Re: [PHP-DB] sql injections/best practises

2008-11-10 Thread mignon hunter
te: Friday, November 7, 2008, 5:39 PM mignon hunter wrote: > I'm am trying to find some definitive best practises on database connections with php on both mysql and oracle. > > I'm starting to redesign a corporate website and am trying to find out more about security and the best prac

Re: [PHP-DB] sql injections/best practises

2008-11-10 Thread mignon hunter
2008, 12:42 PM On Fri, Nov 7, 2008 at 3:39 PM, Christopher Jones <[EMAIL PROTECTED]> wrote: > > mignon hunter wrote: >> I'm am trying to find some definitive best practises on database >> connections with php on both mysql and oracle. Most security issues come back

Re: [PHP-DB] sql injections/best practises

2008-11-10 Thread mignon hunter
Date: Friday, November 7, 2008, 5:39 PM mignon hunter wrote: > I'm am trying to find some definitive best practises on database connections with php on both mysql and oracle. > > I'm starting to redesign a corporate website and am trying to find out more about security and the best pra

[PHP-DB] sql injections/best practises

2008-11-07 Thread mignon hunter
I'm am trying to find some definitive best practises on database connections with php on both mysql and oracle.   I'm starting to redesign a corporate website and am trying to find out more about security and the best practises for database queries and user input form handling.   For example - 

Re: [PHP-DB] Problem Using Sessions

2005-05-04 Thread Mignon Hunter
The browser has already sent headers on line 13 of your code- line 25 must be the session_start - it has to come first and be at the very top of your code >>> Shawn Singh <[EMAIL PROTECTED]> 05/04/05 03:13PM >>> Hey All, I'm fairly new to PHP Programming. I have compiled and installed postgres v

Re: [PHP-DB] PHP Sessions

2005-04-14 Thread Mignon Hunter
>>> "Ian McGhee" <[EMAIL PROTECTED]> 04/14/05 04:23AM >>> Hi All, I have been looking into PHP sessions and I have noticed you can actually use a database for storing the sessions instead of flat files I will be using MS SQL for the database can any one give be a clue as to how I would go ab

Re: [PHP-DB] - Session in URL - wrong list

2005-03-16 Thread Mignon Hunter
Sorry I posted this to wrong list - meant to send to general...should I re-post or no. * Hello I have tested this app on my machine but it doesnt do this - but when testing on development server, my script is displaying the session in the url. I was r

Re: [PHP-DB] Session in URL

2005-03-16 Thread Mignon Hunter
Hello I have tested this app on my machine but it doesnt do this - but when testing on development server, my script is displaying the session in the url. I was reading in man about session.use_only_cookies can keep this from happening but the dev server has php 4.1.2 Is there another way to

[PHP-DB] sanitizing data

2005-03-04 Thread Mignon Hunter
What method do mosto of you use to sanitize data ? What do you normally check for when, say for example, your getting basic user data like name, address, email. -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DB] suggestions

2005-03-03 Thread Mignon Hunter
a third window with form but fill in most of what he entered (ie name,address,etc). I get this from the current session right? Ultimately the data in the dbase is the goal and I just dont want the user to have to re-enter Thanks Mignon >>> Jochem Maas <[EMAIL PROTECTED]> 03/0

[PHP-DB] suggestions

2005-03-03 Thread Mignon Hunter
Hello I need to dev a small app and I can think of a couple different ways to handle it but not sure the best way. I need to register those who come to our site that want to download .pdf's. They will fill out some information before I redirect to the pdf. I'm thinking the best way to handle

RE: [PHP-DB] [PMX:55%] Re: [PHP-DB] get rid of the HTML tags

2004-04-12 Thread Mignon Hunter
hrough either (although I think they do). If you're getting these bouncebacks from the btconnect.com server, then maybe this is a problem that is more widespread than you and I and should be brought to the attention of the list admin? Rich Hutchins > -Original Message- > Fro

