[suspicious - maybe spam] [PHP] [suspicious - maybe spam] Need advice or code

2005-08-26 Thread Death Gauge
I've made a site with 5 sites in it and has about 6 MySQL/PHP News databases. A while back I tried to use drop-down combo boxes to make a single page that linked all 6 news scripts so I could pick one from the drop-down enter the news and hit submit to add it to the site. The down side is that

Re: [PHP] PHP CMS

2005-08-26 Thread Jasper Bryant-Greene
Joshua D. Drake wrote: Joseph Oaks wrote: Guys I'm doing some research trying to find a good PHP based CMS. As there a quite a few, I would really like to get your opinions so I can narrow the search down. If you don't mind non-opensource but php based you could take a look at: http://www.

Re: [PHP] PHP CMS

2005-08-26 Thread Joshua D. Drake
Joseph Oaks wrote: Guys I'm doing some research trying to find a good PHP based CMS. As there a quite a few, I would really like to get your opinions so I can narrow the search down. If you don't mind non-opensource but php based you could take a look at: http://www.commandprompt.com/produc

Re: [PHP] Computer name?

2005-08-26 Thread Richard Lynch
On Fri, August 26, 2005 2:53 am, Jasper Bryant-Greene wrote: > Adrian Cid Almaguer wrote: >> You can find the IP and find with it the name. > > Certainly, you can. But do you realise what sort of slowdown doing a > DNS > lookup for (I am assuming here) every request would cause? Better to > store t

Re: [PHP] Newbie: Safe function call to a .inc file outside the web folder

2005-08-26 Thread Edward Vermillion
Richard Lynch wrote: Disclaimer: I really have no idea how it could harm you, but if Chris Shifflett warns against it, don't do it. :-) That was the assumption I was running under, which is why I was very curious about it. ;) Thanks for the explanation. I'm still not 100% on how a request

Re: [PHP] creating of html-archive

2005-08-26 Thread Richard Lynch
On Thu, August 25, 2005 1:05 pm, Rory Browne wrote: > At the risk of making a complete and utter ass of myself, I'm going to > disagree with Richard. > > I'm going to justify this, by the fact that file_get_content function > is written in C, and performs function required, that is currently > perf

Re: [PHP] invert

2005-08-26 Thread Richard Lynch
On Thu, August 25, 2005 2:38 pm, George B wrote: >> mysql_query('SELECT * FROM table ORDER BY increment_field DESC'); Remember when I told you that you should consistently use: mysql_query(...) or die(mysql_error()); so that MySQL would TELL you what the error was? I meant it when I said that.

Re: [PHP] Easier way to clean GET Variables ?

2005-08-26 Thread Richard Lynch
On Thu, August 25, 2005 9:54 pm, Chris Shiflett wrote: > Proper filtering is necessarily tedious. There is no way to filter a > last name, a server name, a file name, an IP address, a ZIP code, and > a > comment with the same function. Those who try wind up creating a > "lowest > common denominator

Re: [PHP] PHP Security

2005-08-26 Thread Richard Lynch
On Fri, August 26, 2005 12:32 am, Chris Shiflett wrote: > Of course, if you ever see a news story that describes PHP as a web > service protocol, you probably want to stop reading immediately. :-) The actual text is: "...in a Web service protocol FOR PHP" ^^^ [emphasis

Re: [PHP] Newbie: Safe function call to a .inc file outside the web folder

2005-08-26 Thread Richard Lynch
On Fri, August 26, 2005 5:55 am, Edward Vermillion wrote: > Chris Shiflett wrote: > >> Because $_SERVER['SERVER_NAME'] can be manipulated by the user in >> some >> cases, you must consider $temp tainted at this point. >> > > I was under the the impression that the non-'HTTP_*' keys in the > $_SERVE

