the present,
> > for it holds the only things that are forever true.
> > -----------------------------------------------------------------
> > Sincerely, Dennis Gearon (Kegley)
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, visit: http://www.php.net/unsub.php
> >
> >
> >
> 
> 
> 
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php

--- End Message ---
--- Begin Message ---

>There is no substitute for good data verification such as strip_tags() or
>some regular expressions to limit valid input. I also would recomend
>checking the referrer to be sure someone doesn't hijack you form and try to
>modify it and submit it from a remote location. Here is an example:
>
>if (validReferrer() === false)
> die("invalid referrer");
>
>function validReferrer()
>{
> $_valid_referrers =
>array("www.yoursite.com","www2.yoursite.com","yoursite.com");
> $referer = str_replace('//', '/', $_SERVER['HTTP_REFERER']);
> $ref = explode('/', $referer);
> if ( in_array($ref[1], $_valid_referrers) )
>  return true;
> else
>  return false;
>}

That is a good idea.
$_SERVER['HTTP_REFERER'] is the web server identifier, right?
My web server is 10.0.0.5 from the internal LAN.
I am hesitant to allow HTTP_REFERERs from 10.0.0.5 because it seems to me that it 
would be easy enough to configure a strange box
to imitate 10.0.0.5.
Can I somehow check that the HTTP_REFERER = localhost?



--- End Message ---
--- Begin Message ---
I think you are looking for something different.

do this:

print "<pre>";
print_r($_SERVER);
print "</pre>";

You will see a whole bunch of useful globals. As a matter of fact, try this
one out too:

print "<pre>";
print_r($GLOBALS);
print "</pre>";

Jim Grill
Support
Web-1 Hosting
http://www.web-1hosting.net
----- Original Message -----
From: "Bob Lockie" <[EMAIL PROTECTED]>
To: "Dennis Gearon" <[EMAIL PROTECTED]>; "Tech Support"
<[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Sunday, July 28, 2002 1:19 PM
Subject: Re: [PHP] php 'mail()' security


>
> >There is no substitute for good data verification such as strip_tags() or
> >some regular expressions to limit valid input. I also would recomend
> >checking the referrer to be sure someone doesn't hijack you form and try
to
> >modify it and submit it from a remote location. Here is an example:
> >
> >if (validReferrer() === false)
> > die("invalid referrer");
> >
> >function validReferrer()
> >{
> > $_valid_referrers =
> >array("www.yoursite.com","www2.yoursite.com","yoursite.com");
> > $referer = str_replace('//', '/', $_SERVER['HTTP_REFERER']);
> > $ref = explode('/', $referer);
> > if ( in_array($ref[1], $_valid_referrers) )
> >  return true;
> > else
> >  return false;
> >}
>
> That is a good idea.
> $_SERVER['HTTP_REFERER'] is the web server identifier, right?
> My web server is 10.0.0.5 from the internal LAN.
> I am hesitant to allow HTTP_REFERERs from 10.0.0.5 because it seems to me
that it would be easy enough to configure a strange box
> to imitate 10.0.0.5.
> Can I somehow check that the HTTP_REFERER = localhost?
>
>
>
>
>


--- End Message ---
--- Begin Message ---
No, but thanks, the other input is more towards what I was looking for.
I want to take in an email address, and various other fields. Then, send
an email using 'mail()' with the other fields as the 'body', and the
email address as the 'reply_to' address, to someone in my company. That
way, they can read the submitted information, and then just hit 'reply'
on their mail program when they want to comment on the material.

