php-general Digest 26 Sep 2004 11:43:40 -0000 Issue 3018

2004-09-26 Thread php-general-digest-help
php-general Digest 26 Sep 2004 11:43:40 - Issue 3018 Topics (messages 197846 through 197868): Re: Problems installing smarty on a shared host 197846 by: Curt Zirzow 197848 by: Pablo Gosse Re: ftp_put Problems 197847 by: Marek Kilimajer 197849 by: raditha

[PHP] OT - HTML Terminal ?

2004-09-26 Thread Dave Restall - System Administrator,,,
Hi, this is severely off topic so please feel free to ignore it :-) I have an intranet application that currently is accessed using a browser, no problems there, however I have been asked if I can get rid of the browser so that the user's are not encouraged to surf so readily. I initially

Re: [PHP] php security on shared hosts

2004-09-26 Thread raditha dissanayake
Pablo Gosse wrote: Hi folks. I recently set up hosting for my site and have noticed something which is making me nervous. If you are really nervous you cannot use shared hosting. Simple as that. Even if other users don't access your stuff, the root user can. While it's against the system

[PHP] What's going on?

2004-09-26 Thread Phpu
For the last 2 days i haven't received emails. What's going on with this mailing list?

Re: [PHP] OT - HTML Terminal ?

2004-09-26 Thread Marek Kilimajer
Dave Restall - System Administrator,,, wrote: Hi, this is severely off topic so please feel free to ignore it :-) I have an intranet application that currently is accessed using a browser, no problems there, however I have been asked if I can get rid of the browser so that the user's are not

[PHP] Getting Header info with PHP?

2004-09-26 Thread Nick Wilson
Hi everyone, Can anyone tell me which functions/areas i need to look at to do the following? * I need to check a proxy server. * I want to have the proxy fetch a php page at my site * my php page should show me *every* header the proxy server sends Is that possible? much thanks, and

[PHP] Instant messenger

2004-09-26 Thread Phpu
Hi, I wanna create an instant private messenger. This kind of IM i have seen on dating sites. I've googled for such IM but i found nothing. Can someone please help me with this? Thank you

Re: [PHP] Conceptual ?: using 'multi-purpose' form for validation

2004-09-26 Thread Marek Kilimajer
Whil Hentzen wrote: I can get a single form to call itself again if there's nothing fancy going on. This code will prompt the user for their mail if it doesn't already exist, and if the email does exist, provides some data out of database. ?php $email = (isset($_POST['email']) ?

Re: [PHP] What's going on?

2004-09-26 Thread Marek Kilimajer
Phpu wrote: For the last 2 days i haven't received emails. What's going on with this mailing list? It might have something to do with the fact your clock is 2 days behind. Have you been time travelling? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit:

[PHP] Hacker IP and Script

2004-09-26 Thread Jason Paschal
This is of questionable relevance, but I'm sure it can serve to heighten awareness of vulnerabilities for those PHP'ers with similar scripts that involve loading files based upon query string info. We have installed Admin Secure over our PHP-Nuke CMS, and Admin Secure recently sent us an email of

Re: [PHP] Hacker IP and Script

2004-09-26 Thread Adrian
I would remove bad scripts like *Nuke. Their code just sucks and has really lots of bugs. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Problem with uploaded file

2004-09-26 Thread Sagar C Nannapaneni
Hello folks, I'm facing some sort of problem here. I'm uploading a file from the clients system to the server. Everything working fine except that the file that is being uploaded is having a file permission of 600 ie only read and write to the owner only. So i'm not able to change the

[PHP] Re: Problem with uploaded file

2004-09-26 Thread Harlequin
Sagar This is the code I use to change file permissions on a file that has been uploaded by a user to a predefined area with a predefined filename: // Change File Permissions: chmod({$uploadfile}, 0644); -- - Michael Mason Arras People www.arraspeople.co.uk

[PHP] GLOBAL reserved word

2004-09-26 Thread Pahlevanzadeh Mohsen
Dears,We can introduce a external variable to our function with GLOBAL reserved word.same following : ? $n=3 function nn() { global $n; echo $n; }//end of func ? But i need to introduce a array.Name of my array is month. I typed global $month;.But it didn't work. Please guide me until i

Re: [PHP] GLOBAL reserved word

2004-09-26 Thread Marek Kilimajer
Pahlevanzadeh Mohsen wrote: Dears,We can introduce a external variable to our function with GLOBAL reserved word.same following : ? $n=3 function nn() { global $n; echo $n; }//end of func ? But i need to introduce a array.Name of my array is month. I typed global $month;.But it didn't

