[PHP] php_value disable_functions sintax?

Hi, I'm trying to use disable_functions inside an Apache's VirtualHost, like this: php_value disable_functions basename,chgrp,chmod,phpinfo I tried both with and without " but the functions are not disabled. I'm using php_flag safe_mode on in the same virtual host. Any help on what I'm doing

Re: [PHP] php_value disable_functions sintax?

On Mon, 25 Nov 2002, Rasmus Lerdorf wrote: > You can't disable functions in your httpd.conf. That particular directive > is probably the only one that is server-wide and can only be set in your > php.ini file. The reason is that it is too expensive to disable and > re-enabled functions on a per-

Re: [PHP] Re: Pictures and sound in MySQL and access via PHP

On Sat, 10 Aug 2002, lallous wrote: > > I'm making a on-line dictionary. I use PHP and a MySQL Database. > > Now I want to add audio-streaming (MP3) and pictures (JPG) to the database > > and retrieve it true PHP. Can sombody help me out with a little If the files are not "secret" or "for members

[PHP] Download site down?

To the php.net webmaster, there seems to be a problem with the us2.php.net site: I reach it with ping, but going to http://us2.php.net/do_download.php?download_file=php-4.2.2-Win32.zip causes an eternal "Sending request" (and telneting to port 80 of that host doesn't open). Regards. -

Re: [PHP] XML vs Everything Else

On Tue, 3 Sep 2002, Geoff Hankerson wrote: > Spend some time learning about xml and you won't regret it Sorry for the off topic, but in fact XML is not that hard to learn, it's just custom markup that needs to follow certain rules. The important part is the parser or the program logic to work wit

Re: [PHP] formatting a filename

On Thu, 5 Sep 2002, Javier Montserat wrote: > i want to format the filename of an uploaded file as follows :- > -- replace blankspace with "_" > -- remove any illegal characters. > Which string functions should I use to do this? http://www.php.net/manual/en/function.ereg.php http://www.php.net/m

Re: [PHP] Encrypted MySQL passwords

On Thu, 26 Sep 2002, Brad Bonkoski wrote: > also might be better then sending it in the clear. But I guess that the original poster wanted to know how to avoid the clear text session originated by the client-server dialog itself, not the passwords in a query (its easy to log the sessions using t

RE: [PHP] Encrypted MySQL passwords

On Thu, 26 Sep 2002, John Holmes wrote: > > BTW (and I have not checked the CVS/TODO, so I ask here), is > > there planned support for SSL & MySQL 4.x.x in PHP?. > Yes. More info in Chapter 4.3.9.1 of the MySQL manual. Nope, I mean: support for SSL+MySQL4 in PHP's mysql_connect. I know that MySQL

RE: [PHP] Encrypted MySQL passwords

On Fri, 27 Sep 2002, Rodolfo Segleau wrote: > > Nope, I mean: support for SSL+MySQL4 in PHP's mysql_connect. I know that > > MySQL 4.0 supports SSL, but I don't know if PHP has/will have support for > > MySQL connections using SSL in future versions. > Rodolfo (Tocayo!), Hola!, > The PHP my

[PHP] File download + HTTP auth problem.

Hello, I have this simple script called index.php in a directory protected with HTTP auth (require valid-user): readfile($archivo); ?> When I access the directory with Netscape/Mozilla/Galeon it works fine, Apache "asks" the login and password and the script sends the file. But with MSIE 6.x (

Re: [PHP] Secure File Upload

On Wed, 5 Jun 2002, Lowell Allen wrote: > Add this to your HTML form: > The manual says this can be easily bypassed. Regards. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] download

On Tue, 11 Jun 2002, Kris Vose wrote: > are there any php functions that handle downloads. For Instance I want to create a >link that contains a url string. In this string a variable is defined as a file. >This file will be downloaded when the user clicks on the link. How do you handle >thi

[PHP] Getting info from a realvideo file.

