RE: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-16 Thread Tommy Pham 
> -Original Message-
> From: paras...@gmail.com [mailto:paras...@gmail.com] On Behalf Of
> Daniel Brown
> Sent: Sunday, January 16, 2011 7:00 PM
> To: Tommy Pham
> Cc: PHP General; PHP Internals List; secur...@php.net
> Subject: Re: [PHP] [security] PHP has DoS vuln with large decimal points
> 
> On Sun, Jan 16, 2011 at 21:00, Tommy Pham  wrote:
> >
> > Here are the results after some further tests for the same platform:
> >
> > * max float value: 1.7976931348623E+308
> > * min float value:  9.8813129168249E-324  <<
> > floatval('1.00e-323') weird ...
> >
> > PHP wil hang when the value is between (inclusive)
> >
> > floatval('2.22507385850720102e-308')  -
> > floatval('2.22507385850720113e-308')
> >
> > I can't find the bug report for the issue @ bugs.php.net.  Does anyone
> > know if one is submitted?  I should submit one?  Sucribe to dev list
> > and go from there?
> 
> If in doubt, file a bug.  Worse comes to worst, it will be marked as
bogus or
> a duplicate.  For security-related things, send them to secur...@php.net,
> not to the General list.  Again, if it's of no concern, it will simply be
ignored
> as bogus or already known.
> 
> --
> 
> Network Infrastructure Manager
> Documentation, Webmaster Teams
> http://www.php.net/

Thanks Dan.  I'll keep it in mind for the future.  For interested parties,
that's found in the official Windows 5.3.3 NTS VC9 build.  Works fine with
the current official 5.3.5 NTS VC9.

Thanks,
Tommy


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: [PHP-DEV] Re: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-16 Thread Mike Robinson 
On 2011-01-16, at 9:59 PM, Daniel Brown  wrote:

> On Sun, Jan 16, 2011 at 21:00, Tommy Pham  wrote:
>> 
>> Here are the results after some further tests for the same platform:
>> 
>> * max float value: 1.7976931348623E+308
>> * min float value:  9.8813129168249E-324  <<
>> floatval('1.00e-323') weird ...
>> 
>> PHP wil hang when the value is between (inclusive)
>> 
>> floatval('2.22507385850720102e-308')  -
>> floatval('2.22507385850720113e-308')
>> 
>> I can't find the bug report for the issue @ bugs.php.net.  Does anyone know
>> if one is submitted?  I should submit one?  Sucribe to dev list and go from
>> there?
> 
>If in doubt, file a bug.  Worse comes to worst, it will be marked
> as bogus or a duplicate.  For security-related things, send them to
> secur...@php.net, not to the General list.  Again, if it's of no
> concern, it will simply be ignored as bogus or already known

Is this not it?

