Re: [PHP] Fwd: Is it possible???

2013-06-25 Thread php
On Mon, Jun 24, 2013 at 06:17:33PM +0200, Maciek Sokolewicz wrote: Please please please please don't do this! 1) You did not answer the question, nor giving any related information. 2) This was debug-output. I see not point in optimizing. 3) print is language construct, just as is echo 4)

[PHP] Thread-Hijacking (was: Re: [PHP] Fwd: Is it possible???)

2013-06-25 Thread Tamara Temple
Maciek Sokolewicz maciek.sokolew...@gmail.com wrote: Please please please please don't do this! Please Please Please Do Not Hijack Threads. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: Thread-Hijacking (was: Re: [PHP] Fwd: Is it possible???)

2013-06-25 Thread Maciek Sokolewicz
On 25 June 2013 10:02, Tamara Temple tamouse.li...@gmail.com wrote: Maciek Sokolewicz maciek.sokolew...@gmail.com wrote: Please please please please don't do this! Please Please Please Do Not Hijack Threads. Hijacking would be starting a completely different discussion in the same thread.

Re: [PHP] Fwd: Is it possible???

2013-06-24 Thread Stuart Dallas
On 24 Jun 2013, at 13:02, Karl-Arne Gjersøyen karlar...@gmail.com wrote: Error in my last post This is corrected: $item_amount_in_store = 223; $update_amount = 7; $item_amount_in_Store += $update_amount; It show the result = 227 and not 230. Why is this happen? Something else is going

Re: [PHP] Fwd: Is it possible???

2013-06-24 Thread nobs
You should give a complete programm so we can run exactly the same you do, like this: ?php $item_amount_in_store = 223; print ($item_amount_in_store); $update_amount = 7; $item_amount_in_store += $update_amount; print ( + $update_amount = $item_amount_in_store ); ? which gives this result:

Re: [PHP] Fwd: Is it possible???

2013-06-24 Thread Sachin Raut
variables are case-sensitive. $item_amount_in_store is different from $item_amount_in_Store 1st variable contains all lowercase characters, while the 2nd one contains S uppercase character. happy coding sachin On Mon, Jun 24, 2013 at 5:32 PM, Karl-Arne Gjersøyen karlar...@gmail.comwrote:

Re: [PHP] Fwd: Is it possible???

2013-06-24 Thread Maciek Sokolewicz
On 24-6-2013 14:27, n...@nobswolf.info wrote: You should give a complete programm so we can run exactly the same you do, like this: ?php $item_amount_in_store = 223; print ($item_amount_in_store); Please please please please don't do this! First of all, I don't know why you would use the

Re: [PHP] Fwd: Is it possible???

2013-06-24 Thread Carlos Medina
Amen! Am 24.06.2013 18:17, schrieb Maciek Sokolewicz: On 24-6-2013 14:27, n...@nobswolf.info wrote: You should give a complete programm so we can run exactly the same you do, like this: ?php $item_amount_in_store = 223; print ($item_amount_in_store); Please please please please

Re: [PHP] Fwd: Is it possible???

2013-06-24 Thread Marco Behnke
Am 24.06.2013 18:17, schrieb Maciek Sokolewicz: On 24-6-2013 14:27, n...@nobswolf.info wrote: You should give a complete programm so we can run exactly the same you do, like this: ?php $item_amount_in_store = 223; print ($item_amount_in_store); Please please please please don't do this!

Re: [PHP] How is this possible???? (addslashes)

2011-02-17 Thread Paul S
On Thu, 17 Feb 2011 07:50:45 +0700, Daniel Brown paras...@gmail.com wrote: No offense, but are you kidding me? The host disables phpinfo() for security reasons, but keeps 4.4.4 running? Talk about running, Paul run away from them. Fast. AND they have a condition (this reported)

Re: [PHP] How is this possible???? (addslashes)

2011-02-16 Thread Daniel Brown
On Feb 16, 2011 7:07 PM, Paul S pau...@roadrunner.com wrote: Can anyone please tell me how the addslashes output (note = Everyone''s a card on the \earth) in the following example is possible. It is addslashes output but this result is consistent with the output from post when runtime is set:

Re: [PHP] Re: Is it possible to create a global namespace alias?

