Re: [PHP] Re: Session's across Domains...

2005-11-08 Thread Chris Shiflett
. With servers synchronized with ntpd, this lets you close the window of opportunity down to just a few seconds, strengthening the technique. I might try to write a more detailed spec for this at some point, but hopefully that provides some good ideas. :-) Chris -- Chris Shiflett Brain Bulb

Re: [PHP] java .vs php

2005-11-09 Thread Chris Shiflett
bruce wrote: i'm trying to really get a feel as to whether php can really drive serious commercial sites. Yahoo gets 3.4 billion page views per day. That serious enough for you? Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http

Re: [PHP] Select and $_POST

2005-11-09 Thread Chris Shiflett
. :-) Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: Select and $_POST

2005-11-09 Thread Chris Shiflett
['pass'] = md5($_POST['pass']); Of course, it is best to use a salt: $salt = 'SHIFLETT'; $clean['pass'] = md5($salt . md5($_POST['pass'] . $salt)); Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit

Re: [PHP] Re: Select and $_POST

2005-11-10 Thread Chris Shiflett
provided, $_POST['pass'] is the password provided by the user. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: Security Issues - Where to look?

2005-11-10 Thread Chris Shiflett
GamblerZG wrote: I think it's still reasonable to restrict a session to a single IP. No, it's not, for all of the reasons Richard mentioned and more. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net

Re: [PHP] Re: Security Issues - Where to look?

2005-11-10 Thread Chris Shiflett
already been given. Please quit making the same false statements without bothering to read the responses. We're trying to help you, and if you don't want to be helped, at least stop spreading misinformation. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com

[PHP] Filtering and Escaping (Was: Select and $_POST)

2005-11-11 Thread Chris Shiflett
of the string is meant to be only data. In this case, the data is Chris, Shiflett, New York, and NY. The HTML tags are meant to be interpreted. As the developer, that's easy for me to know, but it's hard to make this easier to keep up with. At best, any solution requires developers to declare their intent

Re: [PHP] Filtering and Escaping (Was: Select and $_POST)

2005-11-11 Thread Chris Shiflett
Chris Shiflett wrote: However, most security issues like XSS and SQL injection aren't really input filtering problems. Often, input filtering can effectively eliminate these vulnerabilities (and there's no excuse to not be filtering input), but escaping addresses the root cause of the problem

Re: [PHP] split or explode quoted strings

2005-11-14 Thread Chris Shiflett
, but this is a job for sscanf(): http://php.net/sscanf Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: Filtering and Escaping (Was: Select and $_POST)

2005-11-14 Thread Chris Shiflett
for extra performance. So I sanitize data on input only. Sanitizing is an alias for filtering and has nothing to do with escaping. One should never be considered a substitute for the other, although this is a common mistake. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http

Re: [PHP] SOAP and PHP

2005-11-16 Thread Chris Shiflett
Angelo Zanetti wrote: I've googled but found so many pages that I'm not sure what to use. I want to use PHP to make use of SOAP. If you're using PHP 5, this is a good option: http://php.net/soap Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com

Re: [PHP] SESSION expiry time setting

2005-11-18 Thread Chris Shiflett
Angelo Zanetti wrote: I've been searching for where the time is set for a session to expire but had little luck. I think you might be looking for the session.gc_* directives. These control the session mechanism's garbage collection. Hope that helps. Chris -- Chris Shiflett Brain Bulb

Re: [PHP] echo

2005-11-19 Thread Chris Shiflett
(XSS) vulnerability. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] url vs dirname(__FILE__)

2005-11-29 Thread Chris Shiflett
]/path/to/script.php I think it's pretty important to understand the difference as well as the relationship. Once you do, your question might go away. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net

Re: [PHP] XSS via curl

2005-11-30 Thread Chris Shiflett
. :-) For example, filter the data you receive from the client before passing it as arguments to the mail() function. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http

Re: [PHP] Sessions, Expire-headers and Firefox's back button

2005-12-02 Thread Chris Shiflett
to distinguish between the history mechanism and caches, a distinction that doesn't naturally exist. I don't really fault Firefox for abiding by the no-store directive, nor do I fault Internet Explorer for ignoring it. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http

Re: [PHP] Why do Sessions use Cookies?

