Re: [PHP] Re: MySQL and PHP weirdness - RESOLVED

2012-02-15 Thread Richard S. Crawford
This has been resolved. A previous programmer had snuck in a function that would convert the value of the description field to a date value if it contained the word Date. This has been fixed. On Tue, Feb 14, 2012 at 5:44 PM, David Robley robl...@aapt.net.au wrote: Richard S. Crawford wrote:

[PHP] Re: MySQL and PHP weirdness

2012-02-14 Thread David Robley
Richard S. Crawford wrote: Bear with me here. I have a problem with PHP and MySQL that's been stumping me for a couple of days now. I'm not even sure how to describe it, so I'll just do my best. There's a row in our bugs database that looks like every other row in the table, but when it's

[PHP] Re: Swiftlet is quite possibly the smallest MVC framework you'll ever use.

2012-02-13 Thread Elbert F
Hi Simon, Moving the set_error_handler to index.php gives the developer the ability to remove it before pushing the site to a production environment. I agree that in most cases you don't want the live site to fail completely when it trips over an unset variable but I prefer to have it on by

[PHP] Re: Swiftlet is quite possibly the smallest MVC framework you'll ever use.

2012-02-12 Thread Elbert F
Hi Paul, Swiftlet implements PSR-0, an unofficial standard that many of the larger frameworks seem to be adopting. It simply maps namespaces to a path, e.g. Foo\Bar\Baz translates to Foo/Bar/Baz.php. The advantage is that you should be able to drop in third-party libraries which are included by

[PHP] Re: How can I debug wsf/php in eclipse?

2012-02-07 Thread Ali Asghar Toraby Parizy
Can anybody help me in this regard? On Mon, Feb 6, 2012 at 10:15 PM, Ali Asghar Toraby Parizy aliasghar.tor...@gmail.com wrote: Hi. I'm developing a wsf/php web service. I'm using doc/lit messaging format and every thing is OK. But I don't know how i can debug my web services using eclipse.

Re: [PHP] Re: How can I debug wsf/php in eclipse?

2012-02-07 Thread Sharl.Jimh.Tsin
在 2012-02-07二的 12:11 +0330,Ali Asghar Toraby Parizy写道: Can anybody help me in this regard? On Mon, Feb 6, 2012 at 10:15 PM, Ali Asghar Toraby Parizy aliasghar.tor...@gmail.com wrote: Hi. I'm developing a wsf/php web service. I'm using doc/lit messaging format and every thing is OK.

Re: [PHP] Re: How can I debug wsf/php in eclipse?

2012-02-07 Thread Ali Asghar Toraby Parizy
:( Thanks for your help. Is it the only way? On Tue, Feb 7, 2012 at 12:44 PM, Sharl.Jimh.Tsin amoiz.sh...@gmail.comwrote: 在 2012-02-07二的 12:11 +0330,Ali Asghar Toraby Parizy写道: Can anybody help me in this regard? On Mon, Feb 6, 2012 at 10:15 PM, Ali Asghar Toraby Parizy

[PHP] Re: Long Live GOTO

2012-02-06 Thread Jim Giner
NO GO! As one who started back in the 70's with old style coding that utilized GoTo in Cobol, Fortran, etc. and had to deal with spaghetti code written by even earlier developers who never considered that someone else would have to maintain their code, I feel strongly that GoTo is not to be

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Alain Williams
On Mon, Feb 06, 2012 at 11:12:53AM -0500, Jim Giner wrote: NO GO! As one who started back in the 70's with old style coding that utilized GoTo in Cobol, Fortran, etc. and had to deal with spaghetti code written by even earlier developers who never considered that someone else would have to

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Larry Martell
On Mon, Feb 6, 2012 at 9:23 AM, Alain Williams a...@phcomp.co.uk wrote: On Mon, Feb 06, 2012 at 11:12:53AM -0500, Jim Giner wrote: NO GO! As one who started back in the 70's with old style coding that utilized GoTo in Cobol, Fortran, etc. and had to deal with spaghetti code written by even

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Alain Williams
On Mon, Feb 06, 2012 at 09:28:10AM -0700, Larry Martell wrote: On Mon, Feb 6, 2012 at 9:23 AM, Alain Williams a...@phcomp.co.uk wrote: If I survey my code I find that I use one GOTO in about 4,000 lines of code - that I do not find excessive. There are, however, people who consider

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Adam Richardson
On Mon, Feb 6, 2012 at 11:28 AM, Larry Martell la...@software-horizons.comwrote: On Mon, Feb 6, 2012 at 9:23 AM, Alain Williams a...@phcomp.co.uk wrote: On Mon, Feb 06, 2012 at 11:12:53AM -0500, Jim Giner wrote: NO GO! As one who started back in the 70's with old style coding that utilized

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Robert Cummings
On 12-02-06 11:35 AM, Alain Williams wrote: On Mon, Feb 06, 2012 at 09:28:10AM -0700, Larry Martell wrote: On Mon, Feb 6, 2012 at 9:23 AM, Alain Williamsa...@phcomp.co.uk wrote: If I survey my code I find that I use one GOTO in about 4,000 lines of code - that I do not find excessive.