[PHP-DB] [PMX:55%] Re: [PHP-DB] get rid of the HTML tags

2004-04-12 Thread Mignon Hunter
Why are my posts not getting through? I got 3 Delivery Report Failures on Thursday all due to Diagnostic was Unable to transfer, Message timed out Information Message timed out >>> "Daniel Clark" <[EMAIL PROTECTED]> 04/12/04 11:54AM >>> Try strip_tags() http://www.phpbuilder.com/manual/functi

RE: [PHP-DB] Stumped with proper query & display

2004-04-08 Thread Mignon Hunter
Thank you FG - this is exactly what I needed. I think I 've got the query perfect, but how best to display like: 5 jane doe send_rep 4 mignon hunter tic 2-3, send_rep here's my query: $query = "SELECT cust.id, first, last, company, choice FROM cust, contact where cust.id = con

Re: [PHP-DB] Stumped with proper query & display

2004-04-08 Thread Mignon Hunter
) ) * so I THINK I am close if I can figure out how to grab the cust table info based on id and iterate through the $choice_array and display it correctly. I also couldnt figure out how to do only one on query instead of two :( But I wont swea

RE: [PHP-DB] Stumped with proper query and display

2004-04-07 Thread Mignon Hunter
fo based on id and iterate through the $choice_array and display it correctly. I also couldnt figure out how to do only one on query instead of two :( But I wont sweat the small stuff. table structure: CUST TABLE id: 5 name: jane doe company: ibm id: 4 name: mignon hunter company: tic CONTAC

Re: [PHP-DB] Stumped with proper query & display

2004-04-01 Thread Mignon Hunter
1] => send_rep ) ) * so I THINK I am close if I can figure out how to grab the cust table info based on id and iterate through the $choice_array and display it correctly. I also couldnt figure out how to do only one on query inste

Re: [PHP-DB] Stumped with proper query & display

2004-03-26 Thread Mignon Hunter
need to query. I guess I can get the data I want by selecting all from the 5 tables then parsing" Send your tables structure. - Original Message - From: "Mignon Hunter" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, March 26, 2004 3:07 PM Subject: Re:

Re: [PHP-DB] Stumped with proper query & display

2004-03-26 Thread Mignon Hunter
Can someone please help me or direct me to some scripts that might get me unstuck, as I've not done this kind of query before. To simplify: Table 1 id 1 Name John Doe company IBM Table 2 id1 choice choice #1 id

[PHP-DB] Re: exporting data to excel

2004-03-25 Thread Mignon Hunter
Here's what I ended up doing that works: (do all the db connection stuff - get your result, etc..) Name Company Address E-mail Telephone

[PHP-DB] Re: exporting data to excel

2004-03-25 Thread Mignon Hunter
Hello all I am also needing to do this - I got the xcel ss to generate but it wont tab to the next cell in xcel... Here's what I've tried so far: *** But I get all the fields in one cell on each of these tries... Thanks >>> Gei

[PHP-DB] password encryption

2004-03-04 Thread Mignon Hunter
Can anyone recommend, or does anyone have handy, a script that will = encrypt passwords AND then also be able to retrieve the encrypted = password. I am not able to use mcrypt. Checking out the docs and archives and some books has confused me mostly. Thx -- PHP Database Mailing List (http://www.

[PHP-DB] Password encryption

2004-03-04 Thread Mignon Hunter
Can anyone recommend, or does anyone have handy, a script that will encrypt passwords AND then also be able to retrieve the encrypted password. Checking out the docs and some books has confused me mostly. Thx -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www

RE: [PHP-DB] php-db globals turned off

2004-01-27 Thread Mignon Hunter
How would you extract variables from arrays? before I was doing $prod[] = $_POST['prod']; $choice[] = $_POST['choice']; then I could iterate through $prod[], $choice[] Mignon Hunter Webmaster Toshiba International Corporation (713) 466-0277 x 3461 (800) 466-0277 x 346

Re: [PHP-DB] php-db globals turned off

2004-01-27 Thread Mignon Hunter
So it will be easier to use in my script on this page, where I'm creating several query strings with the data. Mignon Hunter Webmaster Toshiba International Corporation (713) 466-0277 x 3461 (800) 466-0277 x 3461 >>> "John W. Holmes" <[EMAIL PROTECTED]> 01/2