2010-10-05 Thread David Harkness
On Tue, Oct 5, 2010 at 8:41 AM, Matt Palermo palermom...@gmail.com wrote: I'm assuming there is no way to make a global alias. Can anyone confirm/deny this? I reread the documentation on namespaces, and from what I can tell this is no way to do it. Each file maintains its own active

Re: [PHP] How is this possible?

2009-10-28 Thread David Otton
2009/10/28 tedd t...@sperling.com: Hi gang: http://php.net/manual/en/security.globals.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] How is this possible?

2009-10-28 Thread Adam Randall
I don't do this personally, but you can probably get your script working by doing something like this: foreach( $_GET as $k = $v ) $$k = $v; You would put that at the top of your page, but be aware that it allows other people to set variables on your page (just like register globals does). If

Re: [PHP] How is this possible?

2009-10-28 Thread Andrew Ballard
On Wed, Oct 28, 2009 at 1:27 PM, tedd t...@sperling.com wrote: Hi gang: I am reviewing some old code (circa 2003) where the programmer had one script call another and placed variable values in the URL, like so:    a href=user_edit.php?user_id=5223action=edit That seems innocent enough.

Re: [PHP] How is this possible?

2009-10-28 Thread Ashley Sheridan
On Wed, 2009-10-28 at 13:47 -0400, Andrew Ballard wrote: On Wed, Oct 28, 2009 at 1:27 PM, tedd t...@sperling.com wrote: Hi gang: I am reviewing some old code (circa 2003) where the programmer had one script call another and placed variable values in the URL, like so: a

Re: [PHP] How is this possible? [Solved]

2009-10-28 Thread tedd
To all: I found the problem, which basically was that I had declared a variable in a preceding script with the same name, namely $user_id. When I changed my script to $u_id, everything worked as before. Clearly, Globals are evil. It's a bitch to have to work with code you can't change

RE: [PHP] How is this possible? [Solved]

2009-10-28 Thread Bob McConnell
From: tedd I found the problem, which basically was that I had declared a variable in a preceding script with the same name, namely $user_id. When I changed my script to $u_id, everything worked as before. Clearly, Globals are evil. It's a bitch to have to work with code you can't

Re: [PHP] How is this possible? [Solved]

2009-10-28 Thread Robert Cummings
Bob McConnell wrote: From: tedd I found the problem, which basically was that I had declared a variable in a preceding script with the same name, namely $user_id. When I changed my script to $u_id, everything worked as before. Clearly, Globals are evil. It's a bitch to have to work with

Re: [PHP] How is this possible? [Solved]

2009-10-28 Thread tedd
At 2:48 PM -0400 10/28/09, Robert Cummings wrote: Bob McConnell wrote: From: tedd I found the problem, which basically was that I had declared a variable in a preceding script with the same name, namely $user_id. When I changed my script to $u_id, everything worked as before. Clearly,

Re: [PHP] How is this possible? [Solved]

2009-10-28 Thread Jim Lucas
tedd wrote: At 2:48 PM -0400 10/28/09, Robert Cummings wrote: Bob McConnell wrote: From: tedd I found the problem, which basically was that I had declared a variable in a preceding script with the same name, namely $user_id. When I changed my script to $u_id, everything worked as before.

Re: [PHP] Problems with APC, possible cache-corruption?

2009-06-22 Thread Nathan Nobbe
On Sun, Jun 21, 2009 at 6:17 PM, James McLean james.mcl...@gmail.comwrote: On Mon, Jun 22, 2009 at 9:40 AM, Nathan Nobbequickshif...@gmail.com wrote: On Sun, Jun 21, 2009 at 5:56 PM, James McLean james.mcl...@gmail.com wrote: did you take a look at the size of the cache you created ?

Re: [PHP] Problems with APC, possible cache-corruption?

2009-06-22 Thread James McLean
On Tue, Jun 23, 2009 at 6:17 AM, Nathan Nobbequickshif...@gmail.com wrote: hmm, 2 other thoughts i have.. . long shot, but do you have apc.php installed on a diff domain than the moodle app (not sure but i suspect apc.php only shows cached values for the domain in which its currently running

Re: [PHP] Problems with APC, possible cache-corruption?