http://bugs.php.net/53632

Best Regards

Mike Robinson
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-16 Thread Tommy Pham 
> -Original Message-
> From: Jim Lucas [mailto:li...@cmsws.com]
> Sent: Sunday, January 16, 2011 6:54 PM
> To: Tommy Pham
> Cc: php-general@lists.php.net
> Subject: Re: [PHP] [security] PHP has DoS vuln with large decimal points
> 
> On 1/16/2011 4:18 PM, Tommy Pham wrote:
> >> -Original Message-
> >> From: Tommy Pham [mailto:tommy...@gmail.com]
> >> Sent: Thursday, January 06, 2011 5:49 PM
> >> To: 'Daevid Vincent'
> >> Cc: 'php-general@lists.php.net'
> >> Subject: RE: [PHP] [security] PHP has DoS vuln with large decimal
> >> points
> >>
> >>> -Original Message-
> >>> From: Daevid Vincent [mailto:dae...@daevid.com]
> >>> Sent: Wednesday, January 05, 2011 11:36 AM
> >>> To: php-general@lists.php.net
> >>> Subject: [PHP] [security] PHP has DoS vuln with large decimal points
> >>>
> >>> The error in the way floating-point and double-precision numbers are
> >>> handled sends 32-bit systems running Linux, Windows, and FreeBSD
> >>> into an infinite loop that consumes 100 percent of their CPU's
resources.
> >>> Developers are still investigating, but they say the bug appears to
> >>> affect versions 5.2 and 5.3 of PHP. They say it could be trivially
> >>> exploited on many websites to cause them to crash by adding long
> >> numbers to certain URLs.
> >>>
> >>> 
> >>>
> >>> The crash is also triggered when the number is expressed without
> >>> scientific notation, with 324 decimal places.
> >>>
> >>> Read on...
> >>>
> >>> http://www.theregister.co.uk/2011/01/04/weird_php_dos_vuln/
> >>>
> >>> --
> >>> Daevid Vincent
> >>> http://daevid.com
> >>>
> >>> There are only 11 types of people in this world. Those that think
> >>> binary jokes are funny, those that don't, and those that don't know
> > binary.
> >>>
> >>
> >> "The size of a float is platform-dependent, although a maximum of
> >> ~1.8e308 with a precision of roughly 14 decimal digits is a common
> >> value (the 64
> > bit
> >> IEEE format)."  From [1].  The example given is clearly over the
> >> limit
> > within
> >> the PHP core.
> >>
> >> This sounds like what I was mentioning before, in a different thread,
> > about
> >> URL hacking to induce buffer overflow.
> >>
> >> Regards,
> >> Tommy
> >>
> >> [1] http://www.php.net/manual/en/language.types.float.php
> >
> > I found something really weird while coding a validator for floating
> > protection protection.
> >
> > Case 1 - known DoS / PHP hangs in infinite loop:
> >
> >   $value = '2.2250738585072011e-308';
> >   var_dump(floatval($value));
> >
> > Case 2 - works fine:
> >
> >   $value = '2.2250738585072011e-307';
> > or
> >   $value = '2.2250738585072011e-309';
> > or
> >   $value = '2.225073858507201e-308';
> >
> >   var_dump(floatval($value));
> >
> > I'd expect the '2.2250738585072011e-309' to hang also on my Win x64 with
> PHP
> > FastCGI.  I haven't test it on *nix platform yet.   Could someone please
> > confirm this?
> >
> > Thanks,
> > Tommy
> >
> >
> 
> Seems to work fine for me.
> 
> $ cat float.php
>  
> echo "Example 1\n";
> $value = 2.2250738585072011e-307;
> var_dump(floatval($value));
> var_dump($value);
> 
> echo "Example 2\n";
> $value = 2.2250738585072011e-308;
> var_dump(floatval($value));
> var_dump($value);
> 
> echo "Example 3\n";
> $value = 2.2250738585072011e-309;
> var_dump(floatval($value));
> var_dump($value);
> 
> echo "Example 4\n";
> $value = 2.225073858507201e-308;
> var_dump(floatval($value));
> var_dump($value);
> 
> ?>
> $ php -f float.php
> Example 1
> float(2.2250738585072E-307)
> float(2.2250738585072E-307)
> Example 2
> float(2.2250738585072E-308)
> float(2.2250738585072E-308)
> Example 3
> float(2.2250738585072E-309)
> float(2.2250738585072E-309)
> Example 4
> float(2.2250738585072E-308)
> float(2.2250738585072E-308)
> 
> $ uname -a
> OpenBSD serv0.cmsws.com 4.3 GENERIC#698 i386 $ php -v PHP 5.2.5 with
> Suhosin-Patch 0.9.6.2 (cli) (built: Mar 11 2008 13:08:50) Copyright (c)
1997-
> 2007 The PHP Group Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend
> Technologies
> with Suhosin v0.9.20, Copyright (c) 2002-2006, by Hardened-PHP Project
> 
> No infinite loop.  I like my system... :)
> 
> Jim Lucas

Hi Jim,

Thanks for the confirmation.  It appears that the bug is with the official
binary Windows distribution PHP 5.3.3 NTS and most likely with 5.3.3.  I
just upgrade to NTS 5.3.5 and works fine now.  It also runs fine against
unofficial PHP 5.2.5 x64 Windows ISAPI.

