[PHP] setting the same value to multiple variables

2006-03-30 Thread charles stuart

Hi,

I'm sure this is quite basic. Nonetheless I'm new to PHP so I haven't  
figured it out.


I'd like to set each variable to the same value (without having to  
set that value individually for each variable).


Thanks for the help.


best,

Charles



if ( 1 == 1 )
{
	$goodToGo = 0; $errorArray[] = You must declare some goals on  
Activity 1.;



// this block of code does not set each variable to class=\errorHere 
\;


$readingGoalsEnjoymentLabelClass  
$readingGoalsInformationLabelClass 
$readingGoalsAlphabeticLabelClass 
$readingGoalsPrintLabelClass  
$readingGoalsPhonologicalLabelClass 
$readingGoalsPhoneticLabelClass   
$readingGoalsComprehensionLabelClass 
$readingGoalsVocabularyLabelClass 
$readingGoalsInstructionsLabelClass 
$readingGoalsCriticalLabelClass   
$readingGoalsCommunicateLabelClass = class=\errorHere\;
}

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] setting the same value to multiple variables

2006-03-30 Thread charles stuart

On Mar 30, 2006, at 11:01 PM, Jasper Bryant-Greene wrote:


charles stuart wrote:

if ( 1 == 1 )


^^ what is the point of this?



Just cutting out the long IF statement so everyone didn't have to  
look past it.



{
$goodToGo = 0; $errorArray[] = You must declare some goals on  
Activity 1.;
// this block of code does not set each variable to class= 
\errorHere\;
$readingGoalsEnjoymentLabelClass 
$readingGoalsInformationLabelClass 
$readingGoalsAlphabeticLabelClass 
$readingGoalsPrintLabelClass 
$readingGoalsPhonologicalLabelClass 
$readingGoalsPhoneticLabelClass 
$readingGoalsComprehensionLabelClass 
$readingGoalsVocabularyLabelClass 
$readingGoalsInstructionsLabelClass 
$readingGoalsCriticalLabelClass 
$readingGoalsCommunicateLabelClass = class=\errorHere\;

}


While this seems like excessively ugly code (have you considered an  
array? what is the point of all those variables if they all hold  
the same value?), replace all of those '' with '=' and you will  
be fine. PHP evaluates right-to-left and the result of an  
assignment is the value that was assigned, so that will work.


Ah, I see. Thanks.

I place the variable in the label tag for each of the corresponding  
inputs (checkboxes in this case). If none are checked (at least one  
is required) I set an error message at the top of the page and then  
set a background color on each label via the now present  
class=errorHere.


I'm sure there's a better way to do this, but I'm not the best with  
PHP. I'll look into using an array.


Thanks again for your help. You've shortened my code at least a  
little bit.



best,

Charles

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] str_replace

2005-10-10 Thread Charles Stuart

Hi,

I'm on shared hosting. Because of security concerns on their part  
[1], every time the text curl u is inputted, a 403 forbidden is  
given and the form is not submitted. This is of course a problem as  
I'm doing work for a children's literacy program, and plenty of  
people try to input curl up with a book.


I'm trying to use 'str_replace' to solve this issue, but I can't seem  
to get around the 403 error.


It appears as if the hosting service doesn't give me a chance to  
replace curl u with something else prior to them blocking the  
attempted submit.


I can tell my str_replace is working as if I change the searched text  
to something other than curl u it does in fact replace it and  
submit it correctly.


Anyone have any ideas for a workaround? My next thought is to use  
javascript, but I think the site serves quite a few people who might  
not have javascript on.


Thanks for listening. Below is the PHP [2].


best,

Charles


[2]
// Grabbing the data from the form.

if ($task == updateInfo)
{
$activityChallenges = cs_remove_curl_up(sanitize_paranoid_string 
($_POST[activityChallenges]));

}



// change curl u to EDIT kurl u

function cs_remove_curl_up($string, $min='', $max='')
{
  $string = str_replace(curl u, EDIT kurl u, $string);
  $len = strlen($string);
  if((($min != '')  ($len  $min)) || (($max != '')  ($len   
$max)))

return FALSE;
  return $string;
}



[1]
My host told me this:

Mod_security is restricting this and blocks all url's with C-url.  
This is done because of some php worms that are spread using c-url. I  
would recommend trying to work around this. It will be a major  
security issue for us to allow this.


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] str_replace

2005-10-10 Thread Charles Stuart
A student run server on my old campus used to turn off PHP for  
security reasons - ridiculous.


Would it be possible to use XSS to call curl from a remote site? I'm  
just a beginner so that may or not make sense.


Indeed it does seem like JS is the solution - unfortunately - as it  
seems like their 'trap' catches any string including CURL U before I  
can str_replace the string after gathering the input with _POST.  
Anyone disagree?




best,

Charles



On Oct 10, 2005, at 3:12 PM, Rory Browne wrote:


I'm not completely sure, but I think they're talking shite. If curl is
a security problem, then disable curl. They seem from what you've
said, to be pretty irrational. I respect security paranoia, but this
is ridicules.

You could try replacing every letter in the word curl with it's #xxx;
equivlent, but that might not work. You would also have to do it in
JS, although I think that any browser with the exception on lynx has
JS capabilities.

On 10/10/05, Charles Stuart [EMAIL PROTECTED] wrote:


Hi,

I'm on shared hosting. Because of security concerns on their part
[1], every time the text curl u is inputted, a 403 forbidden is
given and the form is not submitted. This is of course a problem as
I'm doing work for a children's literacy program, and plenty of
people try to input curl up with a book.

I'm trying to use 'str_replace' to solve this issue, but I can't seem
to get around the 403 error.

It appears as if the hosting service doesn't give me a chance to
replace curl u with something else prior to them blocking the
attempted submit.

I can tell my str_replace is working as if I change the searched text
to something other than curl u it does in fact replace it and
submit it correctly.

Anyone have any ideas for a workaround? My next thought is to use
javascript, but I think the site serves quite a few people who might
not have javascript on.

Thanks for listening. Below is the PHP [2].


best,

Charles


[2]
// Grabbing the data from the form.

if ($task == updateInfo)
 {
$activityChallenges = cs_remove_curl_up(sanitize_paranoid_string
($_POST[activityChallenges]));
 }



// change curl u to EDIT kurl u

function cs_remove_curl_up($string, $min='', $max='')
{
   $string = str_replace(curl u, EDIT kurl u, $string);
   $len = strlen($string);
   if((($min != '')  ($len  $min)) || (($max != '')  ($len 
$max)))
 return FALSE;
   return $string;
}



[1]
My host told me this:

Mod_security is restricting this and blocks all url's with C-url.
This is done because of some php worms that are spread using c-url. I
would recommend trying to work around this. It will be a major
security issue for us to allow this.

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php









--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Re: Security, Late Nights and Overall Paranoia

2005-07-13 Thread Charles Stuart


On Jul 12, 2005, at 6:50 AM, Chris Shiflett wrote:



As far as allowing [red] goes, you can just as easily add red to  
the list of available tags and not have to come up with a  
replacement for every other HTML tag that already exists.



but what about the poor bastards that'll go around trying to use  
redin HTML/red?






cs

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] XML and PHP

2005-07-06 Thread Charles Stuart
use a search engine. if you can't find what you need, then ask. if  
you already did this, then state that you already looked and you  
found xyz, but xyz isn't telling you what you need to know, which is  
specifically blah.



best,

charles




On Jul 6, 2005, at 2:59 PM, Cima wrote:


hi all,


i would like to know where i could find more info on xml and  
working xml with php.



thanks.


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php