[PHP] Please hack my app

2006-11-22 Thread Ivo F.A.C. Fokkema
Hi List, As this subject may start you wondering what the hell I'm thinking, let me clearify: I've been rewriting an GPL'ed PHP/MySQL app from scratch for the last 12 months or so. It facilitates storage of DNA mutations and the corresponding patient data. Because patient data is involved,

Re: [PHP] ob_start() and a callback function within a class,not updating ob_get_level().

2006-11-22 Thread Mathijs
Richard Lynch wrote: On Thu, November 16, 2006 7:35 am, Mathijs wrote: I have a question about ob_start() and ob_get_level(). When i use ob_start(), and then check ob_get_level(), it shows me 1. This is a normal behavior. Now when i do the following ob_start(array('ClassName',

Re: [PHP] Please hack my app

2006-11-22 Thread Kevin Waterson
This one time, at band camp, Ivo F.A.C. Fokkema [EMAIL PROTECTED] wrote: *** THIS IS NOT ABOUT HACKING THE SERVER *** But about getting in the application when you're not allowed to! So, basically, you want _us_ to do _your_ bug checking?? Kevin -- Democracy is two wolves and a lamb voting

[PHP] backing up a database

2006-11-22 Thread Ross
I have a database and it needs to get backed up on a daily basis. Is there a class that allows me to create a backup and then save it as a .sql or excel or both to a folder of her choice? R. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit:

Re: [PHP] backing up a database

2006-11-22 Thread clive
Ross wrote: I have a database and it needs to get backed up on a daily basis. Is there a class that allows me to create a backup and then save it as a .sql or excel or both to a folder of her choice? cron and mysqldump or pg_dump -- PHP General Mailing List (http://www.php.net/) To

Re: [PHP] Please hack my app

2006-11-22 Thread Stut
Kevin Waterson wrote: This one time, at band camp, Ivo F.A.C. Fokkema [EMAIL PROTECTED] wrote: *** THIS IS NOT ABOUT HACKING THE SERVER *** But about getting in the application when you're not allowed to! So, basically, you want _us_ to do _your_ bug checking?? And just in case you

Re: [PHP] backing up a database

2006-11-22 Thread Jochem Maas
Ross wrote: I have a database and it needs to get backed up on a daily basis. Is there a class that allows me to create a backup and then save it as a .sql or excel or both to a folder of her choice? I'm only helping cos there's a chick involved. ;-) the easiest solution would be to use a

RE: [PHP] backing up a database

2006-11-22 Thread Edward Kay
If you're using MySQL, set up a cron job/scheduled task to call mysqldump and save the output somewhere. Other DBMSs will likely have similar tools. Edward -Original Message- From: Ross [mailto:[EMAIL PROTECTED] Sent: 22 November 2006 09:54 To: php-general@lists.php.net Subject:

Re: [PHP] Please hack my app

2006-11-22 Thread Ivo F.A.C. Fokkema
On Wed, 22 Nov 2006 20:14:37 +1100, Kevin Waterson wrote: This one time, at band camp, Ivo F.A.C. Fokkema [EMAIL PROTECTED] wrote: *** THIS IS NOT ABOUT HACKING THE SERVER *** But about getting in the application when you're not allowed to! So, basically, you want _us_ to do _your_ bug

Re: [PHP] Please hack my app

2006-11-22 Thread Ivo F.A.C. Fokkema
On Wed, 22 Nov 2006 09:53:00 +, Stut wrote: Kevin Waterson wrote: This one time, at band camp, Ivo F.A.C. Fokkema [EMAIL PROTECTED] wrote: *** THIS IS NOT ABOUT HACKING THE SERVER *** But about getting in the application when you're not allowed to! So, basically, you want _us_

Re: [PHP] Please hack my app

2006-11-22 Thread Ryan A
Hey there, I dont mean to be a total pri*k about this, but unless you have created something that you are willing to share with others and others can use/modify for their requirements, and you grant them this privilege...I think the norm is you pay someone to do what you are asking. What you

Re: [PHP] Mysql strategy

2006-11-22 Thread Dotan Cohen
On 21/11/06, Richard Lynch [EMAIL PROTECTED] wrote: On Sun, November 12, 2006 6:02 pm, Dotan Cohen wrote: If I have to perform 30 LIKE searches for different keywords in a varchar field, which strategy would be recommended: 1) 30 searches, one for each keyword 2) To select the varchar field

Re: [PHP] multiple upload files?