Thanks,
Tommy




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-16 Thread Daniel Brown 
On Sun, Jan 16, 2011 at 21:00, Tommy Pham  wrote:
>
> Here are the results after some further tests for the same platform:
>
> * max float value: 1.7976931348623E+308
> * min float value:  9.8813129168249E-324  <<
> floatval('1.00e-323') weird ...
>
> PHP wil hang when the value is between (inclusive)
>
> floatval('2.22507385850720102e-308')  -
> floatval('2.22507385850720113e-308')
>
> I can't find the bug report for the issue @ bugs.php.net.  Does anyone know
> if one is submitted?  I should submit one?  Sucribe to dev list and go from
> there?

If in doubt, file a bug.  Worse comes to worst, it will be marked
as bogus or a duplicate.  For security-related things, send them to
secur...@php.net, not to the General list.  Again, if it's of no
concern, it will simply be ignored as bogus or already known.

-- 

Network Infrastructure Manager
Documentation, Webmaster Teams
http://www.php.net/

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-16 Thread Jim Lucas 
On 1/16/2011 4:18 PM, Tommy Pham wrote:
>> -Original Message-
>> From: Tommy Pham [mailto:tommy...@gmail.com]
>> Sent: Thursday, January 06, 2011 5:49 PM
>> To: 'Daevid Vincent'
>> Cc: 'php-general@lists.php.net'
>> Subject: RE: [PHP] [security] PHP has DoS vuln with large decimal points
>>
>>> -Original Message-
>>> From: Daevid Vincent [mailto:dae...@daevid.com]
>>> Sent: Wednesday, January 05, 2011 11:36 AM
>>> To: php-general@lists.php.net
>>> Subject: [PHP] [security] PHP has DoS vuln with large decimal points
>>>
>>> The error in the way floating-point and double-precision numbers are
>>> handled sends 32-bit systems running Linux, Windows, and FreeBSD into
>>> an infinite loop that consumes 100 percent of their CPU's resources.
>>> Developers are still investigating, but they say the bug appears to
>>> affect versions 5.2 and 5.3 of PHP. They say it could be trivially
>>> exploited on many websites to cause them to crash by adding long
>> numbers to certain URLs.
>>>
>>> 
>>>
>>> The crash is also triggered when the number is expressed without
>>> scientific notation, with 324 decimal places.
>>>
>>> Read on...
>>>
>>> http://www.theregister.co.uk/2011/01/04/weird_php_dos_vuln/
>>>
>>> --
>>> Daevid Vincent
>>> http://daevid.com
>>>
>>> There are only 11 types of people in this world. Those that think
>>> binary jokes are funny, those that don't, and those that don't know
> binary.
>>>
>>
>> "The size of a float is platform-dependent, although a maximum of ~1.8e308
>> with a precision of roughly 14 decimal digits is a common value (the 64
> bit
>> IEEE format)."  From [1].  The example given is clearly over the limit
> within
>> the PHP core.
>>
>> This sounds like what I was mentioning before, in a different thread,
> about
>> URL hacking to induce buffer overflow.
>>
>> Regards,
>> Tommy
>>
>> [1] http://www.php.net/manual/en/language.types.float.php
> 
> I found something really weird while coding a validator for floating
> protection protection.
> 
> Case 1 - known DoS / PHP hangs in infinite loop:
> 
>   $value = '2.2250738585072011e-308';
>   var_dump(floatval($value));
> 
> Case 2 - works fine:
> 
>   $value = '2.2250738585072011e-307';
> or
>   $value = '2.2250738585072011e-309';
> or
>   $value = '2.225073858507201e-308';
> 
>   var_dump(floatval($value));
> 
> I'd expect the '2.2250738585072011e-309' to hang also on my Win x64 with PHP
> FastCGI.  I haven't test it on *nix platform yet.   Could someone please
> confirm this?
> 
> Thanks,
> Tommy
> 
> 

Seems to work fine for me.