2005-12-02 Thread Chris Shiflett
is no. :-) Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Multiple callback_outputs for ob_start

2005-12-05 Thread Chris Shiflett
Mathijs wrote: How can i add more callback_outputs to ob_start? I want to have both: ob_start('switchContent'); and: ob_start('ob_gzhandler'); I don't think you can, but you could have a single function that calls both, then specify that function in ob_start(). Chris -- Chris Shiflett

Re: [PHP] Classes/Objects - Books/Links?

2005-12-06 Thread Chris Shiflett
-- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Preventing Cross Site Scripting Vulnerbilities

2005-12-07 Thread Chris Shiflett
Hope that helps! Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Preventing Cross Site Scripting Vulnerbilities

2005-12-07 Thread Chris Shiflett
://shiflett.org/articles Hope that helps! Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] ob_start session_start

2005-12-07 Thread Chris Shiflett
Joe Harman wrote: Okay...makes sense after you spelled it out to me. That didn't make sense to me (and I missed the original reply). Mind elaborating? :-) Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net

Re: [PHP] ob_start session_start

2005-12-07 Thread Chris Shiflett
getting the buffering and flushing concepts reversed? Think of a toilet - buffering is the handle up, and flushing is the handle down. :-) Hope that helps! Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net

Re: [PHP] array carrying from one php page to another

2005-12-07 Thread Chris Shiflett
= $_SESSION['array_for_popup']; // .. do your magic. // optionally clean things up. so the session var is removed. unset($_SESSION['array_for_popup']); ? Don't forget session_start(). :-) (You might have session.auto_start enabled, but it's not by default.) Chris -- Chris Shiflett Brain Bulb, The PHP

Re: [PHP] QUERY_STRING Variables and POST

2005-12-08 Thread Chris Shiflett
the GET method is indicated in a form's method attribute. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] encrypt and dcrypt

2005-12-15 Thread Chris Shiflett
/online_artikel/psecom,id,667,nodeid,114.html Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Sessions...

2005-12-22 Thread Chris Shiflett
), and you'll see that I use this function on everything I use in my SQL queries, even when it seems ridiculous to do so: $access = time(); $access = mysql_real_escape_string($access); Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General

Re: [PHP] PHP Frameworks

2005-12-23 Thread Chris Shiflett
. In a few months, it might be something to consider. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Adventures in Cookies

2006-01-23 Thread Chris Shiflett
data. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Google using PHP @ Google Store

2006-01-25 Thread Chris Shiflett
Dan Lowe wrote: It's implied right on the front page it's not directly run by Google. I'm not sure why it matters, but the real Google store appears to use ASP: http://www.googlestore.com/home.asp Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General

Re: [PHP] Google using PHP @ Google Store

2006-01-25 Thread Chris Shiflett
I'm not sure why it matters, but the real Google store appears to use ASP: http://www.googlestore.com/home.asp My mistake. Apparently there are different sites for different countries. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List

Re: [PHP] CR \ LFs being represented as ascii characters in output of mail()

2006-01-31 Thread Chris Shiflett
been escaped with something like mysql_real_escape_string(). You want to do that when you're using it in a MySQL query, not when you use it in an email. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http

Re: [PHP] Class/functions question

2006-02-12 Thread Chris Shiflett
{ /* ... */ } } else { /* ... */ $v = new Validation; $v-checkEmpty($_POST[name]); If the form is submitted, define the class, else use the class. That doesn't sound right... Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing

Re: [PHP] PHP function called by onclick

2006-02-12 Thread Chris Shiflett
Alain Roger wrote: I have a link in my web page and when user click on this link, i would like to execute a PHP function with a parameter. You'll need to initiate a new request. Browsers don't execute PHP code. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com