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Larry Martell
On Mon, Feb 6, 2012 at 9:50 AM, Adam Richardson simples...@gmail.com wrote: On Mon, Feb 6, 2012 at 11:28 AM, Larry Martell la...@software-horizons.comwrote: On Mon, Feb 6, 2012 at 9:23 AM, Alain Williams a...@phcomp.co.uk wrote: On Mon, Feb 06, 2012 at 11:12:53AM -0500, Jim Giner wrote: NO

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Adam Richardson
On Mon, Feb 6, 2012 at 12:09 PM, Larry Martell la...@software-horizons.comwrote: The source is my own personal experience working for an avionics company and working with the FAA to get our code certified under the DO-178B standard. I never saw anything that said 'no GOTOs' but that's what I

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Larry Martell
On Mon, Feb 6, 2012 at 10:13 AM, Adam Richardson simples...@gmail.com wrote: On Mon, Feb 6, 2012 at 12:09 PM, Larry Martell la...@software-horizons.comwrote: The source is my own personal experience working for an avionics company and working with the FAA to get our code certified under the

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Daniel Brown
On Mon, Feb 6, 2012 at 12:59, Larry Martell la...@software-horizons.com wrote: I just pulled out my notes from that job - it took me 59 hours to do the conversion and remove the gotos and recursion, and another 67 hours for testing, verification, integration, documentation, and certification.

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Larry Martell
On Mon, Feb 6, 2012 at 11:07 AM, Daniel Brown danbr...@php.net wrote: On Mon, Feb 6, 2012 at 12:59, Larry Martell la...@software-horizons.com wrote: I just pulled out my notes from that job - it took me 59 hours to do the conversion and remove the gotos and recursion, and another 67 hours

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Marco Behnke
Am 06.02.12 17:23, schrieb Alain Williams: However: a few GOTOs can make things clearer. Think of a function that can fail in several different places (eg data validation, ...). But it is reading a file which needs to be closed before the function returns. I have seen code where some $IsError

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Simon J Welsh
On 7/02/2012, at 9:44 AM, Marco Behnke wrote: Am 06.02.12 17:23, schrieb Alain Williams: However: a few GOTOs can make things clearer. Think of a function that can fail in several different places (eg data validation, ...). But it is reading a file which needs to be closed before the

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Adam Richardson
On Mon, Feb 6, 2012 at 3:44 PM, Marco Behnke ma...@behnke.biz wrote: Am 06.02.12 17:23, schrieb Alain Williams: However: a few GOTOs can make things clearer. Think of a function that can fail in several different places (eg data validation, ...). But it is reading a file which needs to be

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Stuart Dallas
On 6 Feb 2012, at 20:44, Marco Behnke wrote: Am 06.02.12 17:23, schrieb Alain Williams: However: a few GOTOs can make things clearer. Think of a function that can fail in several different places (eg data validation, ...). But it is reading a file which needs to be closed before the function

[PHP] Re: Long Live GOTO

2012-02-06 Thread Tim Streater
On 06 Feb 2012 at 20:51, Simon J Welsh si...@welsh.co.nz wrote: On 7/02/2012, at 9:44 AM, Marco Behnke wrote: Am 06.02.12 17:23, schrieb Alain Williams: However: a few GOTOs can make things clearer. Think of a function that can fail in several different places (eg data validation, ...). But

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Matijn Woudt
On Mon, Feb 6, 2012 at 11:34 PM, Tim Streater t...@clothears.org.uk wrote: On 06 Feb 2012 at 20:51, Simon J Welsh si...@welsh.co.nz wrote: On 7/02/2012, at 9:44 AM, Marco Behnke wrote: Am 06.02.12 17:23, schrieb Alain Williams: However: a few GOTOs can make things clearer. Think of a

Re: [PHP] Re: Long Live GOTO

2012-02-06 Thread Marco Behnke
Am 06.02.12 21:55, schrieb Adam Richardson: On Mon, Feb 6, 2012 at 3:44 PM, Marco Behnke ma...@behnke.biz wrote: Am 06.02.12 17:23, schrieb Alain Williams: many places to see if things should be done. That is just as bad as lots of GOTO -- often when having to write something like that I

