php-general Digest 10 Nov 2007 00:39:05 -0000 Issue 5119

2007-11-09 Thread php-general-digest-help
php-general Digest 10 Nov 2007 00:39:05 - Issue 5119 Topics (messages 264263 through 264291): Re: PHP ide? 264263 by: Colin Guthrie 264266 by: Lester Caine 264279 by: Instruct ICC 264281 by: Børge Holen Re: [PHP-DB] Re: MySQL Identifying worst-performing

RE: [PHP] Creating PDF files with more than one font?

2007-11-09 Thread George Pitcher
I want to create a pdf file with several fonts. Which tool is better, pdflib, ezpdf, ? Any suggestions? I can't say which is better, but I use ezpdf and have been able to do multi-font stuff so that I can match corporate styles. George in Edinburgh -- PHP General Mailing List

RE: [PHP] Creating PDF files with more than one font?

2007-11-09 Thread Shelley Shyan
I often see that it uses .afm files, can it use .ttf format files? If yes, how to? Thank you very much. Regards, Shelley -Original Message- From: George Pitcher [mailto:[EMAIL PROTECTED] Sent: Friday, November 09, 2007 3:38 PM To: Shelley Shyan; php-general@lists.php.net Subject: RE:

RE: [PHP] Creating PDF files with more than one font?

2007-11-09 Thread George Pitcher
I've only used .afm. I seem to recall that there was a conversion utility available. George -Original Message- From: Shelley Shyan [mailto:[EMAIL PROTECTED] Sent: 9 November 2007 8:16 am To: George Pitcher; php-general@lists.php.net Subject: RE: [PHP] Creating PDF files with more

Re: [PHP] PHP ide? OT

2007-11-09 Thread Børge Holen
On Friday 09 November 2007 02:05:32 you wrote: On Fri, 2007-11-09 at 01:03 +0100, Børge Holen wrote: oh no, I wasn't hinting your way, I more or less commented on tersus beeing eclipse. It's like the ubunty hype, witch fails to state on the homepage: we're practically

Re: [PHP] PHP ide?

2007-11-09 Thread Lester Caine
Robert Cummings wrote: Ubuntu = Debian + New Life Mandriva has Eclipse and PHPEclipse 'out of the box' along with Apache and PHP I can build a fully functional development machine from a pile of bits in under an hour ;) And currently that includes downloading the latest updates :) -- Lester

Re: [PHP] Re: [PHP-DB] Re: MySQL Identifying worst-performing codes

2007-11-09 Thread Mark Summers
There may be something useful here... http://forge.mysql.com/ chris smith wrote: On Nov 9, 2007 1:18 AM, Colin Guthrie [EMAIL PROTECTED] wrote: Lasitha Alawatta wrote: There is a tool call idera (SQL diagnostic manager). Basically it is a performance monitoring and diagnostics

[PHP] Re: PHP ide?

2007-11-09 Thread Colin Guthrie
Lester Caine wrote: Robert Cummings wrote: Ubuntu = Debian + New Life Mandriva has Eclipse and PHPEclipse 'out of the box' along with Apache and PHP I can build a fully functional development machine from a pile of bits in under an hour ;) And currently that includes downloading the

RE: [PHP] Creating PDF files with more than one font?

2007-11-09 Thread Jay Blanchard
[snip] I often see that it uses .afm files, can it use .ttf format files? [/snip] FPDF can use true type fonts -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] PHP ide?

2007-11-09 Thread Lester Caine
Tiago Silva wrote: Lester Caine escreveu: Robert Cummings wrote: Ubuntu = Debian + New Life Mandriva has Eclipse and PHPEclipse 'out of the box' along with Apache and PHP I can build a fully functional development machine from a pile of bits in under an hour ;) And currently that includes

[PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread robert mena
Hi, One server that hosts several domains ended up with the message Owned by W4n73d H4ck3r.While still performing an audit I am very confident that this was caused by a php script (it is a linux server) uploaded via FTP or by a defective site hosted (perhaps vulnerable version of a CMS). The

Re: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread Daniel Brown
On Nov 9, 2007 9:27 AM, robert mena [EMAIL PROTECTED] wrote: Hi, One server that hosts several domains ended up with the message Owned by W4n73d H4ck3r.While still performing an audit I am very confident that this was caused by a php script (it is a linux server) uploaded via FTP or by a