2006-11-22 Thread testkonto
Am Dienstag, 21. November 2006 18:26 schrieb Richard Lynch: Just have two INPUT TYPE=FILE tags. This is not rocket science... I mean without more than one inputs. Never mind.:-) I guess I should better look for some client side language. Regards, Oliver -- PHP General Mailing List

Re: [PHP] Please hack my app

2006-11-22 Thread Rory Browne
If you need your code audited ( or site hacked, or any other PHP security related stuff), and you have a budget for it. and if you can find him you can hire - Chris Shiflett. google for brainbulb. On 11/22/06, Ivo F.A.C. Fokkema [EMAIL PROTECTED] wrote: On Wed, 22 Nov 2006 09:53:00 +,

Re: [PHP] Please hack my app

2006-11-22 Thread Kevin Waterson
This one time, at band camp, Rory Browne [EMAIL PROTECTED] wrote: you can hire - Chris Shiflett. BWAHAHAHAHAHAHAHH I actually did laugh... -- Democracy is two wolves and a lamb voting on what to have for lunch. Liberty is a well-armed lamb contesting the vote. -- PHP General Mailing

Re: [PHP] Please hack my app

2006-11-22 Thread Angelo Zanetti
Kevin Waterson wrote: This one time, at band camp, Rory Browne [EMAIL PROTECTED] wrote: you can hire - Chris Shiflett. BWAHAHAHAHAHAHAHH I actually did laugh... why you laugh =) -- Angelo

Re: [PHP] Please hack my app

2006-11-22 Thread Ivo F.A.C. Fokkema
On Wed, 22 Nov 2006 03:20:16 -0800, Ryan A wrote: Hey there, I dont mean to be a total pri*k about this, but unless you have created something that you are willing to share with others and others can use/modify for their requirements, and you grant them this privilege...I think the norm is

Re: [PHP] Please hack my app

2006-11-22 Thread Angelo Zanetti
Ivo F.A.C. Fokkema wrote: On Wed, 22 Nov 2006 03:20:16 -0800, Ryan A wrote: Hey there, I dont mean to be a total pri*k about this, but unless you have created something that you are willing to share with others and others can use/modify for their requirements, and you grant them this

RE: [PHP] Please hack my app

2006-11-22 Thread Edward Kay
guys I think we need to relax a bit and not attack the guy so much! I agree. Ivo, have you tried Chorizo? http://chorizo-scanner.com/ Edward -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] How to check value in multidimensional array

2006-11-22 Thread clive
http://www.php.net/manual/en/function.array-search.php and look at the first User Contributed Notes. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP] Please hack my app

2006-11-22 Thread Ivo F.A.C. Fokkema
On Wed, 22 Nov 2006 13:37:43 +, Edward Kay wrote: guys I think we need to relax a bit and not attack the guy so much! I agree. Ivo, have you tried Chorizo? http://chorizo-scanner.com/ Thanks Angelo Edward! Chorizo looks good, especially the Morcilla extension mentioned on the

RE: [PHP] backing up a database

2006-11-22 Thread Brad Fuller
Here is a script that I found that has been working well for me. I set up a cron job to run this file every night just after midnight. It e-mails a gzipped sql dump file as an attachment to the specified e-mail address. Right now the database this is backing up is not very big. I'm not sure

[PHP] Resolution in .pdf

2006-11-22 Thread Rosen
Hi, I must create .pdf file with resolution as 300 dpi not by default 72 dpi. Is there a way to create this with PHP? Thanks in advance, Rosen -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] newbie problem - extraneous newlines inserted in PHP-generated HTML form source

2006-11-22 Thread Mark White
Thanks to Richard Lynch and Edward Kay for their help. The var_dump() showed unwanted whitespace appearing in the array data from record 2 onwards. The trim() worked a treat to get rid of it. Now all I have to do is work out what's wrong with my original handler functions that caused the

Re: [PHP] Please hack my app

2006-11-22 Thread Jochem Maas
Angelo Zanetti wrote: Kevin Waterson wrote: This one time, at band camp, Rory Browne [EMAIL PROTECTED] wrote: you can hire - Chris Shiflett. BWAHAHAHAHAHAHAHH I actually did laugh... why you laugh =) because rory spoofed the intro to the 'A-Team'. --

RE: [PHP] backing up a database

2006-11-22 Thread Edward Kay
This is similar to mine, except I use a shell script. Also, instead of emailing the file, my script FTPs it to a remote server. I expect this approach would scale better as the file size increases. Another point to note: my email is hosted on the same server as the DB. Emailing it to myself

[PHP] Re: XML parser error ..