[PHP-DB] php-db globals turned off

2004-01-27 Thread Mignon Hunter
y, many variables which doesnt seem very efficient. I tried: foreach ($_POST as $key => $value) $key = $value; but that didnt work...but I can print them out. but even if this did work - this wouldnt handle the 2 sets of arrays I have. Does anybody have any snippets for this ... ??? Thanks

Re: [PHP-DB] php-db Forms-Radio problems

2004-01-27 Thread Mignon Hunter
THANK YOU duh me I knew it was something simple :( Mignon Hunter Webmaster Toshiba International Corporation (713) 466-0277 x 3461 (800) 466-0277 x 3461 >>> Stuart <[EMAIL PROTECTED]> 01/27/04 11:41AM >>> Mignon Hunter wrote: > >

[PHP-DB] php-db- Forms radion buttons

2004-01-27 Thread Mignon Hunter
Management (other than corporate) Other - Please Specify and one is selected, I get: ( [job] => ) I have searched archives, books, tutorials...cant figure it out. Are radio buttons handled differently? Can someone p

[PHP-DB] php-db Forms-Radio problems

2004-01-27 Thread Mignon Hunter
Management (other than corporate) Other - Please Specify and one is selected, I get: ( [job] => ) I have searched archives, books, tutorials...cant figure it out. Are radio buttons handled differently? Can someone pl

[PHP-DB] need a quick app

2003-10-07 Thread Mignon Hunter
hello all, I need to find a database app (php/mysql) where outside users can enter information in a form and then that data can be acted upon by inside users We have an app now that I inherited that was originally built from phpnuke or postnuke. It cant be used (on our site) with redhat/php stro

[PHP-DB] PHP-DB - calling c function from php app

2003-06-17 Thread Mignon Hunter
Can anyone make a suggestion on how to connect to a c function from a php app? I have to connect to sales tax calculation software. The function is being written for me but I have to figure how to call it - get the variable - and use it again in my php app. Is this even possible ?? Thx -- -

[PHP-DB] php-db Form var perpetually resetting

2003-06-09 Thread Mignon Hunter
tions.php like the variable has been reset to false. (I think) Essentially because the script is running again I guess. Should I try to set this var in the session ? Or do a simple javascript validation in conditions.php ??? Any suggestions greatly appreciated. -- Mignon Hunter Web Master and D

[PHP-DB] - Shopping cart software

2003-05-30 Thread Mignon Hunter
Can anyone recommend shopping cart software; does not have to be open source. I need to set up pretty fast and be able to calculate the different sales tax for anywhere, USA. (International should be ok). Already have cc processor lined up. Any suggestions would be appreciated. Thx -- M Hunt

Re: [PHP-DB] Starting to hate MySql... thinking about using MS SqlServer instead...... :-(((((((((

2003-04-01 Thread Mignon Hunter
e: > > > >ERROR 1148: The used command is not allowed with this MySql version. (3.23.55) > > > >If this command is no good, then what the hell am I supposed to use > > > >At least with MS, you have a nice, GUI to use... > > > >Robin Kopetzky &g

[PHP-DB] compare php and perl

2003-03-20 Thread Mignon Hunter
. Perl is more mature - more support - more depth to language. Thx -- Mignon Hunter Web Developer Toshiba International 713.466.0277 x 3461 -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP-DB] Storing browser stats

2003-03-06 Thread Mignon Hunter
> > So everytime someone visits the browser info is gathered and stored as a > unique row in the 'browser' table in the database. > > Any advice?? > > Cheers > > -- > PHP Database Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.

Re: [PHP-DB] MySQL problem -- new to PHP

2003-02-13 Thread Mignon Hunter
he user > table, using both hostname and ip address, but no luck. I keep getting the > same error. > > What am I doing wrong? > > Any and all help appreciated. > > Thanks > > Evan Morris > [EMAIL PROTECTED] > +27 11 792 2777 (tel) > +27 11 792 2711 (fax) -- Mignon Hunter Web Developer Toshiba International 713.466.0277 x 3461 -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DB] checking for empty array from a form field?grrrrrrrrrrr!