[PHP] Re: Typecasting question

2012-02-05 Thread Shawn McKenzie
On 02/03/2012 10:11 AM, jas wrote: array('private_key_type' = OPENSSL_KEYTYPE_RSA, 'encrypt_key_cipher' = OPENSSL_CIPHER_3DES); Look like ints to me: var_dump(): array(2) { [private_key_type]= int(0) [encrypt_key_cipher]= int(4) } -- Thanks! -Shawn http://www.spidean.com --

[PHP] Re: Time zone in date function

2012-01-31 Thread Ian
On 31/01/2012 01:55, Ron Piggott wrote: On my clients account when I use “echo date(‘D, d M Y H:i:s');” the output is 5 hours ahead of us. How do I change it to my local time? Is there a way to specify “Eastern” time zone? I expect this would work: echo date(‘D, d M Y H:i:s' , (

[PHP] Re: Time zone in date function

2012-01-31 Thread Jonesy
On Tue, 31 Jan 2012 14:57:41 +1300, Simon J Welsh wrote: On 31/01/2012, at 2:55 PM, Ron Piggott wrote: On my clients account when I use ?echo date(?D, d M Y H:i:s');? the output is 5 hours ahead of us. How do I change it to my local time? Is there a way to specify ?Eastern? time zone?

[PHP] Re: Cannot make bzip2 stream on the fly

2012-01-31 Thread Maciek Sokolewicz
On 31-01-2012 15:34, Michael Shestero wrote: header(Content-Description: File Transfer); header(Content-Disposition: attachment; filename=f.bzip2); header(Content-Type: application/x-bzip2); //header(Content-length: . strlen($zippedfile) . \n\n); header(Content-Transfer-Encoding: binary);

Re: [PHP] Re: Time zone in date function

2012-01-31 Thread Matijn Woudt
On Tue, Jan 31, 2012 at 4:22 PM, Jonesy gm...@jonz.net wrote: On Tue, 31 Jan 2012 14:57:41 +1300, Simon J Welsh wrote: On 31/01/2012, at 2:55 PM, Ron Piggott wrote: On my clients account when I use ?echo date(?D, d M Y H:i:s');? the output is 5 hours ahead of us.  How do I change it to my

[PHP] Re: Cannot make bzip2 stream on the fly

2012-01-31 Thread Michael Shestero
Thank you for response. Script is server-side. It is to send a packed data as file (but the source isn't actually a file) via HTTP to client. bzcompress() are not suitable, because it cannot pack the stream on the fly (I have to store all amount of data in local variable before call it). My

[PHP] Re: Time zone in date function

2012-01-31 Thread Jonesy
On Tue, 31 Jan 2012 17:15:48 +0100, Matijn Woudt wrote: On Tue, Jan 31, 2012 at 4:22 PM, Jonesy gm...@jonz.net wrote: Is there a reason _not_ to use viz:        putenv(TZ=America/Anguilla);  ?? Or, is it simple Just The Linux Way(tm) , i.e. there's always more than one way to do a

Re: [PHP] Re: Re: File upload in map drive with PHP

2012-01-28 Thread Stuart Dallas
On 28 Jan 2012, at 01:41, Michelle Konzack wrote: Merhaba Mehmet YAYLA, Am 2012-01-26 15:10:34, hacktest Du folgendes herunter: I'm using code this bellow. ...with an error! form enctype=multipart/form-data action=upload_file.php?upload=1 method=post input type=hidden

Re: [PHP] Re: ArrayInterator always true

2012-01-28 Thread Mihai Anghel
If you enable notices you will see that PHP outputs this : Notice: ArrayIterator::next(): Array was modified outside object and internal position is no longer valid.This line seems to be the problem //Test if next stream is an option for ( $iterator-next(); $iterator-valid(); $iterator-next() ) {

Re: [PHP] Re: ArrayInterator always true

2012-01-28 Thread Fatih P.
2012/1/28 Mihai Anghel mihaigrim1...@gmail.com If you enable notices you will see that PHP outputs this : Notice: ArrayIterator::next(): Array was modified outside object and internal position is no longer valid.This line seems to be the problem //Test if next stream is an option for (

Re: [PHP] Re: Re: File upload in map drive with PHP

2012-01-28 Thread Jim Lucas
On 1/27/2012 5:41 PM, Michelle Konzack wrote: Merhaba Mehmet YAYLA, Am 2012-01-26 15:10:34, hacktest Du folgendes herunter: I'm using code this bellow. ...with an error! form enctype=multipart/form-data action=upload_file.php?upload=1 method=post input type=hidden name=MAX_FILE_SIZE

