[PHP-DEV] Bug #12461: browser hangs unless I uncheck keep alives in IIS5.0

2001-07-30 Thread j . gray
From: [EMAIL PROTECTED] Operating system: win2k PHP version: 4.0.6 PHP Bug Type: Any Bug description: browser hangs unless I uncheck keep alives in IIS5.0 Upgraded from PHP4.04pl to PHP4.06 and now the browsers are hanging. I am writing an application with php and mysql on

[PHP-DEV] Bug #12432 Updated: not valid mysql ressource

2001-07-30 Thread etm
ID: 12432 User updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] Old Status: Closed Status: Open Bug Type: MySQL related Operating System: GNU Linux PHP Version: 4.0.6 New Comment: The eMail system is not working correctly, there is some more sourcecode in my message, please watch

Re: [PHP-DEV] Security Issues (isset stuff)

2001-07-30 Thread Phil Driscoll
On Sunday 29 July 2001 19:13, [EMAIL PROTECTED] wrote: ...stuff pointing out how you'd get no warning messages when the evil guy sets the variables from outside. You missed my point, which is the good guy would get the warning messages when he tested the code himself without sending in the

FW: [PHP-DEV] Security Issues

2001-07-30 Thread Brian Tanner
Just passing this along form Ramsi... who sent it to me instead of the list. (unless he wants to unsubscribe from my point of view :P )-Original Message-From: Ramsi Sras [mailto:[EMAIL PROTECTED]]UNSUBSCRIBE ME PLEASE!! Brian Tanner schrieb: Brian Foddy actually

RE: [PHP-DEV] Re: Proposal

2001-07-30 Thread Marc Boeren
Hi, force a prefix onto the variable name. I.e., import_globals(GPC, form_); I like this idea (the whole idea of import_globals is good, I think, but I'd rather call it accept_globals, but more on that later :), only this would make it difficult to actually differentiate between get, post

Re: [PHP-DEV] ./buildconf trouble

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Sebastian Bergmann schrieb: Sebastian Bergmann wrote: > I recently updated autoconf to version 2.52 and now I get this > with running ./buildconf Never mind, Sascha just told me to stick to 2.13. -- Sebastian Bergmann Measure Traffic Usability

Re: [PHP-DEV] Bug #12450: Segfaults if recode is loaded after mysql or imap

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: From: [EMAIL PROTECTED] Operating system: Red Hat Linux 6.2 PHP version: 4.0.6 PHP Bug Type: Recode related Bug description: Segfaults if recode is loaded after mysql or imap PHP segfaults if recode.so (php's recode extension as a

Re: [PHP-DEV] Bug #12439 Updated: fopen and URL on the same server

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: ID: 12439 User updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] Old Status: Open Status: Closed Bug Type: Filesystem function related Operating System: Linux-2.2.19 PHP Version: 4.0.6 New Comment: I found the problem. My

Re: [PHP-DEV] Latest CVS on Linux with Apache 1.3.20

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Sebastian Bergmann schrieb: Cannot load /usr/local/apache/libexec/libphp4.so into server: undefined symbol: TSRMLS_FETCH ./configure --enable-inline-optimization --with-apxs=/usr/local/apache/bin/apxs --with-mysql=/usr/local/mysql --with-pgsql

Re: [PHP-DEV] Latest CVS on Linux with Apache 1.3.20

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Andi Gutmans schrieb: Did you update TSRM Zend? Andi At 09:21 PM 7/28/2001 +0200, Sebastian Bergmann wrote: > Cannot load /usr/local/apache/libexec/libphp4.so into server: > undefined symbol: TSRMLS_FETCH > > ./configure --enable-inline-optimization >

Re: [PHP-DEV] Re: thread safety

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Zeev Suraski schrieb: As a matter of fact it doesn't, on its own, fix too much. It makes the thread safe code much faster and a bit more centralized, which should help improve the thread safety code to stability. There are more improvements coming on this

Re: [PHP-DEV] Latest CVS on Linux with Apache 1.3.20

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Sebastian Bergmann schrieb: Andi Gutmans wrote: > Did you update TSRM Zend? Yes, of course. And I did a clean build, too. You're Andi, right? Not Zeev in disguise? :-) -- Sebastian Bergmann Measure Traffic Usability http://sebastian-bergmann.de/