Hello list, I'm wondering if there's any way to get the info of a realvideo file (resolution, author, and so on). I know rm is a closed format, but maybe you know of something, done either in PHP or in another language. Thank you, Rodolfo. -- PHP General Mailing List (http://www.php.net/)

Re: [PHP] Resoltuion

On Thu, 20 Jun 2002, Edgar wrote: > Are there any way to know what screen resolution use a user in your > monitor? >From a quick search with Google: http://www.alt-php-faq.org/local/89/ Good luck. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/un

RE: [PHP] Alpha Channel Question

On Tue, 2 Jul 2002, Lazor, Ed wrote: > The idea is to create a simple glare effect by taking a white circle and > making it more transparent around the edges. Though this only produces a > white circle with fuzzy edges. Can anyone tell me what I'm doing wrong and Which browser are you using

Re: [PHP] ??????????????????????????????????????????????????????````````````````````ØØØØØØØØØØ=?iso-8859-1?B?2NjY2NjY2NjFxcXFxcXFxcXFxcXFxcX

To the kind moderator of the list: please kick off this guy (Erik Hegreberg <[EMAIL PROTECTED]> ), he's really annoying. Or at least bounce his e-mails back to him ;) ). Thanks. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] ????????????????????????????????????????????

On Tue, 9 Jul 2002, Andrew Brampton wrote: Yes Andrew, but why this guy don't read the d@mn footer which comes from every mail and simple unsubscribes himself!!, even a newcomer/newbie can learn how to do it after all the explanations which other list members sent him. Ok, no more mails on thi

[PHP] Benchmarking a site...

Hi, is it possible to benchmark a site/page which uses authentication via PHP sessions?. If so, could you please tell me some hints to do it?. Thank you. Rodolfo. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] PHP Security Advisory: Vulnerability in PHP versions4.2.0and 4.2.1

On Mon, 22 Jul 2002, 1LT John W. Holmes wrote: > This other guy needs to quit his freakin whining and just do his job. Or go > use ASP...the choice is yours. Or JSP, for that matter. I've just discussing with a friend about this security issue, and he was trying to convince me to move to Java...

[PHP] Connection to MySQL with SSL.

Hi, if a MySQL server is compiled with SSL support (that's for the 4 series), is it possible to use this secure connection from a PHP script (with mysql_connect)?. Thank you. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands,

Re: [PHP] PHP Chat REALTIME

On Tue, 22 Jan 2002, Joffrey van Wageningen wrote: > socket to the server (read: the php script running). the only realy useful > language is javascript becouse flash and java are not portable on some > platforms. the next problem is javascript isnt able (for security reasons) > to open a socket t

[PHP] MySQL 4.x's SSL connections from PHP.

Hi list, again with my question, but now a bit different: I guess the current version of PHP doesn't support the connection to a MySQL server using the SSL features provided by the 4.x series of MySQL for an encrypted connection (correct me if I'm wrong, please). Is it planned to include this sup

[PHP] array[] and Javascript.

Hi list, I have a little problem here. I need data from a HTML multiple select box passed to PHP. Ok, that's really easy, just put name="array[]" like this: Alabama ... But then, I *need* to access that select and its elements and properties with Javascript (something like document.forma.arra

RE: [PHP] Best way to frequently check database?

On Thu, 31 Jan 2002, Rick Emery wrote: > To timeout users after 20 minutes, use a cookie which is set for 20 minutes. But once again you can have problems with cookies, they're not reliable (user can have cookies support turned off) and they tend to be good for CSS attacks :( You could have a ti

RE: [PHP] PHP and Apache authorization: how to logout. Help!