2009-06-21 Thread Nathan Nobbe
On Sun, Jun 21, 2009 at 5:56 PM, James McLean james.mcl...@gmail.comwrote: (Resend from around 1 week ago, because of no responses) Hi All, Over the weekend I setup a test of APC intending to benchmark a Moodle installation with various APC settings to see how well I could get it to

Re: [PHP] Problems with APC, possible cache-corruption?

2009-06-21 Thread James McLean
On Mon, Jun 22, 2009 at 9:40 AM, Nathan Nobbequickshif...@gmail.com wrote: On Sun, Jun 21, 2009 at 5:56 PM, James McLean james.mcl...@gmail.com wrote: did you take a look at the size of the cache you created ? Yes. Tried multiple segments and single, with cache size values between 128mb and

Re: [PHP] Problems with APC, possible cache-corruption?

2009-06-21 Thread Jonathan Tapicer
Can you do a phpinfo(); and tell us the value of the setting apc.filters (or every apc.* if you can)? Just curious, but I've seen apps set that setting to avoid APC opcode caching. Jonathan On Sun, Jun 21, 2009 at 8:56 PM, James McLeanjames.mcl...@gmail.com wrote: (Resend from around 1 week

Re: [PHP] Problems with APC, possible cache-corruption?

2009-06-21 Thread James McLean
On Mon, Jun 22, 2009 at 10:02 AM, Jonathan Tapicertapi...@gmail.com wrote: Can you do a phpinfo(); and tell us the value of the setting apc.filters (or every apc.* if you can)? Just curious, but I've seen apps set that setting to avoid APC opcode caching. Certainly, however it will have to

Re: [PHP] Re: Is this possible with php

2006-03-06 Thread Austin Denyer
(Re-sending as I accidentally sent my original post directly to Al) Al wrote: Mace Eliason wrote: I really don't think this is possible from what I know of php, but I thought I would as the experts. Is it possible to have php create directories and move files on a local machine. I have

Re: [PHP] Re: Is this possible with php

2006-03-06 Thread Robert Cummings
PHP can do this, but you'd need it set up on each of the client computers and periodically run to check the temp folder and perform the upload. That's what any other application that can do similar does. Cheers, Rob. On Mon, 2006-03-06 at 15:30, João Cândido de Souza Neto wrote: PHP don't do

Re: [PHP] Re: Is this possible with php

2006-03-06 Thread João Cândido de Souza Neto
Ok, but you're telling that the client will be doing upload to server. Not the server doing a dounload from client. I was understood as a wrong way. I'm sorry. Robert Cummings wrote: PHP can do this, but you'd need it set up on each of the client computers and periodically run to check the

Re: [PHP] Re: Is this possible with php

2006-03-06 Thread tg-php
Yeah, you can't do the local computer file moving and all that with the same script as your server side component, but if you'd rather not learn C# or another language like that, but you're comfortable with PHP, I'd highly recommend checking out Winbinder (http://www.winbinder.com). Assuming

Re: [PHP] Is this even possible?

2005-01-24 Thread Jason Barnett
Tony Di Croce wrote: Is it even possible to connect to a postgres server (thats running on linux) from a windows CLI php script? I'm seeing a pg_connect() error... FATAL: no pg_hba.conf entry for host 192.168.1.100 Any ideas? The easiest way to get PG up and running on a Windows system is cygwin.

Re: [PHP] Is this even possible?

2005-01-24 Thread Greg Donald
On Mon, 24 Jan 2005 10:28:09 -0500, Jason Barnett [EMAIL PROTECTED] wrote: Tony Di Croce wrote: Is it even possible to connect to a postgres server (thats running on linux) from a windows CLI php script? Yup. I'm seeing a pg_connect() error... FATAL: no pg_hba.conf entry for host

RE: [PHP] Is this even possible?