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Zeev Suraski schrieb: - My mind is pretty firm about implementing shortcuts for $HTTP_*_VARS. People are going to rebel big time if we remove their global variables by default, and make them use these exceptionally long alternatives instead. Most people I

Re: [PHP-DEV] Bug #12451: compilation halts on libmysql extension

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: From: [EMAIL PROTECTED] Operating system: Linux 2.4.7 PHP version: 4.0.6 PHP Bug Type: Compile Failure Bug description: compilation halts on libmysql extension make[1]: Entering directory `/usr/local/src/php-4.0.6/ext/mysql/libmysql'

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Andi Gutmans schrieb: Hey, I thought of an idea yesterday which could make everyone happy. In the default php.ini we set the register_globals to a new value "unset". If PHP runs with this INI value it will display a page telling you that you need to define the

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Ron Chmara schrieb: On Saturday, July 28, 2001, at 12:52 PM, Zeev Suraski wrote: > At 06:01 28/07/2001, Phil Driscoll wrote: >> I and no doubt thousands of others will turn >> register_globals on because it gives much more readable code, >> much less >> typing

Re: [PHP-DEV] Bug #12453: comparing 0==null is true?

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: From: [EMAIL PROTECTED] Operating system: Win2k PHP version: 4.0.6 PHP Bug Type: Scripting Engine problem Bug description: comparing 0=="null" is true? If you compare the integer(0) to the string "null", PHP thinks they are the same.

Re: [PHP-DEV] Proposal

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Rasmus Lerdorf schrieb: The best thing about PHP is that it has such a shallow learning curve that non-programmers can write web apps. The worst thing about PHP is that it has such a shallow learning curve that non-programmers write web apps. That is of course

Re: [PHP-DEV] Object Overloading Interface

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Sterling Hughes schrieb: g'day, I'm just sending a message to check how different the OO overloading interface will be in the Zend Engine 2? I'm currently writing an extension which uses the current overloading stuff, how different will the new stuff be?

Re: [PHP-DEV] PHP logfile of PHP variables and scripts

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Alex Vincent schrieb: One thing I've been thinking about recently is a desire for PHP to provide a function whereby PHP scripts can log incoming variables (such as $HTTP_POST_VARS) and the PHP scripts which process them. Such a function can prove very useful

Re: [PHP-DEV] Proposal

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Heikki Korpela schrieb: On Sat, 28 Jul 2001, Rasmus Lerdorf wrote: > // And perhaps some globbing: > // Import any variable with abc in its name from anywhere. > // Could alternatively use SQL-style or perhaps real regex > // expressions here although I think

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Zeev Suraski schrieb: At 16:28 28/07/2001, Ron Chmara wrote: >On Saturday, July 28, 2001, at 12:52 PM, Zeev Suraski wrote: >>At 06:01 28/07/2001, Phil Driscoll wrote: >>> I and no doubt thousands of others will turn >>>register_globals on because it gives much

Re: [PHP-DEV] Proposal

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Zeev Suraski schrieb: It's pretty close to what I had in mind: At 22:17 28/07/2001, Rasmus Lerdorf wrote: >The best thing about PHP is that it has such a shallow learning curve that >non-programmers can write web apps. > >The worst thing about PHP is that it

Re: [PHP-DEV] Proposal

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Phil Driscoll schrieb: On Sunday 29 July 2001 07:57, Zeev Suraski wrote: > I'm against a global function like this, but in favour of the 2nd flavour, > where you have to explicitly pass a list of variable names to import. I > also think that it should only

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Phil Driscoll schrieb: On Saturday 28 July 2001 20:52, Zeev Suraski wrote: a rebuf to each of my arguments :) Rather than prolong the agony, my point is that in all the cases where a malicious user has the chance to inject a dodgy variable, the code must

Re: [PHP-DEV] Bug #12454: Static references are transient inside methods

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: From: [EMAIL PROTECTED] Operating system: Linux PHP version: 4.0.6 PHP Bug Type: Variables related Bug description: Static references are transient inside methods Another unfortunate bug with references appears to be that statics