$ cat float.php

$ php -f float.php
Example 1
float(2.2250738585072E-307)
float(2.2250738585072E-307)
Example 2
float(2.2250738585072E-308)
float(2.2250738585072E-308)
Example 3
float(2.2250738585072E-309)
float(2.2250738585072E-309)
Example 4
float(2.2250738585072E-308)
float(2.2250738585072E-308)

$ uname -a
OpenBSD serv0.cmsws.com 4.3 GENERIC#698 i386
$ php -v
PHP 5.2.5 with Suhosin-Patch 0.9.6.2 (cli) (built: Mar 11 2008 13:08:50)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
with Suhosin v0.9.20, Copyright (c) 2002-2006, by Hardened-PHP Project

No infinite loop.  I like my system... :)

Jim Lucas

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-16 Thread Tommy Pham 
> -Original Message-
> From: Tommy Pham [mailto:tommy...@gmail.com]
> Sent: Sunday, January 16, 2011 4:18 PM
> To: 'php-general@lists.php.net'
> Subject: RE: [PHP] [security] PHP has DoS vuln with large decimal points
> 



> 
> I found something really weird while coding a validator for floating
> protection protection.
> 
> Case 1 - known DoS / PHP hangs in infinite loop:
> 
>   $value = '2.2250738585072011e-308';
>   var_dump(floatval($value));
> 
> Case 2 - works fine:
> 
>   $value = '2.2250738585072011e-307';
> or
>   $value = '2.2250738585072011e-309';
> or
>   $value = '2.225073858507201e-308';
> 
>   var_dump(floatval($value));
> 
> I'd expect the '2.2250738585072011e-309' to hang also on my Win x64 with
> PHP FastCGI.  I haven't test it on *nix platform yet.   Could someone
please
> confirm this?
> 
> Thanks,
> Tommy

Here are the results after some further tests for the same platform:

* max float value: 1.7976931348623E+308
* min float value:  9.8813129168249E-324  <<
floatval('1.00e-323') weird ...

PHP wil hang when the value is between (inclusive)

floatval('2.22507385850720102e-308')  -
floatval('2.22507385850720113e-308')

I can't find the bug report for the issue @ bugs.php.net.  Does anyone know
if one is submitted?  I should submit one?  Sucribe to dev list and go from
there?

Thanks,
Tommy



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-16 Thread Tommy Pham 
> -Original Message-
> From: Tommy Pham [mailto:tommy...@gmail.com]
> Sent: Thursday, January 06, 2011 5:49 PM
> To: 'Daevid Vincent'
> Cc: 'php-general@lists.php.net'
> Subject: RE: [PHP] [security] PHP has DoS vuln with large decimal points
> 
> > -Original Message-
> > From: Daevid Vincent [mailto:dae...@daevid.com]
> > Sent: Wednesday, January 05, 2011 11:36 AM
> > To: php-general@lists.php.net
> > Subject: [PHP] [security] PHP has DoS vuln with large decimal points
> >
> > The error in the way floating-point and double-precision numbers are
> > handled sends 32-bit systems running Linux, Windows, and FreeBSD into
> > an infinite loop that consumes 100 percent of their CPU's resources.
> > Developers are still investigating, but they say the bug appears to
> > affect versions 5.2 and 5.3 of PHP. They say it could be trivially
> > exploited on many websites to cause them to crash by adding long
> numbers to certain URLs.
> >
> > 
> >
> > The crash is also triggered when the number is expressed without
> > scientific notation, with 324 decimal places.
> >
> > Read on...
> >
> > http://www.theregister.co.uk/2011/01/04/weird_php_dos_vuln/
> >
> > --
> > Daevid Vincent
> > http://daevid.com
> >
> > There are only 11 types of people in this world. Those that think
> > binary jokes are funny, those that don't, and those that don't know
binary.
> >
> 
> "The size of a float is platform-dependent, although a maximum of ~1.8e308
> with a precision of roughly 14 decimal digits is a common value (the 64
bit
> IEEE format)."  From [1].  The example given is clearly over the limit
within
> the PHP core.
> 
> This sounds like what I was mentioning before, in a different thread,
about
> URL hacking to induce buffer overflow.
> 
> Regards,
> Tommy
> 
> [1] http://www.php.net/manual/en/language.types.float.php

I found something really weird while coding a validator for floating
protection protection.