"Tech Support" <[EMAIL PROTECTED]> wrote:
> 
> I think you are looking for something different.
> 
> do this:
> 
> print "<pre>";
> print_r($_SERVER);
> print "</pre>";
> 
> You will see a whole bunch of useful globals. As a matter of fact, try this
> one out too:
> 
> print "<pre>";
> print_r($GLOBALS);
> print "</pre>";
> 
> Jim Grill
> Support
> Web-1 Hosting
> http://www.web-1hosting.net
> ----- Original Message -----
> From: "Bob Lockie" <[EMAIL PROTECTED]>
> To: "Dennis Gearon" <[EMAIL PROTECTED]>; "Tech Support"
> <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Sunday, July 28, 2002 1:19 PM
> Subject: Re: [PHP] php 'mail()' security
> 
> >
> > >There is no substitute for good data verification such as strip_tags() or
> > >some regular expressions to limit valid input. I also would recomend
> > >checking the referrer to be sure someone doesn't hijack you form and try
> to
> > >modify it and submit it from a remote location. Here is an example:
> > >
> > >if (validReferrer() === false)
> > > die("invalid referrer");
> > >
> > >function validReferrer()
> > >{
> > > $_valid_referrers =
> > >array("www.yoursite.com","www2.yoursite.com","yoursite.com");
> > > $referer = str_replace('//', '/', $_SERVER['HTTP_REFERER']);
> > > $ref = explode('/', $referer);
> > > if ( in_array($ref[1], $_valid_referrers) )
> > >  return true;
> > > else
> > >  return false;
> > >}
> >
> > That is a good idea.
> > $_SERVER['HTTP_REFERER'] is the web server identifier, right?
> > My web server is 10.0.0.5 from the internal LAN.
> > I am hesitant to allow HTTP_REFERERs from 10.0.0.5 because it seems to me
> that it would be easy enough to configure a strange box
> > to imitate 10.0.0.5.
> > Can I somehow check that the HTTP_REFERER = localhost?
> >
> >
> >
> >
> >

-----------------------------------------------------------------
Joy is just a thing (to be).. raised on,
Love is just the way to Live and Die,
                        John Denver.
-----------------------------------------------------------------
He lost a friend, but kept his Memory (also John Denver),
                        Thank you...John Corones...my friend always.
-----------------------------------------------------------------
Look lovingly upon the present,
for it holds the only things that are forever true.
-----------------------------------------------------------------
                                Sincerely, Dennis Gearon (Kegley)
--- End Message ---
--- Begin Message ---
That did the trick.

Thanks.

Henry

"Michael Sims" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
On Sun, 28 Jul 2002 08:18:40 +0100, you wrote:

>Hi All,
[...]
>I have a php script that I wish to execute but I want to put it in
>index.html (not index.php)
>
>I know there is a solution involving configuration files in either the
>directory wher the file is held or specifically for the server.
>(Unfortunately I don't have access to the conf files for the server because
>I'm currently using a shared serever from an ISP).
[...]

You didn't say what web server you are using, so I will assume it's
Apache.  If your server is configured to allow .htaccess files to
override global settings, you should be able to create one in your
directory and add:

AddType application/x-httpd-php .html


--- End Message ---
--- Begin Message ---
Why can't you just have
<?PHP
at the top of the page and
?>
at the bottom?


"Henry" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi All,
>
> I'm sure I saw a posting on this subject a month ago so please excuse me
for
> not paying attention the first time ;-|
>
> I have a php script that I wish to execute but I want to put it in
> index.html (not index.php)
>
> I know there is a solution involving configuration files in either the
> directory wher the file is held or specifically for the server.
> (Unfortunately I don't have access to the conf files for the server
because
> I'm currently using a shared serever from an ISP).
>
> Any help is greatly appreciated. Even pointers in the right direction
would
> be useful.
>
> TIA
>
> Henry
>
>
>
>
>


--- End Message ---
--- Begin Message ---
You need to append or create a .htaccess file in the same folder as
index.html, and add this line:

<Files "index.html">
ForceType application/x-httpd-php
</Files>

Then, just treat the index.html file as a php file.

HTH,

Peter Janett

New Media One Web Services
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
New Upgrades Are Now Live!!!
Windows 2000 accounts - Cold Fusion 5.0 and Imail 7.1
Sun Solaris (UNIX) accounts - PHP 4.1.2, mod_perl/1.25,
Stronghold/3.0 (Apache/1.3.22), MySQL 3.23.43
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
PostgreSQL coming soon!

http://www.newmediaone.net
[EMAIL PROTECTED]
(303)828-9882

----- Original Message -----
From: "Peter" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, July 28, 2002 1:16 PM
Subject: [PHP] Re: running php with .html files?