On Fri, 1 Feb 2002, Matthew Walker wrote: > Does anyone have the answer for this question? I need it too... As I learnt before, it's not possible without closing the user's browser. > My site is in directory which is protected with .htaccess file. > I want to develope a logout function, which ca

Re: [PHP] Re: PHP and HTTPS

On Mon, 18 Feb 2002, Michael Kimsal wrote: > > on IE on pc a "this page cannot be displayed" error (with possible > > reasons like your browser needs to be set to accept SSL2 and SSL3 [it is > > by the way]) is generated half of the time. the other half it works. > We've worked with this several

Re: [PHP] Re: PHP and HTTPS

On Mon, 18 Feb 2002, J Smith wrote: > plaintext, no SSL at all. Useful if you want to keep your password safe > during transmission, but it sucks that everything can't be encrypted. That's the way hotmail works too, f. ex. I guess it's to increase speed. -- PHP General Mailing List (http://w

Re: [PHP] The so-called improvment in PHP 4.2.0

On Mon, 22 Apr 2002, Leif K-Brooks wrote: > The only problem with that is that I have at least 50 scripts that are using > the old thing! You could auto_prepend the file which has the code for "backwards compatibility" of the variables. -- PHP General Mailing List (http://www.php.net/) To un

RE: [PHP] file download in IE

On Tue, 23 Apr 2002, .ben wrote: > I think this is only an issue with an un-patched IE5.01, anything higher > than that should work fine. In my experience, there're problems even with MSIE 6.x. Regards, Rodolfo. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://

Re: [PHP] Browser cache

http://www.php.net/manual/en/function.header.php RT... M :) On Tue, 23 Apr 2002, José León Serna wrote: > Hello: > How could I disable the browser cache?, I have a script that generates > an image and shows it via . The problem is if I change > the image, the browser doesn't reflect the cha

RE: [PHP] Secure MySQL connections in PHP with 'stunnel'

On Mon, 29 Apr 2002, Stefen Lars wrote: > However, I am interested in learning how to connect directly to the MySQL > port, as in a second step of the project I am working on, various data from > various servers will be handled. The 'dump to a file' approach, while fine > in my little example b

Re: [PHP] Re: [PHP-DEV] Timeline for Apache 2 full use?

On Tue, 14 May 2002, Richard Archer wrote: > Aah, but by the same logic, if Apache 2.0 with PHP4 can provide the > users with a faster, more stable service, it's "bad" *not* to use it. It's bad if the beasts are experimental. Now, I guess this is for the devel list: libmcrypt4-2.4.19-1mdk libmc

RE: [PHP] Email Verification

On Mon, 25 Feb 2002, Martin Towell wrote: > You can use sockets and connect to their mail server (bit after the @) and > "pretend" to send an email to them, but cancel the request before you > actually send anything - doesn't always work though, as some servers will > report back the all users are

RE: [PHP] strip_tags() problem

> -Original Message- > From: Ryan Govostes [mailto:[EMAIL PROTECTED]] > Subject: [PHP] strip_tags() problem > I've tried several variations of the above, such as using preg_replace() > instead of strip_tags() and readfile() instead of include(), but it does > not work at all, no matter w

RE: [PHP] eregi_replace

I got this as output: V:\memo\F0001\abcdef.com V:\memo\F0001\abcdef.com But no errors. Where does it fail? php-4.0.6-5mdk On Thu, 4 Apr 2002, Rick Emery wrote: > I think you found a bug in PHP. > > I even tried simple things like: > $qq = "V:\\memo\\F0001\\abcdef.com"; > print "$qq\n"; > $qx

RE: [PHP] Reliability of sessions

On Thu, 4 Apr 2002, Vladislav Kulchitski wrote: > Even though sessions are more handy, I still don't know what happens if > cookies are disabled in the client's browser. You don't even need to use cookies to support sessions. It's all in the manual. Regards, Rodolfo. -- PHP General Mailing L

RE: [PHP] eregi_replace

On Thu, 4 Apr 2002, Rick Emery wrote: > it should print: > V:\memo\F0001\abcdef.com > \F0001\abcdef.com Indeed, sorry for the lapsus. In fact, look at this: in: $qq = "V:\\memo\\F0001\\abcdef.com"; print "$qq\n"; $qx = ereg_replace('V:\\','',$qq); print $qx; out: Parse error: parse error in

RE: [PHP] nl2br returns ? normality or a bug?

