Re: [PHP] Opening a socket and sending GET data

2002-11-22 Thread Chris Shiflett
Your request looks fine. What are you doing with $query once you have constructed it? Another question worth asking is what is your ultimate goal here? I'm not sure performing a manual request is necessary, but maybe it is. Chris --- Todd Cary <[EMAIL PROTECTED]> wrote: > # now we build our qu

Re: [PHP] using cookies

2002-11-23 Thread Chris Shiflett
--- Ken Nagorski <[EMAIL PROTECTED]> wrote: > I have never used cookies before, however I am trying to > implement them to make things a little more secure. Rather > than passing a sql statement via a hidden input tag I am > setting a cookie. I think someone else already mentioned this, but let m

Re: [PHP] sessions and trans-sid problem/question

2002-11-24 Thread Chris Shiflett
--- Jean-Christian Imbeault <[EMAIL PROTECTED]> wrote: > This now hands me a dilemma ... I was building my site > conservatively, i.e. assuming the user would have > cookies turned off. And so I am making heavy use of > session variables. *But* I had thought that if the > user had cookies enabled

Re: [PHP] Insert file into sql server binary field.

2002-11-24 Thread Chris Shiflett
--- Marek Kilimajer <[EMAIL PROTECTED]> wrote: > BLOB is like TEXT In what way? BLOB is binary large object. Text is ... text. One is binary, and the other is ASCII. The only similarity I can think of is that they both represent data. However, the format is completely different. Open up a binary

Re: [PHP] What is wrong here?

2002-11-24 Thread Chris Shiflett
--- Cesar Aracena <[EMAIL PROTECTED]> wrote: > I have trouble with header("Location... because the > browser is NOT redirected. If I set an echo statement > after I detected that the username and password using > $_POST[""], the echo goes OK but if I comment the echo > and un-comment the > > hea

Re: [PHP] quick sanity check on user management / sessions

2002-11-24 Thread Chris Shiflett
--- Justin French <[EMAIL PROTECTED]> wrote: > I just need a quick sanity check. I'm no doctor, but I think you're sane. :-) > For some reason (inexperience probably, or a bad > article), it was set-up so that both the uid and pwd > were set as session variables, and EACH PAGE on the > site chec

Re: [PHP] Automajickally POST to a remote form

2002-11-25 Thread Chris Shiflett
--- Kris Williams <[EMAIL PROTECTED]> wrote: > Once upon a time I used to be able to POST form data to external > sites with ASP and an MSXML (or something) server object on IIS > and I'm wondering if there's a similar sort of technique using > PHP. You can post with PHP using cURL or doing it yo

RE: [PHP] Form trouble

2002-11-25 Thread Chris Shiflett
There is one common method used to avoid this that is pretty reliable. 1. http://example.org/1.php submits to http://example.org/2.php 2. http://example.org/2.php processes the form, then uses a Location header to redirect to http://example.org/3.php. For example: header("Location: http

Re: [PHP] Need help on client certificate validation using OpenSSL/PHP

2002-11-25 Thread Chris Shiflett
--- Richard Rojas <[EMAIL PROTECTED]> wrote: > I'm a PHP newbie and Im really having difficulty with > client-server certificate validation using Openssl and > PHP. If somehow you know of a tutorial, a website or > sample PHP codes that checks (expired, revoked) and > validates client certificates,

Re: [PHP] www.php.net

2002-11-25 Thread Chris Shiflett
--- Paul Marinas <[EMAIL PROTECTED]> wrote: > is down? > or my computer . It works fine for me. Perhaps you should try a mirror: Australia: http://au.php.net/ English http://au2.php.net/ English Austria: http://at.php.net/ German http://at2.php.net/ German Belgium: http://be.php.net/ Engli

Re: [PHP] If statement w/ multiple conditions

2002-11-26 Thread Chris Shiflett
--- Ernest E Vogelsinger <[EMAIL PROTECTED]> wrote: > At 13:50 26.11.2002, [EMAIL PROTECTED] said: > >if ($lineone && $linetwo && $linethree && $linefour = "") > > Your expression yields true if 1-3 are not-empty AND four is an > empty string. Actually, this expression yields true when $lineone,

Re: [PHP] Multiple page form

2002-11-26 Thread Chris Shiflett
--- Shane McBride <[EMAIL PROTECTED]> wrote: > I don't remember if I need to pass variables along with the > form for each page, or can I just call them on the last page. Consider using sessions: http://www.php.net/manual/en/ref.session.php Chris -- PHP General Mailing List (http://www.php.ne