> Why can't you just have
> <?PHP
> at the top of the page and
> ?>
> at the bottom?
>
>
> "Henry" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hi All,
> >
> > I'm sure I saw a posting on this subject a month ago so please excuse me
> for
> > not paying attention the first time ;-|
> >
> > I have a php script that I wish to execute but I want to put it in
> > index.html (not index.php)
> >
> > I know there is a solution involving configuration files in either the
> > directory wher the file is held or specifically for the server.
> > (Unfortunately I don't have access to the conf files for the server
> because
> > I'm currently using a shared serever from an ISP).
> >
> > Any help is greatly appreciated. Even pointers in the right direction
> would
> > be useful.
> >
> > TIA
> >
> > Henry
> >
> >
> >
> >
> >
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>


--- End Message ---
--- Begin Message ---
Here is an idea

<?
// make array out of words in search string
$search_array = explode(' ', $search);

// make regexp pattern '.*(this|or|that).*'
$string = ".*(" .  implode('|', $search_array) . ").*";

$query = "SELECT * FROM my_table WHERE body REGEXP '$string'";
$result = mysql_query($query, $connection);
$res = mysql_num_rows($result);
if ($res < 1)
    die("no match for $search");
?>

using this method "car" would match "car", "carwash", "scar", "scarred",
etc.
Since this result will contain the entire boy of text you could some more
matching or scoring for relevancy

<?
while ( $row = mysql_fetch_assoc($result) )
{
   $num = sizeof($search_array);
   for ($i = 0; $i < $num; $i++)
  {
     if ( preg_match("/.*\b$search_array[$i]/i", $row[body]) )
    {
         // it was found so score 25 to start
         $score[$row[page_title_or_something]] += 25;
         $body_size = strlen($row[body]);
         // this is the first case-insensitive occurance of the word
         $temp = @stristr($row[body], "$search_array[$i]");
         $pos = @strlen($row[body])-strlen($temp);
         if ($pos == $body_size)
             $pos = 0;
         // score higher
         $percent = ( ($pos / $body_size * 1000) / 10 );
         $score[$row[page_title_or_something]] += ((100 -
number_format($percent)) / 2);
         // this is the first occurance of the word by it's self
         preg_match("/[^a-z0-9]?($search_array[$i])([^0-9a-z])?/i",
$row[body], $matches);
         $temp = @stristr($row[body], trim($matches[0]));
         $pos_clean = @strlen($row[body])-strlen($temp);
         if ($pos_clean == $body_size)
             $pos_clean = 0;
         // score higher
         $percent = ( ($pos_clean / $body_size * 1000) / 10 );
         $score[$row[page_title_or_something]] += (100 -
number_format($percent));
         // this is how many times it occured in total
         $reps = substr_count($row[body], "$search_array[$i]");
         // score higher
         $score[$row[page_title_or_something]] += ($reps * 5);
         // this is how many times it occured by it's self
         $rc = preg_grep("/[^a-z0-9]?($search_array[$i])([^0-9a-z])?/i",
explode(" ", $row[body]) );
         $reps_clean = sizeof($rc);
         // score higher
         $score[$row[page_title_or_something]] += ($reps_clean * 10);
    }
}
?>

I had that code from a previous working project. I copied it and changed
some var names to make it more clear. I did not test it in this format but
it is a good example and you could certainly improve it or build on it.

Jim Grill
Support
Web-1 Hosting
http://www.web-1hosting.net
----- Original Message -----
From: "Paul Maine" <[EMAIL PROTECTED]>
To: "PHP PHP" <[EMAIL PROTECTED]>
Sent: Saturday, July 27, 2002 9:31 PM
Subject: [PHP] PHP/MySQL Search Engine Query Question


> I am currently working on a website that is implemented using PHP and
MySQL.
>
> The site currently has a simple search engine that allows a shopper to
type
> in a search string that is stored in $search. For example, if a shopper
> types in 1972 Ford Mustang
> $string ="1972 Ford Mustang"
>
> Using the following SQL statement:
> SELECT * FROM whatevertable WHERE whatevercolumn LIKE '%$search%
>
> Records are returned that have this exact string and in this exact order
> (I'm aware a wild card character is included on the front and back of the
> string).
>
> My desire is to be able to logically AND each token of the search together
> independent or the order of the tokens.
> I want to return all records that have Mustang AND 1972 AND Ford.
>
> Since a shopper inputs the search string in advance I don't know how many
> tokens will be used.
>
> I would appreciate any suggestions.
>
> Regards,
> Paul
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
>


--- End Message ---
--- Begin Message ---
Hi,
This really isn't a PHP issue..sorry.
 