Re: [PHP] Re: simple templateing

2004-09-26 Thread Paul Bissex
On 25 Sep 2004 19:51:46 -, Matthew Weier O'Phinney [EMAIL PROTECTED] wrote: I use Smarty. The thing about Smarty is it can be as simple or as complex as you want it. I personally feel you could do exactly as you describe with it -- just tell your designers the bare minimum of what you will

Re: [PHP] php security on shared hosts

2004-09-26 Thread Tim Traver
Chris, I believe that is the reason that the PHP group came up with the open_basedir directive. The open_basedir prevents you from looking into anything higher than a particular directory tree using PHP. So, a combination of safe_mode and open_basedir should prevent your script from being

Re: [PHP] php security on shared hosts

2004-09-26 Thread Tim Traver
Oh, and I forgot, you can also specify specific include directories to be allowed for a particular user... Tim. At 09:47 PM 9/25/2004, Chris Shiflett wrote: --- Tim Traver [EMAIL PROTECTED] wrote: I can guarantee that is not the way it is supposed to be. We make sure that can't happen by

Re: [PHP] php security on shared hosts

2004-09-26 Thread Marek Kilimajer
Tim Traver wrote: Chris, I believe that is the reason that the PHP group came up with the open_basedir directive. The open_basedir prevents you from looking into anything higher than a particular directory tree using PHP. So, a combination of safe_mode and open_basedir should prevent your

[PHP] Best way to save preferences?

2004-09-26 Thread Victor Spång Arthursson
Which is the best way to save preferences (for a site) to make them easily accessable for changes? What I want is a way to save arrays and read them in again without having to use a database Thankful for suggests, sincerely Victor -- PHP General Mailing List (http://www.php.net/) To

[PHP] Post vars without using html form

2004-09-26 Thread Harry.de
Does anybody know, how to post vars without using html. I'd like to send data to an external website and receive the http answer. The external website awaits post vars from a form. Tanks, Harry -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] 9 line function logic problem

2004-09-26 Thread Mag
Hi, I am going crazy with this function please have a look at it and tell me what i am doing wrong. This is my setup: I have a file called one.html.cache in the directory /cache/ in one.html.cache I have a time()+ 3600 number (eg: 1096224755) I need to know if the number in that file is still

Re: [PHP] Best way to save preferences?

2004-09-26 Thread Pahlevanzadeh Mohsen
You should use XML files,But XML files will be lock when you want to multiuser read it. Also arrays is having overhead for your server.Best way is using databses. Yours,Mohsen. --- Victor Spång Arthursson [EMAIL PROTECTED] wrote: Which is the best way to save preferences (for a site) to make

Re: [PHP] Post vars without using html form

2004-09-26 Thread Pahlevanzadeh Mohsen
You must use Socket Programming. PHP have been supported socket programming. You can choose port 80 then use its functions. Yours,Mohsen --- Harry.de [EMAIL PROTECTED] wrote: Does anybody know, how to post vars without using html. I'd like to send data to an external website and receive the

[PHP] Version Controlling

2004-09-26 Thread Stephen Craton
This is slightly off topic, but I feel it's a little something that's worthy of discussion here. I've been interested in running CVS for a while now, but being on a Windows machine is holding me back somewhat, and I'm not entirely sure CVS is even something I need. Basically, I have some

Re: [PHP] Best way to save preferences?

2004-09-26 Thread Marek Kilimajer
Pahlevanzadeh Mohsen wrote: You should use XML files,But XML files will be lock when you want to multiuser read it. It's not necessery to lock files for reading. Also arrays is having overhead for your server.Best way is using databses. Yours,Mohsen. --- Victor Spng Arthursson [EMAIL PROTECTED]

Re: [PHP] Best way to save preferences?

2004-09-26 Thread Jason Wong
On Monday 27 September 2004 01:00, Victor Spng Arthursson wrote: Which is the best way to save preferences (for a site) to make them easily accessable for changes? What I want is a way to save arrays and read them in again without having to use a database serialize(). Or if you want to use

Re: [PHP] Best way to save preferences?