On Sat, 6 Apr 2002, Maxim Maletsky wrote: > But again (I like insisting on such things), > Why do I have it now and didn't have it before? Why did it change > anyway? I haven't seen it on any other my server and I use it quite a > lot. Directly from the manual: Note: Starting with PHP 4.0.5, nl

Re: [PHP] Frames and Sessions

On Tue, 13 Nov 2001, Martín Marqués wrote: > > I have tried starting a session in the main frameset file, then adding > > to the URLs of the frame files, which sort of works but breaks > > where JavaScript is used for buttons in one of the frames. JavaScript > > doesn't seem to cope with the PHP

Re: [PHP] Session file not written, session variables messed up.

Hi Klaus, On Fri, 12 Nov 2004, Klaus Reimer wrote: > > The weirdness comes when in one frame the script will print "Agent Smith" > > while in the other frame of the same frameset the script which loads on it > > will print "Thomas Anderson"... > > Are both frames loaded at the same time? It's not

[PHP] Globals and HTTP_SESSION_VARS variables.

Hi, Is here anyway to make a variable like $var not the same than $HTTP_SESSION_VARS[var], when register_globals=1?. (where $var is in the script scope). I read in a changelog that this is relatively recent (make $var the same than $HTTP_SESSION_VARS[var]). Thank you. Regards, Rodolfo. -- P

[PHP] Problem with PEAR DB & MySQLi

Hi, I'm trying to use PEAR's DB class with the new PHP 5 MySQLi support on MySQL 4.1.3, using this example from the PEAR's docs (with my parameters of course). I'm getting "DB unknown error" messages after the query. The same query from the mysql client works fine, there are no connection problems

Re: [PHP] Maintaining sessions across multiple sites

On Fri, 30 Jul 2004, Tom Rogers wrote: > RD> I'm in the process of building an application that has an adminstration > RD> back-end shared by multiple sites. I need to maintain a persistent session > > msession is designed for just this purpose how reliable msession is?. I'm interested on it too

[PHP] Compilation problem with PHP5 and MySQL 4.1

Hi, I know that this should go to the php-inst ml, but I can not resubscribe (the error in the P.S.). I'm trying to install PHP 5 + MySQL 4.1.3 in Apache 1.3 and I'm getting these messages: (tons of "first defined" messages before", just pasted a sample below) ... /usr/lib/mysql/libmysqlclient.a

[PHP] Weird results with floor compiling with -march=pentium4 -mcpu=pentium4

Hi, Just for the record. I compiled PHP 5.2.2 with CFLAGS="-O2 -march=pentium4 -mcpu=pentium4", as usual (I've done so with all the 5.x.x series, and the proc is a Pentium 4, of course) and a customer complained about weird results in one of his scripts. I isolated the problem to be related to

[PHP] Framework in PHP?

Hello, which free (as in beer) framework writen in PHP (OO) would you consider the best for developing large web applications?. I was looking at Seagull (http://seagull.phpkitchen.com/)... I would appreciate your comments on this and other frameworks. Thank you, Rodolfo. -- PHP General Mailing

[PHP] Session file not written *solved*, but session variables *still* messed up.

On Fri, 12 Nov 2004, Klaus Reimer wrote: > Rodolfo wrote: > > The weirdness comes when in one frame the script will print "Agent Smith" > > while in the other frame of the same frameset the script which loads on it > > will print "Thomas Anderson"... > > On the other hand: Have you checked that you

[PHP] Conflicts between c-client and MySQL

Hello, I'm trying to compile with: UW-IMAP's c-client 2004, MySQL 4.1.7, php-5.0.3RC2 and php-5.0.2, configure --with-imap --with-mysqli, and I get this: /usr/lib/libc-client.a(misc.o)(.text+0x8a4): In function `hash_reset': /home/rodolfo/software/imap-2004a/c-client/misc.c:278: multiple definit

[PHP] SCORM & PHP

Hello, I have searched freshmeat/hotscripts/google/... for some class or "simple" PHP script (not a full LMS) to display SCORM content, without success. Does someone know about this topic or if such a class/script exists?, thanks a lot in advanced for your help. Regards. -- PHP General Mai

[PHP] memcached and objects.