2006-11-22 Thread Myron Turner
Delete the initial extra line in: $xml_data = EOF ?xml version=1.0? The XML Parser expects the XML document to start with a valid XML statement, which in your file is: ?xml version=1.0? but yours starts with an newline. $xml_data = EOF //newline ?xml version=1.0? onewaylife wrote: Hi

Re: [PHP] multiple upload files?

2006-11-22 Thread Jochem Maas
testkonto wrote: Am Dienstag, 21. November 2006 18:26 schrieb Richard Lynch: Just have two INPUT TYPE=FILE tags. This is not rocket science... I mean without more than one inputs. Never mind.:-) I guess I should better look for some client side language. two paths to choose from: 1.

[PHP] Encoding

2006-11-22 Thread Jo�o C�ndido de Souza Neto
I am facing a trouble in my system in which i am not able to show ISO-8859-1 encoding data. When i tried to use the follow meta tag it works in firefox but still not working in IE. meta http-equiv=Content-Type content=text/html; charset=ISO-8859-1 In firefox it shows: REMÉDIO PARA O GADO In

Re: [PHP] Encoding

2006-11-22 Thread Jens Meyer
Hi! Could you check the default encoding of your webserver (in httpd.conf)? I noticed that the charset-information in meta-information is ignored and the default-charset of the webserver is used. Kind regards, Jens JoXo CXndido de Souza Neto schrieb: I am facing a trouble in my system

Re: [PHP] Coding Standards Document

2006-11-22 Thread tedd
At 7:14 PM -0500 11/21/06, Robert Cummings wrote: On Tue, 2006-11-21 at 16:19 -0500, tedd wrote: It seems that every time I ask a security question, I find that I'm currently practicing the answers to avoid the pit-falls. Except that one time when his site got defaced... that was news ;) ;)

Re: [PHP] Encoding

2006-11-22 Thread Ivo F.A.C. Fokkema
On Wed, 22 Nov 2006 16:19:54 +0100, Jens Meyer wrote: Hi! Could you check the default encoding of your webserver (in httpd.conf)? I noticed that the charset-information in meta-information is ignored and the default-charset of the webserver is used. Kind regards, Jens Before

Re: [PHP] Mysql strategy

2006-11-22 Thread tedd
At 1:50 PM +0200 11/22/06, Dotan Cohen wrote: Thanks, Richard. I'm looking into the full text index again. Dotan Cohen Dotan: The following is a great reference -- the code works and it gave me the basics to do full-text searches. http://www.phpfreaks.com/tutorials/129/0.php Go though

Re: [PHP] Coding Standards Document

2006-11-22 Thread Robert Cummings
On Wed, 2006-11-22 at 10:31 -0500, tedd wrote: At 7:14 PM -0500 11/21/06, Robert Cummings wrote: On Tue, 2006-11-21 at 16:19 -0500, tedd wrote: It seems that every time I ask a security question, I find that I'm currently practicing the answers to avoid the pit-falls. Except that one

[PHP] Re: Encoding

2006-11-22 Thread Jo�o C�ndido de Souza Neto
After put this subject here i saw that it has been done by smarty. I tried to create the follow page: echo João; ? And it works fine. Anyone here know about encoding in smarty? João Cândido de Souza Neto [EMAIL PROTECTED] escreveu na mensagem news:[EMAIL PROTECTED] I am facing a trouble in

Re: [PHP] backing up a database

2006-11-22 Thread Børge Holen
On Wednesday 22 November 2006 15:49, Edward Kay wrote: This is similar to mine, except I use a shell script. Also, instead of emailing the file, my script FTPs it to a remote server. I expect this approach would scale better as the file size increases. Another point to note: my email is

RE: [PHP] Please hack my app

2006-11-22 Thread bruce
angelo. it appears from the responses on the list, that different people want the list to work as they believe it should. hell, this is an email list. if somebody posts something that you don't appreciate, ignore it, delete it, the topic will go away. on the other hand, somebody might actually

[PHP] what settings I have to use in php 5.1.2?

