Re: [PHP-DEV] Re: #19286 [NEW]: header() Control Char Injection

2002-09-08 Thread Edin Kadribasic
On Sun, 08 Sep 2002 10:58:24 +0900 Yasuo Ohgaki [EMAIL PROTECTED] wrote: This obvious security risk is mentioned in bugtraq today. IMHO, this is users' fault. They must check values before using it. In this specfic case, user should use simple regex before feeding str to header(). Any

[PHP-DEV] xslt_process segfaults with illegal parameters

2002-09-08 Thread Martin Jansen
As the subject already mentions, xslt_process() segfaults when passing an illegal second or third parameter to it. Example: ?php $var = 'lala'; $xh = xslt_create(); $result = xslt_process($xh, $var, 'sample.xsl'); // segfault ? Instead of segfaulting, PHP should raise a

[PHP-DEV] install pear on windows

2002-09-08 Thread phpsurf
Hi, It's been a very long time since it's been possible to install any pear package on windows with the official PHP distrib ! I have just downloaded the last PHP 4.2.3 release, wishing it would fix those bugs, but ... nothing changed for pear in that release ! How can I manually upgrade all the

Re: [PHP-DEV] Sound API for php

2002-09-08 Thread Wez Furlong
On 09/08/02, Tony Leake [EMAIL PROTECTED] wrote: Thanks for the suggestion to put this into Pear. I have subscribed to the dev list and I'll see what they think :) You can place it into pear/PECL; which is going to be the definitive place for C based PHP extensions in the not too distant

Re: [PHP-DEV] Sound API for php

2002-09-08 Thread Andi Gutmans
At 11:00 AM 9/8/2002 +0100, Wez Furlong wrote: 3) will be midi functions,this is a long way off yet so I haven't given it too much thought yet. Also it is likely to be a separate module as it will need to link against a separate library and I can't think of any PHP modules that link

Re: [PHP-DEV] Sound API for php

2002-09-08 Thread Tony Leake
On Sun, 2002-09-08 at 11:00, Wez Furlong wrote: That fits with our naming conventions; however, I think that Andi was hoping you would post a little bit info about the parameters of the main functions that you expect people to use; something like this: bool audio_play_file(string

Re: [PHP-DEV] Re: #19286 [NEW]: header() Control Char Injection

2002-09-08 Thread Stefan Esser
Morning, I wonder when we will see: PHP include() PHP Code Injection on Bugtraq ;) [X] Injecting HTTP headers is indeed possible with his technique. [X] - You can inject Cookies... [X] Injecting Part of the Body is possible, too. [X] Browsers ignore anything in the Body when Location is used.

[PHP-DEV] REPOST: PHP 4.2.3 Released

2002-09-08 Thread Stefan Esser
[ I resend this mail because it simply disappeared and never showed up on php-dev ] Hi, could someone from group please add atleast md5 hashes of the php 4.2.3 files to download.php? And if possible zeev/edin create a detached gpg/pgp signature with your personal key. (.asc files). I asked for

[PHP-DEV] Re: REPOST: PHP 4.2.3 Released

2002-09-08 Thread Tom Sommer
[ I resend this mail because it simply disappeared and never showed up on php-dev ] Showed up fine before -- * Tom Sommer * http://www.tsn.dk | webmaster(a)tsn.dk * Any sufficiently advanced bug is indistinguishable from a feature -- PHP Development Mailing List http://www.php.net/ To

Re: [PHP-DEV] Re: REPOST: PHP 4.2.3 Released

2002-09-08 Thread Stefan Esser
Showed up fine before That is strange because I did not receive it over the list and it is not in the php-dev web archive. Stefan -- PHP Development Mailing List http://www.php.net/ To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] Re: Problems with PHP.net MX

2002-09-08 Thread nicos
Nice news. We are 1 day later, still no mail. I would like to repeat again that If you need a hoster, I'm available. -- Nicos - CHAILLAN Nicolas [EMAIL PROTECTED] www.WorldAKT.com - Hébergement de sites Internet Jim Winstead [EMAIL PROTECTED] a écrit dans le message de news: [EMAIL PROTECTED]

Re: [PHP-DEV] Re: #19286 [NEW]: header() Control Char Injection

2002-09-08 Thread Dan Kalowsky
On Sun, 8 Sep 2002, Stefan Esser wrote: PS: Is php-dev censored? Or why disappeared my mail about MD5/GPG signs of PHP 4.2.3... Is there some autofilter on group says everytime: we do it the next time? Naw I saw it and you bug report on it.

