Re: [SLUG] escaping apostrophies in php/mysql

2008-01-30 Thread Rich Buggy
It could be that your old server had magic_quotes_gpc turned on in your
php.ini.

   Rich

On 31/01/2008, Voytek Eymont <[EMAIL PROTECTED]> wrote:
>
> I have a PHP/MySQL custom CMS from a little while ago;
> the original developer is no longer available,
>
> recently, I've upgraded server from RH73 MySQL 3.x
> to Centos 4.x MySQL 4.1.22
>
> now, on the new server, the user can not save any edited text that
> contains apostrophies (the existing text contains apostropies 'from
> before')
>
> could that be the MySQL collation that's the problem...?
>
> actual collation is 'utf8_general_ci', should I change it to 'latin1'
> ?(which I guess MySQL 3.x was)
>
>
>
>
> --
> Voytek
>
> --
> SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
> Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
>



-- 
Rich Buggy
http://www.buggy.id.au/
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] escaping apostrophies in php/mysql

2008-01-30 Thread Kristian Erik Hermansen
On Jan 30, 2008 10:05 PM, Voytek Eymont <[EMAIL PROTECTED]> wrote:
> I have a PHP/MySQL custom CMS from a little while ago;
> the original developer is no longer available,
>
> recently, I've upgraded server from RH73 MySQL 3.x
> to Centos 4.x MySQL 4.1.22
>
> now, on the new server, the user can not save any edited text that
> contains apostrophies (the existing text contains apostropies 'from
> before')
>
> could that be the MySQL collation that's the problem...?
>
> actual collation is 'utf8_general_ci', should I change it to 'latin1'
> ?(which I guess MySQL 3.x was)

I smell a SQL injection vulnerability.  You should be escaping all
your user input so that your database queries are well-formed.  At
this very moment, someone could probably corrupt or steal all your
data via some crafted SQL input.  Let me guess, you had a guy with the
last name "O'Keefe" -- and this is how it all started?
-- 
Kristian Erik Hermansen
"Know something about everything and everything about something."
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] escaping apostrophies in php/mysql

2008-01-30 Thread Voytek Eymont
I have a PHP/MySQL custom CMS from a little while ago;
the original developer is no longer available,

recently, I've upgraded server from RH73 MySQL 3.x
to Centos 4.x MySQL 4.1.22

now, on the new server, the user can not save any edited text that
contains apostrophies (the existing text contains apostropies 'from
before')

could that be the MySQL collation that's the problem...?

actual collation is 'utf8_general_ci', should I change it to 'latin1'
?(which I guess MySQL 3.x was)




-- 
Voytek

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] French police take up linux

2008-01-30 Thread Phil Scarratt

May be old news to some, but just in case :)

http://news.smh.com.au/french-police-deal-blow-to-microsoft/20080130-1p2v.html 



"The French paramilitary police force said Wednesday it is ditching 
Microsoft for the free Linux operating system, becoming one of the 
biggest administrations in the world to make the break."

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] how to build a custom keyboard map in Gnome?

2008-01-30 Thread Nick Croft
* Sonia Hamilton ([EMAIL PROTECTED]) wrote:
> I'd like to build a custom keymap for Gnome that is a combination of the
> 'US English' layout and some of the 'Spain' layout - anyone know how I'd
> do that? 
> 

Have a look at a previous slug discussion:

http://lists.slug.org.au/archives/slug/2004/03/msg00131.html

The pt1 keymap is also at http://a440.com.au/font.

If you are using debian, the keymaps are now located at

/usr/share/X11/xkb/symbols rather than 
/usr/X11R6/lib/X11/xkb/symbols

In any case, consulting  man setxkbmap should give the location of
the keymaps on your system.

It might take a few tries one evening.  At least you don't have to fork out
over $100 to some 3rd party vendor of of keymap creation utility as with 
Windows.

