Re: [PHP] login to protected directory by php

2010-08-15 Thread kranthi
i would configure apache to let php interpreter handle all kinds of extensions ( http://httpd.apache.org/docs/2.0/mod/mod_mime.html#addhandler ) even then u'll have go through all the steps pointed out by Ash. the only advantage of this method is more user friendly URL -- PHP General Mailing Lis

Re: [PHP] login to protected directory by php

2010-08-15 Thread Ashley Sheridan
On Sun, 2010-08-15 at 22:15 +0430, Ali Asghar Toraby Parizy wrote: > all files (web pages, pictures, and exe files) and folders in a directory > should be protected against anonymous users. > I create an application with php and mysql for registered users. when a user > registers it's information

[PHP] login to protected directory by php

2010-08-15 Thread Ali Asghar Toraby Parizy
all files (web pages, pictures, and exe files) and folders in a directory should be protected against anonymous users. I create an application with php and mysql for registered users. when a user registers it's information will be saved in database and its username and password will be added to .ht

Re: [PHP] Need to check pdf for xss

2010-08-15 Thread Ashley Sheridan
On Sun, 2010-08-15 at 11:51 +0200, Sebastian wrote: > OK THX to everyone. I will check the images with imagick and let the > pdfs in adobes responsibility. One worry less. Also, if you're really worried, try suggesting people use an alternative pdf reader. There are quite a few to choose from, t

Re: [PHP] Need to check pdf for xss

2010-08-15 Thread Sebastian
OK THX to everyone. I will check the images with imagick and let the pdfs in adobes responsibility. One worry less. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Need to check pdf for xss

2010-08-15 Thread Ashley Sheridan
On Sun, 2010-08-15 at 08:43 +0200, Peter Lind wrote: > On 15 August 2010 06:14, Paul M Foster wrote: > > On Sat, Aug 14, 2010 at 10:36:07PM +0200, Sebastian Ewert wrote: > > > >> Hi, > >> > >> before I allow to upload images I read them and check for several html > >> tags. If they exist I don't