[PHP] Security in virtual host server

Hi I have a server with multiple users, each with user space that may contain a public_html directory. The main site also has a web page, but I'm having trouble configuring PHP securely. Anyone with access to PHP can write a script to find and print out any file in the main page, and one of

Re: [PHP] nl2br returns BR /? normality or a bug?

On Saturday 06 Apr 2002 07:56, Miguel Cruz wrote: On Sat, 6 Apr 2002, Justin French wrote: on 06/04/02 11:05 AM, Maxim Maletsky ([EMAIL PROTECTED]) wrote: It DOES NOT work fine in every browser. I'd love to give you a prov, but because I am lazy I will just tell you this formula:

Re: [PHP] Forum with PHP, without using mySQL..

On Monday 01 Apr 2002 12:44, MiXmAsTeR wrote: Hi, I run a Sports site. And need a forum, in php, that dosen't use mySQL. Anyone know any good, without any advertice, exept some from the one who made it ? PHPBB v2.x and OpenBB can run on top of PostgreSQL 7.x --jaa -- PHP General Mailing

[PHP] Problem with CGI mode

Hi I need to run some pages on my site in CGI mode for security reasons. I've put #!/usr/local/bin/php at the top of the script in question, and given it the .cgi extension so that apache treats it as a CGI. The script works, but the first thing it does is print out #!/usr/local/bin/php,

[PHP] Has anyone looked at phpinfo today?

? phpinfo(); ? Notice anything different? --jaa -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] building a control panel in php

On Wednesday 20 Mar 2002 02:42, Thalis A. Kalfigopoulos wrote: -Original Message- From: Miguel Cruz [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 19, 2002 5:49 PM To: Paul ... Cc: [EMAIL PROTECTED] Subject: Re: [PHP] building a control panel in php On Wed, 20 Mar 2002,

Re: [PHP] HTMLnetscape issue

On Wednesday 20 Mar 2002 18:11, Vlad Kulchitski wrote: Hi, Sorry for repeating myself, but am lost and still can't find a solution to the following problem, I need to specify a background image for td like the code below: tr td background=images/bottomcell_bg.gif/td /tr This

[PHP] Problem with posting

I'm writing a voting script, but I have a problem with it. Voters cast their vote by submitting a form. When this form is received it is added to the database, and a session variable is set saying that they've voted. The problem is that once someone's voted they can just press reload on their

Re: [PHP] Problem with posting

On Wednesday 20 Mar 2002 19:40, Rick Emery wrote: What do you mean All other browsers either do not submit form data? I mean when the user hits 'reload' the POST data is not resubmitted. Some browsers do not resubmit form data, some do, and some prompt. What kind of user authentication are

Re: [PHP] HTMLnetscape issue

On Wednesday 20 Mar 2002 19:43, Nathan Cassano wrote: Yes here is a solution to this problem and I am surprised no one on this list pointed it out. Simply put a transparent dot within a cell table that you wish to have the background image display. Netscape 4 in retarded in the fact that it

Re: [PHP] Success Using PEAR?

On Saturday 16 Mar 2002 20:32, Bryan Henry wrote: anyone had success using PEAR? I have read the documentation and been trying to use the PEAR files that came with PHP 4.1.2 , PEAR cvs and PHP4/PEAR cvs with no success. I wish there was some updated documentation, and more explanation on

[PHP] Sessions and multiple domains

Hi I have this problem is that the website I am designing can be accessed using multiple addresses: wired.st-and.ac.uk, wired.st-andrews.ac.uk, wiredsoc.st-and.ac.uk or wired (internally). The trouble is that the cookie is locked to one address. For instance, if I initialise it in

Re: [PHP] Netscape vs. IE/Mozilla

On Friday 08 Mar 2002 15:44, Vlad Kulchitski wrote: Hi guys, I know it's a wrong place to ask about this, but I am sure someone here faced the same problem. I am trying to get the site to look consistent in Netscape Navigator and it's giving me hard times. Yes, this is a bug in Netscape

Re: [PHP] Userfriendly

On Thursday 07 Mar 2002 16:22, Josiah Wallingford wrote: Hello, Does anybody know of a php script that will email the daily userfriendly.org comic? Not sure about this -- Userfriendly.org is maintained by advertising, so unless you want to pay them a royalty for every page you view they

Re: [PHP] Parsing Content

On Tuesday 05 Mar 2002 15:07, Erik Price wrote: On Monday, March 4, 2002, at 06:10 PM, Jonathan Duncan wrote: I want to make a web site that displays news headlines from my favorite news sites. PEAR has an RSS headline class that's dead easy to use and works for RDF files.

[PHP] MacOS-style pager

Hi Does anyone know of any MacOS-style pager applets? Something that would sit in the panel and display the current app, and give me a drop down list of running apps. GNOME has a very good one, and I miss it having switched to KDE. --jaa -- PHP General Mailing List (http://www.php.net/)

Re: [PHP] MacOS-style pager

Sorry -- that was supposed to go to the KDE list :) On Monday 25 Feb 2002 20:12, James Arthur wrote: Hi Does anyone know of any MacOS-style pager applets? Something that would sit in the panel and display the current app, and give me a drop down list of running apps. GNOME has a very good

[PHP] Secure User Auth

Hi I have a web site that needs a secure login system. Users of the system can SSH in to the server, and POP, IMAP, Postgres and other services are provided, and I'd like the users to be able to log in to the site - obviously as securely as possible. Maybe using SSL + sessions? I have not

[PHP] Convert PostgreSQL timestamp to nicer format

Hi How can I convert the PostgreSQL timestamp to several strings? This sort of thing: array($hour,$minute,$second,$day,$month,$year) = convert($timestamp) Thanks --jaa -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: [PHP-DB] PHP + Postgresql + Linux = Frustration

Is there an easy way to do this sort of stuff on Linux or is it better to just buy off the shelf products that work? Hi I hate to do the my distro is better than yours thing, but typing apt-get install postgresql postgresql-client apache php4 php4-pgsql at the command line on a Debian

Re: [PHP] POSTing HTML into a database

On Monday 07 January 2002 01:59, Richard S. Crawford wrote: I've used a combination of addslashes() and stripslashes() along with htmlspecialchars() to perform just that sort of thing, though I used MySQL instead of PostreSQL. Can you help me along a bit further? I can't seem to get them in

[PHP] POSTing HTML into a database

Hi I need a user to be able to enter submit HTML code (also perhaps containing PHP code) via a web form, which will then be entered into a database. The data is typed in to a textarea, which is then posted to my script. I notice that some special characters come out of this process escaped,

[PHP] Most secure way to send a password

Hi The most insecure part of entering a password in a web form is when you click submit and your password is sent in plain text form to your next PHP script. Is there any way around this without using JavaScript? How secure is it to use HTTP_AUTH? Cheers --jaa