Nick
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] BWOI: Hi

2008-01-30 Thread Sonia Hamilton
Could only be COBOL - a spam engine wouldn´t be so creative.

Scary thought: Visual COBOL++ 

On Wed, 2008-01-30 at 08:27 +, Rev Simon Rumble wrote:
> Good grief!  Is this output from some spam engine's scanning of the list 
> or is it the effect of writing COBOL on a human being's brain?
> 
> -- 
> Rev Simon Rumble <[EMAIL PROTECTED]>
> www.rumble.net
> 
> The Tourist Engineer
> Because geeks travel too.
> http://engineer.openguides.org/
> 
>  "The music business is a cruel and shallow money trench, a long
>   plastic hallway where thieves and pimps run free, and good men
>   die like dogs. There's also a negative side."
> - Source unknown, often erroniously attributed to Hunter S. Thompson
-- 
Sonia Hamilton
blog: http://SoniaHamilton.wordpress.com

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] how to build a custom keyboard map in Gnome?

2008-01-30 Thread Sonia Hamilton
I'd like to build a custom keymap for Gnome that is a combination of the
'US English' layout and some of the 'Spain' layout - anyone know how I'd
do that? 

Reason - I'm in Spanish speaking country at the moment therefore I'm
always flipping between English & Spanish layouts, which is a pain. Also
the 'Spain' layout scrambles all the punctuation characters so I can
never find them.

What I'd like to have is the 'US English' layout with only two
additions:

* Ctrl-Shift-; produces ñ
* ' followed by a vowel (or if easier, a letter) produces an accented
character eg á é í ó ú, but ' followed by ' produces ' and not ´

I know about the other English variants like International and Dead
Keys, but they don´t do exactly what I want :-)

Thanks for any pointers,

-- 
Sonia Hamilton
blog: http://SoniaHamilton.wordpress.com

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] HA Active/Passive Firewall - with TCP and NAT tracking

2008-01-30 Thread Alex Samad
On Wed, Jan 30, 2008 at 09:14:43PM +1100, Greg Cockburn wrote:
> On 30/01/2008, Alex Samad <[EMAIL PROTECTED]> wrote:
> >
> > On Wed, Jan 30, 2008 at 11:49:50AM +1100, Greg Cockburn wrote:
> > > Hi all,
> > >
> > > I want to know if it is possible to share/track TCP/VPN(IPSEC)/NAT
> > > connections between 2 Linux hosts.
> > >
> > > At home I have a great Firewall.  It runs LEAF Bering uClibc 3.X /
> > OPENSWAN
> > > / OPENVPN.  It is great.
> > >
> > > At work I have 2 Cisco PIX running in a failover mode Active/Passive,
> > and
> > > those pix share VPN, TCP and NAT information, so that when
> > > they failover from the active to the passive node, no one notices.
> > >
> > > Is this possible to do in Linux?
> > I believe the netfilter guys have just recently released something to
> > allow for
> > the sharing of connection information between 2 linux box for HA of linux
> > firewall's
> >
> > check outthe netfilter web site
> >
> Alex,
> 
> good thinking!
> 
> This looks like it:
> http://people.netfilter.org/pablo/conntrack-tools/testcase.html
yep
> 
> Thanks,
> Greg.
> -- 
> SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
> Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
> 

-- 
"It's good to see so many friends here in the Rose Garden. This is our first 
event in this beautiful spot, and it's appropriate we talk about policy that 
will affect people's lives in a positive way in such a beautiful, beautiful 
part of our national -- really, our national park system, my guess is you would 
want to call it."