2003-02-05 Thread Mignon Hunter
if (!isset($products)) { > > echo "hello"; > } > > else { > > echo "bye"; > > } > > > if (count($products) == 0) { > > echo "hello"; > } > > else { > > echo "bye"; > > } > > > NOTHING works!!! > > Any help.. puuulease? > > Aaron -- Mignon Hunter Web Developer Toshiba International 713.466.0277 x 3461 -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DB] what does % mean?

2003-01-31 Thread Mignon Hunter
Hello list, I am trying to decipher some code written by someone else. In it there is a query: $query = "select description from $prodtable where description like '%' or type like '%' group by description"; I've seen it used as mathematical modulos, but not sure how it's used here. Thx --

[PHP-DB] PHP-DB - ot browser compatability

2003-01-21 Thread Mignon Hunter
might find this info useful. Thanks. -- Mignon Hunter Web Developer Toshiba International 713.466.0277 x 3461 -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP-DB] getting client browser info

2003-01-20 Thread Mignon Hunter
ike [LSS] wrote: > > -Original Message- > > From: Mignon Hunter [mailto:[EMAIL PROTECTED]] > > Sent: 20 January 2003 16:32 > > > > Question: Why is it that from an IE client I get the following: > > > > Mozilla/4.0 (compatible; MSIE 6.0; Win

Re: [PHP-DB] getting client browser info

2003-01-20 Thread Mignon Hunter
Hey guys, Does anyone know of script or tutorial to point me to that can obtain client browser info, (got that part) but then using php, be able to use if statements to distinguish what they're using. example msie 5.1 - netscape - aol...And act upon it. I know the logic but am clueless on the c

[PHP-DB] getting client browser info

2003-01-20 Thread Mignon Hunter
Thanks everybody. That is what I was needing. Question: Why is it that from an IE client I get the following: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) Why does it say mozilla ??? Here's my code: Your are currently using: You are using : browser btw - Both produce the same. I

[PHP-DB] getting client browser info

2003-01-20 Thread Mignon Hunter
Hello all, I need a quick script to get the client's browser make and model. ie 5 ns 4.7 etc. I've found some info in two books but no examples of how to use it to get your visitors info. Not coming up with anything helpful on the php site - will continue to look. If anyone has done this and/

Re: [PHP-DB] Arrays and forms

2003-01-14 Thread Mignon Hunter
Hello list, I submitted this problem earlier but got no response so I thought I'd elaborate. The code below successfully displays all of the problems from the db. Based on what is chosen here, needs to go into another table in the db along with a customer tracking id. for($knt = 0;$row = mysql

Re: [PHP-DB] javascript and submitting forms

2003-01-14 Thread Mignon Hunter
This works! Thanks Adam On Tue, 2003-01-14 at 03:11, Adam Royle wrote: > Hi Mignon, > > This should work, never closing the window without submitting > (foolproof). Just add some error checking, and you'll be sweet as a > nut! All I did was add the echo statement underneath the data insert.

Re: [PHP-DB] javascript and submitting forms

2003-01-14 Thread Mignon Hunter
ther page that > won't be closed. > > -Micah > > On Mon, 2003-01-13 at 13:24, Mignon Hunter wrote: > > > Unfortunately I havnt gotten it to work yet. Am I missing something ? > > > > PS the query works without the closewindow() > > > > > i

Re: [PHP-DB] javascript and submitting forms

2003-01-13 Thread Mignon Hunter
Nevermind Micah, Thanks for your input, I just did 2 buttons for the user - one to submit and one to close the window. Thanks for your help Mignon On Mon, 2003-01-13 at 15:24, Mignon Hunter wrote: > Unfortunately I havnt gotten it to work yet. Am I missing something ? > > PS

Re: [PHP-DB] javascript and submitting forms

2003-01-13 Thread Mignon Hunter
too. > > Hope this helps. > -Micah > > > > On Mon, 2003-01-13 at 12:31, Mignon Hunter wrote: > > > Hello List, > > > > Has anyone had any problems using the onClick="window.close();" > > function within a input type = "submit&quo

