Re: [PHP] automatically updating software

2002-11-11 Thread Charles Wiltgen
Ernest E Vogelsinger wrote...

>> You could use eval(), but that didn't work for me since I had mixed
>> PHP/XHTML.
> 
> Why wouldn't it work?

Your example worked wonderfully, but I wasn't able to make eval() work with
mixed PHP/XHTML content (which is what I'm creating).

-- Charles Wiltgen


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] automatically updating software

2002-11-11 Thread Justin French
on 12/11/02 1:45 AM, Peter VanDijck ([EMAIL PROTECTED]) wrote:

> But that's scary for the user (granting some company access to your
> server???).

Wouldn't they just be providing FTP access with a uname and pword to a
specific directory or group of directories?


Another idea:
If you have user management and some form of CMS, perhaps you can detect
when the "admin" user is logged in, and if some content packages have
changed, prompt them for download?  Sure, this will require them to unzip or
decompress the package, and install the components themselves, but it would
be pretty easy with a short text file explaining what goes where...



Justin French

Creative Director
http://Indent.com.au
Web Developent & 
Graphic Design



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] automatically updating software

2002-11-11 Thread Charles Wiltgen
Peter VanDijck wrote...

>> Security issues will prevent you from reading or writing any files that
>> your PHP process doesn't have permissions for.  In my experience, the only
>> reliable way to do this is by using FTP using the username and password that
>> the user will (presumably) give you.
> 
> But that's scary for the user (granting some company access to your
> server???). Isn't there another way? I was thinking I could keep crucial
> function libraries in a database (not sure if that is possible??) and then
> just update them like that, no write access hassles. Can that be done? Can you
> keep your functions in a database and "include" them from there?

You could use eval(), but that didn't work for me since I had mixed
PHP/XHTML.

-- Charles Wiltgen


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] automatically updating software

2002-11-11 Thread Peter VanDijck

> > Some ideas so far (that will probably betray my ignorance :): - updating
> > images will require write access that may introduce security issues?
> 
> Security issues will prevent you from reading or writing any files that
> your PHP process doesn't have permissions for.  In my experience, the only
> reliable way to do this is by using FTP using the username and password that
> the user will (presumably) give you.

But that's scary for the user (granting some company access to your
server???). Isn't there another way? I was thinking I could keep crucial
function libraries in a database (not sure if that is possible??) and
then just update them like that, no write access hassles. Can that be
done? Can you keep your functions in a database and "include" them from
there?
Peter

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] automatically updating software

2002-11-11 Thread Charles Wiltgen
Peter VanDijck wrote...

> I want to write some (browser based) software that will get installed on the
> client's servers, and I want it to update automatically (as in Windows XP: new
> updates are downloaded and presented for install). Can that be done with PHP?

I've been considering something similar, and I don't see any reason why it
can't be done.  Ultimately, this is just be using PHP to FTP something from
one place to another with lots of logic on top.

> Some ideas so far (that will probably betray my ignorance :): - updating
> images will require write access that may introduce security issues?

Security issues will prevent you from reading or writing any files that
your PHP process doesn't have permissions for.  In my experience, the only
reliable way to do this is by using FTP using the username and password that
the user will (presumably) give you.

-- 
Charles Wiltgen

   "Well, once again my friend, we find that science is a two-headed beast.
One head is nice, it gives us aspirin and other modern conveniences...
but the other head of science is bad!  Oh beware the other head of
science...it bites!" -- The Tick





-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php