2005-01-23 Thread Mikey
-Original Message- From: Tony Di Croce [mailto:[EMAIL PROTECTED] Sent: 22 January 2005 23:21 To: php-general@lists.php.net Subject: [PHP] Is this even possible? Is it even possible to connect to a postgres server (thats running on linux) from a windows CLI php script? I'm seeing a

Re: [PHP] Is this even possible?

2005-01-22 Thread Jason Wong
On Sunday 23 January 2005 07:20, Tony Di Croce wrote: Is it even possible to connect to a postgres server (thats running on linux) from a windows CLI php script? Yes. I'm seeing a pg_connect() error... FATAL: no pg_hba.conf entry for host 192.168.1.100 Exactly. So put the appropriate entry

Re: [PHP] Are server classes possible?

2004-10-12 Thread Adrian Madrid
I have used Turck MMCache in the past to store results in shared memory with an specific TTL. Also you could use Cache_Lite in PEAR. Hope it helps, Adrian Madrid Jed R. Brubaker wrote: I am thinking like JavaBeans. Here is what I have going on: I have a series of rather database intensive

Re: [PHP] objects - is that possible at runtime in php4 or php5 ?

2004-10-04 Thread Marek Kilimajer
Alawi Albaity wrote: I want to create and defined variables of an object in runtime , is that possible ? I can do that with arrays but I want the access it as variable from obbject it self and not like member of an array are defined on object before I load it ! What about trying it before asking?

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Jay Blanchard
[snip] I am working on securing an application that uses CDSSO (Cross Domain Single Sign On). I am trying to reproduce the CSRF (Cross Site Request Forgery) attack (using img/ TAG) in I.E. 6.01, but am unable to do so. However the attack works on Mozilla and other older browsers. My

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Vail, Warren
PROTECTED] Sent: Monday, August 16, 2004 10:57 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1? [snip] I am working on securing an application that uses CDSSO (Cross Domain Single Sign On). I am trying to reproduce the CSRF

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1? WOT

2004-08-16 Thread Jay Blanchard
[snip] Perhaps the question could be asked another way and be more on topic. Is there a fix in I.E. 6.01 that would interfere with PHP being able to generate different mime types on the fly, like .png or .jpg [/snip] a. But that wasn't what he asked. 2. Top-posting === bad -- PHP General

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- Jay Blanchard [EMAIL PROTECTED] wrote: You would have to ask the Microsoft Development Group, who probably does not subscribe to this list. Crossposting is bad. Being OT during a crosspost is even worse. I can hear the falmethrowers warming up in the wings. FYI - This is (or use to be)

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread John Nichel
Jay Blanchard wrote: FYI - This is (or use to be) a PHP list If I have a web server running php, how do I change the oil in my car? -- John C. Nichel ÜberGeek KegWorks.com 716.856.9675 [EMAIL PROTECTED] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit:

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: My question: Is I.E. 6.01 SP1 doing something to foil the CSRF attack, i.e. only allow image extensions .gif .png .jpeg? This seems highly unlikely. Can you show us the code you're using to test? Chris = Chris Shiflett - http://shiflett.org/ PHP Security

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1? WOT

2004-08-16 Thread Chris Shiflett
--- Jay Blanchard [EMAIL PROTECTED] wrote: [snip] Perhaps the question could be asked another way and be more on topic. Is there a fix in I.E. 6.01 that would interfere with PHP being able to generate different mime types on the fly, like .png or .jpg [/snip] a. But that wasn't

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Saqib . N . Ali
] To Jay Blanchard [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] cc Subject RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1? --- Jay Blanchard [EMAIL PROTECTED] wrote: You would have to ask the Microsoft Development Group, who probably does not subscribe

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Jay Blanchard
[snip] Yup I think my posting is very on-topic. The application that I am working on is written in PHP. [/snip] Thanks for stating that in your original post.