I'm having a nightmare with Oracle 8i (pos!). I'm writing common SQL
which works for MSSQL 2K and seems correct for Oracle... but keeps
giving me a Error.. ORA-00933 SQL command not properly ended on the
following query...

SELECT grp.grpdescrip, grp.grp, grp.createcust, grp.auth1, grp.auth2,
usergrp.userid, users.userdescrip
                        FROM grp
                        LEFT JOIN usergrp
                        ON grp.grp=usergrp.grp
                        LEFT JOIN users
                        ON usergrp.userid=users.userid
                        ORDER BY grp.grp

The error keeps pointing at the first "LEFT JOIN". Anybody know why?
--- End Message ---
--- Begin Message ---

>Hi Gurus,
>
>I am using PHP-4.1.1 on Linux,
>I wanted to know the difference between "nobody" user and normal user of
>operating system.
>
>This question just came to mind when, neither nobody's directory nor any
>entry was not found in /home or elsewhere.

The web server can be run by any user.
The 'nobody' user is usually used since it has no login capabailities.
'nobody' can't login and hence has no home.
>From the /etc/passwd "obody:x:99:99:Nobody:/:/sbin/nologin".



--- End Message ---
--- Begin Message ---
Does anyone have a regular expression that works to validate credit card
numbers?

Mike


--- End Message ---
--- Begin Message ---
I'm using a regular expression (below) to check phone numbers.  I'm getting
an error that I can't make sense of.

$regex = "^((\(\d{3}(\) -))?*\d{3}(- )\d{4},?*)+$";

Output I'm getting =
Warning: REG_BADRPT in /home/basemen/public_html/verify_order.php on line 28

Anyone know what this means?  I know it's not bitching about the phone
number, it's bitching about the expression.  But why?  Some thing wrong with
the expression?  It works fine in PERL, which this is supposed to be
compatible with.

Mike


--- End Message ---
--- Begin Message ---
I'm trying to get an uploader to work, where you check to make sure it's a
jpeg file that's being uploaded, and no other files allowed. the server is
unix linux using php4.1
Any help would be appreciated.
thanks in advance
deasdam


--- End Message ---
--- Begin Message ---
deadsman,

if (($filename_type != "image/jpeg") && ($filename_type != "image/jpg") &&
($filename_type != "image/pjpeg")) {
header("Location:submitError.php"); exit; //goes to an error page if the
file wasnt a jpg
} else {
 $upload_path = "/path/of/the/$filename_name";
if (is_uploaded_file($filename)) {
 Exec("cp $filename $upload_path");
} else {
   //do whatever if it wasnt uploaded
  }

The "file" formfield, is called filename.. just in case... if you call it
myFile, you'd have to replace $filename with that.

 Hope this helps.

   Oscar.-

----- Original Message -----
From: "Deadsam" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, July 28, 2002 5:53 PM
Subject: [PHP] need help with uploading images


> I'm trying to get an uploader to work, where you check to make sure it's a
> jpeg file that's being uploaded, and no other files allowed. the server is
> unix linux using php4.1
> Any help would be appreciated.
> thanks in advance
> deasdam
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
>

--- End Message ---
--- Begin Message ---
Thanks oscar I'll give this a go, I tried just using filetype != image/jpeg
so mabey adding the rest will help , I read there was a problem with some
browser with uploading hopfully this will solve the problem.
much apprecatied
Deadsam

"Oscar F" <[EMAIL PROTECTED]> wrote in message
002001c23684$fc68ba20$bc00a8c0@320jupiter">news:002001c23684$fc68ba20$bc00a8c0@320jupiter...
> deadsman,
>
> if (($filename_type != "image/jpeg") && ($filename_type != "image/jpg") &&
> ($filename_type != "image/pjpeg")) {
> header("Location:submitError.php"); exit; //goes to an error page if the
> file wasnt a jpg
> } else {
>  $upload_path = "/path/of/the/$filename_name";
> if (is_uploaded_file($filename)) {
>  Exec("cp $filename $upload_path");
> } else {
>    //do whatever if it wasnt uploaded
>   }
>
> The "file" formfield, is called filename.. just in case... if you call it
> myFile, you'd have to replace $filename with that.
>
>  Hope this helps.
>
>    Oscar.-
>
> ----- Original Message -----
> From: "Deadsam" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Sunday, July 28, 2002 5:53 PM
> Subject: [PHP] need help with uploading images
>
>
> > I'm trying to get an uploader to work, where you check to make sure it's
a
> > jpeg file that's being uploaded, and no other files allowed. the server
is
> > unix linux using php4.1
> > Any help would be appreciated.
> > thanks in advance
> > deasdam
> >
> >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, visit: http://www.php.net/unsub.php
> >
> >
> >
>