Re: [PHP-DB] javascript and submitting forms

2003-01-13 Thread Mignon Hunter
Hello List, Has anyone had any problems using the onClick="window.close();" function within a input type = "submit" ? I'm trying But evidently it's reading the close before the submit because the value of my form var is not being passed. I have also tried it in conjunction with a hidden f

[PHP-DB] problems with Forms again

2003-01-13 Thread Mignon Hunter
Hello all, Well it's Monday :( and my code wont work. I have a form that dynamically produces tables. From each cat_detail any of the checkboxes can be picked, be it the detail itself, levels 1 or 2 or 3, and or a 'yes'. I can capture the cat_detail in the prob[] array in the next page. I can

RE: [PHP-DB] insert form data

2003-01-08 Thread Mignon Hunter
ion: pagetogoto.php"); > > > > ___ > Ryan Marrs > Web Developer > Sandler & Travis Trade Advisory Services, Inc. > 248.474.7200 x 183 > 248.474.8500 (fax) > www.strtrade.com > > > -Original Message- > From: Mignon Hunter [mailto:[EMAIL PRO

Re: [PHP-DB] insert form data

2003-01-08 Thread Mignon Hunter
Actually, I dont need these variables in the rest of the form, I just need to go to the next page...Like a hyperlink on the submit button maybe ??? Seems like I've seen that... Mignon On Wed, 2003-01-08 at 14:12, 1LT John W. Holmes wrote: > > When I post to my next page in the survey in the for

Re: [PHP-DB] insert form data

2003-01-08 Thread Mignon Hunter
Uh - excuse me, Me Again... When I post to my next page in the survey in the form action, instead of this page, the data doesnt go into the database. Does anyone know a way around this other than rewriting all the pages into one page? Many thx Mignon On Wed, 2003-01-08 at 13:50, Mignon

Re: [PHP-DB] insert form data

2003-01-08 Thread Mignon Hunter
Thank you! - you know (darn it!) I had that submit name in the input type on previous test pages - must have forgot it on this one. I'm stressin'... Thanks again On Wed, 2003-01-08 at 13:41, 1LT John W. Holmes wrote: > > I am able to get the query to work by itself but it will not work using >

[PHP-DB] insert form data

2003-01-08 Thread Mignon Hunter
Hello list, I am able to get the query to work by itself but it will not work using the if (isset ($submit)) and NO errors are outputting...nothing. Any suggestions would be greatly appreciated. I havnt even gotten to the form variables yet...and yes, my globals are turned on (at least for no

[PHP-DB] RE: passing array values in forms

2003-01-06 Thread Mignon Hunter
This is a variation to similar string earlier. Have been checking books, online manuals, suggestions here - tutorials and such. Having issues passing arrays in forms. I have been working on this a few days and am stuck. Am trying to pass cat[] and id[] with whatever checkbox user checks. cat[]

Re: [PHP-DB] form validation

2002-12-20 Thread Mignon Hunter
Thanks for your suggestions. I can see the pros and cons of each. I will give each some thought and decide the best way to go. Thx Mignon On Fri, 2002-12-20 at 08:41, Jason Wong wrote: > On Friday 20 December 2002 22:25, Mignon Hunter wrote: > > Hello list, > > > > I am

[PHP-DB] form validation

2002-12-20 Thread Mignon Hunter
Hello list, I am developing a db form that gets passed to another form. I need to validate the fields in form(1), before passing on. The form action posts to form(2), so that upon hitting submit - form(2) shows up in browser...(the only way I know how to do this). I am trying to use php to v

Re: [PHP-DB] forum test

2002-11-06 Thread Mignon Hunter
I'm using Mozilla. I dont see the word 'forum' I guess your onChange="loadIframeJumpMenu doesnt work ? Or the type of javascript your using isnt supported by Mozilla. BTW the nedstat failed to connect on first try. On Wed, 2002-11-06 at 12:25, Seabird wrote: > Hi everyone, I just uploaded my

[PHP-DB] loading includes

2002-10-23 Thread Mignon Hunter
Here's one that will shake your head, mine's about shook off. Basic problem: new site works on my box but not on dev server. Both boxes have Apache and php loaded. New site is not loading includes and dynamic data. The old site copy on dev server has some main pages that include some files when