RE: [PHP] Re: Getting Column Names from an AS400 Database

2012-01-27 Thread Cheryl Sullivan
@lists.php.net Subject: Re: [PHP] Re: Getting Column Names from an AS400 Database On 26-01-2012 16:40, Cheryl Sullivan wrote: Thanks for your response... I changed the $outval line to $outval = odbc_columns($rs, DB#LIBNAME, %, TABLENAME, %); ...but still got the same error - Warning: odbc_columns

[PHP] Re: ArrayInterator always true

2012-01-27 Thread TCP
I've got a temporary fix but still the iterator always return true, still hope someone could help me out to point out the problem:) //parseOptions utilitiese by tgckpg function parseOptions ( $argStream, $handler ) { //Chop first useless argument -- argv[0] array_shift (

[PHP] Re: Re: File upload in map drive with PHP

2012-01-27 Thread Michelle Konzack
Merhaba Mehmet YAYLA, Am 2012-01-26 15:10:34, hacktest Du folgendes herunter: I'm using code this bellow. ...with an error! form enctype=multipart/form-data action=upload_file.php?upload=1 method=post input type=hidden name=MAX_FILE_SIZE value=3 / Select image: input

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Haluk Karamete
when we do b64e and then back b64d, you are saying. we get the org input all as clear text but this time as a string. because it is now a string, (which by definition can not be executed) what's the difference between b64e+b64d vs (string) casting then? if you were to cast the original input into

[PHP] Re: File upload in map drive with PHP

2012-01-26 Thread Jim Giner
Do you mean you are trying to do an upload of a file on a mapped drive, such as a network drive? Is this upload using an html form with an input type=file tag? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: File upload in map drive with PHP

2012-01-26 Thread Stuart Dallas
On 26 Jan 2012, at 15:10, Mehmet YAYLA wrote: I'm using code this bellow. ? if (!empty($_GET[upload])) { $uploaddir =x:\\file/; $uploadfile = $_FILES['userfile']['name']; print pre; if

[PHP] Re: Getting Column Names from an AS400 Database

2012-01-26 Thread Jim Giner
I'm thinking that it should read $rs = $conn-execute($q); $outval = odbc_columns($rs, DB#LIBNAME, %, TABLENAME, %); You need to provide the results of the query to the odbc_columns, not the connection object. Just my guess since I've never used this. -- PHP General Mailing List

RE: [PHP] Re: Getting Column Names from an AS400 Database

2012-01-26 Thread Cheryl Sullivan
Message- From: Jim Giner [mailto:jim.gi...@albanyhandball.com] Sent: Thursday, January 26, 2012 10:31 AM To: php-general@lists.php.net Subject: [PHP] Re: Getting Column Names from an AS400 Database I'm thinking that it should read $rs = $conn-execute($q); $outval = odbc_columns($rs, DB#LIBNAME

Re: [PHP] Re: Getting Column Names from an AS400 Database

2012-01-26 Thread Maciek Sokolewicz
\filename.php on line 13 -Original Message- From: Jim Giner [mailto:jim.gi...@albanyhandball.com] Sent: Thursday, January 26, 2012 10:31 AM To: php-general@lists.php.net Subject: [PHP] Re: Getting Column Names from an AS400 Database I'm thinking that it should read $rs = $conn-execute($q

RES: [PHP] Re: Getting Column Names from an AS400 Database

2012-01-26 Thread Alejandro Michelin Salomon
in the connection processes? Alejandro M.S. -Mensagem original- De: Cheryl Sullivan [mailto:csull...@shh.org] Enviada em: quinta-feira, 26 de janeiro de 2012 13:41 Para: Jim Giner; php-general@lists.php.net Assunto: RE: [PHP] Re: Getting Column Names from an AS400 Database Thanks for your response

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Maciek Sokolewicz
On 26-01-2012 15:46, Haluk Karamete wrote: when we do b64e and then back b64d, you are saying. we get the org input all as clear text but this time as a string. because it is now a string, (which by definition can not be executed) what's the difference between b64e+b64d vs (string) casting

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Jim Lucas
On 01/26/2012 06:46 AM, Haluk Karamete wrote: when we do b64e and then back b64d, you are saying. we get the org input all as clear text but this time as a string. because it is now a string, (which by definition can not be executed) what's the difference between b64e+b64d vs (string) casting