Good morning, I would like to use PHP's memcached extension to store objects. However I keep getting the "incomplete object" everytime I try to operate on an object got from the cache. How can be an object stored in memcached and later recovered to work with it?. Is this possible?. I would tha

Re: [PHP] auto reply framework

On Sat, 2 Jul 2005, Nate Tanner wrote: I'm working on the design of a program for sending automatic messages to users, based on certain conditions. It seems like there should be some So the point is that I need to be able to set up rules for what each message contains, and when each message sho

Re: [PHP] memcached and objects.

On Sat, 2 Jul 2005, Jochem Maas wrote: I would like to use PHP's memcached extension to store objects. However I keep getting the "incomplete object" everytime I try to operate on an load the class definition BEFORE you try to extract the object from the cache. Thanks to Jochem and Brad fo

[PHP] <<< performance.

Hi, this could be a silly question. Is there some performance penalty when using the <<< operator like this: $var =<

Re: [PHP] Re: <<< performance.

On Tue, 26 Jul 2005, Matthew Weier O'Phinney wrote: this could be a silly question. Is there some performance penalty when using the <<< operator [in heredoc] Try doing some benchmarks using microtime(). My gut reaction is that there shouldn't be any difference; heredoc syntax is simply another

Re: [PHP] Mail-Encryption

On Thu, 8 Feb 2001, Richard Lynch wrote: > You can find a long-winded post from me a year or two ago about my trials > and tribulations (and a *lot* of help from others to get me going). I found a pgp class and took parts of it to work with gpg, but it doesn't work in safe-mode. I'm using this p

[PHP] Code appearing suddenly!.

Hi, I've just recompiled PHP 4.2.3 on RedHat w/Apache, after having upgraded from Perl 5.6.0 to 5.8.0 (I had to disable mod_perl for now, due to incompatible libraries). But now something weird is happening: sometimes as a page with PHP code loads in the browser, it's not processed by PHP, but the

[PHP] Per instance disable_functions in CGI "mode"

Hi, some weeks ago I asked if it was possible to have a per apache-virtualhost disable_functions list. Rasmus answered that this is not possible since the interpreter is initialized once, and it'd be too expensive to reload the config. But, what about PHP as CGI?. I guess the disable_functions pa

Re: [PHP] Code appearing suddenly!.

On Tue, 17 Dec 2002, Matthieu Le Corre wrote: > look at your apache httpd.conf file > maybe php type is not correctly definy ... > i've had the ame pb ... the mime type was definied twice ;) Bad luck, the code is still appearing randomly. The script is parsed correctly if the page is reload

[PHP] Code still showing up :(

Hi, I'm still having the same problem, the PHP code is sometimes not interpreted, but passed as text/plain to the browser. The MIME type is configured correctly, and once (in the master httpd.conf). I even recompiled Apache. The system: RedHat 6.2 (ancient, I know) with Apache 1.3.27 and PHP 4.2.3

[PHP] popen in safe_mode with pipe

Hello, I need to encode some text using GPG in a PHP program. I've a class wich uses popen like this: //--- start --- // parameters to gpg omited... $command = "echo '$text' | gpg "; $fd = popen("$command","r") if (!$fd) { return -2; } $enc = ""; while (!feof($fd)) { $enc .= fgets($fd

[PHP] file or fopen to fetch a web page???

Hello, I wonder myself, which method is better to fetch a web page: $file = fopen($url, "r"); $page = fread($file, 5); or $file = join('', file($url)); , speaking from the performance point of view? (or is there any better?). Thanks. -- PHP General Mailing List (http://www.

Re: [PHP] Looking for Code Example: Telneting to server to verifypassword

de sitting around I can scavange > from? PHPBuilder didnt help much > > > > -- Lic. Rodolfo Gonzalez Gonzalez. Global Networks Technologies S.A. de C.V. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-

[PHP] "Deleting" HTTP auth...

Hello list, Is it possible to "delete" the data from an Apache's HTTP authentification directly from a PHP script?. I know that the username/password pair is stored in two variables which are sent by the client to the server, right?. is it possible to alter them from PHP¿?. Thanks a lot, Rodolfo

[PHP] Silly sessions problem.