Re: [PHP-DEV] Bug #12450: Segfaults if recode is loaded after mysqlor imap

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Heikki Korpela schrieb: On 28 Jul 2001 [EMAIL PROTECTED] wrote: > Recode versions tested: 3.5d, 3.6. > PHP versions tested: 4.0.6. I'd like to add Apache 1.3.19 on OpenBSD-current (i386) with PHP 4.0.6, recode 3.6 and mysql 3.23.40 (non-bundled) to platforms

Re: [PHP-DEV] Bug #12455: Srand and shuffle give odd results

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: From: [EMAIL PROTECTED] Operating system: SunOS 5.8 (Solaris) PHP version: 4.0.4pl1 PHP Bug Type: *Math Functions Bug description: Srand and shuffle give odd results I'm using the following code to create random strings (passwords):

Re: [PHP-DEV] Re: Proposal

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! "Jeffrey A.Stuart" schrieb: I like this proposal a LOT! See, what I and a few of my friends have recently been doing is starting to teach PHP to website owners. And they have all been taking to it VERY WELL!!! (Actually Rasmus, you may remember this. You were

Re: [PHP-DEV] Object Overloading Interface

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Sterling Hughes schrieb: On Mon, 30 Jul 2001, Stig S. Bakken wrote: > Sterling Hughes wrote: > > > > g'day, > > > > I'm just sending a message to check how different the OO overloading > > interface will be in the Zend Engine 2? I'm currently writing an > >

[PHP-DEV] HEY RASMI SRAS -- READ THE BOTTOM OF THE MESSAGE

2001-07-30 Thread Brian Tanner
To unsubscribe, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] crontab support for PHP

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! "Stig S. Bakken" schrieb: Max Landborn wrote: > > Hello everyone! > > I'm new to this list, therefore I do not know if you have discussed this > matter before. I'm interested in something like crontab for PHP. This should > be plattform independent and easy to

Re: [PHP-DEV] crontab support for PHP

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Max Landborn schrieb: > Max Landborn wrote: > > > > Hello everyone! > > > > I'm new to this list, therefore I do not know if you have discussed this > > matter before. I'm interested in something like crontab for PHP. This should > > be plattform independent

Re: [PHP-DEV] Chora installed

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Alexander Merz schrieb: > > I'm completely open to better solutions, but haven't actually be able to > > find any. We _could_ start browser sniffing I guess. > My experience is that you have to make fonts slightly bigger for > Netscape 4.x on X11 and Opera. It

Re: [PHP-DEV] PHP logfile of PHP variables and scripts

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! "Stig S. Bakken" schrieb: Alex Vincent wrote: > > One thing I've been thinking about recently is a desire for PHP to > provide a function whereby PHP scripts can log incoming variables (such > as $HTTP_POST_VARS) and the PHP scripts which process them. Such a

Re: [PHP-DEV] Bug #12456: PHP does not compile with --with-apxs2

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: From: [EMAIL PROTECTED] Operating system: Linux Slackware 8.0 PHP version: 4.0.6 PHP Bug Type: Compile Failure Bug description: PHP does not compile with --with-apxs2 Apache 2.0.16 was configured with --enable-so PHP was configured

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Zeev Suraski schrieb: At 01:04 29/07/2001, Phil Driscoll wrote: >On Saturday 28 July 2001 20:52, Zeev Suraski wrote: > >a rebuf to each of my arguments :) > >Rather than prolong the agony, my point is that in all the cases where a >malicious user has the

Re: [PHP-DEV] Proposal

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Zeev Suraski schrieb: At 00:48 29/07/2001, Rasmus Lerdorf wrote: > > I'm against a global function like this, but in favour of the 2nd flavour, > > where you have to explicitly pass a list of variable names to import. > >Actually, I mostly had something like:

Re: [PHP-DEV] Proposal

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Zeev Suraski schrieb: At 00:27 29/07/2001, Heikki Korpela wrote: >On Sat, 28 Jul 2001, Rasmus Lerdorf wrote: > > > // And perhaps some globbing: > > // Import any variable with abc in its name from anywhere. > > // Could alternatively use SQL-style or perhaps

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Zeev Suraski schrieb: At 10:27 29/07/2001, Phil Driscoll wrote: >On Sunday 29 July 2001 17:35, Zeev Suraski wrote: > > *sigh* :) As I said numerous times, PHP gives you standard clean ways to > > test your variables without generating E_NOTICE's, namely,