Re: [PHP] Re: File upload in map drive with PHP

2012-01-26 Thread Jim Lucas
On 01/26/2012 07:13 AM, Jim Giner wrote: You're using a GET in your script when your form is a POST. and if you look at the method value you will see that he is passing upload=1 in the URL. Which would be seen as a GET value. -- Jim Lucas http://www.cmsws.com/

Re: [PHP] Re: sql injection protection

2012-01-26 Thread Haluk Karamete
Re-read his example. He encodes the data in PHP. But decodes the data in SQL. So, if you echo the SQL statement, you would see a base64 encoded string that SQL then decodes. Got it this time! Up until reading your reply, I was reading Alex's example with my pseudo-code glasses. I did not

Re: [PHP] Re: sql injection protection

2012-01-24 Thread Haluk Karamete
4 questions... which is basically all it comes to.. After all this back and forth emails, I think we should nail down these questions cause they are still not completely covered in my mind. question 1 If you use the PHP filters sanitizations, and you plan on using PDO with binded params, are

[PHP] Re: Continued Problems Accessing *.php.net?

2012-01-24 Thread Al
On 1/23/2012 6:22 PM, Daniel Brown wrote: ALL: As you may have noticed, early this morning we got bored and decided to delete php.net from the Internet. After getting an estimated sixteen-point-four trillion complaints, we became overwhelmed and aggravated by your incessant need to

Re: [PHP] Re: sql injection protection

2012-01-24 Thread Alex Nikitin
question 1 If you use the PHP filters sanitizations, and you plan on using PDO with binded params, are you absolutely safe? And if not, why? What are the other ways for them to still make it in - even with PD0 and binded params properly in place? Just curious. There are no known exploits

Re: [PHP] Re: Continued Problems Accessing *.php.net?

2012-01-24 Thread Daniel Brown
On Tue, Jan 24, 2012 at 11:53, Al n...@ridersite.org wrote: Now, how about having the some very talented folks fix the severely restricted access to the NNTP server. Rarely can I download more than about 10 topics without a time out. Per your request several times over at least 2 years, I've

Re: [PHP] Re: Continued Problems Accessing *.php.net?

2012-01-24 Thread Stuart Dallas
On 24 Jan 2012, at 16:53, Al wrote: Now, how about having the some very talented folks fix the severely restricted access to the NNTP server. Rarely can I download more than about 10 topics without a time out. Per your request several times over at least 2 years, I've filed bug reports.

Re: [PHP] Re: sql injection protection

2012-01-24 Thread Haluk Karamete
My reply is in delims. question 1 If you use the PHP filters sanitizations, and you plan on using PDO with binded params, are you absolutely safe? And if not, why? What are the other ways for them to still make it in - even with PD0 and binded params properly in place? Just curious.

Re: [PHP] Re: sql injection protection

2012-01-24 Thread Alex Nikitin
You don't need to store it in the database as b64, just undo the encoding into your inputs for the purpose of the explanation, this is language independent b64e - encoding function b64d - decoding function pseudo code given: bad_num = ') union select * from foo --' bad_str = good_num =

Re: [PHP] Re: sql injection protection

2012-01-23 Thread Alex Nikitin
There is so much no, answers are in line. At the top of each php page which interacts with a database, just have this one liner This has already been mentioned, but again, no, no connection if you are not actually interacting with the database. $DBH = safe_connection(database_name_here);  

Re: [PHP] Re: sql injection protection

2012-01-23 Thread Haluk Karamete
I was simply asking expert opinion with the intention to learn. There is so much docs out there (I mean not just out there but at top security sites like owasp ) that recommends database specific escape solution as one of the viable alternatives. You make it seem like anyone who does not use PDO

Re: [PHP] Re: sql injection protection

2012-01-23 Thread Alex Nikitin
Start off with the fact that that article is from 2006, and its written by a programmer... I was simply asking expert opinion with the intention to learn. There is so much docs out there (I mean not just out there but at top security sites like owasp ) that recommends database specific escape

[PHP] Re: Settings to Allow Precise File Upload Bytes

2012-01-20 Thread Maciek Sokolewicz
Your problem here is the fact that you do not seem to grasp what is hapenning when a file is being uploaded, hence your question. So let me explain: 1. A user goes to your page by entering it into the browser. 2. The page is downloaded to the client, and the connection is closed. 3. The user

[PHP] Re: Settings to Allow Precise File Upload Bytes

2012-01-20 Thread Dee Ayy
Obviously I don't want a Flash/Gears solution. FYI: Your #6 should be: The server uploads... Even though I do not want a Flash/Gears solution, I would be happy with your #8 stating: I won't fail silently, I'll report the problem to the user. Do you know the correct settings on any applicable