[PHP] Re: Sort table by column and pagination

2005-08-26 Thread Aaron Greenspan
Daevid, Lampshade, an API we've put together (as a commercially-backed alternative to PEAR) does table pagination and column sorting for you. It's free for non-commercial use, there's a lot of documentation, and I'm always around to answer questions: http://www.thinkcomputer.com/software/lam

[PHP] [off T] c++ mailing list

2005-08-26 Thread pedro mpa
Hello Sorry for this OT post but is there a c++ mailing list like this one? ~Pedro. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: PHP Move Uploaded File

2005-08-26 Thread Richard Lynch
On Thu, August 25, 2005 10:24 pm, germ wrote: I'm cc-ing php-general since this belongs there, not in direct email. > Hi. I read your comment on php.net about handilng file uploads. You > seem to be one of the few to recognize the security issues regarding > uploaded files. Actually, I'm one o

Re: [PHP] Sort table by column and pagination

2005-08-26 Thread Philip Hallstrom
We have quite a complex product all written in PHP and our own mySQL wrapper. We initially wanted to use smarty, but due to time constraints, we couldn't re-write everything, so it never got implemented. Two feature requests we get a lot are the ability to sort the tabular data by column heading

[PHP] Sort table by column and pagination

2005-08-26 Thread Daevid Vincent
We have quite a complex product all written in PHP and our own mySQL wrapper. We initially wanted to use smarty, but due to time constraints, we couldn't re-write everything, so it never got implemented. Two feature requests we get a lot are the ability to sort the tabular data by column heading (

[PHP] PHP MySql Extension No Loading

2005-08-26 Thread Glen Zimmerman
I am setting up Apache 2.0.54 with PHP 5.0.4 on a Windows 2000 work station running MySQL 4.1.12a-nt.  When I start Apache, I receive the error message, "PHP Startup:  Unable to load dynamic library 'C:\PHP\ext\php_mysql.dll'.   I have C:\PHP set in the environment variable path.   In the p

Re: [PHP] read directory and paginate

2005-08-26 Thread Ryan A
Thanks mate, will check them out Cheers, Ryan On 8/26/2005 6:45:34 PM, Philip Hallstrom ([EMAIL PROTECTED]) wrote: > > A little while back there was a post where someone needed to read all > files > > (images/thumbs) from a gallery > > and paginate them automatically, I cannot find the thread i

Re: [PHP] read directory and paginate

2005-08-26 Thread Philip Hallstrom
A little while back there was a post where someone needed to read all files (images/thumbs) from a gallery and paginate them automatically, I cannot find the thread in the archive but if anybody can point me to the thread or knows how the poster solved his problemplease reply as i need someth

[PHP] read directory and paginate

2005-08-26 Thread Ryan A
Hi! A little while back there was a post where someone needed to read all files (images/thumbs) from a gallery and paginate them automatically, I cannot find the thread in the archive but if anybody can point me to the thread or knows how the poster solved his problemplease reply as i need so

[PHP] Re: Form Processor?

2005-08-26 Thread Mike Walsh
<[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Hey all, > > Does anyone have any recomendations for a GOOD PHP Form Processor software? > > Kind of in a bind and don't want to reinvent the wheel if I don't have to. > > Sorry for thr O/T. > > TIA! > > A I like phpHtmlLib's form proc

[PHP] What's wrong with this picture? (branding function makes solid bl ack image)

2005-08-26 Thread Jim Moseby
What's wrong with this picture? Well, nothing. That is, until you run the following code on it. Then it becomes a solid black box with the intended white brand at the bottom left. :-/ What it is supposed to do is place a 4 pixel wide black border around the image, then brand an image with a co

RE: [PHP] QUERY TOKENIZER WAS Re: [new version] Re: [a proactive....