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Saqib . N . Ali
downloads.seagate.com Chris Shiflett [EMAIL PROTECTED] No Phone Info Available 08/16/2004 11:24 AM Please respond to [EMAIL PROTECTED] To [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] cc Subject Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1? --- [EMAIL PROTECTED] wrote: My question

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: And I m sure all PHP developers check their applications for CSRF vulnerability, in various browsers (including I.E. ). I speak about CSRF in many of the talks I give, and I think you'd be surprised by how many people haven't even heard of it. As a PHP/Java

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: I can't share the exact code ;) , but here is something very similar: img src=http://slashdot.org/my/logout; height=1 width=1 If I load a web page with the above code, it should log me out of slashdot. It works in Mozilla (and netscape), but not in I.E. 6.01

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Ed Lazor
-Original Message- Jay Blanchard wrote: FYI - This is (or use to be) a PHP list If I have a web server running php, how do I change the oil in my car? Have you tried the OilChange class from PHPClasses.org? ;) -Ed -- PHP General Mailing List (http://www.php.net/) To unsubscribe,

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Ed Lazor
What if you add a random seed to the URL? img src=http://slashdot.org/my/logout?fluff=?php echo rand(1,200);? height=1 width=1 -Original Message- Hello Chris, I can't share the exact code ;) , but here is something very similar: img src=http://slashdot.org/my/logout; height=1

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Ed Lazor
-Original Message- The best information would be if you can capture the exact HTTP transactions involved. For example, using something like ethereal, capture the request and response for Mozilla, and then do the same for IE 6.01 SP1. Short of that, you could create a URL

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- Ed Lazor [EMAIL PROTECTED] wrote: Wouldn't it work to just make the script spit out a mime type header and a small (1x1) image when it's done to satisfy the browser's mime type requirements? Definitely, but most CSRF attacks are meant to spoof a request from the legitimate user to some Web

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Ed Lazor
-Original Message- Definitely, but most CSRF attacks are meant to spoof a request from the legitimate user to some Web site where he/she already has privilege. Thus, the receiving site is usually as much the victim as the user. I'm not sure if that makes any sense... :-) It does =)

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Octavian Rasnita
16, 2004 9:52 PM Subject: RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1? --- [EMAIL PROTECTED] wrote: And I m sure all PHP developers check their applications for CSRF vulnerability, in various browsers (including I.E. ). I speak about CSRF in many of the talks I give, and I think

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Saqib . N . Ali
PROTECTED], [EMAIL PROTECTED] Subject Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1? Why is so important if Internet Explorer allows URLS of images where the file name is only .jpg, .png, or .gif? A url can be something like: http://www.site.com/script.php/image.jpg?logout=true Internet

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Saqib . N . Ali
] To [EMAIL PROTECTED], [EMAIL PROTECTED] cc [EMAIL PROTECTED], [EMAIL PROTECTED] Subject Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1? --- [EMAIL PROTECTED] wrote: I can't share the exact code ;) , but here is something very similar: img src=http://slashdot.org/my/logout; height=1

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- Octavian Rasnita [EMAIL PROTECTED] wrote: Why is so important if Internet Explorer allows URLS of images where the file name is only .jpg, .png, or .gif? A url can be something like: http://www.site.com/script.php/image.jpg?logout=true This is definitely true, but as I mentionde in a

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: Upon your suggestion, I used a sniffer to sniff traffic for the web app that I am working on. To my surprise, the data captured during the sniff for both browsers was exactly the same. Can you elaborate or post the exact requests sent from each browser? I'm

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Saqib . N . Ali
: [PHP] CSRF attack not possible in I.E. 6.01 SP1? * Thus wrote [EMAIL PROTECTED]: Hello Chris, I can't share the exact code ;) , but here is something very similar: img src=http://slashdot.org/my/logout; height=1 width=1 If I load a web page with the above code, it should log me out

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Curt Zirzow
* Thus wrote [EMAIL PROTECTED]: Hello Chris, I can't share the exact code ;) , but here is something very similar: img src=http://slashdot.org/my/logout; height=1 width=1 If I load a web page with the above code, it should log me out of slashdot. It works in Mozilla (and netscape), but

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Ed Lazor
-Original Message- So now I am completely clueless as to why this particular attacks works in Mozilla but not in IE. Could you describe the problem again and give full detail? I think we need to better model the problem in order to present a more effective solution. The link below

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Saqib . N . Ali
[EMAIL PROTECTED] No Phone Info Available 08/16/2004 02:26 PM To [EMAIL PROTECTED] cc Subject RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1? -Original Message- So now I am completely clueless as to why this particular attacks works in Mozilla but not in IE. Could you describe