Re: [PHP] Re: Settings to Allow Precise File Upload Bytes

2012-01-20 Thread Jim Lucas
On 01/20/2012 12:18 PM, Dee Ayy wrote: Obviously I don't want a Flash/Gears solution. FYI: Your #6 should be: The server uploads... Actually, from the perspective that he described it, his phrasing would be correct. The server is actually receiving from the client the data. This data is

[PHP] Re: Settings to Allow Precise File Upload Bytes

2012-01-20 Thread Maciek Sokolewicz
Answers are inside the mail On 20 January 2012 21:18, Dee Ayy dee@gmail.com wrote: Obviously I don't want a Flash/Gears solution. FYI: Your #6 should be: The server uploads... No, the server downloads, the client uploads. Downloading is performed by the receiving end (in this case, the

[PHP] Re: Settings to Allow Precise File Upload Bytes

2012-01-20 Thread Dee Ayy
My browser is claiming it is still busy from a 1MB (1030001 bytes) upload where I was trying to find out if it is setting $_FILES['attachment']. Thanks Maciek. It makes sense that I should be looking at $_FILES['attachment']['error'] before the size. I'm just surprised it's still hanging. I'm

[PHP] Re: SOAP

2012-01-18 Thread Carlos Medina
Am 17.01.2012 11:55, schrieb DPRJ Sistemas (OK Cosméticos): Hello! I am looking for some help on Web Services (SOAP) client. Is there anyone here who has already worked with such client? Thank you Deleo Yes Me Regards Carlos Medina -- PHP General Mailing

[PHP] Re: sql injection protection

2012-01-17 Thread Ross McKay
On Mon, 16 Jan 2012 19:34:09 -0800, Haluk Karamete wrote: I understand some ways are better than others in this one, and it looks like the PDO based implementations shine the most as far as SQL Injection. PDO is one way (and happens to be the one I prefer), but there are others. Essentially, you

Re: [PHP] Re: sql injection protection

2012-01-17 Thread Alex Nikitin
Haluk, don't listen to Ross, escaping fails, it was and is a bad solution to an old and still largely unresolved problem. The problem is and has been that of language interoperability, and we have been and continue failing at making a good way for languages to talk to each other, but because this

Re: [PHP] Re: sql injection protection

2012-01-17 Thread Haluk Karamete
Thanks Alex. I re-read Ross's reply but I don't think you and him ( and even me ) is saying something different. It's all about validating the input. In my dictionary of programming vocabulary, validation is not just validating user input but also sanitizing it. You summed it up nicely by saying

[PHP] Re: advise needed on a mysql select library function

2012-01-13 Thread Haluk Karamete
I'm leaning towards this; function bp_select($db_name,$sql,$result) { bp_conn($db_name,$db_server,$db_username,$db_pass); //with that, I pass the $db_name and the rest gets byRef'ed by the bp_conn! and I keep the bp_conn in a sep. file $link = mysql_connect($db_server,

[PHP] Re: http_referer. what's wrong with that?

2012-01-12 Thread Jonesy
On Thu, 12 Jan 2012 17:11:25 +1100, Ross McKay wrote: On Wed, 11 Jan 2012 21:27:58 -0800, Haluk Karamete wrote: [...] Notice: Undefined index: HTTP_REFERER in D:\Hosting\5291100\html\blueprint\bp_library.php on line 16 die; [...] But I'm still curious, what configuration am I missing so that

Re: [PHP] Re: http_referer. what's wrong with that?

2012-01-12 Thread Stuart Dallas
On 12 Jan 2012, at 14:10, Jonesy wrote: On Thu, 12 Jan 2012 17:11:25 +1100, Ross McKay wrote: On Wed, 11 Jan 2012 21:27:58 -0800, Haluk Karamete wrote: [...] Notice: Undefined index: HTTP_REFERER in D:\Hosting\5291100\html\blueprint\bp_library.php on line 16 die; [...] But I'm still

[PHP] Re: srand questions

2012-01-12 Thread Jim Giner
The manual notes some of your concerns - especially the lack of a need to do a 'seeding' and (since 5.2.1) the presence of a new algorithm that generates a unique sequence regardless if the 'seed' is repeated. Furthermore, since there is no need to do a seed, I would guess that each call to

[PHP] Re: advise on simplfying session usage

2012-01-12 Thread Jim Giner
You're kidding us aren't you? session(age) =90 versus $_SESSION['age']=90 (btw you left out a keystroke) That's a difference of 2 keystrokes. And you're looking to save keystrokes? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: http_referer. what's wrong with that?