Re: [PHP] If statement w/ multiple conditions

2002-11-26 Thread Chris Shiflett
--- Jason Wong <[EMAIL PROTECTED]> wrote: > At 13:50 26.11.2002, [EMAIL PROTECTED] said: > >if ($lineone && $linetwo && $linethree && $linefour = "") > > Actually that expression will always be FALSE. $linefour = "" > does not evaluate to TRUE thus the whole expression to be FALSE! Yes, you're ri

Re: [PHP] Multiple page form

2002-11-26 Thread Chris Shiflett
--- Chris Boget <[EMAIL PROTECTED]> wrote: > > So, you are using a database to store the records? > > Yes. What's the point in taking the user's information if you > aren't going to store it somewhere. Even if all you need to do is > email the data upon completion of the form, storing the data f

RE: [PHP] Re: & in Query String

2002-11-26 Thread Chris Shiflett
--- "Jonathan Rosenberg (Tabby's Place)" <[EMAIL PROTECTED]> wrote: > In an earlier message, Derick Rethans [mailto:[EMAIL PROTECTED]] said > > > Yes it is. Actually, you should specify the URL with the > > & yourself, like this: > > > > > > > > otherwise it is not valid HTML. > > I understand

Re: [PHP] Re: PHP] can't pass complete URL (part of the query string) from

2002-11-26 Thread Chris Shiflett
--- Nicole Lallande <[EMAIL PROTECTED]> wrote: > this page > > where the url is > > http://mydomain.com/displayem.php3?cat=5&olimit=0&zid=1&lid=1 > > results in http://mydomain.com/displayem.php3?cat=5 being passed > and the '&olimit=0&zid=1&lid=1' gets cut off Can you visit this page, view so

Re: [PHP] If statement w/ multiple conditions

2002-11-26 Thread Chris Shiflett
--- Ernest E Vogelsinger <[EMAIL PROTECTED]> wrote: > >> >if ($lineone && $linetwo && $linethree && $linefour = "") > >> > >> Your expression yields true if 1-3 are not-empty AND four is an > >> empty string. > > > > Actually, this expression yields true when $lineone, $linetwo, and > > $linethree

Re: [PHP] Re: PHP] can't pass complete URL (part of the query string) from

2002-11-26 Thread Chris Shiflett
--- Nicole Lallande <[EMAIL PROTECTED]> wrote: > http://embitec.com/fishcart/email.php?ref=http://embitec.com/fishcart/displayem.php3?cat=5&olimit=0&zid=1&lid=1"; method="post"> There is your problem right there. Here are the variables you are passing: ref=http://embitec.com/fishcart/displayem.p

Re: [PHP] Re: PHP] can't pass complete URL (part of the query string)

2002-11-26 Thread Chris Shiflett
--- Nicole Lallande <[EMAIL PROTECTED]> wrote: > Tried that I'm thinking you haven't, but I might be wrong. The HTML you showed us previously was of a form tag. The action attribute of that form tag is where your problem lies. http://embitec.com/fishcart/email.php?ref=http://embitec.com/fishcart

RE: [PHP] Re: & in Query String

2002-11-26 Thread Chris Shiflett
--- "Jonathan Rosenberg" <[EMAIL PROTECTED]> wrote: > I tried it & it fails. The browser sends the query > string with the & & the $_GET access fails. > > I am using IE 6. I can't imagine that it would be > buggy in this regard. I just tried this in IE 6, and it worked fine for me. My test cod

Re: [PHP] How do i provide Download facility ??

2002-11-26 Thread Chris Shiflett
--- Venkatesh Hosur <[EMAIL PROTECTED]> wrote: > I was just looking around for information on Download > of files using PHP. I need to provide link/button, by > clicking which a user can download a file (Say a CSV > file..) The best solution, in my opinion, is just to use a straightforward HTML l

Re: [PHP] Cold Fusion conversion issues: app vars and cached queries

2002-12-03 Thread Chris Shiflett
--- Steve W <[EMAIL PROTECTED]> wrote: > My company is looking to move our site away from Cold > Fusion due to the cost. We had talked about JSP, but I > would highly prefer PHP. After evaluation, with the > generic database functions now supporting Oracle in CVS, > I think this might be a possibil

Re: [PHP] Post Variables

2002-12-04 Thread Chris Shiflett
--- Brad Bonkoski <[EMAIL PROTECTED]> wrote: > for ($i=0; $i<=12; $i++) > { > echo ""; > echo ""; > } You only want one tag. Chris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] socket timeout

2002-12-05 Thread Chris Shiflett
--- Gareth Thomas <[EMAIL PROTECTED]> wrote: > I am attempting to timeout a socket_read() that is part > of a handshaking process using socket_set_timeout(). > Problem is it doesn't seem to work at all. If I switch of > the handshaking write on the server side the read just > sits there and doesn't

Re: [PHP] Unsubscribing

2002-12-06 Thread Chris Shiflett
--- "Van Andel, Robert" <[EMAIL PROTECTED]> wrote: > Anyone know how to unsubscribe from this list. I have > tried several different things including the unscribe > field on the mailing list page and an unsubscribe command > via email. The unsubscribe page (http://www.php.net/unsub.php) should wor

Re: [PHP] mail() problems...