2006-11-22 Thread afan
hi! the company I work for moves our web server to other hosting company (dedicated server). we use php 5.1.2, apache 2.2, mysql 5.0.18, and I wonder what else I have to change in php.ini settings? register_globals is Off magic_quotes_gpc is Off what else you recomand to do? thanks. -afan --

[PHP] security question

2006-11-22 Thread Alain Roger
Hi, Now that i finished the client side of the web application i would like to improve the security of my administration side of this web application. My web hoster support a shared SSL protocol, however i would like to do more than simply use the SSL... I've heard that cookies and sessions can

Re: [PHP] Mysql strategy

2006-11-22 Thread Dotan Cohen
On 22/11/06, tedd [EMAIL PROTECTED] wrote: At 1:50 PM +0200 11/22/06, Dotan Cohen wrote: Thanks, Richard. I'm looking into the full text index again. Dotan Cohen Dotan: The following is a great reference -- the code works and it gave me the basics to do full-text searches.

Re: [PHP] Coding Standards Document

2006-11-22 Thread Børge Holen
On Wednesday 22 November 2006 16:31, tedd wrote: At 7:14 PM -0500 11/21/06, Robert Cummings wrote: On Tue, 2006-11-21 at 16:19 -0500, tedd wrote: It seems that every time I ask a security question, I find that I'm currently practicing the answers to avoid the pit-falls. Except that one

Re: [PHP] security question

2006-11-22 Thread Richard Lynch
On Wed, November 22, 2006 11:20 am, Alain Roger wrote: Now that i finished the client side of the web application i would like to improve the security of my administration side of this web application. My web hoster support a shared SSL protocol, however i would like to do more than simply

Re: [PHP] what settings I have to use in php 5.1.2?

2006-11-22 Thread Richard Lynch
On Wed, November 22, 2006 11:10 am, [EMAIL PROTECTED] wrote: the company I work for moves our web server to other hosting company (dedicated server). we use php 5.1.2, apache 2.2, mysql 5.0.18, and I wonder what else I have to change in php.ini settings? register_globals is Off

Re: [PHP] Encoding

2006-11-22 Thread Richard Lynch
On Wed, November 22, 2006 9:15 am, João Cândido de Souza Neto wrote: I am facing a trouble in my system in which i am not able to show ISO-8859-1 encoding data. When i tried to use the follow meta tag it works in firefox but still not working in IE. meta http-equiv=Content-Type

Re: [PHP] backing up a database

2006-11-22 Thread Richard Lynch
On Wed, November 22, 2006 3:53 am, Ross wrote: I have a database and it needs to get backed up on a daily basis. Is there a class that allows me to create a backup and then save it as a .sql or excel or both to a folder of her choice? I personally would not involve PHP in this process, in

Re: [PHP] problem using imagejpeg function all

2006-11-22 Thread Richard Lynch
On Tue, November 21, 2006 10:31 pm, Tom wrote: I’m trying to use the imagejpeg function call in a php script and I can’t quite seem to get it working properly. Can you clarify working properly into something a bit more concrete? Right now, we're left guessing from the most likely

Re: [PHP] what settings I have to use in php 5.1.2?

2006-11-22 Thread Jochem Maas
[EMAIL PROTECTED] wrote: hi! the company I work for moves our web server to other hosting company (dedicated server). we use php 5.1.2, apache 2.2, mysql 5.0.18, and I wonder what else I have to change in php.ini settings? register_globals is Off magic_quotes_gpc is Off what else you

[PHP] Re: Little script that might help against some email-/webcrawlers

2006-11-22 Thread Jonesy
On Mon, 20 Nov 2006 13:37:29 +, Brynjar Guðnason wrote: I saw a clever solution to this once. There was a line of names: name1, name2, name3 etc. And then at the end stood all these are at someurl.com. That is the best way, I think. If they're all in the same domain, I guess. See my

Re: [PHP] Powered by?