Re: [PHP] Validating input

2005-01-28 Thread Chris Shiflett
an approach like the following to make sure something is an integer: ?php $clean = array(); if ($_POST['num'] === strval(intval($_POST['num']))) { $clean['num'] = $_POST['num']; } ? Hope that helps. Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's

[PHP] PHP Security Consortium

2005-01-30 Thread Chris Shiflett
the community about secure programming practices has risen, said Chris Shiflett, the group's founder. The PHPSC web site (http://phpsec.org/) provides a variety of security resources for PHP developers, including the group's flagship project, the PHP Security Guide. PHP application security is a topic

Re: [PHP] best way to handle user authentication, PHP vs. apache

2005-01-31 Thread Chris Shiflett
://phpsec.org/projects/guide/ Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook - Sams Coming Soon http://httphandbook.org/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] best way to handle user authentication, PHP vs. apache

2005-01-31 Thread Chris Shiflett
to talk the site up a bit because I get the feeling it has the potential to really make a positive impact... guess that didn't come over to well. No worries - it came across just fine. :-) Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook

Re: [PHP] phpBB alternatives?

2005-02-08 Thread Chris Shiflett
, and a secure server doesn't make a secure application. Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook - Sams Coming Soon http://httphandbook.org/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http

Re: [PHP] PHP book recommendations

2005-02-15 Thread Chris Shiflett
/0672325616 Hope that helps. Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook - Sams Coming Soon http://httphandbook.org/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] PHP Post method HTTP 404

2005-02-16 Thread Chris Shiflett
the form. This is not a PHP question. Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook - Sams Coming Soon http://httphandbook.org/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net

Re: [PHP] PHP or ASP.Net

2005-02-17 Thread Chris Shiflett
is the language to go for. That's easy. ASP.Net requires that you run IIS. Debate over. Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook - Sams Coming Soon http://httphandbook.org/ -- PHP General Mailing List (http://www.php.net

Re: [PHP] PHP security

2005-02-17 Thread Chris Shiflett
risk. My favorite method of handling this is described at the end of this article: http://shiflett.org/articles/security-corner-mar2004 Hope that helps. Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook - Sams Coming Soon

Re: [PHP] Sessions and cookies

2005-02-22 Thread Chris Shiflett
not act on the cookie nor the $_SESSION superglobal array. Hope that helps. Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook - Sams Coming Soon http://httphandbook.org/ -- PHP General Mailing List (http://www.php.net

Re: [PHP] Hi ALL

2005-02-25 Thread Chris Shiflett
no. of words/post Richard certainly contributes a lot, and I think he's in the top 10 (Curt Zirzow actually compiled these statistics a while back), but no one comes close to John Holmes. Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook - Sams

Re: [PHP] Cookies

2005-02-25 Thread Chris Shiflett
--- William Stokes [EMAIL PROTECTED] wrote: If I send a session cookie to browser where it is stored in WinXP? Session cookies are kept in memory. Chris = Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook - Sams Coming Soon http

Re: [PHP] Problem submitting a POST request by hand

2005-02-28 Thread Chris Shiflett
= Chris Shiflett - http://shiflett.org/ PHP Security - O'Reilly HTTP Developer's Handbook - Sams Coming Soon http://httphandbook.org/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Problem submitting a POST request by hand

2005-02-28 Thread Chris Shiflett
else you do. You can connect to a thousand different servers, collect data from a thousand different databases, and do stuff more complex than any PHP developer has ever done before. However, if you never output anything, the client is going to see a blank page. Hope that helps. Chris = Chris

Re: [PHP] PHP file as homepage?

2005-03-15 Thread Chris Shiflett
directive (Apache). In httpd.conf, just do something like this: DirectoryIndex index.html index.php This gives preference to a static index, if it exists. You can only use index.php if you want. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General

Re: [PHP] multiple OR's

2005-03-17 Thread Chris Shiflett
'; break; default: echo 'The name wasn't one of those'; } Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] getting text with strange encodng

2005-03-17 Thread Chris Shiflett
. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] can I do a for each here??