2002-12-06 Thread Chris Shiflett
--- Anthony Ritter <[EMAIL PROTECTED]> wrote: > "If you're using PHP4 on Windows, look for the following > lines in your php.ini file: > > [mail function] > SMTP =; for Win32 only > sendmail_from = ;for Win32 only > > You'll need to modify the last two lines so that the mail > function works

Re: [PHP] redirect URL

2002-12-06 Thread Chris Shiflett
--- Carlos Alberto Pinto Hurtado <[EMAIL PROTECTED]> wrote: > I don't can redirect my page to new url Try this: http://www.google.com/";); exit; ?> Chris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] html output from system() command

2002-12-06 Thread Chris Shiflett
--- Clay Stuckey <[EMAIL PROTECTED]> wrote: > When I execute: > system('who'); > > I get the output to the screen but it is all concatenated > together like this: > root pts/0 Dec 6 15:31 (34-218-228-130.arpa.kmail.net) > sneakytrick pts/1 Dec 6 10:22 > (34-218-228-130.arpa.kmail.net) > > How can

Re: [PHP] Cookie handling, NS 4.x?

2002-12-09 Thread Chris Shiflett
--- Chad Day <[EMAIL PROTECTED]> wrote: > I am having a fairly confusing problem with setcookie() > in NS 4.x. > > My script: > > nscookie.php: > > setcookie("NSUSERNAME", 'cday', time()+2592000, '/', > ".mydomain.com"); > Header("Location: nscookie2.php"); > exit(); > > nscookie2.php: > > ech

RE: [PHP] Cookie handling, NS 4.x?

2002-12-09 Thread Chris Shiflett
--- Chad Day <[EMAIL PROTECTED]> wrote: > I'm not sure how this would matter since the cookie is > never set at all.. it's not an issue of it reading the > cookie, as it can't read what is never set. I'll give > it a shot when I get home though anyway. Read my response again, and you'll see that w

Re: [PHP] how to send an MSWORD email?

2002-12-15 Thread Chris Shiflett
--- See Kok Boon <[EMAIL PROTECTED]> wrote: > I want to send emails that have graphics, for example > the pub logo. I know that there are 2 ways to do so > (maybe there are more, pls enlighten me): > > 1. use html email with >http://www.mydomain.com/logo.gif";> > > 2. use MSWORD to insert the

Re: [PHP] Getting full HTTP request the page was requested with?

2002-12-15 Thread Chris Shiflett
--- Leif K-Brooks <[EMAIL PROTECTED]> wrote: > Thanks, but I'm trying to see what the client sent to > get my page, not what a host returns when I send it > a request... :-) I think he misunderstood your question or something. There are a few different ways to do what you want to do. First, if

Re: [PHP] Print text and image in the same page.

2002-12-15 Thread Chris Shiflett
--- "Naif M. Al-Otaibi" <[EMAIL PROTECTED]> wrote: > I try to print some information (text and image) that I > retrieve from an oracle DB, but I got the image printed > as binary junk. When I put the line that print the image > in a html image tag, I got a red square with "X" inside. > What can I

Re: [PHP] Simple text editor for Windows?

2002-12-15 Thread Chris Shiflett
I would recommend UltraEdit: http://www.ultraedit.com/ Chris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Can php auto execute it's script in schedule without opening a webpage?

2002-12-15 Thread Chris Shiflett
--- Jack <[EMAIL PROTECTED]> wrote: > i want to set a schedule for php to run certain > script at specify time, to what i understood in > php is : the script can only be process when a > homepage had been execute. but i want the script > to be excute even no one open a homepage contain > php script

Re: [PHP] $HTTP_POST_VARS problem

2002-12-16 Thread Chris Shiflett
--- "Lee P. Reilly" <[EMAIL PROTECTED]> wrote: > The following statements have the following return > values: > > echo $HTTP_POST_VARS['userfile']; > => C:\\Documents and Settings\\Administrator\\Desktop\\IR > Files\\gmp1.ir > > echo $userfile; > => C:\\Documents and Settings\\Administrator\\Desk

Re: [PHP] newbie having problem with SID

2002-12-16 Thread Chris Shiflett
--- Anders Thoresson <[EMAIL PROTECTED]> wrote: > There are obviously differences in how things are > handled now and how they were handled then. Yes, but I don't think there are as many differences as you think. > Can someone point me to a good session tutorial > based on the session array rathe

Re: [PHP] stop script on browser closing

2002-12-16 Thread Chris Shiflett
--- rolf vreijdenberger <[EMAIL PROTECTED]> wrote: > If I close the browser window before the execution > of the script, a lot of emails do not arrive. is > there a way to prevent this? Try this at the top of your script: ignore_user_abort(true); Chris -- PHP General Mailing List (http://www.p

Re: [PHP] Stumped!

