[nyphp-talk] Encoding help?

2007-02-21 Thread Joseph Crawford
Guys i am trying to consume the Google maps API and when i pass it an address in Montreal QC i get the follwoing error *Warning*: SimpleXMLElement::__construct() [ function.SimpleXMLElement---construct]: Entity: line 1: par

RE: [nyphp-talk] Re: Upcoming Month of PHP Bugs (michael)

2007-02-21 Thread Hans Zaunere
csnyder wrote on Wednesday, February 21, 2007 3:15 PM: > On 2/21/07, Nate Abele <[EMAIL PROTECTED]> wrote: > > Despite the claims, I'm not so sure that most of these security > > issues couldn't be mitigated with a proper server configuration and > > a well-designed application. While I'm sure th

Re: [nyphp-talk] Re: Upcoming Month of PHP Bugs (michael)

2007-02-21 Thread CED
I'd have to echo Chris' position. I don't find incredible weight to most of the complaints, and am certain that the first and foremost point of security failure just-so-happens to be typing this e-mail right now. I don't doubt that there is probably some personal offense and/or political motives in

Re: [nyphp-talk] Re: Upcoming Month of PHP Bugs (michael)

2007-02-21 Thread [EMAIL PROTECTED]
Chris Shiflett wrote: I'm not afraid of disclosed vulnerabilities; I'm afraid of the undisclosed ones. Chris Well put. I would add and the badguys who exploit them. regards, mikesz ___ New York PHP Community Talk Mailing List http://lists.nyphp.org

Re: [nyphp-talk] Re: Upcoming Month of PHP Bugs (michael)

2007-02-21 Thread Chris Shiflett
Nate Abele wrote: > I seem to remember Chris Shiflett having some clarifying comments > on Stefan and his Sohusin project I ignore Stefan, so I'm not sure how much clarification I can offer. I don't want to support his dishonest attempts to paint himself as a victim or give him the attention he se

[nyphp-talk] Dual session operation question

2007-02-21 Thread Cliff Hirsch
I think I know the answer to this, unfortunately, but I¹ll throw it out to the group. Is there any way to work with two session IDs and session handlers in one script? My main site uses one session ID and the standard session functions. My commercial shopping cart uses a different session id and

[nyphp-talk] Upcoming Month of PHP Bugs (michael)

2007-02-21 Thread Nate Abele
Date: Wed, 21 Feb 2007 15:15:04 -0500 From: csnyder <[EMAIL PROTECTED]> Subject: Re: [nyphp-talk] Re: Upcoming Month of PHP Bugs (michael) To: "NYPHP Talk" On 2/21/07, Nate Abele <[EMAIL PROTECTED]> wrote: Despite the claims, I'm not so sure that most of these security issues couldn't be mitiga

Re: [nyphp-talk] Upcoming Month of PHP Bugs

2007-02-21 Thread Hans C. Kaspersetz
I read through the interview. It was eye opening. Is there any expectation we are going to get patches for these bugs in a timely fashion? Doesn't seem like it. Kind of frustrating to sit here and just wait. Do the Suhosin PHP patches cover all the bugs that are going to be released? Doesn

Re: [nyphp-talk] Upcoming Month of PHP Bugs

2007-02-21 Thread csnyder
On 2/21/07, Daniel Convissor <[EMAIL PROTECTED]> wrote: > Here's somebody who had been working with the core developers to try > to get these things fixed, I'm not sure if "working with" is the right phrase. He seemingly finds it difficult to work with anyone. --Dan Ahh, now see that's what

Re: [nyphp-talk] speed problems in OO PHP4

2007-02-21 Thread Daniel Convissor
Hi Robyn: On Tue, Feb 20, 2007 at 07:33:01PM -0500, Robyn Overstreet wrote: > > Any ideas or strategies for optimization/debugging? You need to profile your code to find out where the big issues are. Some tools for profiling include Zend's IDE/debugger, xdebug, PHPUnit (or just echoing time s

Re: [nyphp-talk] Upcoming Month of PHP Bugs

2007-02-21 Thread Daniel Convissor
Hey Chris: On Tue, Feb 20, 2007 at 06:59:24PM -0500, csnyder wrote: > > Here's somebody who had been working with the core developers to try > to get these things fixed, I'm not sure if "working with" is the right phrase. He seemingly finds it difficult to work with anyone. --Dan -- T H E

Re: [nyphp-talk] Re: Upcoming Month of PHP Bugs (michael)

2007-02-21 Thread Keith Casey
On 2/21/07, csnyder <[EMAIL PROTECTED]> wrote: These are the kinds of bugs Esser is talking about, not the XSS or SQL injection attacks that are typically the fault of an application developer. Had a similar discussion on the DCPHP list yesterday... Personally, I think the whole thing is going

Re: [nyphp-talk] Re: Upcoming Month of PHP Bugs (michael)

2007-02-21 Thread csnyder
On 2/21/07, Nate Abele <[EMAIL PROTECTED]> wrote: Despite the claims, I'm not so sure that most of these security issues couldn't be mitigated with a proper server configuration and a well-designed application. While I'm sure there are vulnerabilities that exist in a *stock* installation of PHP

Re: [nyphp-talk] speed problems in OO PHP4

2007-02-21 Thread Jon Baer
Ive personally seen the issue a few times w/ the following: * persistent connections (using pconnect() anywhere?) * using any bleeding-edge extensions like ImageMagick? - using anything w/ PECL? * apache/php rebuild configuration (some research pointed to apache sapi problems, so recompiled +

[nyphp-talk] Re: Upcoming Month of PHP Bugs (michael)

2007-02-21 Thread Nate Abele
Despite the claims, I'm not so sure that most of these security issues couldn't be mitigated with a proper server configuration and a well-designed application. While I'm sure there are vulnerabilities that exist in a *stock* installation of PHP (especially in older versions where things l

Re: [nyphp-talk] speed problems in OO PHP4

2007-02-21 Thread Rob Marscher
It's the first thing. The page loads but the browser appears to still be loading -- the progress bar is active -- though it does eventually stop. The only images or media elements on the page are very small icons and background gradients which seem to load fine. Does it happen in all browsers?

Re: [nyphp-talk] speed problems in OO PHP4

2007-02-21 Thread Robyn Overstreet
Thanks for the responses ... On 2/20/07, Mark Armendariz <[EMAIL PROTECTED]> wrote: How is the script continually processing? Do you mean that the page still seems to be loading in a browser or the server processes are still going? It's the first thing. The page loads but the browser appears