[PHP] SESSION

2005-07-09 Thread Thomas Bonham
Hello All, If someone can send me a example of a login sesson. Thomas -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] quickForm

2005-07-09 Thread Will
Hi, can someone say where I might post this. Hi, I am using a quickform form and it works well except when I use it by using an include in another file. In that case when the file is called in (by way of the include statement in the parent file) it seems that the quickform gets processed as tho

Re: [PHP] security question...??

2005-07-09 Thread Chris Shiflett
how many of you actually attempt to verify that the browser being used by the client is indeed a legitimate (non-hacked) browser? I think you need to clearly define what a legitimate browser is. In my opinion, the ambiguity in your question is the root cause of the disorganization in this part

RE: [PHP] iCalendar creation not working with Outlook [SOLVED]

2005-07-09 Thread Daevid Vincent
Okay, after much trial and error, I figured out the extremely annoying issues... Here is a code fragment that should be very useful for anyone else trying to make an iCalendar that works with Outlook... I'm sure there's a better way to get the GMT time, as my way is a total hack. I'm in PST btw, 7

Re: [PHP] Re: security question...??

2005-07-09 Thread Chris Shiflett
Matthew Weier O'Phinney wrote: The reason I ask is that (1) it shouldn't matter HOW the HTTP request is initiated. What *should* matter is that the page handles the request gracefully and returns something (HTTP headers only, or headers + page) as a result. That's an interesting way of explaini

Re: [PHP] PHP vs. ColdFusion

2005-07-09 Thread Chris Shiflett
Matthew Weier O'Phinney wrote: You've insinuated several times that PHP is not 'scalable to an enterprise level'. Could you perhaps explain what you mean by this? Anyone who is trying to argue that ColdFusion is easier to scale than PHP (both can be made to) hasn't had to handle significant tr

Re: [PHP] Re: Security, Late Nights and Overall Paranoia

2005-07-09 Thread Chris Shiflett
Ezra Nugroho wrote: Here is one security measure that you HAVE to do if you allow people to submit contents to your site. 1. track client's IP. 2. Associate sensitive cookies with the IP, if they don't match, ignore it or invalidate the cookie. If by "HAVE to" you mean "MUST NEVER," then I agr

Re: [PHP] Re: Security, Late Nights and Overall Paranoia

2005-07-09 Thread Chris Shiflett
Greg Donald wrote: > [i]This text will be in italics.[/i] > [b]This text will be in bold.[/b] > [url=http://php.net]This will be a URL that points to php.net.[/url] While I do not disagree with the information content of your post, I do think this sort of thing is pretty silly. If you're gonna

RE: [PHP] if(true && false) //??

2005-07-09 Thread Daevid Vincent
I don't think so. The "&& false" guarantees the code in the 'if' portion will never execute. It's effectively commenting it out. I agree it was probably left over 'debug' code. The "if( !isset( $_SESSION['PrevUrl'] ) )" has a very good chance of being true. ANDing with boolean false NEVER has a c

Re[5]: [PHP] Re: Security, Late Nights and Overall Paranoia

2005-07-09 Thread Richard Davey
To follow-up my own post... which is sad I know, but hey... Saturday, July 9, 2005, 7:08:37 PM, I wrote: RD> The difference is the extra hoops your reg exps will have to jump RD> through, and have to jump through perfectly. You will have to disallow RD> all <'s and >'s, but do allow them for , ,

Re[4]: [PHP] Re: Security, Late Nights and Overall Paranoia

2005-07-09 Thread Richard Davey
Hello Greg, Saturday, July 9, 2005, 6:40:06 PM, you wrote: GD> The same regular expression magic that keeps you from forgetting your GD> [/i] can just as easily keep you from forgetting your . The difference is the extra hoops your reg exps will have to jump through, and have to jump through per

Re: Re[2]: [PHP] Re: Security, Late Nights and Overall Paranoia

2005-07-09 Thread Greg Donald
On 7/9/05, Richard Davey <[EMAIL PROTECTED]> wrote: > I have to say I disagree, because with all modern BBcode parsers it > would never get to that stage. The same regular expression magic that keeps you from forgetting your [/i] can just as easily keep you from forgetting your . -- Greg Donald

Re[2]: [PHP] Re: Security, Late Nights and Overall Paranoia

2005-07-09 Thread Richard Davey
Hello Greg, Friday, July 8, 2005, 5:00:23 PM, you wrote: GD> On 7/8/05, Ryan A <[EMAIL PROTECTED]> wrote: >> Yep, but this has no way of breaking my html GD> If [/i] is missing, it'd be the same as being missing. I have to say I disagree, because with all modern BBcode parsers it would nev

Re: [PHP] if(true && false) //??