2002-12-16 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: > I keep getting a parser error and I can't figure > it out. Here is the code and any help is greatly > appreciated. > > $sql = "SELECT * FROM requests"; > > while ($result = mysql_fetch_array($query)) While this is not related to your parse error, it is a major logi

Re: [PHP] Stumped!

2002-12-16 Thread Chris Shiflett
--- Chris Shiflett <[EMAIL PROTECTED]> wrote: > --- [EMAIL PROTECTED] wrote: > > I keep getting a parser error and I can't figure > > it out. Here is the code and any help is greatly > > appreciated. > > > > $sql = "SELECT * FROM requests&quo

Re: [PHP] Socket_connect() timeout

2002-12-16 Thread Chris Shiflett
--- Max Clark <[EMAIL PROTECTED]> wrote: > Warning: socket_connect() unable to connect [60]: > Operation timed out in > /usr/home/maxc/public_html/admin/functions.inc on line 66 > > Is there any way to time out this function? I only want > to wait 5 seconds. Now that you mention it, I am not awar

Re: [PHP] Hi!!

2002-12-16 Thread Chris Shiflett
--- Tomas Lopez <[EMAIL PROTECTED]> wrote: > can someone tell me where can i enroll in a > good proyect o someone to help.. I would recommend finding an open source project to contribute to. You can find many projects that are currently seeking help here: http://sourceforge.net/people/ Chris -

Re: [PHP] prevent session_replay

2003-01-02 Thread Chris Shiflett
Scott, I think it is safe to say that there is no "official" way to prevent session hijacking like this, nor is there any way to provide absolute assurance that it cannot be done. There are several methods, however, that can make a hijack much more difficult to accomplish without adversely affecti

Re: [PHP] phpinfo() and HTTP_RAW_POST_DATA

2003-01-02 Thread Chris Shiflett
That data is only populated when always_populate_raw_post_data is on (check your php.ini). Chris --- Kristopher Yates <[EMAIL PROTECTED]> wrote: > I was just curious, is there a reason $HTTP_RAW_POST_DATA > isn't included in the phpinfo() function? I would > imagine one could see all globals vi

Re: [PHP] Multidimensional Array manipluation...

2003-01-02 Thread Chris Shiflett
--- Dhaval Desai <[EMAIL PROTECTED]> wrote: > $test[0] = "hey"; > $test[1] = "hi"; > $test[2] = "hello"; > > Now I want to hold various values in $test[0]["hey"] = > "1" and $test[1]["hi"] = "2" and $test[2]["hello"] = "3" Try this instead: $test["0"]["hey"] = 1; $test["1"]["hi"] = 2; $test["2"]

Re: [PHP] Multidimensional Array manipluation...

2003-01-02 Thread Chris Shiflett
> >$test["0"]["hey"] = 1; > >$test["1"]["hi"] = 2; > >$test["2"]["hello"] = 3; > > I want to update $test["0"]["hey"] and set it as 1+1; If you just want to increment the value: $test["0"]["hey"]++; > Also is there any idea on how can we count() the values > in a multi dimensional arrays... Th

Re: [PHP] Some questions regarding pfsocketopen()

2003-01-02 Thread Chris Shiflett
--- Gareth Hastings <[EMAIL PROTECTED]> wrote: > Could anyone tell me, is it possible to connect to > a persistent socket after it has been opened by a > different script? Sure. Think of it like a persistent database connection in Oracle, where the listener is on socket 1521 for everyone. The per

Re: [PHP] phpinfo() and HTTP_RAW_POST_DATA

2003-01-02 Thread Chris Shiflett
--- Kristopher Yates <[EMAIL PROTECTED]> wrote: > I made your suggested change to php.ini and I show local > value 1 and master value 1. Does it mean raw data > populates the variable $HTTP_RAW_POST_DATA when this is > == 1 or does it mean that raw data is visible within > phpinfo() when value ==1

Re: [PHP] Baffling output

2003-01-02 Thread Chris Shiflett
--- Lightfirst <[EMAIL PROTECTED]> wrote: > Can someone explain to me why the loop that counts to 99 > appears before the 5 by 5 grid in the following php code? There is a good chance that the problem is that your HTML table is screwed up. Make sure you close your row and table; it wasn't in the c