[PHP-DEV] include function in php source

2002-09-08 Thread eminent
Hi everyone, i have to manipulate include function inside php source code to satisfy my needs. it has to be configured, i think, with something like PHP_FE(include .) my problem is that i can't find where it is inside the php source tree. i mean that i don't know in which file it is. can

RE: [PHP-DEV] Re: Problems with PHP.net MX

2002-09-08 Thread James Cox
we're fine. I believe the mx is happy again. Nice news. We are 1 day later, still no mail. I would like to repeat again that If you need a hoster, I'm available. -- Nicos - CHAILLAN Nicolas [EMAIL PROTECTED] www.WorldAKT.com - Hébergement de sites Internet Jim Winstead [EMAIL

Re: [PHP-DEV] Re: REPOST: PHP 4.2.3 Released

2002-09-08 Thread Jim Winstead
Stefan Esser [EMAIL PROTECTED] wrote: Showed up fine before That is strange because I did not receive it over the list and it is not in the php-dev web archive. http://news.php.net/article.php?group=php.devarticle=88018 jim -- PHP Development Mailing List http://www.php.net/ To

[PHP-DEV] Re: [Zend Engine 2] PHP/ZE2 win32 snapshots Bug with Constants

2002-09-08 Thread Andi Gutmans
This sounds very strange. It sounds to me as if your scanner wasn't built correctly for some odd reason. Andi At 10:45 AM 9/6/2002 +0200, phpsurf wrote: Hi I tried the latest windows binaries of PHP with ZE2 built yesterday by Edin on http://snaps.php.net/win32/ZE2 and there is still a bug

Re: [PHP-DEV] Re: Problems with PHP.net MX

2002-09-08 Thread nicos
Hmm okay, Will we get the old mail or not? I just tried to send me a mail, I got nothing (I waited 1 hour)... -- Nicos - CHAILLAN Nicolas [EMAIL PROTECTED] www.WorldAKT.com - Hébergement de sites Internet James Cox [EMAIL PROTECTED] a écrit dans le message de news: [EMAIL PROTECTED] we're

Re: [PHP-DEV] Re: var_export() and arrays

2002-09-08 Thread Andi Gutmans
At 02:48 PM 9/4/2002 +0900, Yasuo Ohgaki wrote: Sebastian Bergmann wrote: ?php $array = array('foo', 'bar'); var_export($array); ? prints array ( 0 = 'foo', 1 = 'bar', ) The comma after 'bar' is superfluous. I agree, but it has been discussed

[PHP-DEV] naming function_entry for methods

2002-09-08 Thread Wez Furlong
Actually, this is a good point; I've been working on an OO api for mailparse and have ended up using: PHP_NAMED_FE(mimemessage, PHP_FN(mailparse_mimemessage), NULL) for the constructor of the class. I think it would be nice if we had something like: PHP_METHOD(classname, methodname) which

[PHP-DEV] Re: [Zend Engine 2] PHP/ZE2 win32 snapshots Bug with Constants

2002-09-08 Thread Edin Kadribasic
On Sun, 08 Sep 2002 18:24:39 +0300 Andi Gutmans [EMAIL PROTECTED] wrote: This sounds very strange. It sounds to me as if your scanner wasn't built correctly for some odd reason. The machine that is building the ZE2 snapshots is the same one that I use for building regular snapshots and PHP

[PHP-DEV] Re: [PHP-CVS] cvs: php4 / CODING_STANDARDS

2002-09-08 Thread Yasuo Ohgaki
[EMAIL PROTECTED] wrote: On Sun, 8 Sep 2002, Yasuo Ohgaki wrote: yohgaki Sun Sep 8 18:38:57 2002 EDT Modified files: /php4 CODING_STANDARDS Log: It seems we're better to mention about missing functions. PHP_FUNCTION - ZEND_FUNCTION erm,

[PHP-DEV] Re: [PHP-CVS] cvs: php4 / CODING_STANDARDS

2002-09-08 Thread Yasuo Ohgaki
[EMAIL PROTECTED] wrote: On Sun, 8 Sep 2002, Yasuo Ohgaki wrote: yohgaki Sun Sep 8 18:38:57 2002 EDT Modified files: /php4 CODING_STANDARDS Log: It seems we're better to mention about missing functions. PHP_FUNCTION - ZEND_FUNCTION erm,

[PHP-DEV] Re: [PHP-CVS] cvs: php4 / CODING_STANDARDS

2002-09-08 Thread Yasuo Ohgaki
Oops. I thought both SMTP and NNTP is failed, but only STMP was failing. Sorry for duplicated messages. -- Yasuo Ohgaki -- PHP Development Mailing List http://www.php.net/ To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] [TEST] Delete me!

2002-09-08 Thread Brian France
This is just a ping test to see if my co-location company got off of the spews.org black list. Brian -- PHP Development Mailing List http://www.php.net/ To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] include function in php source

2002-09-08 Thread Alan Knowles
eminent wrote: Hi everyone, i have to manipulate include function inside php source code to satisfy my needs. it has to be configured, i think, with something like PHP_FE(include .) my problem is that i can't find where it is inside the php source tree. i mean that i don't know in