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: Hello Curt, Yes, the /. system depends on cookies to keep the user logged in. However a CSRF attack is NOT trying to access a third party cookie. The web browser make the same GET request whether it is using img/ TAG or the user clicking on a link. So in

Re: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- Curt Zirzow [EMAIL PROTECTED] wrote: I'm not sure how the /. logout system works, but my guess is that they rely on cookies to do this. Since that is a different site than from the originating file, those cookies would be considered third party. I know in IE you can disable third party

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- Ed Lazor [EMAIL PROTECTED] wrote: The link below goes to a page I found that describes CSRF a little differently than what Chris was presenting - to give a different perspective on things. http://www.squarefree.com/securitytips/web-developers.html It doesn't seem to be different,

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Chris Shiflett
--- [EMAIL PROTECTED] wrote: To give some details: I am unable to re-produce a CSRF attack when the victim is using a I.E. 6.01 SP1 (all patches applied). However the attack works in Mozilla and other older browsers. I can't give you the exact code for attack (for security reasons), but

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Ed Lazor
I was able to confirm / reproduce what you're experiencing. I was also able to confirm that toggling IE 6's acceptance of 3rd party cookies changes the behavior. Create an HTML on your local machine with the following line: img src=http://www.atfantasy.com/test/image_status.php; It'll load an

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Ed Lazor
-Original Message- However a CSRF attack is NOT trying to access a third party cookie. The web browser make the same GET request whether it is using img/ TAG or the user clicking on a link. So in either case the cookies are in the context of the website to which the cookies belong.

RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

2004-08-16 Thread Saqib . N . Ali
/2004 04:57 PM To [EMAIL PROTECTED], [EMAIL PROTECTED] cc [EMAIL PROTECTED] Subject RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1? -Original Message- However a CSRF attack is NOT trying to access a third party cookie. The web browser make the same GET request whether

Re: [PHP] page design and possible conflict??

2004-04-08 Thread Andy B
dont know what his deal is but ok will close this idea now i guess.. - Original Message - From: Miles Thompson [EMAIL PROTECTED] To: Andy B [EMAIL PROTECTED] Sent: Thursday, April 08, 2004 7:41 AM Subject: Re: [PHP] page design and possible conflict?? You're right, ot out of range

Re: [PHP] page design and possible conflict??

2004-04-08 Thread Red Wingate
ok Am Donnerstag, 8. April 2004 14:45 schrieb Andy B: dont know what his deal is but ok will close this idea now i guess.. - Original Message - From: Miles Thompson [EMAIL PROTECTED] To: Andy B [EMAIL PROTECTED] Sent: Thursday, April 08, 2004 7:41 AM Subject: Re: [PHP] page design

RE: [PHP] page design and possible conflict??

2004-04-08 Thread Jason Sheets
Rather than doing something soley to comply with a standard you must sell your client on the idea or not do it, they are the ones that ultimately must live with the decision and be happy with it. As a programmer it is your job to make sure they have all the information and the pro's and cons of

Re: [PHP] mkdir and rmdir possible but not readdir and opendir???

2004-02-29 Thread raisinlove
The work-around is to create the directory outside of your web application from your regular account. Or if you are allowed to run cgi scripts and these are set up via cgiwrapper or suExec to run as your own user id, use this to create the directory. Once created with the right owner, you can

Re: [PHP] mkdir and rmdir possible but not readdir and opendir???

2004-02-28 Thread Jason Wong
On Saturday 28 February 2004 22:47, raisinlove wrote: Hi, I'm having trouble understanding why I can create and delete directories with my script via mkdir and rmdir, but not simply being able to read them with opendir or readdir? Are you saying that you can create a directory using mkdir()

Re: [PHP] mkdir and rmdir possible but not readdir and opendir???

2004-02-28 Thread Rasmus Lerdorf
This is normal. You are allowed to create the directory because the directory you are creating it in is owned by the same user id that owns the script calling mkdir(). However, since your web server runs as some other user the owner of the newly created dir will be that user and not your own so

Re: [PHP] mkdir and rmdir possible but not readdir and opendir???