2012-01-11 Thread Ross McKay
On Wed, 11 Jan 2012 21:27:58 -0800, Haluk Karamete wrote: [...] Notice: Undefined index: HTTP_REFERER in D:\Hosting\5291100\html\blueprint\bp_library.php on line 16 die; [...] But I'm still curious, what configuration am I missing so that http_referer is treated like that? You only get an

Re: [PHP] Re: http_referer. what's wrong with that?

2012-01-11 Thread Matt Neimeyer
While perhaps unlikely in common users it is also possible to prevent your browser from sending the referrer. IIRC, the referrer can also get mangled when passing through HTTPS (although I don't remember on which side, HTTP-HTTPS or HTTPS-HTTP or both) Matt On Thu, Jan 12, 2012 at 1:11 AM, Ross

[PHP] Re: php sendmail_from

2012-01-09 Thread Jim Giner
And how are you generating the email? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: php sendmail_from

2012-01-09 Thread alexus
using Drupal On Mon, Jan 9, 2012 at 2:48 PM, Jim Giner jim.gi...@albanyhandball.com wrote: And how are you generating the email? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- http://alexus.org/ -- PHP General Mailing List

[PHP] Re: php sendmail_from

2012-01-09 Thread Jim Giner
I guess I'm asking to see your code pertaining to sending the email. Telling us about a couple of ini settings doesn't really present us a picture of your problem. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: php sendmail_from

2012-01-09 Thread Matijn Woudt
On Mon, Jan 9, 2012 at 8:50 PM, alexus ale...@gmail.com wrote: using Drupal If you're using Drupal to send the mail, or any module installed in Drupal, than there are most likely settings in Drupal (module) that allow you to set the from address. If these functions call the mail command with a

[PHP] Re: New to mac and trying to define a php.ini file.

2012-01-04 Thread Phil Dobbin
On 4/1/12 14:09, Richard Quadling rquadl...@gmail.com wrote: Where do I put my php.ini file for a MacBook Air? I've only had it 2 days and having trouble with the date.timezone setting. I've also had to install xampp (recommended - no idea about it) for Apache with PHP. Different

Re: [PHP] re: More Error Reporting Problems

2012-01-02 Thread Marco Behnke
Am 30.12.2011 17:11, schrieb Floyd Resler: On Dec 30, 2011, at 11:05 AM, Matt Graham wrote: I'm still not sure why they aren't displaying. But as long as I have a place to find them I'm cool with that. Maybe anything in your web application overrides display_errors? -- Marco Behnke

[PHP] re: More Error Reporting Problems

2011-12-30 Thread Matt Graham
From: Floyd Resler fres...@adex-intl.com I'm still having problems with error reporting and I'm not sure why. php.ini section: error_reporting = E_ALL ~E_DEPRECATED display_errors = On log_errors = On error_log = /var/log/php_errors.log Errors are neither getting displayed nor recorded

Re: [PHP] re: More Error Reporting Problems

2011-12-30 Thread Floyd Resler
On Dec 30, 2011, at 11:05 AM, Matt Graham wrote: From: Floyd Resler fres...@adex-intl.com I'm still having problems with error reporting and I'm not sure why. php.ini section: error_reporting = E_ALL ~E_DEPRECATED display_errors = On log_errors = On error_log = /var/log/php_errors.log

[PHP] Re: Need Part-time Coder

2011-12-28 Thread Jonesy
On Tue, 27 Dec 2011 17:29:27 -0500, John R. Cornell II wrote: Email PHP sample for consideration Thanks for (perhaps) the last LMAOROFL Posting of 2011! -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: [php] static html search engine for php static html site

2011-12-26 Thread Jim Lucas
On 12/26/2011 5:37 PM, Izo duwa wrote: the whole site is in php and all content should be searchable. I have tried zoom site search [http://www.wrensoft.com/zoom/] but the result was not good. I just need a simple site search functionality that I can install on a share hosting. it should be

Re: [PHP] Re: Question regarding passwords/security

2011-12-23 Thread Curtis Maurand
Store everything in the database in an encrypted form. Stuart Dallas wrote: On 22 Dec 2011, at 19:34, Paul M Foster wrote: I have concerns that the items in a session buffer can be copied and used to spoof legitimate logins. This is harder to do when the info is held in a database.