Case 1 - known DoS / PHP hangs in infinite loop:

  $value = '2.2250738585072011e-308';
  var_dump(floatval($value));

Case 2 - works fine:

  $value = '2.2250738585072011e-307';
or
  $value = '2.2250738585072011e-309';
or
  $value = '2.225073858507201e-308';

  var_dump(floatval($value));

I'd expect the '2.2250738585072011e-309' to hang also on my Win x64 with PHP
FastCGI.  I haven't test it on *nix platform yet.   Could someone please
confirm this?

Thanks,
Tommy


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] PHP tutorials

2011-01-16 Thread Paul M Foster 
On Sun, Jan 16, 2011 at 01:26:07PM -0500, tedd wrote:

> Hi gang:
> 
> In the past we talked about PHP tutorials, but I don't remember if
> there was a single clearinghouse/link for them or not -- is there
> one? If not, what do you recommend?
> 
> Disclaimer: This is a clear solicitation by me for help with my PHP
> class. I will be teaching this class at my local college starting
> this semester. Please realize this is the first time my local college
> has considered PHP anything of importance.
> 
> In the past, the college has been totally ingrained in .NET (i.e.,
> APS, VB, C#). They believe their focus should be teaching students
> what the Corporate World wants and those needs have been defined by
> the State of Michigan and General Motors. Considering that neither of
> those institutions are financially solvent, other avenues are being
> considered.
> 
> I know I can Google for "PHP tutorials", but I am looking for
> recommendations from this list as to which tutorials/references are
> the best.

I'm not sure that I wouldn't simply take one of the basic books on PHP
(like an O'Reilly) and simply follow along with how it approaches the
subject.

You might also investigate a kid named Bucky Roberts on Youtube. His
channel on Youtube is:

http://youtube.com/user/thenewboston

He has tutorials on a wide variety of languages, including PHP. Check
the playlists link on his home page (above) and look for the PHP
tutorials playlist. It appears that he doesn't do a complete work-up of
the whole language (I haven't watched the PHP tutorials), but the other
stuff he's done seems pretty basic and thorough.

If you decide to do your own video tutorials, I'd strongly suggest
hosting them at Youtube. Let them worry about traffic, bandwidth, etc.

I'd also suggest students make heavy use of the php.net/manual/en/ tree,
since (as has been frequently noted) it's some of the best programming
language documentation on the web.

Paul

-- 
Paul M. Foster
http://noferblatz.com


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] email list 101

2011-01-16 Thread Paul M Foster 
On Sun, Jan 16, 2011 at 10:09:03AM -0500, Kirk Bailey wrote:

> So, in php, I want a program to handle sending out a mail list. All this
> is going to do is be a filter to exclude non subscribers, and send a
> copy to every person in the subscriber file. This is pretty simple in
> python, but this is not my mother tounge we speak here, so let's talk in
> php instead.
> 
> If the submission does not come from a member, the script simply aborts.
> So the script should read the subscriber file, and if the source From:
> does not appear there, DIE. If it is there, walk the array and send a
> copy there, then end.
> 
> Now how to do this in php? Is there an off the shelf solution?

There are some non-obvious issues, like throttling, which would attach
to this kind of project. Failure to consider them all might sink you.

If you simply wanted to be able to send emails from you to a bunch of
people on a list, I'd suggest PHPList. But if you want anyone to be able
to submit those emails, I'd suggest either Majordomo (Perl) or Mailman
(Python). If there's a comparable PHP solution, I'm not aware of it.