2004-02-28 Thread raisinlove
Rasmus Lerdorf wrote: This is normal. You are allowed to create the directory because the directory you are creating it in is owned by the same user id that owns the script calling mkdir(). However, since your web server runs as some other user the owner of the newly created dir will be that

Re: [PHP] mkdir and rmdir possible but not readdir and opendir???

2004-02-28 Thread raisinlove
Surely if there is a work-around then safe mode would not be doing its job properly? Well this was part of the purpose of my post, before Rasmus explained it, I didn't understand why I couldnt access a directory I had created. I was hoping for a function which would achieve the same purpose but

Re: [PHP] mkdir and rmdir possible but not readdir and opendir???

2004-02-28 Thread Rasmus Lerdorf
On Sat, 28 Feb 2004, raisinlove wrote: Surely if there is a work-around then safe mode would not be doing its job properly? Well this was part of the purpose of my post, before Rasmus explained it, I didn't understand why I couldnt access a directory I had created. I was hoping for a

Re: [PHP] Re: php5 and possible oop features/questions

2003-10-06 Thread Eugene Lee
On Mon, Oct 06, 2003 at 12:36:49PM +0200, Tit Black Petric wrote: : : Not really what i was getting at dude, i dont see how defining a class : variable will let me define a method outside of a given class, or to : dynamically extend/implement other classes inside a general one? Why the desire to

RE: [PHP] PHP 5 Usage: Possible Bug?

2003-07-31 Thread Ford, Mike [LSS]
-Original Message- From: [-^-!-%- [mailto:[EMAIL PROTECTED] Sent: 31 July 2003 05:46 I came across the following inconsistency between PHP 4 and PHP 5 Build 2195(Jul 24 2003 20:10:21). The error makes sense. I am just curious about the version inconsistency. Is this due to a

Re: [PHP] How is this possible?

2003-07-27 Thread Robert Cummings
ASP merely outputs HTML. His table is basic HTML dynamically rendered perhaps by an ASP component. This is also trivial to do in PHP. Cheers, Rob. On Sun, 2003-07-27 at 18:38, Ryan A wrote: Hi, I am trying to get my data into a very similar layout as this:

Re: [PHP] How is this possible?

2003-07-27 Thread Curt Zirzow
* Thus wrote Ryan A ([EMAIL PROTECTED]): Hi, I am trying to get my data into a very similar layout as this: http://hostfilter.com/ComparePlan.asp?IntVal1=389IntVal2=546IntVal3=605 see the table with the plans...how is he getting that in one table? what kind of logic is that? the best I can do

Re: [PHP] How is this possible?

2003-07-27 Thread Ryan A
Hi, Thanks for replying. You say: Nothing special html wise. then can you tell me how its done? The content is dynamic being pulled from the database..how do i get it in one table in that layout? There are different ways you can do this it could help to know what kind of data structure you

Re: [PHP] How is this possible?

2003-07-27 Thread Curt Zirzow
* Thus wrote Ryan A ([EMAIL PROTECTED]): Hi, Thanks for replying. You say: Nothing special html wise. then can you tell me how its done? The content is dynamic being pulled from the database..how do i get it in one table in that layout? There are different ways you can do this it

Re: [PHP] How is this possible?

2003-07-27 Thread skate
You say: Nothing special html wise. then can you tell me how its done? there's some nice simple CSS behind it to give the nice border and colour changes, but yes, nothing special HTML wise. it's a simple table The content is dynamic being pulled from the database..how do i get it in one

Re: [PHP] How is this possible?

2003-07-27 Thread skate
Hi, Thanks for replying. no probs... I have not worked with arrays much other than simple arrays like the $_get or $_post and the database ones...can you give me a another emample on how to do this please? like how to put my db into an array and then call each part sorry, i'm

Re: [PHP] How is this possible?

2003-07-27 Thread Ryan A
Hey, Thanks again. It should take me around an hour or two just to figure out what you wrote...:-D I guess i have to hit the manual quite a bit. Thanks, -Ryan Hi, Thanks for replying. no probs... I have not worked with arrays much other than simple arrays like the $_get or $_post

Re: [PHP] How is this possible?