2005-03-17 Thread Chris Shiflett
trusting it? That's a very dangerous practice. If you explain your problem, we might be able to offer some help. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Setting cookies for other domains

2005-03-17 Thread Chris Shiflett
a browser makes a request, it checks for cookies to be included in the Cookie header. Only those that meet the requirements (domain, path, expiry, etc.) are included. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http

Re: [PHP] More function troubles

2005-03-18 Thread Chris Shiflett
){ // this is line 5 Maybe you error is that check_zero() is spelled differently than check()? Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] XML HTTP

2005-03-18 Thread Chris Shiflett
, but this alone doesn't provide enough information. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] XML HTTP

2005-03-18 Thread Chris Shiflett
document. :-) There are many details you're not giving us (you can leave out the details involving the XML document itself, of course), so it's pretty much impossible to even guess an answer to your question. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General

Re: [PHP] carriage returns using error_log?

2005-03-20 Thread Chris Shiflett
in the log message. Try using double quotes instead of single quotes. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] see anything wrong (xhtml validator)

2005-03-20 Thread Chris Shiflett
not trust the description? It seems to me that 1 cannot start a name. I bet $news['id'] starts with a 1 in this case. I'm not really sure what you're asking... Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net

Re: [PHP] php-not-executing-in-html-file-help

2005-03-20 Thread Chris Shiflett
treates as HTML, and hi.php is being treated as PHP. No surprise there. You can modify this behavior and make Apache treat .html files as PHP by adding .html to your AddType directive in httpd.conf. Are you really sure this is what you need? Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy

Re: [PHP] carriage returns using error_log?

2005-03-20 Thread Chris Shiflett
you show us a specific example that would let us reproduce the problem locally? Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Session destroy/unset question - the same session_id is regenerated.

2005-03-22 Thread Chris Shiflett
it, but these might have essentially the same behavior (e.g., memory is freed but not overwritten). Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] header already sent problem

2005-03-25 Thread Chris Shiflett
terminates (or you manually flush). Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Avoiding SQL injections: htmlentities() ?

2005-03-26 Thread Chris Shiflett
clear. I don't recommend skipping either of these two crucial steps, but escaping can help protect you against weak or broken filtering. Because there are built-in escaping functions for most external systems, you should rely on these where possible. Hope that helps. Chris -- Chris Shiflett Brain

Re: [PHP] Avoiding SQL injections: htmlentities() ?

2005-03-26 Thread Chris Shiflett
might be as good or better than that article. The article also has user comments at the bottom, so you might find something useful there also. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net

Re: [PHP] Avoiding SQL injections: htmlentities() ?

2005-03-26 Thread Chris Shiflett
-- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] setcookie issue

2005-03-26 Thread Chris Shiflett
John Hinton wrote: Seems my old setcookie scripts are busted in php with globals off. Use $_COOKIES['name']. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] setcookie issue

2005-03-27 Thread Chris Shiflett
of HTTP Developer's Handbook explains cookies: http://shiflett.org/books/http-developers-handbook/chapters/11 See Figure 11.3 for an illustration of the exchange I just described. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List

Re: [PHP] include literal

2005-03-28 Thread Chris Shiflett
Jeremy Reynolds wrote: What if I want to include some literal test into a PHP document that I don't want it to interpret as it loads. You can use something like readfile() instead of include. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP

Re: [PHP] text editor

2005-03-28 Thread Chris Shiflett
it.) Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Almost OT - urlencode and IE

2005-04-11 Thread Chris Shiflett
urlencode it `urlencode(urlencode($sData))` while Firefox and Opera (and, I imagine, every other non-microsoft browser out there) only needs to be encoded once. Can you provide a specific example? As horrible as IE is, I can't imagine that it doesn't properly handle URL encoding. Chris -- Chris Shiflett

Re: [PHP] Storing password in cookie

2005-04-11 Thread Chris Shiflett
from the same domain). Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Storing password in cookie

2005-04-11 Thread Chris Shiflett
of storing passwords in cookies is absurd. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Storing password in cookie

2005-04-11 Thread Chris Shiflett
. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Storing password in cookie

