Re: [PHP] Security Support

2009-03-29 Thread David Wonderly


- Original Message - 
From: abdulazeez alugo defati...@hotmail.com

To: gp...@thenetnow.com; php-general@lists.php.net
Sent: Sunday, March 29, 2009 6:09 PM
Subject: RE: [PHP] Security Support







From: gp...@thenetnow.com
To: php-general@lists.php.net
Date: Sun, 29 Mar 2009 17:12:32 -0400
Subject: [PHP] Security Support

Good Morning / Afternoon,

We run several of our own servers:

- Dell Power Edge 1U, Pentium,
- FreeBSD (6.x soon to be 7.x)
- along with all the standard Web Application installation (PHP Apache 
Exim,

Pop3, Proftp, MySQL etc etc).

What I am asking here, is if any one in this community has the knowledge 
to

act as a security consultant in an occasional, as required basis. Anyone
interested should have expience with Apache, PHP, Perl on the FreeBSD
platform.

We are more than willing to compensate for services rendered, and are more
than willing to discuss terms.

In the end, we would be more than willing to share any non-fudiciary
information with anyone who could find it useful (via this or other 
mailing

lists).

We are asking any interested parties to contact us off-list such that we
don't need to make any private matters public.

This is a bonified request, as we can setup servers ourselves, but simply 
do
not have the time to research various run time, and security related 
items.


TIA,

-Grant



Hey Guys,

Let's be honest with ourselves here. If you've applied for this job, let me 
see your hands up!!!




Alugo Abdulazeez

www.frangeovic.com

_
News, entertainment and everything you care about at Live.com. Get it now!
http://www.live.com/getstarted.aspx




*Pauses and listens to crickets chirp*

Dave Wonderly
WebGenero
www.webgenero.com


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] A stupid question?

2008-01-17 Thread David Wonderly

On Fri, 2008-01-18 at 10:54 +0800, Shelley Shyan wrote:
 Hi all,
 
 Maybe this is a somehow stupid question.
 
 I want to know how php could know whether session_start() has been called, 
 that is, whether session has been started.
 
 I Googled, but got little help.
 
 Thank you for help!
 Any tip is greatly appreciated.
 
 Regards,
 Shelley
 

Hey Shelley, maybe I can help you understand Sessions. When you start a
Sessions PHP creates a Session ID. This is then used to create/Store
information in a file or in a database. The configuration of this is in
your php.ini file. If this file you can change where the session is
saved as well as other options. A simple way to use Sessions is with
cookies with the session.use_cookie = 1 in the php.ini file. However, if
the client doesn't allow cookies there is a second way;
session.use_trans_sid = 0 there are a few problems however, it creates a
security risk.

Anyway, I hope this opens a little on how sessions works. If you wish to
learn more about sessions go to http://us2.php.net/session or
http://w3schools.com/php/php_sessions.asp

David Wonderly
WebGenero

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] About search engine usability

2007-12-31 Thread David Wonderly

On Mon, 2007-12-31 at 15:19 -0800, Jim Webber wrote:
 Hello I'm building a website with a search engine.
 Do you think it is more usable if the search interface had a search 
 button? or do you think it will be more convenient to not have button to 
 let the users just push enter to search.
 
 I would appreciate any comment regarding this, thanks.
 

The one thing I have found in building websites is that you should
always create the site to the lowest IQ. Make it simple because there
are users out there that might not know that you can hit enter (or
return) to activate a search.

That's my 2 pents worth.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] cant mail

2007-09-06 Thread David Wonderly

Diana Castillo wrote:

when I try to send mail using this code:

mail([EMAIL PROTECTED],TEST MAIL,TESTING MAIL);

I get this error:

Warning: mail() [function.mail]: Failed to connect to mailserver at 
smtp.tsanalytics.com port 25, verify your SMTP and smtp_port setting 
in php.ini or use ini_set() in C:\Inetpub\wwwroot\intranet\test.php on line 
4



my settings in php.ini are
SMTP = smtp.tsanalytics.com
smtp_port = 25

  
I had this problem and I found that changing the port to 26 instead of 
25 fixed all SMTP problems that I had.


Maybe this will help.

-Dave

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Live support system (in php)

2007-08-23 Thread David Wonderly

robert mena wrote:

Hi,

I am looking for solutions to enable live support in my websites.  I
was told that phplivesupport (http://www.phplivesupport.com/) is a
good solution but it seems to be dead (no anwser to emails, always
offline).

Does anybody have another solution (with source code available) within
the same price range? (US$100).

thanks.

  
One program that I have used in the past and has worked for me is Help 
Center Live. It's an opensource project and I think it could fit your needs.


http://www.helpcenterlive.com/

Dave Wonderly

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] Editing Files with PHP

2007-07-10 Thread David Wonderly
I am trying to create a small script to open a file and edit it. 
However, when I open a file with PHP in it the PHP is stripped out. It 
open as if I was viewing the page source. How do I fix this?

Here is the code I am using.

form action=filewrite.php method=post
textarea rows=15 cols=70 name=content
?php
include($file) ;
?
/textarea
input type=text name=filename /
input type=submit /
/form

Filewrite looks like this
?php
$File = $filename;
$Handle = fopen($File, 'r+');
$Data = $content;
fwrite($Handle, $Data);
fclose($Handle);
print Data Written.;
?
Like I said, it is very simple but, I can write php if I start with a 
blank page but, I can open a file and view it. All of the files are at 
david.wonderly.com


Thanks!
-Dave

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] HELP - I have tried to unsubscribe from this listmutipletimes but cannot.

2007-06-29 Thread David Wonderly

-Patrick wrote:

Yes, I've seen that page on php.net

And no Jim, I'm not sure this is the 'exact' same problem. I 
understand what you are saying and it's not working.


Ok, I am done for now with this list. Thanks for trying anyways.
-Patrick

Jim Lucas wrote:

-Patrick wrote:

Stut wrote:


I've never known an unsubscribe request to need identity 
confirmation. Are you sure you're asking the system to unsubscribe 
you not subscribe you?


I'm really not sure how, or even if it's possible, to escalate this 
to the next level. I've subscribed and unsubscribed to PHP lists 
various times with several addresses and have never had any issues.


I call PEBKAC.

-Stut



Yes, I tried every link on that confirmation message when nothing would
work. And I am 110% positive I have used the confirmation-unsubscribe
link. It sends me a message asking if I am sure that I want to 
UNsubscribe.


Great, I am stuck receiving the email equivalent of spam(since I do not
want to receive it) for the rest of this email address's life. wtf.

-Patrick



no, you have to make sure that you are sending and receiving all 
messages through this account.


If you have more then one account configured in your email client, 
make sure when it sends out the message, that it is using the account 
that is registered with the php mailing list.  I had the same 
problems years ago, until I realized that I was sending the requests 
from the wrong email account.


Not that I was submitting the wrong email address, but when I sent 
the request, it would send me the confirmation email, when I replied 
to that message, I used the wrong account because the default account 
in my email client was a different account then what I was getting 
the mailing list from.


Just a suggestion from someone that went through  the exact same 
problem.




I don't know... just an idea... if you don't want to see this list then 
create a rule in your email program that states that anything with [PHP] 
in the subject line goes to trash... That way you don't have to bother 
with getting upset.


*sighs* What is this world coming to?

-Dave

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php