Re: [PHP] Baffling output

2003-01-03 Thread Chris Shiflett
--- Steve Keller <[EMAIL PROTECTED]> wrote: > Here's a good tip someone gave me when I first started > learning PHP: when you're dealing with HTML, it's a good > idea to use \n at the end of your echoed lines and \t's > at the beginnings to create staggered indentations, > this makes it a little ea

Re: [PHP] emulate Post with redirect

2003-01-06 Thread Chris Shiflett
--- Bobby Patel <[EMAIL PROTECTED]> wrote: > I was trying to do it without cURL, since it's not on our > server. You can do it manually. There is probably a lot of good information on this topic if you search through the archives on automating a post. To give you a quick idea, you can check out th

Re: [PHP] frustrating problem

2003-01-06 Thread Chris Shiflett
--- "Matthew K. Gold" <[EMAIL PROTECTED]> wrote: > SELECT FooLName, FooPhone, FooEmail > FROM foo, foocontact > WHERE foocontact.FooID=$FooID and foo.FooID=$FooID; You might try this instead: select foolname, foophone, fooemail from foo, foocontact where foo.fooid='$fooid' and foo.fooid=foocon

Re: [PHP] Force file download with header

2003-01-06 Thread Chris Shiflett
--- Altug Sahin <[EMAIL PROTECTED]> wrote: > $file = $_POST[fileID]; > $files_folder = "C:\\temp\\"; > $dlfile = $files_folder.$file; > > header("Content-type: application/pdf"); > readfile("$dlfile"); > ?> > > I get this... > "Warning: readfile("C:\temp\test.pdf") - No such file or > directory

Re: [PHP] Can you insert into $_POST manually?

2003-01-09 Thread Chris Shiflett
--- Noel Wade <[EMAIL PROTECTED]> wrote: > Thanks - I understand that method; but I'm really > looking for a way to pass them without them being > visible / mucking up the URL line with a buncha > stuff... Noel, To answer your original question, no, you cannot force the remote Web client to submi

Re: [PHP] "document contained no data"

2003-01-13 Thread Chris Shiflett
--- Justin French <[EMAIL PROTECTED]> wrote: > In NN7 Mac, the error is "the page contained no data". > In IE5.x Mac, the error is along the lines of "host > not found" or "could not access URL ...". This is a bit off-topic, but I would suggest ignoring any error messages from IE. It will generall

Re: [PHP] forms

2003-01-13 Thread Chris Shiflett
--- cj <[EMAIL PROTECTED]> wrote: > Is it possible to have two buttons and have different > actions for each button in the same form? No, because the action belongs to the form, not the submit buttons (which is why action is an attribute of form). However, you can use different names and values f

RE: [PHP] forms

2003-01-13 Thread Chris Shiflett
--- cj <[EMAIL PROTECTED]> wrote: > The page that processes the form will have to work out > which button got pressed? Exactly. For starters, use this bit of HTML/PHP code to help you see what the browser sends you when the form is submitted (add this to the receiving page): Alternatively, y

Re: [PHP] HTTP_ACCEPT - Reliabilty?

2003-01-14 Thread Chris Shiflett
--- Danny Shepherd <[EMAIL PROTECTED]> wrote: > No, I wouldn't rely on it at all, I couldn't find a > browser that *does* have that mime-type in it's > header! Danny is right. The reason you cannot depend on the Accept header is that most browsers will include */* as an acceptable type (which basi

Re: [PHP] Cookie, header, output problems

2003-01-14 Thread Chris Shiflett
--- "J. Alden Gillespy" <[EMAIL PROTECTED]> wrote: > I'm creating an e-commerce website, and I just need > clarification as to whether a MySQL query is > considered as "browser output". It is not. However, a MySQL error is indeed output. Make sure your query is successful. My suggestion would be

Re: [PHP] htmlspecialchars

2003-01-14 Thread Chris Shiflett
--- Foong <[EMAIL PROTECTED]> wrote: > I wonder which is the better way to store data into > database? > 1. stor the data after we call htmlspecialchars with the > data (means we store " as "e; in database) > 2. stor the data in non encoded form and call > htmlspecialchars whenever we want to displ

Re: [PHP] Why is my URL encoding itself?