Paul

-- 
Paul M. Foster
http://noferblatz.com


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] email list 101

2011-01-16 Thread Jim Lucas 

On 1/16/2011 7:09 AM, Kirk Bailey wrote:

So, in php, I want a program to handle sending out a mail list. All this
is going to do is be a filter to exclude non subscribers, and send a
copy to every person in the subscriber file. This is pretty simple in
python, but this is not my mother tounge we speak here, so let's talk in
php instead.

If the submission does not come from a member, the script simply aborts.
So the script should read the subscriber file, and if the source From:
does not appear there, DIE. If it is there, walk the array and send a
copy there, then end.

Now how to do this in php? Is there an off the shelf solution?




Is this something that you plan on executing with your SMTP server or 
through a web script?

Do you care how the subscribers file is managed?  If at all...
How is the subscriber file formatted?

With the above questions unanswered, I would do something along the 
lines of the following.


form.php:


INPUT:fromname:value (display name)
INPUT:fromaddr:value (email address)
INPUT:subject:Something special
INPUT:message:the message goes here




process.php:
IsSMTP(); // set mailer to use SMTP
$mail->Host = "mail.example.com";  // specify mail server host name
$mail->SMTPAuth = true; // turn on SMTP authentication
$mail->Username = "";  // SMTP username
$mail->Password = ""; // SMTP password

$mail->From = $clean_post['fromaddr'];
if ( !empty($clean_post['fromname']) )
{
  $mail->FromName = $clean_post['fromname'];
  $mail->AddReplyTo($clean_post['fromaddr'], $clean_post['fromname']);
} else {
  $mail->AddReplyTo($clean_post['fromaddr']);
}
$mail->Subject = $clean_post['subject'];
$mail->Body= $clean_post['message'];
$mail->AltBody = strip_tags($clean_post['message']);

# add each person
foreach ( $subscribers AS $addr )
{
  $mail->AddAddress($addr);
  # if you have a name associated to that address, do this instead
  # assuming line format as: em...@address.com,My Name
  list($addr, $name) = explode(',', $addr, 2)
  $mail->AddAddress($addr, $name);
}

if(!$mail->Send())
{
  echo "Message could not be sent. ";
  echo "Mailer Error: " . $mail->ErrorInfo;
  exit;
}

if ( ! headers_sent() )
  header('Location: http://www.example.com/done.php');

?>

--
Jim Lucas

DISCLAIMER: Unless otherwise noted, all code is untested!

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] PHP tutorials

2011-01-16 Thread Daniel Brown 
On Sun, Jan 16, 2011 at 13:26, tedd  wrote:
> Hi gang:
>
> In the past we talked about PHP tutorials, but I don't remember if there was
> a single clearinghouse/link for them or not -- is there one? If not, what do
> you recommend?

While this isn't a direct response, it's an added idea: you might
want to see about a couple of guest speakers/presenters during the
semester.  Maybe some experts will be in the area who might be
interested in volunteering a few minutes out of their week to offer a
presentation (if the college allows it).

-- 

Network Infrastructure Manager
Documentation, Webmaster Teams
http://www.php.net/

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] PHP tutorials

2011-01-16 Thread Joshua Kehn 
On Jan 16, 2011, at 1:26 PM, tedd wrote:

> Hi gang:
> 
> In the past we talked about PHP tutorials, but I don't remember if there was 
> a single clearinghouse/link for them or not -- is there one? If not, what do 
> you recommend?
> 
> Disclaimer: This is a clear solicitation by me for help with my PHP class. I 
> will be teaching this class at my local college starting this semester. 
> Please realize this is the first time my local college has considered PHP 
> anything of importance.
> 
> In the past, the college has been totally ingrained in .NET (i.e., APS, VB, 
> C#). They believe their focus should be teaching students what the Corporate 
> World wants and those needs have been defined by the State of Michigan and 
> General Motors. Considering that neither of those institutions are 
> financially solvent, other avenues are being considered.
> 
> I know I can Google for "PHP tutorials", but I am looking for recommendations 
> from this list as to which tutorials/references are the best.
> 
> Thanks,
> 
> tedd
> 
> -- 
> ---
> http://sperling.com/

I have always had good luck http://www.tizag.com/phpT/

I guess it would depend on what topics you want to cover. Do the students have 
prior programming experience? HTML / CSS / JavaScript (other frontend web stack 
language) experience? Do you want to do simple junk (submit form, view results) 
or more complex actions (database involvement, basic CMS, authentication 
systems)? 