2005-04-11 Thread Chris Shiflett
considerations can require that you couple its retrieval with other session data rather than incur the extra expense. It's just one of those things that is a little bit application-specific. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http

Re: [PHP] OT Where is a good place to post PHP job opportunities

2005-04-12 Thread Chris Shiflett
Joey wrote: Sorry to post this here, but I don't know if the list has a jobs section etc. or if there is a good place where I can post job opportunities for php programmers? This list is fine. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List

Re: [PHP] validating input

2005-04-12 Thread Chris Shiflett
blackwater dev wrote: I want to check a string for only numbers and letters but am banging my head with regex: ctype_alnum() Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net

Re: [PHP] Storing password in cookie

2005-04-14 Thread Chris Shiflett
avoiding). Being mindful of this, it's also helpful to not even display it to the user, instead showing only the last four digits or something, because this display also counts as exposure (since it's in the response). I'm certainly interested to know when/why Chris Shiflett would store a CC

Re: [PHP] Dedicated server

2005-04-14 Thread Chris Shiflett
and virtual dedicated servers. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Zend Certification Exam

2005-04-23 Thread Chris Shiflett
://shiflett.org/archive/115 Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Warning: mysql_fetch_row(): supplied argument is not a valid MySQL result resource

2005-04-26 Thread Chris Shiflett
, product_serial_number FROM Products', $db) or exit(mysql_error()); Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Cold Fusion conversion issues: app vars and cached queries

2002-12-03 Thread Chris Shiflett
--- Steve W [EMAIL PROTECTED] wrote: My company is looking to move our site away from Cold Fusion due to the cost. We had talked about JSP, but I would highly prefer PHP. After evaluation, with the generic database functions now supporting Oracle in CVS, I think this might be a possibility.

Re: [PHP] Post Variables

2002-12-04 Thread Chris Shiflett
--- Brad Bonkoski [EMAIL PROTECTED] wrote: for ($i=0; $i=12; $i++) { echo select name='$i'; echo option values; } You only want one select tag. Chris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] socket timeout

2002-12-05 Thread Chris Shiflett
--- Gareth Thomas [EMAIL PROTECTED] wrote: I am attempting to timeout a socket_read() that is part of a handshaking process using socket_set_timeout(). Problem is it doesn't seem to work at all. If I switch of the handshaking write on the server side the read just sits there and doesn't time

Re: [PHP] Unsubscribing

2002-12-06 Thread Chris Shiflett
--- Van Andel, Robert [EMAIL PROTECTED] wrote: Anyone know how to unsubscribe from this list. I have tried several different things including the unscribe field on the mailing list page and an unsubscribe command via email. The unsubscribe page (http://www.php.net/unsub.php) should work. Are

Re: [PHP] mail() problems...

2002-12-06 Thread Chris Shiflett
--- Anthony Ritter [EMAIL PROTECTED] wrote: If you're using PHP4 on Windows, look for the following lines in your php.ini file: [mail function] SMTP =; for Win32 only sendmail_from = ;for Win32 only You'll need to modify the last two lines so that the mail function works properly.

Re: [PHP] redirect URL

2002-12-06 Thread Chris Shiflett
--- Carlos Alberto Pinto Hurtado [EMAIL PROTECTED] wrote: I don't can redirect my page to new url Try this: ? header(Location: http://www.google.com/;); exit; ? Chris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] html output from system() command

2002-12-06 Thread Chris Shiflett
--- Clay Stuckey [EMAIL PROTECTED] wrote: When I execute: system('who'); I get the output to the screen but it is all concatenated together like this: root pts/0 Dec 6 15:31 (34-218-228-130.arpa.kmail.net) sneakytrick pts/1 Dec 6 10:22 (34-218-228-130.arpa.kmail.net) How can I make it

Re: [PHP] Cookie handling, NS 4.x?