Re: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread David Giragosian
On 11/9/07, Daniel Brown [EMAIL PROTECTED] wrote: On Nov 9, 2007 9:27 AM, robert mena [EMAIL PROTECTED] wrote: Hi, One server that hosts several domains ended up with the message Owned by W4n73d H4ck3r.While still performing an audit I am very confident that this was caused by a

Re: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread robert mena
Hi Daniel, Thanks for the reply. I agree that there are steps that go outside php scope (chroot apache etc) but I think this partially belongs to this list specially since google shows that the same message (perhaps a copycat?) appears in tons of sites. I was hoping that someone already had

RE: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread Edward Kay
I'd be interested in reading this thread. OK with me to keep it on the list. Ditto. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread Daniel Brown
On Nov 9, 2007 10:05 AM, robert mena [EMAIL PROTECTED] wrote: Hi Daniel, Thanks for the reply. I agree that there are steps that go outside php scope (chroot apache etc) but I think this partially belongs to this list specially since google shows that the same message (perhaps a copycat?)

[PHP] chrooted php5-cgi in a non chrooted apache

2007-11-09 Thread Joerg Schoppet
Hi, actually I try to make my webserver-installation more secure. I've something in mind, but don't know if it is possible and if so, how to do it ;-) Actually I have the following config: Directory-Structure: /var/www domain1 conf cgi-bin web htdocs logs domain2

Re: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread robert mena
Hi Daniel, According to the audit this happened yesterday. I am searching astalavista but could not find anything, probably because I am being too specific. From the php side (or closely) what steps would you recommend in order to have a better security? I could not find a consistent 'list' of

Re: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread Daniel Brown
On Nov 9, 2007 10:48 AM, robert mena [EMAIL PROTECTED] wrote: Hi Daniel, According to the audit this happened yesterday. I am searching astalavista but could not find anything, probably because I am being too specific. From the php side (or closely) what steps would you recommend in order

Re: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread Tom Chubb
Me too. Guess a lot of us can learn something here from another's misfortune. Thanks Robert and good luck On 09/11/2007, Edward Kay [EMAIL PROTECTED] wrote: I'd be interested in reading this thread. OK with me to keep it on the list. Ditto. -- PHP General Mailing List

RE: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread Bastien Koert
me, too this would be interesting bastien Date: Fri, 9 Nov 2007 09:01:09 -0600 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] CC: [EMAIL PROTECTED]; php-general@lists.php.net Subject: Re: [PHP] Help securing a server : Owned by W4n73d H4ck3r On 11/9/07, Daniel Brown [EMAIL PROTECTED] wrote:

RE: [PHP] Re: PHP ide?

2007-11-09 Thread Instruct ICC
Ubuntu = Debian + New Life Mandriva has Eclipse and PHPEclipse 'out of the box' along with Apache and PHP I can build a fully functional development machine from a pile of bits in under an hour ;) And currently that includes downloading the latest updates :) +1 for Mandriva

RE: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread Instruct ICC
The person doing this seems to be relatively new to the scene, only defacing websites with common vulnerabilities that you can find anywhere on the Internet (http://astalavista.box.sk/ for example). Check out Zone-H (http://www.zone-h.net/) to see if your domains are on there, and

RE: [PHP] PHP ide? Back On Topic

2007-11-09 Thread Instruct ICC
But I highly doubt you'll find a first-class PHP code IDE (Zend Studio) that is also a first-class HTML layout tool (Dreamweaver). My 2006 rant said I'll accept multiple tools. I'll have to find that post and see if my needs have changed. Ahh here: I am looking for a tool (or tools) that

Re: [PHP] Re: PHP ide?

2007-11-09 Thread Børge Holen
On Friday 09 November 2007 18:45:27 Instruct ICC wrote: Ubuntu = Debian + New Life Mandriva has Eclipse and PHPEclipse 'out of the box' along with Apache and PHP I can build a fully functional development machine from a pile of bits in under an hour ;) And currently that

Re: [PHP] Help securing a server : Owned by W4n73d H4ck3r

2007-11-09 Thread Daniel Brown
That's an old SPAW exploit. Google (gotta' love how that's a verb now) for `spaw exploit` and the first result is MARC. [NOTE: All previous text cleared because this is the THIRD time I've sent the message after Mailman rejected it twice due to URLs in log inclusion.] -- Daniel P.