Regards,

-Josh

Joshua Kehn | josh.k...@gmail.com
http://joshuakehn.com

[PHP] PHP tutorials

2011-01-16 Thread tedd 

Hi gang:

In the past we talked about PHP tutorials, but I don't remember if 
there was a single clearinghouse/link for them or not -- is there 
one? If not, what do you recommend?


Disclaimer: This is a clear solicitation by me for help with my PHP 
class. I will be teaching this class at my local college starting 
this semester. Please realize this is the first time my local college 
has considered PHP anything of importance.


In the past, the college has been totally ingrained in .NET (i.e., 
APS, VB, C#). They believe their focus should be teaching students 
what the Corporate World wants and those needs have been defined by 
the State of Michigan and General Motors. Considering that neither of 
those institutions are financially solvent, other avenues are being 
considered.


I know I can Google for "PHP tutorials", but I am looking for 
recommendations from this list as to which tutorials/references are 
the best.


Thanks,

tedd

--
---
http://sperling.com/

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] which php file is sending emails?

2011-01-16 Thread David Hutto 
On Sun, Jan 16, 2011 at 11:19 AM, Mujtaba Arshad  wrote:
> Nilesh's note to self: don't sound condescending when suggesting untested


Now define 'self'. Is it a remembrance(i.e. a string of molecular
structures), or a google(google 'Rich formatting' says google isn't
actually a word, and gives the squiggly red underlining for it's own
name) search through the archives?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] which php file is sending emails?

2011-01-16 Thread Mujtaba Arshad 
Nilesh's note to self: don't sound condescending when suggesting untested
code.

On Sun, Jan 16, 2011 at 10:56 AM, Marc Guay  wrote:

> > There can be nothing more simpler than this!!!
>
> I thought that this quote needed some revisiting.
>
> Marc
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>


-- 
Mujtaba

Re: [PHP] which php file is sending emails?

2011-01-16 Thread Marc Guay 
> There can be nothing more simpler than this!!!

I thought that this quote needed some revisiting.

Marc

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] email list 101

2011-01-16 Thread David McGlone 
On Sunday, January 16, 2011 10:09:03 am Kirk Bailey wrote:
> So, in php, I want a program to handle sending out a mail list. All this
> is going to do is be a filter to exclude non subscribers, and send a
> copy to every person in the subscriber file. This is pretty simple in
> python, but this is not my mother tounge we speak here, so let's talk in
> php instead.
> 
> If the submission does not come from a member, the script simply aborts.
> So the script should read the subscriber file, and if the source From:
> does not appear there, DIE. If it is there, walk the array and send a
> copy there, then end.
> 
> Now how to do this in php? Is there an off the shelf solution?

Have you tried Majordomo? 

-- 
Blessings
David M.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: email list 101

2011-01-16 Thread David Hutto 
On Sun, Jan 16, 2011 at 10:43 AM, Peter Lind  wrote:
> On 16 January 2011 16:35, Michelle Konzack
>  wrote:
>> Hello Kirk Bailey,
>>
>> Am 2011-01-16 10:09:03, hacktest Du folgendes herunter:
>>> So, in php, I want a program to handle sending out a mail list. All
>>> this is going to do is be a filter to exclude non subscribers, and
>>> send a copy to every person in the subscriber file. This is pretty
>>> simple in python, but this is not my mother tounge we speak here, so
>>> let's talk in php instead.
>>>
>>> If the submission does not come from a member, the script simply
>>> aborts. So the script should read the subscriber file, and if the
>>> source From: does not appear there, DIE. If it is there, walk the
>>> array and send a copy there, then end.
>>>
>>> Now how to do this in php? Is there an off the shelf solution?
>>
>> Maybe using RTFW 
>
> Considering that you've used the PHP list for some very inane
> questions yourself, perhaps you should keep the tone lighter and avoid
> flaming people? Just a thought.