2002-12-09 Thread Chris Shiflett
--- Chad Day [EMAIL PROTECTED] wrote: I am having a fairly confusing problem with setcookie() in NS 4.x. My script: nscookie.php: setcookie(NSUSERNAME, 'cday', time()+2592000, '/', .mydomain.com); Header(Location: nscookie2.php); exit(); nscookie2.php: echo

RE: [PHP] Cookie handling, NS 4.x?

2002-12-09 Thread Chris Shiflett
--- Chad Day [EMAIL PROTECTED] wrote: I'm not sure how this would matter since the cookie is never set at all.. it's not an issue of it reading the cookie, as it can't read what is never set. I'll give it a shot when I get home though anyway. Read my response again, and you'll see that what

Re: [PHP] how to send an MSWORD email?

2002-12-15 Thread Chris Shiflett
--- See Kok Boon [EMAIL PROTECTED] wrote: I want to send emails that have graphics, for example the pub logo. I know that there are 2 ways to do so (maybe there are more, pls enlighten me): 1. use html email with img src=http://www.mydomain.com/logo.gif; 2. use MSWORD to insert the

Re: [PHP] Getting full HTTP request the page was requested with?

2002-12-15 Thread Chris Shiflett
--- Leif K-Brooks [EMAIL PROTECTED] wrote: Thanks, but I'm trying to see what the client sent to get my page, not what a host returns when I send it a request... :-) I think he misunderstood your question or something. There are a few different ways to do what you want to do. First, if you

Re: [PHP] Print text and image in the same page.

2002-12-15 Thread Chris Shiflett
--- Naif M. Al-Otaibi [EMAIL PROTECTED] wrote: I try to print some information (text and image) that I retrieve from an oracle DB, but I got the image printed as binary junk. When I put the line that print the image in a html image tag, I got a red square with X inside. What can I do to

Re: [PHP] Simple text editor for Windows?

2002-12-15 Thread Chris Shiflett
I would recommend UltraEdit: http://www.ultraedit.com/ Chris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Can php auto execute it's script in schedule without opening a webpage?

2002-12-15 Thread Chris Shiflett
--- Jack [EMAIL PROTECTED] wrote: i want to set a schedule for php to run certain script at specify time, to what i understood in php is : the script can only be process when a homepage had been execute. but i want the script to be excute even no one open a homepage contain php script in it!

Re: [PHP] $HTTP_POST_VARS problem

2002-12-16 Thread Chris Shiflett
--- Lee P. Reilly [EMAIL PROTECTED] wrote: The following statements have the following return values: echo $HTTP_POST_VARS['userfile']; = C:\\Documents and Settings\\Administrator\\Desktop\\IR Files\\gmp1.ir echo $userfile; = C:\\Documents and Settings\\Administrator\\Desktop\\IR

Re: [PHP] newbie having problem with SID

2002-12-16 Thread Chris Shiflett
--- Anders Thoresson [EMAIL PROTECTED] wrote: There are obviously differences in how things are handled now and how they were handled then. Yes, but I don't think there are as many differences as you think. Can someone point me to a good session tutorial based on the session array rather

Re: [PHP] stop script on browser closing

2002-12-16 Thread Chris Shiflett
--- rolf vreijdenberger [EMAIL PROTECTED] wrote: If I close the browser window before the execution of the script, a lot of emails do not arrive. is there a way to prevent this? Try this at the top of your script: ignore_user_abort(true); Chris -- PHP General Mailing List

Re: [PHP] Stumped!

2002-12-16 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: I keep getting a parser error and I can't figure it out. Here is the code and any help is greatly appreciated. $sql = SELECT * FROM requests; while ($result = mysql_fetch_array($query)) While this is not related to your parse error, it is a major logic flaw,

Re: [PHP] Stumped!

2002-12-16 Thread Chris Shiflett
--- Chris Shiflett [EMAIL PROTECTED] wrote: --- [EMAIL PROTECTED] wrote: I keep getting a parser error and I can't figure it out. Here is the code and any help is greatly appreciated. $sql = SELECT * FROM requests; while ($result = mysql_fetch_array($query)) While

<    1   2   3   4   5   6   7   8   9   10   >