[PHP] debugging imap_open

2007-11-09 Thread John Gunther
I'm trying to use imap functions for the first time and always get Couldn't open stream errors so I turned on both kinds of debugging. Unfortunately I can't find debugging output anywhere. What am I doing wrong? Here's my code: ini_set('error_log','/tmp/imap.txt');

[PHP] Sending Mails

2007-11-09 Thread Alberto García Gómez
I want to use the mail() function but doesn't work so I have some questions: 1. Is necessary that sendmail must be installed in the server to use this function? 2. Is necessary that sendmail must be running to use this function? 3. Is necessary that sendmail must be proper configure to use this

[PHP] Re: Sending Mails

2007-11-09 Thread John Gunther
All true. sendmail or a sendmail shell must be running. The sendmail command to use can be customized in the sendmail_path directive in the php.ini configuration file. If you can't manually use sendmail to send an email, php can't either. John Gunther Alberto García Gómez wrote: I want to

Re: [PHP] Re: Sending Mails

2007-11-09 Thread Alberto García Gómez
John, those are the lines in the log file when I try to send a mail using mail() function. PLease let me know my errors. Nov 9 15:26:17 shannon sendmail[8649]: lA9KQHYt008649: from=apache, size=82, class=0, nrcpts=1, msgid=[EMAIL PROTECTED], [EMAIL PROTECTED] Nov 9 15:26:17 shannon

Re: [PHP] Local vs Master Configure values

2007-11-09 Thread Nathan Nobbe
On Nov 9, 2007 4:24 PM, tedd [EMAIL PROTECTED] wrote: Hi gang: I'm confronting a safe_mode problem and have a question. My PHP Info states that safe_mode is ON for local and OFF for master -- what does that mean? Does that mean I can turn it off for my scripts via something like:

Re: [PHP] Local vs Master Configure values

2007-11-09 Thread Nathan Nobbe
On Nov 9, 2007 5:01 PM, Nathan Nobbe [EMAIL PROTECTED] wrote: On Nov 9, 2007 4:24 PM, tedd [EMAIL PROTECTED] wrote: Hi gang: I'm confronting a safe_mode problem and have a question. My PHP Info states that safe_mode is ON for local and OFF for master -- what does that mean? o i

Re: [PHP] Re: Sending Mails

2007-11-09 Thread John Gunther
From what you posted, it looks like it was successful: stat=Sent (lA9KQHhY008650 Message accepted for delivery) If it isn't arriving, the cause may be down the line. John Alberto García Gómez wrote: John, those are the lines in the log file when I try to send a mail using mail() function.

[PHP] Local vs Master Configure values

2007-11-09 Thread tedd
Hi gang: I'm confronting a safe_mode problem and have a question. My PHP Info states that safe_mode is ON for local and OFF for master -- what does that mean? Does that mean I can turn it off for my scripts via something like: ini_set( 'safe_mode', '0' ); ??? It's not easy for me to test

Re: [PHP] Local vs Master Configure values

2007-11-09 Thread David Giragosian
On 11/9/07, Nathan Nobbe [EMAIL PROTECTED] wrote: On Nov 9, 2007 5:01 PM, Nathan Nobbe [EMAIL PROTECTED] wrote: On Nov 9, 2007 4:24 PM, tedd [EMAIL PROTECTED] wrote: Hi gang: I'm confronting a safe_mode problem and have a question. My PHP Info states that safe_mode is ON for

[PHP] My first xml try

2007-11-09 Thread Ronald Wiplinger
I must use php 4 and mysql 4.x ! I tried an example I found on the net and modified it so that it should work with php4 and mysql 4. The code is below. I need to access a database and get an xml feed output. I tried to use echo statements for debugging and found that it seems I do not get the

[PHP] Re: debugging imap_open

2007-11-09 Thread John Gunther
Since no one seems to know about the debug feature, let me ask about the imap argument directly. None of the following work, always Couldn't open stream: mail.usservas.org:143 mail.usservas.org:110 mail.usservas.org:143/imap mail.usservas.org:110/pop3 mail.usservas.org:143/imap/notls

Re: [PHP] Local vs Master Configure values

2007-11-09 Thread Nathan Nobbe
On 11/9/07, tedd [EMAIL PROTECTED] wrote: The only question that remains for me is what's the difference between Local and Master Configure values in php_info? Why two? as i mentioned the local column is for overrides that can be specified in one of several locations: httpd.conf .htaccess

Re: [PHP] My first xml try

2007-11-09 Thread Andrew Ballard
Ronald, On Nov 9, 2007 9:05 PM, Ronald Wiplinger [EMAIL PROTECTED] wrote: I tried to use echo statements for debugging and found that it seems I do not get the information of require(). What do I need to change? I'm not sure what error you're getting, but I would guess it can't find the