2005-07-09 Thread André Medeiros
Oops my bad... misread it :( On 7/9/05, André Medeiros <[EMAIL PROTECTED]> wrote: > That's the same as having > > if( !isset( $_SESSION['PrevUrl'] ) ) { > //do something here > } > > On 7/9/05, Marco Tabini <[EMAIL PROTECTED]> wrote: > > It can't -- that looks like some leftover debugging co

Re: [PHP] if(true && false) //??

2005-07-09 Thread André Medeiros
That's the same as having if( !isset( $_SESSION['PrevUrl'] ) ) { //do something here } On 7/9/05, Marco Tabini <[EMAIL PROTECTED]> wrote: > It can't -- that looks like some leftover debugging code to me. > > > Marco > > > On 7/9/05 10:50 AM, "Sam Smith" <[EMAIL PROTECTED]> wrote: > > > > > I

Re: [PHP] if(true && false) //??

2005-07-09 Thread Marco Tabini
It can't -- that looks like some leftover debugging code to me. Marco On 7/9/05 10:50 AM, "Sam Smith" <[EMAIL PROTECTED]> wrote: > > I have some code that I barrowed that works but I don't get how it could > possible work, obviously I don't understand how "false" works: > > How can this ever

[PHP] if(true && false) //??

2005-07-09 Thread Sam Smith
I have some code that I barrowed that works but I don't get how it could possible work, obviously I don't understand how "false" works: How can this ever pass?: if (isset($_SESSION['PrevUrl']) && false) { Thanks -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: htt

[PHP] Template Engine with Event Handlers

2005-07-09 Thread Rory Browne
Hi Anyone know if any of the current PHP templating solutions implement event handling? I mean something similar to ASP.NET's onClick events, etc. I was thinking maybe a js-triggered ajax system, which allowed php to access some of the JS Objects? I was thinking about doing something like this, a

Re: [PHP] file function

2005-07-09 Thread Rory Browne
On 7/9/05, Joseph Lee <[EMAIL PROTECTED]> wrote: > Hi, > > I tried file() in the following lines: > >$authFile = file("/tmp/authenticate.txt"); > print "authFile = $authFile"; > ?> > > However, it only gave me > authFile = Array > > What's wrong with this file function? I tried single > q

Re: [PHP] GD library

2005-07-09 Thread Rasmus Lerdorf
Mike Bellerby wrote: > Where is the best place to get php_gd2.dll It's in the ext/ directory of the Win32 zip file you downloaded. Or if you didn't, go grab it from http://uk.php.net/get/php-5.0.4-Win32.zip/from/this/mirror -Rasmus -- PHP General Mailing List (http://www.php.net/) To unsubscri

Re: [PHP] Apache 1.3x/PHP 5.0.3 404 error handler & posted data...

2005-07-09 Thread Rasmus Lerdorf
Raymond C. Rodgers wrote: > I'm trying to write an error handler in PHP to try to avoid sending the > browser a 404 error message. Basically, if someone > requests /whatever.html on the server and it doesn't exist, my 404 error > handler checks to see if /whatever.php exists, if so, it then include

[PHP] upload file problem

2005-07-09 Thread Ahmed Abdel-Aliem
Hi i have a problem with a code to upload files on server here is the code $f =& $HTTP_POST_FILES['News_Pic']; $dst_file_name = generateUniqueId(); $arr = split("\.",$f['name']); $f['name'] = $dst_file_name; $f['name'] .= ".".$arr[count($arr)-1]; $dest_dir = 'main/pictures'; $dest = $dest_d

[PHP] GD library

2005-07-09 Thread Mike Bellerby
Where is the best place to get php_gd2.dll Thanks Mike -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] GD library

2005-07-09 Thread Mike Bellerby
Where is the best place to get php_gd2.php Thanks Mike -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Apache 1.3x/PHP 5.0.3 404 error handler & posted data...

2005-07-09 Thread Raymond C. Rodgers
I'm trying to write an error handler in PHP to try to avoid sending the browser a 404 error message. Basically, if someone requests /whatever.html on the server and it doesn't exist, my 404 error handler checks to see if /whatever.php exists, if so, it then includes that file. That part works fine