Re: [PHP] JavaScript Injection ???

2011-04-18 Thread Paul M Foster
On Mon, Apr 18, 2011 at 02:42:09PM -0400, tedd wrote: [snip] > > No, I had a simple form where IF the user entered: > > alert("Evil Code"); > > -- into the form's text field (i.e., $_POST['text'] ) AND clicked > Submit, the form would > > echo( $_POST['text'] ); > > -- and that would produ

[PHP] Re: email w/attachments

2011-04-18 Thread domih
On 4/17/2011 7:26 PM, tedd wrote: Hi gang: Anyone have an email script that allows attachments they would share? I've been trying to figure this out and everything I've tried has failed. I've looked at over a dozen scripts that don't work. I'm about to pull out what hair I have left. Cheers (I

Re: [PHP] openssl question

2011-04-18 Thread Sean Greenslade
On Wed, Apr 6, 2011 at 3:41 PM, Kai Renz wrote: > Hi, > > i try to create a self signed certificate using this code: > > I'm using a windows box with xampp installed. > > regards. > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > > ht

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread tedd
At 4:44 PM -0400 4/18/11, Daniel Brown wrote: On Mon, Apr 18, 2011 at 15:50, tedd wrote: It doesn't make any difference if I use stripslashes() or not, it still will NOT produce a javascript alert as it used to do. Interestingly enough, I copied your index.php file to index2.php on the

[PHP] Re: JavaScript Injection ???

2011-04-18 Thread tedd
At 3:10 PM -0500 4/18/11, Shawn McKenzie wrote: On 04/18/2011 12:06 PM, tedd wrote: Hi gang: Quite some time ago I had a demo that showed Javascript injection. It was where a user could type in: alert("Evil Code"); and a JavaScript alert would be shown. But now my demo no longer works

Re: [PHP] usort within a class

2011-04-18 Thread Stuart Dallas
On Monday, 18 April 2011 at 21:52, Ashley Sheridan wrote: On Mon, 2011-04-18 at 21:41 +0100, Stuart Dallas wrote: > > On Monday, 18 April 2011 at 21:27, Ashley Sheridan wrote: > > I'm trying to get the usort function working inside of a class, but am > > > having some issues. Basically, the compare

Re: [PHP] usort within a class

2011-04-18 Thread Ashley Sheridan
On Mon, 2011-04-18 at 21:41 +0100, Stuart Dallas wrote: > On Monday, 18 April 2011 at 21:27, Ashley Sheridan wrote: > I'm trying to get the usort function working inside of a class, but am > > having some issues. Basically, the compare function which is the second > > parameter isn't recognised, bu

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread Daniel Brown
On Mon, Apr 18, 2011 at 15:50, tedd wrote: > > It doesn't make any difference if I use stripslashes() or not, it still will > NOT produce a javascript alert as it used to do. Interestingly enough, I copied your index.php file to index2.php on the server and modified it to use stripslashes() a

Re: [PHP] usort within a class

2011-04-18 Thread Stuart Dallas
On Monday, 18 April 2011 at 21:27, Ashley Sheridan wrote: I'm trying to get the usort function working inside of a class, but am > having some issues. Basically, the compare function which is the second > parameter isn't recognised, but I'm not really sure how to indicate > exactly where it is. >

[PHP] usort within a class

2011-04-18 Thread Ashley Sheridan
I'm trying to get the usort function working inside of a class, but am having some issues. Basically, the compare function which is the second parameter isn't recognised, but I'm not really sure how to indicate exactly where it is. I've gone over the usort() docs and read the user comments, and th

[PHP] Re: JavaScript Injection ???

2011-04-18 Thread Shawn McKenzie
On 04/18/2011 12:06 PM, tedd wrote: > Hi gang: > > Quite some time ago I had a demo that showed Javascript injection. It > was where a user could type in: > > alert("Evil Code"); > > and a JavaScript alert would be shown. > > But now my demo no longer works. So, what happened? Was there a php

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread Stuart Dallas
On Monday, 18 April 2011 at 20:50, tedd wrote: > Daniel et al: > > Sorry -- I'm not making myself clear. > > The form "as-is" produced a javascript alert() and now it doesn't. > > It doesn't make any difference if I use stripslashes() or not, it > still will NOT produce a javascript alert as i

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread tedd
At 2:46 PM -0400 4/18/11, Daniel Brown wrote: On Mon, Apr 18, 2011 at 14:42, tedd wrote: No, I had a simple form where IF the user entered: alert("Evil Code"); -- into the form's text field (i.e., $_POST['text'] ) AND clicked Submit, the form would echo( $_POST['text'] ); -- and tha

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread Ashley Sheridan
On Mon, 2011-04-18 at 14:42 -0400, tedd wrote: > At 1:09 PM -0400 4/18/11, Joshua Kehn wrote: > >On Monday, April 18, 2011 at 1:06 PM, tedd wrote: > > > >>Hi gang: > >> > >>Quite some time ago I had a demo that showed Javascript injection. It > >>was where a user could type in: > >> > >> alert("Ev

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread Daniel Brown
On Mon, Apr 18, 2011 at 14:42, tedd wrote: > > No, I had a simple form where IF the user entered: > > alert("Evil Code"); > > -- into the form's text field (i.e., $_POST['text'] ) AND clicked Submit, > the form would > > echo( $_POST['text'] ); > > -- and that would produce a JavaScript Alert. >

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread tedd
At 1:09 PM -0400 4/18/11, Joshua Kehn wrote: On Monday, April 18, 2011 at 1:06 PM, tedd wrote: Hi gang: Quite some time ago I had a demo that showed Javascript injection. It was where a user could type in: alert("Evil Code"); and a JavaScript alert would be shown. But now my demo no longer

RE: [PHP] JavaScript Injection ???