2004-09-26 Thread Pahlevanzadeh Mohsen
Dear,I mean that you can't read XML file in multiuser mode. --- Marek Kilimajer [EMAIL PROTECTED] wrote: Pahlevanzadeh Mohsen wrote: You should use XML files,But XML files will be lock when you want to multiuser read it. It's not necessery to lock files for reading. Also arrays is

Re: [PHP] Version Controlling

2004-09-26 Thread Marek Kilimajer
Stephen Craton wrote: This is slightly off topic, but I feel it's a little something that's worthy of discussion here. I've been interested in running CVS for a while now, but being on a Windows machine is holding me back somewhat, and I'm not entirely sure CVS is even something I need. Basically,

[PHP] Re: Version Controlling

2004-09-26 Thread Greg Beaver
Stephen Craton wrote: This is slightly off topic, but I feel it's a little something that's worthy of discussion here. I've been interested in running CVS for a while now, but being on a Windows machine is holding me back somewhat, and I'm not entirely sure CVS is even something I need. Basically,

Re: [PHP] Post vars without using html form

2004-09-26 Thread Nick Wilson
* and then Pahlevanzadeh Mohsen declared You must use Socket Programming. PHP have been supported socket programming. You can choose port 80 then use its functions. There is an easier way. Use the cURL functions: very simple and doing a search for curl php tutorial or similar will help

Re: [PHP] php security on shared hosts

2004-09-26 Thread Chris Shiflett
--- Tim Traver [EMAIL PROTECTED] wrote: I believe that is the reason that the PHP group came up with the open_basedir directive. The open_basedir prevents you from looking into anything higher than a particular directory tree using PHP. So, a combination of safe_mode and open_basedir

[PHP] RE: Version Controlling

2004-09-26 Thread Stephen Craton
Thanks for the info, but I do have an extra question about CVS. Do I always need access to the internet to get my files to work one them? If I were to go out of town and not have access to the internet, how could I still work on my files? WiredPHP Stephen

[PHP] PHP Counter?

2004-09-26 Thread Nick Wilson
Hi all, I have a script that at the present just outputs '$count .'br /'' after each iteration of a foreach() loop. I have set implicit_flush so that this works. That's clearly monkey poo though eh? :-) Do I have to get into unkown waters and try and make PHP talk to JS to achieve a kind of

Re: [PHP] Best way to save preferences?

2004-09-26 Thread Marek Kilimajer
Pahlevanzadeh Mohsen wrote: Dear,I mean that you can't read XML file in multiuser mode. Can you elaborate? And what about other files? Are they different? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Testing Response of A Proxy with PHP?

2004-09-26 Thread Nick Wilson
hi again all, I cant find any functions that might help me test the response of a proxy server b4 attempting to use it. Do i need to use exec() with ping? Anyone know how to do that? (if that's the case...) mucho grassy arse.. -- Nick W -- PHP General Mailing List (http://www.php.net/) To

Re: [PHP] Testing Response of A Proxy with PHP?

2004-09-26 Thread Marek Kilimajer
Nick Wilson wrote: hi again all, I cant find any functions that might help me test the response of a proxy server b4 attempting to use it. Do i need to use exec() with ping? Anyone know how to do that? (if that's the case...) mucho grassy arse.. What kind of response? If the server is alive, if

Re: [PHP] Testing Response of A Proxy with PHP?

2004-09-26 Thread Nick Wilson
* and then Marek Kilimajer declared I cant find any functions that might help me test the response of a proxy server b4 attempting to use it. Do i need to use exec() with ping? Anyone know how to do that? (if that's the case...) What kind of response? If the server is alive, if the

Re: [PHP] php security on shared hosts

2004-09-26 Thread Jason Wong
On Monday 27 September 2004 02:26, Chris Shiflett wrote: If you do not offer CGI access or any interpreter besides PHP, then I suppose it's better than nothing, but I wouldn't characterize this as safe. I suspect that if I were a user on this host, I could give you a URL that displays another

Re: [PHP] RE: Version Controlling

2004-09-26 Thread Jason Wong
On Monday 27 September 2004 02:28, Stephen Craton wrote: Thanks for the info, but I do have an extra question about CVS. Do I always need access to the internet to get my files to work one them? Yes and no. And depends on where your CVS server is located. Obviously if the computer you're

Re: [PHP] 9 line function logic problem

2004-09-26 Thread bagheera
Hi! Try to globalize the $include_path variable: function is_cache($get_file) { global $include_path; ... } bagheera Mag wrote: Hi, I am going crazy with this function please have a look at it and tell me what i am doing wrong. This is my setup: I have a file called one.html.cache in the directory

RE: [PHP] php security on shared hosts

2004-09-26 Thread Pablo Gosse
[snip] I just published a free article on my Web site about shared hosting: http://shiflett.org/articles/security-corner-mar2004 In short, what you've found is typical for most shared hosts, and safe_mode (a directive created to help mitigate this problem a bit) does little to help. However,

Re: [PHP] Best way to save preferences?

2004-09-26 Thread Robby Russell
On Sun, 2004-09-26 at 10:00, Victor Spng Arthursson wrote: Which is the best way to save preferences (for a site) to make them easily accessable for changes? What I want is a way to save arrays and read them in again without having to use a database Thankful for suggests, sincerely

Re: [PHP] Testing Response of A Proxy with PHP?