2003-01-14 Thread Chris Shiflett
--- Don <[EMAIL PROTECTED]> wrote: > In my PHP page, the FORM line reads as: > echo ' action="..\phpscript\general\formmail.php">' . "\n"; > > When I try in I.E., it works fine. > > When I try in Netscape 7, I get a page not found error. This is something I refer to as Windowsitis. URLs use slas

Re: [PHP] Next and Previous

2003-01-14 Thread Chris Shiflett
--- Miguel Brás <[EMAIL PROTECTED]> wrote: > suppose, the page you're seeing is > http://www.x.com/news.php?ID=501 how to add > a link for the page to show the ID=502 and the > ID=500 Next Previous Chris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.ph

Re: [PHP] Question about $_GET

2003-01-15 Thread Chris Shiflett
--- Frank Keessen <[EMAIL PROTECTED]> wrote: > So the code looks like this: > > $query = "SELECT Newsheadline, News, Contact FROM news > WHERE Newsid = $_GET['id']"; > > But all i'm getting in my browser is: > > parse error, expecting `T_STRING' or `T_VARIABLE' or > `T_NUM_STRING' I could not t

Re: [PHP] fgets and Macs

2003-01-15 Thread Chris Shiflett
--- Jason Jacobs <[EMAIL PROTECTED]> wrote: > It would be wonderful if my php.ini file actually > contained the variable "auto_detect_line_endings." > How can I solve this problem? Try adding it yourself. Don't let its absence dissuade you from giving it a shot. :-) Chris -- PHP General Mailin

Re: [PHP] Security in included PHP files

2003-01-15 Thread Chris Shiflett
--- Jacob Copsey <[EMAIL PROTECTED]> wrote: > My style of PHP is to name all included files with a .php > extension and of course this raises the problem of people > accessing these script files directly. I always name included files *.inc myself, but that's a personal preference combined with a s

Re: [PHP] HTTP_REFERER work without a problem....

2003-01-15 Thread Chris Shiflett
--- Scott Fletcher <[EMAIL PROTECTED]> wrote: > Here's what I found so interesting > > This code, $_SERVER['HTTP_REFERER'] have worked without a > problem when I use the latest Mozilla build. It even work > with the HierMenus, location.replace('http://whatever.com'), > and location.href = http

Re: [PHP] Security in included PHP files

2003-01-15 Thread Chris Shiflett
--- Jacob Copsey <[EMAIL PROTECTED]> wrote: > I agree these are good solutions and I have considered > them. However, I am looking for an all-inclusive > solution that is code only within PHP that allows the > admin of the application to copy the files to their > server and not need to do any serve

Re: [PHP] HTTP_REFERER work without a problem....

2003-01-15 Thread Chris Shiflett
--- Scott Fletcher <[EMAIL PROTECTED]> wrote: > Many PHP programmer tried to their best to use > HTTP_REFERER so they can keep track of which > webpages on the current website did the user > last visited. I think I see what you are referring to now. The reason that many people (myself included) d

Re: Fw: [PHP] HTTP_REFERER work without a problem....

2003-01-15 Thread Chris Shiflett
--- Kevin Stone <[EMAIL PROTECTED]> wrote: > What I suggest to you is code a solution around the IP > address. The IP address of course, like any information > coming from the client, can be tampered with but more > than likely it's not going to change while the user is > browsing your website. Rig

Re: [PHP] HTTP_REFERER work without a problem....

2003-01-15 Thread Chris Shiflett
--- Scott Fletcher <[EMAIL PROTECTED]> wrote: > Or worse, not substituting the characters in the > Session ID. Just use the same Session ID. What if > there is leftover session file in the /tmp > directory of the Unix machine and we're dealing > with hundred of users each day. Some of those > sessi

Re: [PHP] intermittent session loss

2003-01-16 Thread Chris Shiflett
--- Justin French <[EMAIL PROTECTED]> wrote: > I did notice that once I login (it says "you are > logged in as justin" across the top of the screen), > if I refresh the same page a few times, it will > MOSTLY say "you are logged in as..." but > OCCASIONALLY it says "click here to login"... > What'

Re: [PHP] system(): access denied

2003-01-16 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: > no, i use mysqldump -uroot -p > my_dump_file.sql > it is not '<' but '>' That syntax is fine, and it should prompt you for a password. My suggestion is to give the root account a password and don't worry about all of this. I think I read that it is currently empty,

Re: [PHP] system(): access denied

2003-01-16 Thread Chris Shiflett
--- Chris Boget <[EMAIL PROTECTED]> wrote: > system("mysql -uroot -p < the_dump_file.sql") > > it doesn't know where the command ends and the input > begins. So what's going on is that the command thinks > that the password is coming from the "the_dump_file.sql". It knows exactly where the comma

Re: [PHP] nl2br too?

2003-01-16 Thread Chris Shiflett
--- Cesar Aracena <[EMAIL PROTECTED]> wrote: > When I make a form in a web site for a visitor to > send me some comments, I use nl2br() to put things > like line breaks and see what the visitor wants me > to see. > > But what happens if I have a web form to input some > text into a TEXT cell in My

Re: [PHP] Redirecting

2003-01-16 Thread Chris Shiflett
--- "Denis L. Menezes" <[EMAIL PROTECTED]> wrote: > I want ot redirect users to another page after successful > login. Can someone please help me with the PHP code for > redirecting? You have many options: 1. After a successful login, display the proper page to the user instead of redirecting. Th

Re: [PHP] Sessions or Cookies?