Re: [PHP-DEV] CVS Account Request

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! CVS Account Request schrieb: Full name: Serdar Soydemir Email: [EMAIL PROTECTED] ID: tpug Purpose: I am one of the council-members of Turkiye PHP Users Group, www.php.org.tr. We are planning to work on Turkish translation of PHP Manual. If no one/team is

Re: [PHP-DEV] Bug #12455 Updated: Srand and shuffle give odd results

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: ID: 12455 Updated by: rasmus Reported By: [EMAIL PROTECTED] Status: Open Bug Type: *Math Functions Operating System: SunOS 5.8 (Solaris) PHP Version: 4.0.4pl1 New Comment: I don't think I understand what the problem is here. I tested

Re: [PHP-DEV] Bug #12453: comparing 0==null is true?

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: Hi btanner! On Sun, 29 Jul 2001, [EMAIL PROTECTED] wrote: > From: [EMAIL PROTECTED] > Operating system: Win2k > PHP version: 4.0.6 > PHP Bug Type: Scripting Engine problem > Bug description: comparing 0=="null" is true? > > If you

Re: [PHP-DEV] Security Issues - a bit of my experience

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Stephen van Egmond schrieb: Rasmus Lerdorf ([EMAIL PROTECTED]) wrote: > Think about whether in each of these cases it would have happened if the > developers of the app had developed with E_NOTICE on. In a high number of > these cases it probably wouldn't. And

Re: [PHP-DEV] Security techniques

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Stephen van Egmond schrieb: I was going to reply to Phil Driscoll's post (from Friday) about E_SECURITY warning level, but thought it might belong better in a different thread. This thread is for collecting some ideas for security enhancements that can happen

Re: [PHP-DEV] Bug #12456: PHP does not compile with --with-apxs2

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Sascha Schumann schrieb: On 29 Jul 2001, [EMAIL PROTECTED] wrote: > From: [EMAIL PROTECTED] > Operating system: Linux Slackware 8.0 > PHP version: 4.0.6 > PHP Bug Type: Compile Failure > Bug description: PHP does not compile with --with-apxs2 > > > Apache

Re: [PHP-DEV] Security techniques

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Chuck Hagenbuch schrieb: Quoting Rasmus Lerdorf [EMAIL PROTECTED]>: > Huh? I use this all the time in my apps. There is absolutely nothing > wrong with having both GET and POST method variables at the same time. > Disallowing this would break almost every app

Re: [PHP-DEV] Security techniques

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Rasmus Lerdorf schrieb: > Have PHP reject (fail to process, die, whatever) a hit that is > anomalous. Definitions of anomalous: > > 1. GET variables set while METHOD != GET > > i.e. > form action="foo.php?x=1" method=POST> > ... > /form> Huh? I use this all

Re: [PHP-DEV] Security techniques

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Rasmus Lerdorf schrieb: > > Huh? I use this all the time in my apps. There is absolutely nothing > > wrong with having both GET and POST method variables at the same time. > > Disallowing this would break almost every app I have ever written. > > Well, it

Re: [PHP-DEV] Security techniques

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Chuck Hagenbuch schrieb: Quoting Rasmus Lerdorf [EMAIL PROTECTED]>: > As long as it works with all browsers, which as far as I can tell it does, > then it doesn't really concern me that some servers don't support it. > Apache will definitely always support

Re: [PHP-DEV] How is a Syntax Highlight editor made ?

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! "Arcadius A." schrieb: Hello ... It shouldn't be so difficult to make a simple text exitor like Notepad but how to make it have a syntax hightlight ability ? Is there any document dealing with how to make such aditor for PHP or for any other language ?

Re: [PHP-DEV] Bug #12457: Mail()

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: From: [EMAIL PROTECTED] Operating system: Widnows 98 PHP version: 4.0.6 PHP Bug Type: PHP options/info functions Bug description: Mail() I want to know , if the function mail() it can be placed in the middle of the page. Without

Re: [PHP-DEV] Proposal

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Stephen van Egmond schrieb: Rasmus Lerdorf ([EMAIL PROTECTED]) wrote: > How to get there... > > For 4.0.7: > > - We leave all default configuration settings as they are now. > - We add $_GET, $_POST, $_COOKIE, $_ENV, $_SERVER and perhaps make them >