[PHP] Re: Question regarding passwords/security

2011-12-22 Thread Al
On 12/22/2011 10:05 AM, Paul M Foster wrote: Not sure how to ask this question... I've always eschewed consulting a database on page loads to determine if a user is logged in, primarily because of latency issues. For example, you could store a nonce like the session ID in a table for a user

Re: [PHP] Re: Question regarding passwords/security

2011-12-22 Thread Paul M Foster
On Thu, Dec 22, 2011 at 12:55:41PM -0500, Al wrote: On 12/22/2011 10:05 AM, Paul M Foster wrote: Not sure how to ask this question... I've always eschewed consulting a database on page loads to determine if a user is logged in, primarily because of latency issues. For example, you could

Re: [PHP] Re: Question regarding passwords/security

2011-12-22 Thread Stuart Dallas
On 22 Dec 2011, at 19:34, Paul M Foster wrote: I have concerns that the items in a session buffer can be copied and used to spoof legitimate logins. This is harder to do when the info is held in a database. Storing stuff in a database is no more secure, it simply requires one single extra

Re: [PHP] Re: Question regarding passwords/security

2011-12-22 Thread Al
On 12/22/2011 2:54 PM, Stuart Dallas wrote: On 22 Dec 2011, at 19:34, Paul M Foster wrote: I have concerns that the items in a session buffer can be copied and used to spoof legitimate logins. This is harder to do when the info is held in a database. Storing stuff in a database is no more

Re: [PHP] Re: Preferred Syntax

2011-12-18 Thread Robert Cummings
On 11-12-17 09:42 AM, Eric Butera wrote: Hi Adam, Thanks for the reply, noted! I was coming from the angle that I've had to deal with a lot of code that is 2000 lines of php/html/javascript inside heredocs, mixed quote escaping, etc. I was hoping to prevent that from becoming a new thing in

Re: [PHP] Re: Preferred Syntax

2011-12-17 Thread Eric Butera
On Sat, Dec 17, 2011 at 12:59 AM, Adam Richardson simples...@gmail.com wrote: On Fri, Dec 16, 2011 at 11:53 PM, Eric Butera eric.but...@gmail.com wrote: To all the people who responded to this thread: It is 2011 - please stop writing code like this. To the OP: I'm glad you're asking

Re: [PHP] Re: Preferred Syntax

2011-12-17 Thread Ross McKay
On Fri, 16 Dec 2011 23:53:46 -0500, Eric Butera wrote: To all the people who responded to this thread: It is 2011 - please stop writing code like this. To the OP: I'm glad you're asking questions and realizing you're not happy with your current abilities and suspect there's a better way. I've

Re: [PHP] Re: Preferred Syntax

2011-12-16 Thread Eric Butera
On Thu, Dec 15, 2011 at 5:46 PM, Ross McKay ro...@zeta.org.au wrote: Jim Lucas wrote: I second this example, with one minor change, I would add '{' and '}' around variables. echo HTML a style=text-align:left;size:14;font-weight:bold   href=/mypage.php/{$page_id}{$page_name}/abr HTML; This

Re: [PHP] Re: Preferred Syntax

2011-12-16 Thread Adam Richardson
On Fri, Dec 16, 2011 at 11:53 PM, Eric Butera eric.but...@gmail.com wrote: To all the people who responded to this thread: It is 2011 - please stop writing code like this. To the OP: I'm glad you're asking questions and realizing you're not happy with your current abilities and suspect

Re: [PHP] Re: Preferred Syntax

2011-12-15 Thread Robert Cummings
On 11-12-15 02:50 AM, Ross McKay wrote: On Wed, 14 Dec 2011 07:59:46 -0500, Rick Dwyer wrote: Can someone tell me which of the following is preferred and why? echo a style='text-align:left;size:14;font-weight:bold' href='/ mypage.php/$page_id'$page_name/abr; echo a

Re: [PHP] Re: Preferred Syntax

2011-12-15 Thread Louis Huppenbauer
Another nice way would be sprintf. So your string really is just a string and nothing more. I don't know how it would affect performance, but just for the eye I find it much simpler. echo sprintf(a style='text-align:left;size:**14;font-weight:bold' href='/mypage.php/%d'%s/abr, $page_id,

Re: [PHP] Re: Preferred Syntax

2011-12-15 Thread Jim Lucas
On 12/14/2011 11:50 PM, Ross McKay wrote: On Wed, 14 Dec 2011 07:59:46 -0500, Rick Dwyer wrote: Can someone tell me which of the following is preferred and why? echo a style='text-align:left;size:14;font-weight:bold' href='/ mypage.php/$page_id'$page_name/abr; echo a

Re: [PHP] Re: Preferred Syntax

2011-12-15 Thread Ross McKay
Jim Lucas wrote: I second this example, with one minor change, I would add '{' and '}' around variables. echo HTML a style=text-align:left;size:14;font-weight:bold href=/mypage.php/{$page_id}{$page_name}/abr HTML; This works for $variables, $objects, and variable functions calls. But

<    4   5   6   7   8   9   10   11   12   13   >