php-general Digest 7 Oct 2011 23:23:38 -0000 Issue 7509

2011-10-07 Thread php-general-digest-help
php-general Digest 7 Oct 2011 23:23:38 - Issue 7509 Topics (messages 315160 through 315169): Re: Namespaced code with SabreDAV 315160 by: Tommy Pham 315166 by: Richard Quadling Re: Secure data management 315161 by: Govinda 315165 by: Ian 315168 by:

Re: [PHP] Issues with simplexml_load_string()

2011-10-07 Thread Benjamin Hawkes-Lewis
On Thu, Oct 6, 2011 at 9:50 PM, Christoph Boget jcbo...@hotmail.com wrote: It seems like when dealing with nodes which have CDATA, I cannot get access to both the attributes of that node and the CDATA of that node with the same simplexml_load_string() call.  Consider the following:

[PHP] Re: Secure data management

2011-10-07 Thread Ian
On 07/10/2011 05:46, Govinda wrote: Hi everyone I have read many many articles and blog posts in the last few days to bolster my (still mostly newbie) understanding of the factors that play in to preventing various methods of SQL injection prevention.. and by now I am well aware that most

Re: [PHP] Namespaced code with SabreDAV

2011-10-07 Thread Richard Quadling
On 6 October 2011 15:37, Andrew Mason slackma...@gmail.com wrote: Hello all, I am trying to use the wonderful SabreDAV library to create a webdav share. I have a demo up and running however the framework / class i'm using is namespaced, and SabreDAV unfortunately does not have a 5.3 style

Re: [PHP] Issues with simplexml_load_string()

2011-10-07 Thread Christoph Boget
http://us.php.net/manual/en/function.simplexml-load-string.php#80855 maybe? Thanks for that. I guess I should have scrolled a little further down. It's so crazy that it works that way. Unless you export the actual element (and not it's ancestors), you don't see the data at all. thnx,

Re: [PHP] Re: Secure data management

2011-10-07 Thread Paul M Foster
On Fri, Oct 07, 2011 at 12:46:52AM -0400, Govinda wrote: http://stut.net/2011/09/15/mysql-real-escape-string-is-not-enough/ Hi everyone I have read many many articles and blog posts in the last few days to bolster my (still mostly newbie) understanding of the factors that play in to

Re: [PHP] Re: Secure data management

2011-10-07 Thread Govinda
There is more to SQL injection than getting the quoting correct. In my understanding, prepared statements handles the other problems associated with queries and SQL injection beyond just quoting. Here's a good tutorial on how this works: http://www.youtube.com/watch?v=bORZlmyDw0s Paul,