2003-01-17 Thread Chris Shiflett
--- Cesar Aracena <[EMAIL PROTECTED]> wrote: > Should I use the no-so-secure old cookies method > or should I start a new session every time a client > drops in and handle each cart by session name or ID? My advice is to only use cookies to identify a Web client. Any data you want to associate wit

Re: [PHP] Sessions or Cookies?

2003-01-18 Thread Chris Shiflett
--- Peter Janett <[EMAIL PROTECTED]> wrote: > Sessions themselves use cookies, though, right? > So, if you want your app to work for those who > don't have cookies, you have to pass the session > data in the url string, at least that's my > understanding. That's not quite right. Session managemen

Re: [PHP] Check for start_sessoin without causing header problems

2003-01-18 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: > how can I call a register session from within a > class and make sure that the session is allready > active and if not just print a warning. This is closely related; you can check to see whether headers have already been sent: http://www.php.net/manual/en/function.h

RE: [PHP] 2 Qs: Passing current URL with session and how to avoid session timeout???

2003-01-18 Thread Chris Shiflett
--- Cal Evans <[EMAIL PROTECTED]> wrote: > I usually just pass this kind of info around on the URL. > > http://mypage.com/mypage.php?prevURL=http://mypage.com/lastpage.php > > if I have to pass a full query string then I urlencode() > it first and urldecode() it on the other side. Just as a bit

Re: [PHP] SQL+php

2003-01-19 Thread Chris Shiflett
--- Sean Burlington <[EMAIL PROTECTED]> wrote: > I think the bandwidth wasters are those who ask > questions poorly (it takes several follow up mails > to find out what the question was) and those who > don't have a qucik look at the archives first > (is someone puuting together an FAQ ?) I agree.

Re: [PHP] Multiplication of double

2003-01-19 Thread Chris Shiflett
--- Cesar Aracena <[EMAIL PROTECTED]> wrote: > I get two numbers from a FORM, one price and one > quantity and I need to make a multiplication with > them in order to store the total amount also as a > double expression... I'm trying with: > > $totalprice = $price * $qty; > > but when I echo the,

Re: [PHP] Getting https-page

2003-01-20 Thread Chris Shiflett
--- Martin Thoma <[EMAIL PROTECTED]> wrote: > How can I get an https-page? I have never tested this myself, but I found this page in the manual: http://www.php.net/manual/en/function.fsockopen.php It has this to say: "As of PHP 4.3.0, if you have compiled in OpenSSL support, you may prefix the

Re: [PHP] Security

2003-01-20 Thread Chris Shiflett
--- Phil Ewington <[EMAIL PROTECTED]> wrote: > Can PHP be configured to allow certain web sites > access to files and directories within their web > root only? I would suggest looking into safe mode. It sounds like it may work for you: http://www.php.net/manual/en/features.safe-mode.php Chris -

Re: [PHP] $_POST vars problem

2003-01-20 Thread Chris Shiflett
--- Kenneth Brill <[EMAIL PROTECTED]> wrote: > can anyone tell me where the second > "searchstring=TEST" is coming from? I > have tried register globals on and off. Can you also show us the HTML for your form on the previous page? The simplest test case that produces this problem would be best.

Re: [PHP] $_POST vars problem

2003-01-20 Thread Chris Shiflett
> it messes up. That make no sence to me but maybe someone > out there can put > it together. > > thanks > > "Chris Shiflett" <[EMAIL PROTECTED]> wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > --- Kenneth Brill <[EMAIL P

Re: [PHP] Loop inside a table

2003-01-20 Thread Chris Shiflett
--- Cesar Aracena <[EMAIL PROTECTED]> wrote: > $message = " > > > > title goes here > > > ". > for ($x = 0; $x < $num_rows; $x++) > { > //several lines made dynamically > } > .." > > ; Try something like this instead, if you want all of your HTML to be in the $message variable: $message = "

Re: [PHP] pop-up problem

2003-01-20 Thread Chris Shiflett
--- Mark McCulligh <[EMAIL PROTECTED]> wrote: > I was wondering if anyone knows of a way to > create a pop-up using PHP or other language to > do the same thing as JavaScript window.open > method. I have an app that uses the JavaScript > popup but now with those popup stopper it will > not always w

Re: [PHP] Change base url

2003-01-20 Thread Chris Shiflett
--- Jeremías Grunge <[EMAIL PROTECTED]> wrote: > I've a few of scrcripts in a directory > $baseurl/PHP/scripts.PHP > > And I want to include these a script in a diferent dir > example $baseurl/otherDir/otherscript.PHP but the > includes that are on the $baseurl/PHP/scripts.PHP now > referrer to $b