2003-07-27 Thread Curt Zirzow
* Thus wrote Ryan A ([EMAIL PROTECTED]): Hi, Thanks for replying. You say: Nothing special html wise. then can you tell me how its done? The basic logic is like this: table foreach option_of_hosting_service tr tdname_of_service/td foreach hosting_company_service

Re: [PHP] generate all permutations possible? (twist)

2003-04-04 Thread Barry Gould
OK. I would probably still go with a counting approach. abc can be represented as 012, so, for all 4-character permutations of abc, you could count in base 3 from 0 to (base 3), and then do zero padding and string substitutions to output as - The only problems I can think of:

Re: [PHP] generate all permutations possible? (twist)

2003-04-03 Thread Barry Gould
just count from 0 to FF in HEX or count from 0 to 16777216 and print each output in HEX I'm sure there's a function for outputting a number in hex. of course, displaying 16million numbers to the browser will be time consuming, to say the least. :P Barry At 03:59 PM 4/3/2003, you wrote: Hi

RE: [PHP] generate all permutations possible? (twist)

2003-04-03 Thread John Coggeshall
I'm sure there's a function for outputting a number in hex. $number = 1234; Printf(Hexadecimal number: 0x%X, $number); Output: Hexadecimal number: 0x4D2 John -~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~- John Coggeshall john at coggeshall dot org

Re: [PHP] generate all permutations possible? (twist)

2003-04-03 Thread michael geary
Hi guys, I appreciate your taking interest, but as I wrote, I am looking for a permutation algorithm, not specifically for all the hex colors. That was simply an example of a usage. Put another way, I want a function that I can do: echo generatePerms(abc,4); and it will return aaab

Re: [PHP] generate all permutations possible? (twist)

2003-04-03 Thread Leif K-Brooks
Try this (minimal testing, un-optimized): function permutations($letters,$num){ $last = str_repeat($letters{0},$num); $result = array(); while($last != str_repeat(lastchar($letters),$num)){ $result[] = $last; $last = char_add($letters,$last,$num-1); } $result[] =

Re: [PHP] generate all permutations possible? (solved!)

2003-04-03 Thread michael geary
beautiful! This seems to do the trick. Thanks very much! -michael On Thursday, April 3, 2003, at 07:45 PM, Leif K-Brooks wrote: Try this (minimal testing, un-optimized): function permutations($letters,$num){ $last = str_repeat($letters{0},$num); $result = array(); while($last !=

Re: [PHP] is this not possible?

2002-11-19 Thread Mark
completely (which means you don't have to worry about people disabling javascript). -Mark - Original message - From: Jeff Bluemel [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Mon, 18 Nov 2002 17:24:52 -0700 Subject: Re: [PHP] is this not possible? here's the URL if case somebody decides

Re: [PHP] is this not possible?

2002-11-18 Thread Leif K-Brooks
That, or an iframe. You can't pass variables on the same request, though. Jeff Bluemel wrote: I'm been ignored on this question for 4-5 days now. even if it is not possible could somebody please verify this? is it possible to pass a variable from javascript directly to php WITHOUT using

Re: [PHP] is this not possible?

2002-11-18 Thread BigDog
No... Javascript need to send that data back to the server and how are you going to do that? You will have to use a form or a link or some method to send it to the server. Now you can use php to write your javascript code that can be used to link to a php file that can be run on the client side

Re: [PHP] is this not possible?

2002-11-18 Thread rija
- Original Message - From: Jeff Bluemel [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, November 19, 2002 8:39 AM Subject: [PHP] is this not possible? I'm been ignored on this question for 4-5 days now. even if it is not possible could somebody please verify this? is it

Re: [PHP] is this not possible?

2002-11-18 Thread Ernest E Vogelsinger
At 22:39 18.11.2002, Jeff Bluemel spoke out and said: [snip] I'm been ignored on this question for 4-5 days now. even if it is not possible could somebody please verify this? is it possible to pass a variable from javascript directly to php WITHOUT using

  1   2   >