Re: [PHP-DEV] CVS Account Request

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! CVS Account Request schrieb: Full name: Halil Sen Email: [EMAIL PROTECTED] ID: halilsen Purpose: Maintaining www.php.net, Developing the PHP runtime -- PHP Development Mailing List http://www.php.net/> To unsubscribe, e-mail: [EMAIL PROTECTED] For additional

Re: [PHP-DEV] Bug #12403 Updated: VARIANT.c : error C2065 'CP_SYMBOL' : undeclared identifier

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: ID: 12403 Updated by: phanto Reported By: [EMAIL PROTECTED] Old Status: Open Status: Closed Bug Type: COM related Operating System: NT 4 PHP Version: 4.0.6 New Comment: forgot to close Previous Comments:

Re: [PHP-DEV] Bug #12455 Updated: Srand and shuffle give odd results

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: ID: 12455 User updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] Status: Open Bug Type: *Math Functions Operating System: SunOS 5.8 (Solaris) PHP Version: 4.0.4pl1 New Comment: Well, when I run that code I get 4, not 500.

Re: [PHP-DEV] Bug #12457 Updated: Mail()

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: ID: 12457 Updated by: mfischer Reported By: [EMAIL PROTECTED] Old Status: Open Status: Closed Bug Type: PHP options/info functions Operating System: Widnows 98 PHP Version: 4.0.6 New Comment: Yes, you can call it whereever you want.

Re: [PHP-DEV] php+apache2 anyone?

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: Anyone got an Apache2 running (which one) with PHP (which one) ? thx ciao -- teodor -- PHP Development Mailing List http://www.php.net/> To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To

Re: [PHP-DEV] JAVA support.

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! SlowPork schrieb: Hello. I instantiated new class [ eg.? $system = new Java('java.lang.System'); ?> ]. I got blank response, and that child of Apache died. Is this a bug that I should report? or I'm missing somthing here? Any expert please give me some

[PHP-DEV] Bug #12462: fix the silly download script

2001-07-30 Thread nitedog
From: [EMAIL PROTECTED] Operating system: unix PHP version: 4.0.6 PHP Bug Type: Unknown/Other Function Bug description: fix the silly download script could you please make your download script compatable with fetch? its really retarded that people have to jump thru hoops

Re: [PHP-DEV] Security techniques

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!!vUNSUBSCRIBE ME PLEASE!! Stephen van Egmond schrieb: Zeev Suraski ([EMAIL PROTECTED]) wrote: > At 12:04 29/07/2001, Stephen van Egmond wrote: > >2. when a uploaded file fails is_uploaded_file(). > > My English parser bailed out on this one :) How's

Re: [PHP-DEV] Security Issues - a bit of my experience

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! Stephen van Egmond schrieb: Zeev Suraski ([EMAIL PROTECTED]) wrote: > - register_globals=on leads to insecure code, which was demonstrated time > and time again in the past. > - Once it's off, we're going to provide methods of accessing variables > which are

RE: [PHP-DEV] Re: Proposal

2001-07-30 Thread Zeev Suraski
At 01:07 30/07/2001, Marc Boeren wrote: Hi, force a prefix onto the variable name. I.e., import_globals(GPC, form_); I like this idea (the whole idea of import_globals is good, I think, but I'd rather call it accept_globals, but more on that later :), only this would make it difficult to

Re: [PHP-DEV] Bug #12461: browser hangs unless I uncheck keep alives in IIS5.0

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!! [EMAIL PROTECTED] schrieb: From: [EMAIL PROTECTED] Operating system: win2k PHP version: 4.0.6 PHP Bug Type: Any Bug description: browser hangs unless I uncheck keep alives in IIS5.0 Upgraded from PHP4.04pl to PHP4.06 and now the browsers are hanging. I am

Re: [PHP-DEV] Security Issues - a bit of my experience

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!! Zeev Suraski schrieb: At 21:34 29/07/2001, Stephen van Egmond wrote: >Zeev Suraski

Re: [PHP-DEV] Bug #12432 Updated: not valid mysql ressource

2001-07-30 Thread Ramsi Sras
UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME PLEASE!!UNSUBSCRIBE ME