2005-08-26 Thread Jay Blanchard
[snip] This is another rather hackish attempt at using the tokeniser. Which isn't perfect by a long shot, but I'm away home now so it'll have to do. I'd be interested to know what it makes of your queries. [/snip] This little slice of code is really well done, and I think that when it is combine

Re: [PHP] possible to get a function from another domain

2005-08-26 Thread Rory Browne
Ummm, what exactly is your solution? What did you go with, or what are you going with? On 8/24/05, Gustav Wiberg <[EMAIL PROTECTED]> wrote: > Hi there! > > Thanx for the help! > > And everybody else that helped me with the solution of course! :-) > > /G > @varupiraten.se > > - Original Mes

[PHP] Re: PHP CMS

2005-08-26 Thread David Robley
Joseph Oaks wrote: > Guys I'm doing some research trying to find a good PHP based CMS. As > there a quite a few, I would really like to get your opinions so I can > narrow the search down. > > We were using Webedit Pro, but have found it a pain not to be able to > use Firefox with it. > > Thanks

[PHP] Re: PHP Polling script?

2005-08-26 Thread David Robley
Jay Paulson wrote: > Does anyone know of a good polling script that is, obviously, written > in PHP? > > Thanks! Does http://www.google.com.au/search?q=php+polling+script help? I haven't used any so I can't comment on 'good' Cheers -- David Robley Radioactive halibut will make fission chips.

[PHP] Re: Help Needed

2005-08-26 Thread Mark Rees
http://uk2.php.net/manual/en/function.mssql-query.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] PHP Security

2005-08-26 Thread Miles Thompson
Of course, if you ever see a news story that describes PHP as a web service protocol, you probably want to stop reading immediately. :-) Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/ Actually, I wanted to read more, just to find out how badly things were

Re: [PHP] PHP Security

2005-08-26 Thread Miles Thompson
At 02:37 AM 8/26/2005, Santosh Jambhlikar wrote: As this is the php mailing list it is obvious that i should not write against php. but people should know the truth. And it's a news (not by me) that's why i wanted to send link to u peoples. I am sorry if i did something wrong, i am new user in

Re: [PHP] PHP Security

2005-08-26 Thread Rory Browne
Santosh: Personally what I think you did wrong, was to simply paste the header of that news article into your email. You simply said that PHP was hit by another security hole, that allowed crackers(sometimes incorrectly refered to as hackers), to gain access to any php service. I don't think you wo

Re: [PHP] Help Needed

2005-08-26 Thread Raz
David, > If I change the code to ($nrows = 1) then it displays 'Data found', > however if I have a REC_VALUE = 'does not exist' it still displays 'Data > found' > That would suggest that something is being returned - do you have command line access or some other way to look at what is being r

RE: [PHP] Help Needed

2005-08-26 Thread David Skyers
The following statement brings back nothing select UPI, ORG from REDEP.UPI_WEB_DS where REC_VALUE = 'test' The following statement brings back one row select UPI, ORG from REDEP.UPI_WEB_DS where REC_VALUE = 'uczmdsk1' -Original Message- From: Angelo Zanetti [mailto:[EMAIL PROTECTED] S

RE: [PHP] Re: [new version] Re: [a proactive example of learning by hacking] Re: [PHP] Getting queries from files FYI

2005-08-26 Thread Jay Blanchard
[top-snip] nice! I'll give it a look this morning [/snip] This is another rather hackish attempt at using the tokeniser. It turns this: into this: SELECT * FROM my_table WHERE (up = 'down') ORDER BY my_column $banana ASC strtoupper( group by something) Which isn't perfect by a long shot, bu

Re: [PHP] Help Needed

2005-08-26 Thread Angelo Zanetti
does the actual SQL statement bring back any info if you do it through the oracle interface, perhaps the problem isnt php but the SQL statement. HTH Angelo Raz wrote: >Leading back in the code, that would suggest that $nrows is not >greater than zero - could be a problem with $nrows then, and a

Re: [PHP] Re: [new version] Re: [a proactive example of learning by hacking] Re: [PHP] Getting queries from files FYI