2011-04-18 Thread Ashley Sheridan
On Mon, 2011-04-18 at 14:11 -0400, ad...@buskirkgraphics.com wrote: > Yes Alert works fine on my browsers but the hack to change the alert on > someone else's website has been fixed from browser updates. > > > Richard L. Buskirk > > You can't grow your business with systems that are on life sup

RE: [PHP] JavaScript Injection ???

2011-04-18 Thread admin
Yes Alert works fine on my browsers but the hack to change the alert on someone else's website has been fixed from browser updates. Richard L. Buskirk You can't grow your business with systems that are on life support... -Original Message- From: Jim Giner [mailto:jim.gi...@albanyhandba

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread Jim Giner
wrote in message news:005501cbfdeb$457839c0$d068ad40$@com... > Javascript:alert("Hello World"); > The browsers have had many updates since last I seen this work. > ?? You're saying that "alert" doesn't work on your browse? Gee - it works on mine. -- PHP General Mailing List (http://www.p

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread Ashley Sheridan
On Mon, 2011-04-18 at 22:43 +0530, Shreyas Agasthya wrote: > Is someone up to Cross Site Scripting? ;) > > --Shreyas > > On Mon, Apr 18, 2011 at 10:39 PM, Joshua Kehn wrote: > > > On Monday, April 18, 2011 at 1:06 PM, tedd wrote: > > Hi gang: > > > > > > Quite some time ago I had a demo that s

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread Shreyas Agasthya
Is someone up to Cross Site Scripting? ;) --Shreyas On Mon, Apr 18, 2011 at 10:39 PM, Joshua Kehn wrote: > On Monday, April 18, 2011 at 1:06 PM, tedd wrote: > Hi gang: > > > > Quite some time ago I had a demo that showed Javascript injection. It > > was where a user could type in: > > > > aler

RE: [PHP] JavaScript Injection ???

2011-04-18 Thread admin
Javascript:alert("Hello World"); The browsers have had many updates since last I seen this work. PHP Server side. JavaScript Client/Browser Side. Richard L. Buskirk You can't grow your business with systems that are on life support... -Original Message- From: tedd [mailto:t...@sperli

Re: [PHP] JavaScript Injection ???

2011-04-18 Thread Joshua Kehn
On Monday, April 18, 2011 at 1:06 PM, tedd wrote: Hi gang: > > Quite some time ago I had a demo that showed Javascript injection. It > was where a user could type in: > > alert("Evil Code"); > > and a JavaScript alert would be shown. > > But now my demo no longer works. So, what happened? Was

[PHP] JavaScript Injection ???

2011-04-18 Thread tedd
Hi gang: Quite some time ago I had a demo that showed Javascript injection. It was where a user could type in: alert("Evil Code"); and a JavaScript alert would be shown. But now my demo no longer works. So, what happened? Was there a php update that prohibited that sort of behavior or did

Re: [PHP] email w/attachments

2011-04-18 Thread Paul M Foster
On Sun, Apr 17, 2011 at 10:26:04PM -0400, tedd wrote: > Hi gang: > > Anyone have an email script that allows attachments they would share? > > I've been trying to figure this out and everything I've tried has > failed. I've looked at over a dozen scripts that don't work. I'm > about to pull out

[PHP] Re: email w/attachments

2011-04-18 Thread Jo�o C�ndido de Souza Neto
I use Zend_Mail (from Zend Framework) works perfectly. -- João Cândido de Souza Neto "tedd" escreveu na mensagem news:p06240806c9d150fea24d@[192.168.1.2]... > Hi gang: > > Anyone have an email script that allows attachments they would share? > > I've been trying to figure this out and everyt

Re: [PHP] email w/attachments

2011-04-18 Thread Steve Staples
On Mon, 2011-04-18 at 11:05 +0100, Richard Quadling wrote: > On 18 April 2011 04:38, Bastien wrote: > > > > > > > > > > On 2011-04-17, at 10:26 PM, tedd wrote: > > > >> Hi gang: > >> > >> Anyone have an email script that allows attachments they would share? > >> > >> I've been trying to figure th

Re: [PHP] email w/attachments

2011-04-18 Thread Richard Quadling
On 18 April 2011 04:38, Bastien wrote: > > > > > On 2011-04-17, at 10:26 PM, tedd wrote: > >> Hi gang: >> >> Anyone have an email script that allows attachments they would share? >> >> I've been trying to figure this out and everything I've tried has failed. >> I've looked at over a dozen script