2004-09-26 Thread Marek Kilimajer
Nick Wilson wrote: * and then Marek Kilimajer declared I cant find any functions that might help me test the response of a proxy server b4 attempting to use it. Do i need to use exec() with ping? Anyone know how to do that? (if that's the case...) What kind of response? If the server is alive,

Re: [PHP] PHP Counter?

2004-09-26 Thread Marek Kilimajer
Nick Wilson wrote: Hi all, I have a script that at the present just outputs '$count .'br /'' after each iteration of a foreach() loop. I have set implicit_flush so that this works. That's clearly monkey poo though eh? :-) Do I have to get into unkown waters and try and make PHP talk to JS to

Re: [PHP] Testing Response of A Proxy with PHP?

2004-09-26 Thread Nick Wilson
* and then Marek Kilimajer declared OPTIONS * HTTP/1.0 More at http://www.freesoft.org/CIE/RFC/2068/63.htm oookay... i think i understand the page, but how would i imlement that and what would be the difference in that and just pinging the server to see if it's responding? Thanks for

Re: [PHP] Testing Response of A Proxy with PHP?

2004-09-26 Thread Marek Kilimajer
Nick Wilson wrote: * and then Marek Kilimajer declared OPTIONS * HTTP/1.0 More at http://www.freesoft.org/CIE/RFC/2068/63.htm oookay... i think i understand the page, but how would i imlement that $fp = fsockopen (proxy.server.net, 8080, $errno, $errstr, 30); if (!$fp) { echo $errstr

RE: [PHP] php security on shared hosts

2004-09-26 Thread Chris Shiflett
--- Pablo Gosse [EMAIL PROTECTED] wrote: http://shiflett.org/articles/security-corner-mar2004 [snip] Hi, Chris. Thanks for that link. It was incredibly informative. I'm glad you thought so. :-) I just took your code for the file browser and it was able to read the information in all users'

RE: [PHP] php security on shared hosts

2004-09-26 Thread Pablo Gosse
[snip] In short, what you've found is typical for most shared hosts [/snip] I've just been reviewing the way sites are housed on my host, and what directories are readable by the web server and I'm curious to get opinions on this. When I use Chris' file browser script, there is a folder called

Re: [PHP] Testing Response of A Proxy with PHP?

2004-09-26 Thread Nick Wilson
* and then Marek Kilimajer declared oookay... i think i understand the page, but how would i imlement that $fp = fsockopen (proxy.server.net, 8080, $errno, $errstr, 30); if (!$fp) { echo $errstr ($errno)br\n; } else { fputs ($fp, OPTIONS * HTTP/1.0\r\nMax-Forwards: 0\r\n\r\n);

Re: [PHP] php security on shared hosts

2004-09-26 Thread Tim Traver
Ahhh...ok, now you're talking about something else. I thought we were just talking about the security model of PHP only. Yes, if a host has decided to offer another means for CGI that isn't safe, then that is another issue all together...;) I was just talking about PHP's security model. Safe

[PHP] mail function and qmail

2004-09-26 Thread php mysql
mail function in php requires to use 'sendmail'. But I have only 'qmail' on the box. How I can send email in PHP? Thanks -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP] php security on shared hosts

2004-09-26 Thread Tim Traver
Pablo, I tested Chris's script on our systems, and couldn't browse anywhere other than my own directories, so it is possible to set php up on shared hosts that is a lot more secure than what your host has done. May I ask what host this is ? Is it a major one ? Tim. At 02:09 PM 9/26/2004, Pablo

[PHP] Re: mail function and qmail

2004-09-26 Thread M. Sokolewicz
Php Mysql wrote: mail function in php requires to use 'sendmail'. But I have only 'qmail' on the box. How I can send email in PHP? Thanks just pretend it doesn't say sendmail but qmail. It works on both :) -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit:

Re: [PHP] Conceptual ?: using 'multi-purpose' form for validation

2004-09-26 Thread Whil Hentzen
On Sunday 26 September 2004 04:35, Marek Kilimajer wrote: Whil Hentzen wrote: I can get a single form to call itself again if there's nothing fancy going on. This code will prompt the user for their mail if it doesn't already exist, and if the email does exist, provides some data out of

[PHP] Re: mail function and qmail

2004-09-26 Thread Catalin Trifu
Php Mysql wrote: mail function in php requires to use 'sendmail'. But I have only 'qmail' on the box. How I can send email in PHP? Thanks Hi, After u installed qmail, there is a qmail compatible sendmail created for you in /var/lib/qmail/bin (i think that's where it should be). As qmail