2005-08-26 Thread Jochem Maas
Robin Vickery wrote: This is another rather hackish attempt at using the tokeniser. you beast ;-) apart from the fact that I don't use mysql this is really cool. I have no time to play right now (gotta catcha plana) but I have it on my to do list of things I need to take apart and understand p

[PHP] Re: creating of html-archive

2005-08-26 Thread Michelle Konzack
The Function in Netscape DDE was: WWW_ParseAnchor(qcsAbsoluteURL, qcsRelativeURL) Documentation: WWW_ParseAnchor * Netscape is: Server. * Transaction Type: XTYP_REQUEST. * Item (Arguments): qcsAbsoluteURL,qcsRelativeURL o qcsAbsoluteURL is the absolute (fully quali

[PHP] Re: creating of html-archive

2005-08-26 Thread Michelle Konzack
Hello all, It seems there are many usefull functions in PHP missing. I think, I will take the Spyglass Netscape DDE Documentation and will implement the functions my own. realpath() is not an option, because it returns the pysicaly path. What I need is: real_url($BASE_URL, $RELATIV_URL) th

Re: [PHP] Help Needed

2005-08-26 Thread Raz
Leading back in the code, that would suggest that $nrows is not greater than zero - could be a problem with $nrows then, and anything associated with that, i.e. $stmt, whether there is content in the db where REC_VALUE = 'uczmdsk1' etc. etc. Work back down the chain and see if you can find anomali

RE: [PHP] Help Needed

2005-08-26 Thread David Skyers
Hi Raz Good Point. It displays 'No data found' when it should display 'Data found' Thanks David -Original Message- From: Raz [mailto:[EMAIL PROTECTED] Sent: 26 August 2005 12:06 To: David Skyers Cc: php-general@lists.php.net Subject: Re: [PHP] Help Needed David >but it does not seem

Re: [PHP] Help Needed

2005-08-26 Thread Raz
David >but it does not seem to be working. Might be helpful for folks if you describe the nature of the fault i.e. what you get back when you run this - at this stage there are a multitude of possibilities... raz -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://ww

Re: [PHP] Re: php ldap

2005-08-26 Thread Santosh Jambhlikar
thanks bartels, ldap_bind is working find i just used uid instead of cn. :) Björn Bartels wrote: that looks good, i think you should better use "uid" instead of "cn"... btw, i mentioned some authentication-problem earlier in this list. take a look at the php-manual @ ldap_bind() for a worka

Re: [PHP] Re: php ldap

2005-08-26 Thread Björn Bartels
that looks good, i think you should better use "uid" instead of "cn"... btw, i mentioned some authentication-problem earlier in this list. take a look at the php-manual  @  ldap_bind()  for a workaround if the same thing is happening to you (testscript works fine, loginscript does not !?!)... You'l

[PHP] Help Needed

2005-08-26 Thread David Skyers
I have an annoying problem, I'm trying to write a simple PHP page that says if a record is found in an Oracle database display 'Data Found' else display 'No Data Found' but it does not seem to be working. 0) { echo "Data found"; } else { echo "No data found"; } ?> David

Re: [PHP] Newbie: Safe function call to a .inc file outside the web folder

2005-08-26 Thread Edward Vermillion
Chris Shiflett wrote: Because $_SERVER['SERVER_NAME'] can be manipulated by the user in some cases, you must consider $temp tainted at this point. I was under the the impression that the non-'HTTP_*' keys in the $_SERVER array came from the server itself. Obvoiusly I'm wrong, but I'm curoi

[PHP] Re: PHP Security

2005-08-26 Thread mikespook
http://phpsec.org/ PHP Security Consortium this is what you want.hehe~it`s helpful "Ian C . McGarvey" <[EMAIL PROTECTED]> ??:[EMAIL PROTECTED] >I have been studying PHP all summer because I wanted to put some PHP code >on my schools web site. I got to school and went to the web design teach

[Fwd: Re: [PHP] Re: php ldap] soory...

