Re: [PHP] Re: Question regarding passwords/security

2011-12-22 Thread Al
On 12/22/2011 2:54 PM, Stuart Dallas wrote: On 22 Dec 2011, at 19:34, Paul M Foster wrote: I have concerns that the items in a session buffer can be copied and used to spoof legitimate logins. This is harder to do when the info is held in a database. Storing stuff in a database is no more s

Re: [PHP] Re: Question regarding passwords/security

2011-12-22 Thread Stuart Dallas
On 22 Dec 2011, at 19:34, Paul M Foster wrote: > I have concerns that the items in a session buffer can be copied and > used to spoof legitimate logins. This is harder to do when the info is > held in a database. Storing stuff in a database is no more secure, it simply requires one single extra

Re: [PHP] Re: Question regarding passwords/security

2011-12-22 Thread Paul M Foster
On Thu, Dec 22, 2011 at 12:55:41PM -0500, Al wrote: > > > On 12/22/2011 10:05 AM, Paul M Foster wrote: > >Not sure how to ask this question... I've always eschewed consulting a > >database on page loads to determine if a user is logged in, primarily > >because of latency issues. For example, you

RE: [PHP] Online Form Creation

2011-12-22 Thread Christopher Lee
>My apologies if you took my comments as being rude. The point here is that if >you want advice, then we need to see what is causing you problems. Giving us >an outline of what you want isn't giving us anything other than "This is what >I want" -- with an implied "Do it". Hi Tedd, I apologize a

Re: [PHP] Online Form Creation

2011-12-22 Thread Tedd Sperling
On Dec 22, 2011, at 11:22 AM, Christopher Lee wrote: > Tedd, > > I appreciate your reply to my post. In no way do I expect anyone to code for > me. If that were the case I would hire someone. I have posted to this list > numerous times and, if I am not mistaken, the list is designed to ask for

[PHP] Re: Question regarding passwords/security

2011-12-22 Thread Al
On 12/22/2011 10:05 AM, Paul M Foster wrote: Not sure how to ask this question... I've always eschewed consulting a database on page loads to determine if a user is logged in, primarily because of latency issues. For example, you could store a nonce like the session ID in a table for a user whe

[PHP] Relative includes and include_path

2011-12-22 Thread Jasper Horn
Hi all, On the the include_path php.net says: "Using a . in the include path allows for relative includes as it means the current directory. However, it is more efficient to explicitly use include './file' than having PHP always check the current directory for every include. " (http://www.php.ne

RE: [PHP] Online Form Creation

2011-12-22 Thread Christopher Lee
>Now, if you need help with writing the PHP that handles the data, then great! >This is the right place to ask! But we need to see code you attempted, in >order to know your level of understanding, and so be able to guide better. Hi Godiva, I appreciate all the great comments/suggestions from

Re: [PHP] Online Form Creation

2011-12-22 Thread Govinda
> I understand how to program radio buttons in a form that record 'instances' > of a response. I just was not sure how to set-up a similar matrix to allow > the user to enter a numerical value. Christopher, Maybe Tedd was a little curt, but the language you used just made it seem like you had

Re: [PHP] Online Form Creation

2011-12-22 Thread Jim Lucas
On 12/22/2011 8:22 AM, Christopher Lee wrote: > On Dec 21, 2011, at 2:14 AM, Tedd Sperling wrote: > >> I don't see a problem here. >> >> 1. Figure out how to create a HTML form (Investigate HTML tables). >> 2. Then write a PHP that will scrub the data and submit it to MySQL. >> >> The length and l

RE: [PHP] Online Form Creation

2011-12-22 Thread Christopher Lee
On Dec 21, 2011, at 2:14 AM, Tedd Sperling wrote: >I don't see a problem here. > >1. Figure out how to create a HTML form (Investigate HTML tables). >2. Then write a PHP that will scrub the data and submit it to MySQL. > >The length and layout of the forms are of no significance. > >This is basic

[PHP] Question regarding passwords/security

2011-12-22 Thread Paul M Foster
Not sure how to ask this question... I've always eschewed consulting a database on page loads to determine if a user is logged in, primarily because of latency issues. For example, you could store a nonce like the session ID in a table for a user when they log in. Then each time they arrive at a pa