[PHP-DEV] Bug #12331 Updated: segfault with incorrect mysql_connect() parameters

2001-07-30 Thread sniper
ID: 12331 Updated by: sniper Reported By: [EMAIL PROTECTED] Old Status: Feedback Status: Closed Bug Type: Reproducible crash Operating System: Linux 2.4.7 PHP Version: 4.0.6 New Comment: User feedback: -- Sorry for sending the update this way but I didn't supply a password to the

Re: [PHP-DEV] Security Issues - a bit of my experience

2001-07-30 Thread Phil Driscoll
On Sunday 29 July 2001 19:42, Stephen van Egmond wrote: will produce warnings if $x is not set. If you don't want the warnings, you have to replace it with: if (isset($x) $x) { } if it's set and it's true...? ugh. One is then tempted to look for replacement

RE: [PHP-DEV] Re: Proposal

2001-07-30 Thread Marc Boeren
accept_globals(GPC, 'user', 'password', 'value_*', 'more'); I think that this is a clear example of the enemy of good is the even better (I'm not sure how well this translates to English :). Good enough to get your point :-) behavior only prefixed, use import_globals(GPC, form_).

[PHP-DEV] Bug #12463: set_attribute($attName, 0) does not add attributes

2001-07-30 Thread jw
From: [EMAIL PROTECTED] Operating system: Win2K PHP version: 4.0.6 PHP Bug Type: DOM XML related Bug description: set_attribute($attName, 0) does not add attributes When I try to add an attribute with value 0 to a DomNode, like this: $cNode-set_attribute(attributeName,

Re: [PHP-DEV] Security Issues - a bit of my experience

2001-07-30 Thread Zeev Suraski
At 01:22 30/07/2001, Phil Driscoll wrote: I agree - to my mind empty is broken in this respect and also in the respect that it returns true for a string containing '0'. Consequently I (and I assume everyone else, unless I'm missing some occasion that this behaviour is useful) can never use empty

[PHP-DEV] Bug #12463 Updated: set_attribute($attName, 0) does not add attributes

2001-07-30 Thread jw
ID: 12463 User updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] Status: Open Bug Type: DOM XML related Operating System: Win2K PHP Version: 4.0.6 New Comment: When I try to add an attribute with value 0 to a DomNode, like this: $cNode-set_attribute(attributeName, 0); The

Re: [PHP-DEV] php+apache2 anyone?

2001-07-30 Thread teo
Hi Ramsi! On Mon, 30 Jul 2001, Ramsi Sras wrote: UNSUBSCRIBE ME PLEASE!! geez dude, drink less coffee :) then just jump with your eyes to the bottom of this mail. see something? if not, save the mail and grep unsubscribe mail or just write a PHP script to find the magic word. [

[PHP-DEV] Bug #12342 Updated: error in configuration with pthread

2001-07-30 Thread longinos . ferrando
ID: 12342 User updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] Old Status: Feedback Status: Open Bug Type: PHP options/info functions Operating System: RH 7.1 PHP Version: 4.0.6 New Comment: I get some warnings: zlib_fopen_wrapper.c:59: warning: initialization from incompatible

[PHP-DEV] zend_llist versus hash table

2001-07-30 Thread vrabel
Hi folks. I wrote the fancy template engine in php and now I am rewritting it as a C module and want to main the both version. I look into the sources of the php and understand a lot of thing, but have some questions. I will have aproximately 30 items to store in some kind of array and I don't

Re: [PHP-DEV] Bug #12456: PHP does not compile with --with-apxs2

2001-07-30 Thread Jani Taskinen
Sascha, don't you have any web browsers to use? Next time, save my time and use the damned web interface to answer to the bug reports. Or don't do it at all. --Jani On Sun, 29 Jul 2001, Sascha Schumann wrote: On 29 Jul 2001, [EMAIL PROTECTED] wrote: From: [EMAIL PROTECTED]

[PHP-DEV] Bug #12457 Updated: Mail()

2001-07-30 Thread sniper
ID: 12457 Updated by: sniper Reported By: [EMAIL PROTECTED] Old Status: Closed Status: Bogus Bug Type: PHP options/info functions Operating System: Widnows 98 PHP Version: 4.0.6 Previous Comments: [2001-07-29 15:33:13]

Re: [PHP-DEV] Security Issues

2001-07-30 Thread teo
Hi Zeev! On Sun, 29 Jul 2001, Zeev Suraski wrote: Generally I agree, except I don't think we should go as far as changing the theme of PHP. Putting form variables into a different space would be the simplest and equally secure way to do the trick. yes, but a Request class can be enriched