--- End Message ---
--- Begin Message ---
I'm making a website for a friend, and trying to do everything the right 
way.  I want to add slashes to EGPCS values.  I know how to use this, 
but one of the comments on the get_magic_quotes_gpc entry in the manual 
points out that it wouldn't work with arrays in these values - and they 
have a point.  Does anyone have code that works with arrays in EGPCS 
values?  Thanks.

--- End Message ---
--- Begin Message ---
In article <[EMAIL PROTECTED]>, [EMAIL PROTECTED] says...
> I have seen on some of the script-sites around some nice ways of presenting
> the source code. Often in nice colors. So, the natural question is: how is
> that done (cause I don't think anyone has the patience to put &lt; and &gt;
> around all the <>)

If you are using php v4 you can do this with show_source(), or if using 
apache, you can configure it to serve source code with syntax highlighting 
rather than parsing the code.

Cheers
-- 
David Robley
Temporary Kiwi!

Quod subigo farinam
--- End Message ---
--- Begin Message ---
I will be out of the office starting  27/07/2002 and will not return until
04/08/2002.

Sorry but I am out of the Office till the 4th of August. Please contact
Roger Smith for any emergency.



The information contained in this e-mail message may be privileged 
and confidential information and is intended only for the use of 
the individual and/or entity identified in the alias address of 
this message.  If the reader of this message is not the intended 
recipient, or an employee or agent responsible to deliver it to the 
intended recipient, you are hereby requested not to distribute or 
copy this communication. If you have received this communication in 
error, please notify us immediately by telephone or return e-mail and 
delete the original message from your system.

--- End Message ---
--- Begin Message ---
Do sessions not work when using an https connection?  It seems I'm losing my
data between pages.

Mike


--- End Message ---
--- Begin Message ---
Mike,

I have used them with https, and they work fine. Make sure you are calling
session_start(); on every page you need your session vars.

 Oscar.-

----- Original Message -----
From: "Mike Mannakee" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, July 28, 2002 9:21 PM
Subject: [PHP] sessions and https


> Do sessions not work when using an https connection?  It seems I'm losing
my
> data between pages.
>
> Mike
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
>

--- End Message ---
--- Begin Message ---
Hi,

Monday, July 29, 2002, 11:21:34 AM, you wrote:
MM> Do sessions not work when using an https connection?  It seems I'm losing my
MM> data between pages.

MM> Mike

If you are changing domain names when going to https you will lose the
session info if relying on cookies. You will have to hard code the
session id in the url if this is the case.

-- 
regards,
Tom

--- End Message ---
--- Begin Message ---
Thank you.  This has been driving me up the wall like you wouldn't believe.

Mike


"Tom Rogers" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi,
>
> Monday, July 29, 2002, 11:21:34 AM, you wrote:
> MM> Do sessions not work when using an https connection?  It seems I'm
losing my
> MM> data between pages.
>
> MM> Mike
>
> If you are changing domain names when going to https you will lose the
> session info if relying on cookies. You will have to hard code the
> session id in the url if this is the case.
>
> --
> regards,
> Tom
>


--- End Message ---
--- Begin Message ---
I am working on a web site that is using php controled www-
authenticate authentication.  User ids are specific to users and 
different pages and different levels of information for a given page 
will be displayed based on the user id used.  The problem is how do 
you log out without having to quit all browser sessions.  Anyone 
doing this?  Care to share code that makes it work?
--------------------------------------------------------------------
--------------
Ray Todd Stevens     Specialists in Network and Security 
Consulting
Senior Consultant    Software audit service available
Stevens Services
Suite 21
3754 Old State Rd 37 N
Bedford, IN 47421
(812) 279-9394
[EMAIL PROTECTED]

Thought for the day:
    Concerto (n): a fight between a piano and a pianist.


For PGP public key send message with subject 
please send PGP key

If this message refers to an attachment the attachment
may arrive as a seperate mail message depending on the
type of mail client and gateway software you are using.

--- End Message ---

Reply via email to