Re: [PHP] pop-up problem

2003-01-20 Thread Chris Shiflett
--- Mark McCulligh <[EMAIL PROTECTED]> wrote: > I wish people won't miss use features for people start > blocking them. I am using the window.open the way it > was meant for. I have a online help feature. I am not > using it a force people to look at banner after banner. I know exactly what you

Re: [PHP] Cannot show reuploaded image file on page unless manual refresh

2003-01-20 Thread Chris Shiflett
--- Phil Powell <[EMAIL PROTECTED]> wrote: > I am using the following header() functions to force > view.php to not cache: > > header("Expires: Mon, 26 Jul 1997 05:00:00 GMT"); > header("Last-Modified: " . gmdate("D, d M Y H:i:s") . > " GMT"); > header("Cache-Control: no-store, no-cache, > must-re

Re: [PHP] Cannot show reuploaded image file on page unless manual refresh

2003-01-20 Thread Chris Shiflett
--- Phil Powell <[EMAIL PROTECTED]> wrote: > Chris, that made no sense to me at all! Sorry. :-) > How in the world could an HTTP-RESPONSE send back a > cached .jpg file that no longer exists on the server > end? That's impossible, unless the entire page is > cached. Now, how do I ensure that view

Re: [PHP] login script fix help needed

2003-01-20 Thread Chris Shiflett
--- Karl James <[EMAIL PROTECTED]> wrote: > Warning: Cannot add header information - headers already > sent by (output started at > /home/virtual/site12/fst/var/www/html/Create_Account.php:8) > in /home/virtual/site12/fst/var/www/html/Create_Account.php > on line 10 This means you have something o

Re: [PHP] Header Error message i think!!

2003-01-20 Thread Chris Shiflett
--- Justin French <[EMAIL PROTECTED]> wrote: > PLEASE don't post in HTML/Rich Text > > sheeesh! > > Justin Agreed. Also, please quit asking the same question. I answered this one already, and I think someone else did as well. If you are still having trouble after reading our answers, at least le

Re: [PHP] mysql_connect error

2003-01-20 Thread Chris Shiflett
--- Tom Ray <[EMAIL PROTECTED]> wrote: > Can someone please tell me why I'm getting this error: > > *Fatal error*: Call to undefined function: > mysql_connect() in > */webs/tom/www.bohabcentral.com/www/bohabs/auth.php* on > line *4 > > *mysql_connect was working a week or so ago, and I > haven't

Re: [PHP] Page Rendering

2003-01-21 Thread Chris Shiflett
--- "Bill Arbuckle, Jr." <[EMAIL PROTECTED]> wrote: > It works in IE but not Netscape. Nearly every time this happens, you have invalid HTML. Try stripping out all of the HTML, leaving only the plain text content of the page in question. Then, slowly add back the markup, testing each change. Als

Re: [PHP] $header = "Location:........" being ignored!

2003-01-21 Thread Chris Shiflett
--- Shams <[EMAIL PROTECTED]> wrote: > if ( $_POST['passwd'] != $db['password'] > {header("Location: loginfailed.html"); > } You never add the closing parenthesis to your if statement. Chris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.ph

Re: [PHP] security question regarding including files..

2003-01-21 Thread Chris Shiflett
--- Chad Day <[EMAIL PROTECTED]> wrote: > I want to give my users the ability to submit a URL > to a database, then when they pull up their page, > their photo is included .. what I'm worried about > is them pointing the link to some malicious code or > something.. Your instincts serve you well.

Re: [PHP] Detecting posts from outside site

2003-01-21 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: > If it's bulletproof, then I figured this could help > some of you out. If not, I welcome comments (I'm a > little bit hesitant of calling things 'bulletproof'). It's not bulletproof. :-) > if((count($_POST) > 0) && > (!stristr($_SERVER["HTTP_REFERER"], > $http_refer

Re: [PHP] security question regarding including files..

2003-01-21 Thread Chris Shiflett
--- Sean Burlington <[EMAIL PROTECTED]> wrote: > I'm not sure what harm could be done by this though. > > if a broswer attempts to load an image reference by > an I would expect it simply to ignore it... I sent a response about this earlier, but you should research CSRF and XSS. It does not mat

Re: [PHP] security question regarding including files..

2003-01-21 Thread Chris Shiflett
--- Sean Burlington <[EMAIL PROTECTED]> wrote: > is there really any site which will accept a book > order based an a sigle GET? Well, yes, but that is not the point really. The example of the tag is just one way you can forge an HTTP request from another user (the victim). Also consider that ma

  1   2   3   4   5   6   7   8   9   10   >