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Cynic
At 19:01 7/27/2001, Rasmus Lerdorf wrote the following: -- That's also not true. Is using $foo all that better than $_GET[foo]? For a neophyte user - most definitely. Rasmus, I disagree. As someone who's first programming language

[PHP-DEV] Bug #12432 Updated: not valid mysql ressource

2001-07-30 Thread sniper
ID: 12432 Updated by: sniper Reported By: [EMAIL PROTECTED] Old Status: Open Status: Closed Bug Type: MySQL related Operating System: GNU Linux PHP Version: 4.0.6 New Comment: This is still a feature, not a bug. Previous Comments:

[PHP-DEV] Bug #12342 Updated: error in configuration with pthread

2001-07-30 Thread sniper
ID: 12342 Updated by: sniper Reported By: [EMAIL PROTECTED] Old Status: Open Status: Feedback Bug Type: PHP options/info functions Operating System: RH 7.1 PHP Version: 4.0.6 New Comment: Try this: # rm config.cache # ./configure # make clean ; make Do you get 'php' binary now? --Jani

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Anil Madhavapeddy
Cynic wrote: Of course it is. $foo is conceptually simpler than $_GET[foo]. I don't see how you can say it isn't. $foo is conceptually a few keystrokes. That's all simplicity I can see. I think that's the whole point ... 1) $foo 2) $_GET[foo] One looks like PHP, the other looks like

[PHP-DEV] Bug #12460 Updated: ZLIBG(v) redefined in ext/zlib/php_zlib.h

2001-07-30 Thread sniper
ID: 12460 Updated by: sniper Reported By: [EMAIL PROTECTED] Old Status: Open Status: Closed Bug Type: Compile Failure Operating System: SuSE 7.1 PHP Version: 4.0CVS-2001-07-29 New Comment: Works now just fine. Please grab the latest snapshot. Previous Comments:

[PHP-DEV] RE: Bug #12342 Updated: error in configuration with pthread

2001-07-30 Thread Longinos Ferrando Sanchis
Yes, I get a php executable and I get the same warnings in the make proccess and no modules is generated. -Mensaje original- De: Bug Database [mailto:[EMAIL PROTECTED]] Enviado el: lunes 30 de julio de 2001 12:01 Para: [EMAIL PROTECTED] Asunto: Bug #12342 Updated: error in configuration

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Cynic
At 12:06 7/30/2001, Anil Madhavapeddy wrote the following: -- Cynic wrote: Of course it is. $foo is conceptually simpler than $_GET[foo]. I don't see how you can say it isn't. $foo is conceptually a few keystrokes. That's all

[PHP-DEV] Bug #12464: IIS5.0 header problems

2001-07-30 Thread j . gray
From: [EMAIL PROTECTED] Operating system: win 2k PHP version: 4.0.6 PHP Bug Type: Session related Bug description: IIS5.0 header problems The below message is getting spewed from an IIS5.0 win2k PHP 4.06 MySQL 3.23.39a App. when it shouldn't HTTP/1.1 200 OK Server:

Re: [PHP-DEV] Security Issues (isset stuff)

2001-07-30 Thread teo
Hi Phil! On Mon, 30 Jul 2001, Phil Driscoll wrote: On Sunday 29 July 2001 19:13, [EMAIL PROTECTED] wrote: ...stuff pointing out how you'd get no warning messages when the evil guy sets the variables from outside. You missed my point, which is the good guy would get the warning messages

[PHP-DEV] Bug #12342 Updated: error in configuration with pthread

2001-07-30 Thread sniper
ID: 12342 Updated by: sniper Reported By: [EMAIL PROTECTED] Old Status: Feedback Status: Bogus Bug Type: PHP options/info functions Operating System: RH 7.1 PHP Version: 4.0.6 New Comment: User error. (read INSTALL file next time..) Previous Comments:

[PHP-DEV] Bug #12455 Updated: Srand and shuffle give odd results

2001-07-30 Thread sulka
ID: 12455 User updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] Status: Open Bug Type: *Math Functions Old Operating System: SunOS 5.8 (Solaris) Operating System: All Old PHP Version: 4.0.4pl1 PHP Version: 4.0.4pl1, 4.0.6 New Comment: The same problem also occurs on PHP 4.0.6 on