2006-11-22 Thread Richard Lynch
On Tue, November 21, 2006 6:21 pm, Robert Cummings wrote: Personally, if the customer pays me money to make a site, I don't put dirty little ego fluffers on their pages... I put them in the HTML comments or meta tags *heheh*. Frequently, by the time the Customer and the Designer have finished

Re: [PHP] what settings I have to use in php 5.1.2?

2006-11-22 Thread afan
[EMAIL PROTECTED] wrote: hi! the company I work for moves our web server to other hosting company (dedicated server). we use php 5.1.2, apache 2.2, mysql 5.0.18, and I wonder what else I have to change in php.ini settings? register_globals is Off magic_quotes_gpc is Off what else you

[PHP] Programmatic POST

2006-11-22 Thread Gabe
I'm looking to write a function that will receive the contents of a web form, do some data manipulation, then pass on the manipulated data to another URL via POST. Is there a built-in function in PHP that I can use to send the data to another URL via POST without a user having to click submit

RE: [PHP] Programmatic POST

2006-11-22 Thread Brad Fuller
-Original Message- From: Gabe [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 22, 2006 3:08 PM To: php-general@lists.php.net Subject: [PHP] Programmatic POST I'm looking to write a function that will receive the contents of a web form, do some data manipulation, then pass on

Re: [PHP] Powered by?

2006-11-22 Thread Paul Novitski
At 11/21/2006 03:02 PM, pub wrote: Is it appropriate to ask your client to add Powered by your company to the sites you design and maintain? And when you see Powered by does it mean designed by or maintained by or both? 'Powered by' sounds like an engine or a fuel, so I imagine it to mean

Re: [PHP] security question

2006-11-22 Thread Jon Anderson
Alain Roger wrote: I've heard that cookies and sessions can be easily hacked...so what do you use to secure your web page. which methods ? If you want to be secure, don't trust anything. Cookies are easily modified by a user, so never store anything sensitive in there without masking it

RE: [PHP] Re: Encoding

2006-11-22 Thread Nuno Vaz Oliveira
Hi I'm working on a site and I'm using the same encoding you use and everything displays ok both in Firefox 1.5/2.0 and IE 6. The only difference is that I have the ISO in small letters and the tag terminator like this: meta http-equiv=Content-Type content=text/html; charset=iso-8859-1 / I can

[PHP] Re: Programmatic POST

2006-11-22 Thread Manuel Lemos
Hello, on 11/22/2006 06:07 PM Gabe said the following: I'm looking to write a function that will receive the contents of a web form, do some data manipulation, then pass on the manipulated data to another URL via POST. Is there a built-in function in PHP that I can use to send the data to

Re: [PHP] security question

2006-11-22 Thread Sumeet
dear richard, yours was an amazing reply... simple and true and well written... where did u learn all the stuff?... ;-) anyway. is there a step by step process for checking if your site is secure?... i know you would say to get a hacker or something... but as a programmer, i would like

Re: [PHP] security question

2006-11-22 Thread Sumeet
Western, Matthew wrote: where did u learn all the stuff?... ;-) Maybe reading the manual? thanks matthew, maybe we should all refer to forum and google, and stop posting in this forum can u please start first... thanks anyway...mani needed some silly sarcastic comments to get

Re: [PHP] security question

2006-11-22 Thread Robert Cummings
On Thu, 2006-11-23 at 09:56 +0530, Sumeet wrote: Western, Matthew wrote: where did u learn all the stuff?... ;-) Maybe reading the manual? thanks matthew, maybe we should all refer to forum and google Teach a man to fish... Cheers, Rob. --

Re: [PHP] security question

2006-11-22 Thread Larry Garfield
On Wednesday 22 November 2006 22:38, Robert Cummings wrote: maybe we should all refer to forum and google Teach a man to fish... And you lose your monopoly on fisheries. -- Larry Garfield AIM: LOLG42 [EMAIL PROTECTED] ICQ: 6817012 If nature has made any one

RE: [PHP] Programmatic POST

2006-11-22 Thread Vincent DUPONT
in PHP5, you could have a look at objects HTTPRequest and HTTPResponse. I never used them yet, though... vincent -Original Message- From: Brad Fuller [mailto:[EMAIL PROTECTED] Sent: Wed 22/11/2006 21:25 To: php-general@lists.php.net Subject: RE: [PHP] Programmatic POST -Original