2005-08-26 Thread Björn Bartels
>this program is giving me "*Invalid DN syntax* " error. what's wrong? >cn >for the the user is "user" the DN should look like this uid={username},..., dc={yourdomain}, dc={TLD} ask your admin for further options... cheers Björn Bartels -Development/IT-Services- --

[Fwd: Re: [PHP] Re: php ldap]

2005-08-26 Thread Björn Bartels
>this program is giving me "*Invalid DN syntax* " error. what's wrong? >cn >for the the user is "user" the DN should look like this cn={username},..., dc={yourdomain}, dc={TLD} ask your admin for further options... cheers Björn Bartels -Development/IT-Services- --

Re: [PHP] Re: php ldap

2005-08-26 Thread Santosh Jambhlikar
$ldaprdn = 'user'; $ldappass = 'userpass'; $ldapconn = ldap_connect("ldap.mydomain.com") or die("Could not connect to LDAP server."); if ($ldapconn) { $ldapbind = ldap_bind($ldapconn,$ldaprdn, $ldappass); if ($ldapbind) { echo "LDAP bind successful..."; } else { echo "LDAP

Re: [PHP] Re: php ldap

2005-08-26 Thread Mark Rees
"Santosh Jambhlikar" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > then can i output the SMD5 of my password in php. > > > Jeff Loiselle wrote: > > > Santosh Jambhlikar wrote: > > > >> Hi , > >> > >> I have a ldap server the user password are stored in that. my php > >> ldasearch r

Re: [PHP] changes in php.ini

2005-08-26 Thread Raz
Have you tested to make sure that php is actually working yet? Raz -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] changes in php.ini

2005-08-26 Thread hope
ya php is working fine Raz wrote: Have you tested to make sure that php is actually working yet? Raz -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP] changes in php.ini

2005-08-26 Thread George Pitcher
For IIS, where you have defined your index.html as a default page, you laso need to define index.php as well. To to this, open the 'Properties' for your website in the IIS Admin tool, click on the 'Documents' tab and its straightforward from there. You need to do this for each site. George >

Re: [PHP] changes in php.ini

2005-08-26 Thread hope
Nops I m using IIS Hope Jasper Bryant-Greene wrote: hope wrote: Hi all Whenever I create a site and create a index.php file as my home page. Whenever i run it a http://localhost/myproject/ it says Page cannot be found However if I have index.html file it displays. SOmebody told me t

Re: [PHP] changes in php.ini

2005-08-26 Thread Jasper Bryant-Greene
hope wrote: Hi all Whenever I create a site and create a index.php file as my home page. Whenever i run it a http://localhost/myproject/ it says Page cannot be found However if I have index.html file it displays. SOmebody told me that i need to make changes to php.ini bt where and what to

Re: [PHP] Computer name?

2005-08-26 Thread Jasper Bryant-Greene
Adrian Cid Almaguer wrote: You can find the IP and find with it the name. Certainly, you can. But do you realise what sort of slowdown doing a DNS lookup for (I am assuming here) every request would cause? Better to store the IPs and run some sort of tool on the logs later to get the names,

[PHP] changes in php.ini

2005-08-26 Thread hope
Hi all Whenever I create a site and create a index.php file as my home page. Whenever i run it a http://localhost/myproject/ it says Page cannot be found However if I have index.html file it displays. SOmebody told me that i need to make changes to php.ini bt where and what to change ther

Re: [PHP] Computer name?

2005-08-26 Thread Adrian Cid Almaguer
You can find the IP and find with it the name. On 25/08/05, Chris Shiflett <[EMAIL PROTECTED]> wrote: > Gustav Wiberg wrote: > > Is it possible to retrieve (view) the computers name from the client in > > PHP? > > If you mean the client, then no - this is not a standard part of an HTTP > request.