Re: [PHP-DEV] Bug #12464: IIS5.0 header problems

2001-07-30 Thread teo
Hi j.gray! On Mon, 30 Jul 2001, [EMAIL PROTECTED] wrote: From: [EMAIL PROTECTED] Operating system: win 2k PHP version: 4.0.6 PHP Bug Type: Session related Bug description: IIS5.0 header problems The below message is getting spewed from an IIS5.0 win2k PHP 4.06 MySQL

[PHP-DEV] Bug #12445 Updated: ./configure suxx

2001-07-30 Thread sniper
ID: 12445 Updated by: sniper Reported By: [EMAIL PROTECTED] Old Status: Open Status: Feedback Bug Type: Compile Failure Operating System: Linux 2.2.19 PHP Version: 4.0.6 New Comment: What is the complete configure line you use? And what does config.log have about this? Previous Comments:

Re: [PHP-DEV] Proposal

2001-07-30 Thread Thies C. Arntzen
that all makes a lot of sense to me! re, tc On Sat, Jul 28, 2001 at 10:17:42PM -0700, Rasmus Lerdorf wrote: The best thing about PHP is that it has such a shallow learning curve that non-programmers can write web apps. The worst thing about PHP is that it has such a shallow

[PHP-DEV] Bug #12425 Updated: apache core dumps when started with a php.ini in /usr/local/lib

2001-07-30 Thread sniper
ID: 12425 Updated by: sniper Reported By: [EMAIL PROTECTED] Old Status: Open Status: Feedback Bug Type: Apache related Operating System: Linux - Red Hat 7.1 PHP Version: 4.0.6 New Comment: Does it really segfault on that line? #0 0x405b4d63 in virtual_file_ex (state=0xbfffd5b8, You

Re: [PHP-DEV] Security Issues (isset stuff)

2001-07-30 Thread Phil Driscoll
On Monday 30 July 2001 11:13, [EMAIL PROTECTED] wrote: Hi Phil! Yes Phil, but does your codes rely on warnings messages alone? No - my code relies on exceedingly thorough and paranoid validation of input, carefully constructed program flow, painstaking testing at all stages and no doubt

Re: [PHP-DEV] Security Issues (isset stuff)

2001-07-30 Thread Phil Driscoll
On Monday 30 July 2001 11:52, Phil Driscoll wrote: Some people agree with me, others disgree. As long as you have conrol of your php.ini file, it isn't a problem :) - although it will (indeed already does!) tend to discourage me, and probably others, from releasing any of my code for public

Re: [PHP-DEV] Security Issues

2001-07-30 Thread Cynic
At 13:44 7/28/2001, Zeev Suraski wrote the following: -- At 05:08 27/07/2001, [EMAIL PROTECTED] wrote: Addressed to: Rasmus Lerdorf [EMAIL PROTECTED] [EMAIL PROTECTED] Or you can simply stop these people from using PHP

Re: [PHP-DEV] function basename()

2001-07-30 Thread Marcus
[EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Marcus! On Thu, 26 Jul 2001, Marcus wrote: shouldn't the function basename() return only the script part and not the query part? I guess basename() is a filesistem function, and hence it doesn't make sense

[PHP-DEV] Special Deal This Week Only !!!

2001-07-30 Thread free
Title: Get Acceess to 10 Sites For $1.99 Only !!! Do not miss out on the opportunity to get a full week of access to 8 websites for the amazing low price of only $1.99, including Big Tit Fantasies - The Ultimate Tit Lover's Paradise! You could search the internet for

[PHP-DEV] Bug #12432 Updated: not valid mysql ressource

2001-07-30 Thread etm
ID: 12432 User updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] Status: Closed Bug Type: MySQL related Operating System: GNU Linux PHP Version: 4.0.6 New Comment: I don't think it's a feature, its bug 8634, sorry I missed that entry. 8634 is a urgent one I think! Previous

[PHP-DEV] Bug #12432 Updated: not valid mysql ressource

2001-07-30 Thread etm
ID: 12432 User updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] Old Status: Closed Status: Duplicate Bug Type: MySQL related Operating System: GNU Linux PHP Version: 4.0.6 Previous Comments: [2001-07-30

  1   2   >