- George W. Bush
02/08/2001
Washington, DC


signature.asc
Description: Digital signature
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] HA Active/Passive Firewall - with TCP and NAT tracking

2008-01-30 Thread Greg Cockburn
On 30/01/2008, Alex Samad <[EMAIL PROTECTED]> wrote:
>
> On Wed, Jan 30, 2008 at 11:49:50AM +1100, Greg Cockburn wrote:
> > Hi all,
> >
> > I want to know if it is possible to share/track TCP/VPN(IPSEC)/NAT
> > connections between 2 Linux hosts.
> >
> > At home I have a great Firewall.  It runs LEAF Bering uClibc 3.X /
> OPENSWAN
> > / OPENVPN.  It is great.
> >
> > At work I have 2 Cisco PIX running in a failover mode Active/Passive,
> and
> > those pix share VPN, TCP and NAT information, so that when
> > they failover from the active to the passive node, no one notices.
> >
> > Is this possible to do in Linux?
> I believe the netfilter guys have just recently released something to
> allow for
> the sharing of connection information between 2 linux box for HA of linux
> firewall's
>
> check outthe netfilter web site
>
Alex,

good thinking!

This looks like it:
http://people.netfilter.org/pablo/conntrack-tools/testcase.html

Thanks,
Greg.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] HA Active/Passive Firewall - with TCP and NAT tracking

2008-01-30 Thread Sam Lawrance


On 30/01/2008, at 11:49 AM, Greg Cockburn wrote:


Hi all,

I want to know if it is possible to share/track TCP/VPN(IPSEC)/NAT
connections between 2 Linux hosts.

At home I have a great Firewall.  It runs LEAF Bering uClibc 3.X /  
OPENSWAN

/ OPENVPN.  It is great.

At work I have 2 Cisco PIX running in a failover mode Active/ 
Passive, and

those pix share VPN, TCP and NAT information, so that when
they failover from the active to the passive node, no one notices.

Is this possible to do in Linux?


I don't know, but you should be able to do it with CARP on OpenBSD or  
FreeBSD.  pfsense is one possibility.


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] BWOI: Hi

2008-01-30 Thread Sam Lawrance


On 30/01/2008, at 6:27 PM, Bruce Bruen wrote:


Now, how shall I start, history or interest, disinterest or hosiery,
confounding interest or hijacking ...

Historical details :

Bjorn - sometime in the last century on a small planet called RANRL  
located
temporarily near (actually on) Rushcutters Bay, mother PDP 1120,  
pater GT40,
schooling: mainly startrek, lunar lander and a strangely absorbing  
little
diversion called "adventure".  But, seriously, I mean it, s-e-r-i-o- 
u-s-l-y,

supposedly writing A2D fourier transforms for the sonar group.


Hello, sailor!

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] BWOI: Hi

2008-01-30 Thread Rev Simon Rumble
This one time, at band camp, Rick Welykochy wrote:
> Rev Simon Rumble wrote:
> 
> >Good grief!  Is this output from some spam engine's scanning of the list 
> >or is it the effect of writing COBOL on a human being's brain?
> 
> I suspect ADHD and Ritalin.

Not enough Ritalin or too much?

-- 
Rev Simon Rumble <[EMAIL PROTECTED]>
www.rumble.net

The Tourist Engineer
Nerds need vacations too.
http://engineer.openguides.org/

Warning - Contains nuts!

- On a packet of peanuts
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] BWOI: Hi

2008-01-30 Thread Rick Welykochy

Rev Simon Rumble wrote:

Good grief!  Is this output from some spam engine's scanning of the list 
or is it the effect of writing COBOL on a human being's brain?


I suspect ADHD and Ritalin.


-rw



--
_
Rick Welykochy || Praxis Services

Any sufficiently advanced technology seems like magic.
 -- Arthur C. Namesake
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] BWOI: Hi

2008-01-30 Thread Rick Phillips
Bruce,

> but what I want to know is this
> 
> 
> Has anyone interest in VirtualBox?  I have so much fun with it today that - 
> oh 
> damn I've run out of ex-whatitsnames, its' so good!
> 
> But then again there's always questions. Has anyone surgically played with 
> this?
>   
Yes I have played with it a lot in the last 12 months.  I reckon it is
the best - usual German efficiency and thoroughness.