But  hypocrisy is so fun though.

>
> Regards
> Peter
>
> --
> 
> WWW: plphp.dk / plind.dk
> LinkedIn: plind
> BeWelcome/Couchsurfing: Fake51
> Twitter: kafe15
> 
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>



-- 
Think outside the "sphere"...O

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: email list 101

2011-01-16 Thread Peter Lind 
On 16 January 2011 16:35, Michelle Konzack
 wrote:
> Hello Kirk Bailey,
>
> Am 2011-01-16 10:09:03, hacktest Du folgendes herunter:
>> So, in php, I want a program to handle sending out a mail list. All
>> this is going to do is be a filter to exclude non subscribers, and
>> send a copy to every person in the subscriber file. This is pretty
>> simple in python, but this is not my mother tounge we speak here, so
>> let's talk in php instead.
>>
>> If the submission does not come from a member, the script simply
>> aborts. So the script should read the subscriber file, and if the
>> source From: does not appear there, DIE. If it is there, walk the
>> array and send a copy there, then end.
>>
>> Now how to do this in php? Is there an off the shelf solution?
>
> Maybe using RTFW 

Considering that you've used the PHP list for some very inane
questions yourself, perhaps you should keep the tone lighter and avoid
flaming people? Just a thought.

Regards
Peter

-- 

WWW: plphp.dk / plind.dk
LinkedIn: plind
BeWelcome/Couchsurfing: Fake51
Twitter: kafe15


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: email list 101

2011-01-16 Thread Michelle Konzack 
Hello Kirk Bailey,

Am 2011-01-16 10:09:03, hacktest Du folgendes herunter:
> So, in php, I want a program to handle sending out a mail list. All
> this is going to do is be a filter to exclude non subscribers, and
> send a copy to every person in the subscriber file. This is pretty
> simple in python, but this is not my mother tounge we speak here, so
> let's talk in php instead.
> 
> If the submission does not come from a member, the script simply
> aborts. So the script should read the subscriber file, and if the
> source From: does not appear there, DIE. If it is there, walk the
> array and send a copy there, then end.
> 
> Now how to do this in php? Is there an off the shelf solution?

Maybe using RTFW 

This is realy basic and you can use shell() with a  shell/grep  line  or
fopen() and read line by line.

Thanks, Greetings and nice Day/Evening
Michelle Konzack

-- 
# Debian GNU/Linux Consultant ##
   Development of Intranet and Embedded Systems with Debian GNU/Linux

itsystems@tdnet France EURL   itsystems@tdnet UG (limited liability)
Owner Michelle KonzackOwner Michelle Konzack

Apt. 917 (homeoffice)
50, rue de Soultz Kinzigstraße 17
67100 Strasbourg/France   77694 Kehl/Germany
Tel: +33-6-61925193 mobil Tel: +49-177-9351947 mobil
Tel: +33-9-52705884 fix

  
 

Jabber linux4miche...@jabber.ccc.de
ICQ#328449886

Linux-User #280138 with the Linux Counter, http://counter.li.org/


signature.pgp
Description: Digital signature

[PHP] email list 101

2011-01-16 Thread Kirk Bailey 
So, in php, I want a program to handle sending out a mail list. All this 
is going to do is be a filter to exclude non subscribers, and send a 
copy to every person in the subscriber file. This is pretty simple in 
python, but this is not my mother tounge we speak here, so let's talk in 
php instead.


If the submission does not come from a member, the script simply aborts. 
So the script should read the subscriber file, and if the source From: 
does not appear there, DIE. If it is there, walk the array and send a 
copy there, then end.


Now how to do this in php? Is there an off the shelf solution?


--
end

Very Truly yours,
- Kirk Bailey,
  Largo Florida

  kniht   
 +-+  
 | BOX |  
 +-+  
  think   



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php