Re: [nyphp-talk] shell_exec security pitfalls?

2007-07-18 Thread Rolan Yang
Dell Sala wrote: Rolan Yang wrote: Whenever I need to store credit card data, I encrypt it with GPG before storing it in the database. The private key file is not to be stored on the same machine and should definitely not be accessible by the web server! That's always been my understanding.

Re: [nyphp-talk] shell_exec security pitfalls?

2007-07-18 Thread Dell Sala
Rolan Yang wrote: Whenever I need to store credit card data, I encrypt it with GPG before storing it in the database. The private key file is not to be stored on the same machine and should definitely not be accessible by the web server! That's always been my understanding. But it occurre

Re: [nyphp-talk] Stripping formatting from a word document

2007-07-18 Thread Greg Rundlett
Since OpenOffice has very good capabilities to read all Microsoft Office file formats, you can script OpenOffice to be your 'library/utility', and in the end save to HTML, ODF, XML or whatever you need. There are many projects and examples that you will find for scripting OpenOffice, and even php

Re: [nyphp-talk] shell_exec security pitfalls?

2007-07-18 Thread Rolan Yang
Dell Sala wrote: Hi all, I'm doing some research on using GPG from PHP to encrypt sensitive data that will be stored server-side. I came across an old but good article: ... Quoted from the article: A second pitfall is in the use of PHP's shell_exec() statement. Since you are executing a she

Re: [nyphp-talk] shell_exec security pitfalls?

2007-07-18 Thread Dan Cech
Dell Sala wrote: > I'm doing some research on using GPG from PHP to encrypt sensitive data > that will be stored server-side. I came across an old but good article: > > http://devzone.zend.com/article/1265-Encryption-and-Decryption-using-PHP-and-GnuPG > > Decryption example from article: >> $gpg

Re: [nyphp-talk] shell_exec security pitfalls?

2007-07-18 Thread CED
What is meant is that a shell/terminal session pops up to run the command, and a person on the terminal could see it running. -Ed - Original Message - From: "Dell Sala" <[EMAIL PROTECTED]> To: "NYPHP Talk" Sent: Wednesday, July 18, 2007 9:20 PM Subject: [nyphp-talk] shell_exec security

[nyphp-talk] shell_exec security pitfalls?

2007-07-18 Thread Dell Sala
Hi all, I'm doing some research on using GPG from PHP to encrypt sensitive data that will be stored server-side. I came across an old but good article: http://devzone.zend.com/article/1265-Encryption-and-Decryption-using- PHP-and-GnuPG Decryption example from article: $gpg = '/usr/bin/g

Re: [nyphp-talk] ADOdb status

2007-07-18 Thread Cliff Hirsch
On 7/18/07 3:36 PM, "Rob Marscher" <[EMAIL PROTECTED]> wrote: > On Jul 12, 2007, at 9:54 PM, Cliff Hirsch wrote: >> I just stumbled across ADOdb. Is this database abstraction library still >> active? Have things like PDO or PEAR DB made it obsolete? > > As others have stated, it's current... and

Re: [nyphp-talk] ADOdb status

2007-07-18 Thread Rob Marscher
On Jul 12, 2007, at 9:54 PM, Cliff Hirsch wrote: I just stumbled across ADOdb. Is this database abstraction library still active? Have things like PDO or PEAR DB made it obsolete? As others have stated, it's current... and it's awesome! I'm pretty sure it's faster than PDO for mysql. I rec

Re: [nyphp-talk] advice on scaling up

2007-07-18 Thread Rob Marscher
Hi Marc, Pretty much all of my work is with social networking type sites... so I can chime in a little bit. First off, in my experience the number of requests per second that can be handled by these apps is usually much less than your typical web app. With it running on one server witho