The most interesting deploy was a server running CentOS 5 with VB
driving Windows Server 2003 in the background.  Totally invisible to
anyone accessing the Linux box but otherwise appearing to the MS boxes
as a Win2003 server running "aux naturelle".  This product blows me
away.  The doco's are good too.

The above deploy was the result of a customer ordering a Linux file
server and then after delivery, configuration and commit, decided that
they needed to run some Windows tax packages on the server.  So CentOS
does the file serving, backups, mail, web and server 2003 dribbles along
in VB in behind running the tax packages.  A bit strange but everyone is
happy and the whole thing is configured to start VB in the background
automatically on boot and then server 2003 auto starts.  It has been
three months and not a service call needed.

Rick Phillips

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] BWOI: Hi

2008-01-30 Thread Rev Simon Rumble
Good grief!  Is this output from some spam engine's scanning of the list 
or is it the effect of writing COBOL on a human being's brain?

-- 
Rev Simon Rumble <[EMAIL PROTECTED]>
www.rumble.net

The Tourist Engineer
Because geeks travel too.
http://engineer.openguides.org/

 "The music business is a cruel and shallow money trench, a long
  plastic hallway where thieves and pimps run free, and good men
  die like dogs. There's also a negative side."
- Source unknown, often erroniously attributed to Hunter S. Thompson
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] BWOI: Hi

2008-01-30 Thread Bruce Bruen
Now, how shall I start, history or interest, disinterest or hosiery, 
confounding interest or hijacking ...

Historical details :

Bjorn - sometime in the last century on a small planet called RANRL located 
temporarily near (actually on) Rushcutters Bay, mother PDP 1120, pater GT40, 
schooling: mainly startrek, lunar lander and a strangely absorbing little 
diversion called "adventure".  But, seriously, I mean it, s-e-r-i-o-u-s-l-y, 
supposedly writing A2D fourier transforms for the sonar group.

Bread - still in the prior generation, at a small campus in a disused sheep 
paddock that someone had given the name "ANU" to.  Taught me all I needed to 
know for a career in IT. In retrospect, it should have taken them 15 minutes.  
Notwithstanding, a higher calling presented itself - the DOD, unfortunately I 
only lasted 3 days until a MUCH higher calling anounced itself with much 
heralding and a phone call even.

Kneaded - cutting COBOL 70 real time (oh, ok, ok, ""online"") systems for the 
Victorian Cytology Service (read Pap smear, patient record system, 196K, 
300Mb Eagle drive, and an operating system officially called Vortex but 
colloqually known as Whirlpool in that it sucked everyone in).  

Raised - normal cutter, sysanl, architech, projekt mismanager, banking, 
wanking, dividend franking etc etc.

Knocked down (1991) - bugger, I "knew" 8086 was gunna be big, but I stuck to 
my mismanagement aspirations and became a - gasp - consultant.  Strategy, 
politic, smategy and politik.  Finally, the big day came ... "your sacked".

Rested, re-raised and baked - I have spent the last ten years having a great 
deal of joy in destroying the dreams and aspirations of designers and coders.  
In other words I am a tester. And its fun.

Howsoever, why do write this coredump.

Agha! If you've got this far then here comes the interest

Currently, (could change tomorrow) I've got ...
small private lan with 7 P-II/III/IV series Intels running Mandriva, PClinuxOS 
and liveboots

coyote firewall in front of the lot on a diskless, headless and handless (ogh 
Gawdknows, its been running for 4 years? probably a "MX" something)

most, if not all the workboxes are going to go to PCLOS (I am impressed!)

but what I want to know is this


Has anyone interest in VirtualBox?  I have so much fun with it today that - oh 
damn I've run out of ex-whatitsnames, its' so good!

But then again there's always questions. Has anyone surgically played with 
this?
  
-- 
regards

bruce
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html