Re: [PHP-DB] Database abuse help needed

2006-03-13 Thread Ludvig Ericson
Another fine thing about this is the fact that you can use unicode characters as an alternative which the regular expression engine probably wont match, unless it's somehow tweaked. This is the same theory as in when you are doing phising, for say ebay.com and replace the a with one of them non-ASC

RE: [PHP-DB] Database abuse help needed

2006-03-13 Thread Finner, Doug
No, I agree, for this matter you can never create a regular expression well written enough to match all or even most of the lingo we use. = Been off the list for a couple of days and just stumbled across this thread. Our company uses some kind of 'nicey-ni

Re: [PHP-DB] Database abuse help needed

2006-03-12 Thread Ludvig Ericson
-oOo-- > - Original Message - > From: "Ludvig Ericson" <[EMAIL PROTECTED]> > To: "Julien Bonastre" <[EMAIL PROTECTED]> > Cc: > Sent: Sunday, March 12, 2006 11:31 AM > Subject: Re: [PHP-DB] Database abuse help needed > &g

Re: [PHP-DB] Database abuse help needed

2006-03-12 Thread Julien Bonastre
PROTECTED] www.the-spectrum.org --oOo---oOo-- - Original Message - From: "Ludvig Ericson" <[EMAIL PROTECTED]> To: "Julien Bonastre" <[EMAIL PROTECTED]> Cc: Sent: Sunday, March 12, 2006 11:31 AM Subject: Re: [PHP-DB] Database abuse help need

Re: [PHP-DB] Database abuse help needed

2006-03-11 Thread Ludvig Ericson
sidered if: ... a.. You have no users, and nobody ever visits > your server. ... Extracted Quote: Security Tips - Apache HTTP > Server ---oOo--- --oOo---oOo-- Julien Bonastre > [The_RadiX] The-Spectrum Network CEO ABN: 64 235 749 494 > [EMAIL PROTECTED] > www.the-spectrum.org --

Re: [PHP-DB] Database abuse help needed

2006-03-11 Thread Julien Bonastre
-- From: "Ludvig Ericson" <[EMAIL PROTECTED]> To: "Julien Bonastre" <[EMAIL PROTECTED]> Cc: "Chris Payne" <[EMAIL PROTECTED]>; Sent: Sunday, March 12, 2006 12:18 AM Subject: Re: [PHP-DB] Database abuse help needed Erm, dude, chill out with the elitism

Re: [PHP-DB] Database abuse help needed

2006-03-11 Thread Ludvig Ericson
fferent fields. Easy enough? > > > Then I have the second part, which uses the PCRE [perl compat reg exp] > handler functions of PHP to attempt matching my patterns to the given > inputs from user. > > > Easy right??? > > > Too easy, and extremely fast and effective... >

Re: [PHP-DB] Database abuse help needed

2006-03-11 Thread Julien Bonastre
hes about how expensive they are to run, but wouldn't we be BADed without them!?!?!? ---oOo--- Allowing users to execute CGI scripts in any directory should only be considered if: ... a.. You have no users, and nobody ever visits your server. ... Extracted Quote: Security Tips - Apache HTT

RE: [PHP-DB] Database abuse help needed

2006-03-10 Thread Chris Payne
t: Thursday, March 09, 2006 8:40 PM To: php-db@lists.php.net Subject: RE: [PHP-DB] Database abuse help needed Thank you for that. And excuse the inexperience, but how would I use an Array with the below? I mean say I had words such as this,is,a,bad,word (Just as examples as I can't post wh

RE: [PHP-DB] Database abuse help needed

2006-03-10 Thread Dwight Altman
us2.php.net/in_array -Original Message- From: Chris Payne [mailto:[EMAIL PROTECTED] Sent: Thursday, March 09, 2006 8:40 PM To: php-db@lists.php.net Subject: RE: [PHP-DB] Database abuse help needed Thank you for that. And excuse the inexperience, but how would I use an Array with the below? I

RE: [PHP-DB] Database abuse help needed

2006-03-09 Thread Bastien Koert
I use an array of 'bad' words and the in_array function to check if the data is in the array Bastien From: "Chris Payne" <[EMAIL PROTECTED]> To: Subject: [PHP-DB] Database abuse help needed Date: Thu, 9 Mar 2006 18:21:25 -0500 Hi there everyone, Is there

RE: [PHP-DB] Database abuse help needed

2006-03-09 Thread Chris Payne
php-db@lists.php.net Subject: [PHP-DB] Database abuse help needed Hi there everyone, Is there a better way I can do this? if ($email == "[EMAIL PROTECTED]" OR $subject == "Rulez666" Basically, if I have data coming from a form to a DB, is there a better way to say check EV

RE: [PHP-DB] Database abuse help needed

2006-03-09 Thread Dwight Altman
rol-structures.foreach.php http://us2.php.net/strpos Yes, that's !== or === -Original Message- From: Chris Payne [mailto:[EMAIL PROTECTED] Sent: Thursday, March 09, 2006 5:21 PM To: php-db@lists.php.net Subject: [PHP-DB] Database abuse help needed Hi there everyone, Is there a better way

[PHP-DB] Database abuse help needed

2006-03-09 Thread Chris Payne
Hi there everyone, Is there a better way I can do this? if ($email == "[EMAIL PROTECTED]" OR $subject == "Rulez666" Basically, if I have data coming from a form to a DB, is there a better way to say check EVERY variable for a specific set of words rather than doing $name, $subject etc s