Hello list, I just can't make sessions work. This is driving me mad, I'm sure it's something silly, but maybe my headache made me a fool :P :) ... could you please tell me what's wrong here?. hello.php has a link to next.php: --- start of hello.php --- $hello"; ?> --- end of hello.php --

Re: [PHP] Silly sessions problem.

> I just can't make sessions work. Now this is strange! I copied exactly the same scripts I posted to my win98SE box running Apache 1.3.19 and PHP 4.0.4pl1 and they worked!. Which could be the reasons for the sessions not to work?. Do they work transparently for name based virtuals, don't they?.

[PHP] Sessions and

Hi there, I have a problem. I am trying to use a simple php script to display a JPEG from a "protected" catalog (the image files are out of the web tree). It's called from an IMG tag, like this: --- main file --- ... "; ?> --- In viewer.php I use session_start() to resume the current sessi

[PHP] Problem: lost session id when htaccess'ing.

Hello, I have a problem with sessions: I have php with sessions autostarting, compiled with transid support. I have a homepage with a link to another page protected via Apache's htaccess. Well, the href's in the homepage get the correct SID=, then I click the link, I give login and password, Apac

[PHP] Problem: ereg doesn't work ok (?).

Hello, I have a problem with ereg: following the example from the documentation (see the ereg page in the manual), I'm using it to parse a -MM-DD date and get DD-MM-, but with well formed -MM-DD it doesn't match!. Is this a bug?. Regards, Rodolfo. php-4.0.8-dev (maybe the problem i

Re: [PHP] Problem: ereg doesn't work ok (?).

On Tue, 18 Sep 2001, * R&zE: wrote: > > and get DD-MM-, but with well formed -MM-DD it doesn't match!. Is > > this a bug?. > It would help if you send the code you're using, 'cause we can't see > what you're doing now. FAFAIK it should just be possible. See the Sure: --- start --- $dat

Re: [PHP] Re: Problem: lost session id when htaccess'ing.

On Tue, 18 Sep 2001, Chris Lee wrote: > - you have cookie support on or off ? > - you using any header redirects ? (you have to manually add the SID to > URI's) Sorry for the lenght of this mail. PHP compiled with --enable-trans-id, so PHP adds SID to the URL. session.use_cookies = 0, session.r

Re: [PHP] PHP vs M$.NET C#?

On Wed, 19 Sep 2001, Christian Reiniger wrote: > Not at all I'd guess. > C# is MS's reaction to Java, which has been around for quite some years > now. And there's nothing new / innovative in C# Indeed, its their reaction against the lawsuit which MS lost. So, if they cannot have Java, they do th

Re: [PHP] Problem: ereg doesn't work ok (?).

On Thu, 20 Sep 2001, * R&zE: wrote: > > This sometimes work, but sometimes it doesn't randomly, even with the same > > (apache-1.3.20, rh-7.1) and it's the same. Any help is appreciated. Thank > Ehhh... works fine here! Dunno what's wrong. Don't you do anything > almost a complete year using the l

Re: [PHP] Mail-Encryption

On Thu, 8 Feb 2001, Richard Lynch wrote: > Maybe you can create a custome keyring for just the web-usage of public keys > only... Hum... I wouldn't like it, anyway. Hmmm, is there any other way to pass "stdin" to an external program, other than using echo and a pipe?. I've also tried by placing

Re: [PHP] Mail-Encryption

On Fri, 9 Feb 2001, Christian Reiniger wrote: > > This returns echoes the part after the | in safe-mode. > echo only outputs something. it doesn't return anything. Yup, grammar error, I meant "prints to stdout" :) > Write > $comm = "$data | " . $this->gpg_command; Didn't work that way :( > an

Re: [PHP] deleting cart items on session expire

On Fri, 16 Feb 2001, Jason Brooke wrote: > > However, there's no necessity to have the cgi version if you already have > > the modular version. All that is needed is to call the appropriate script > No there's not - I think that goes without saying though. > install' - then you can use this awes