Re: [PHP] image location hiding techniques

2006-02-07 Thread Travis Doherty
hbeaumont hbeaumont wrote: >Hi, > >I have a site with images that I want people to download but not have >the direct path to. ie. I do not want them to be able to just view the >source, find the dir and then download everything or direct link to >them. > >However I can see no way to do this other

Re: [PHP] str_replace ? \r

2006-02-07 Thread Curt Zirzow
On Tue, Feb 07, 2006 at 03:43:38PM -0800, Curt Zirzow wrote: > On Tue, Feb 07, 2006 at 10:38:37AM -0800, Sam Smith wrote: > > // output to html, removing xxs ablity and add html br's I mean XSS (Cross Site Scripting) Curt. -- cat .signature: No such file or directory -- PHP General Mailing Li

[PHP] Suggested product for ticket support and project management

2006-02-07 Thread Dan Rossi
Hi there, please dont bite, but we are looking for an open source or commercial php product for ticket support and another for project managent. I have already googled a bit and what ive seen isnt so good. For our ticketing we mostly require a hosting style ticket system for server support and

[PHP] which version fixes bug 29922

2006-02-07 Thread Daniel Bondurant
I am trying to track down which version of php4 has the fix for bug 29922. I am running 4.3.11 which came out after the bug was fixed in CVS, but I seem to be having the problem listed in the bug. For various reason, I can't upgrade to a later version very easily. thanks - daniel -- PHP Gen

Re: [PHP] str_replace ? \r

2006-02-07 Thread Matty Sarro
Agreed - try to think of it as a filter and less of something that needs to be computed both ways... much easier in the long run, and more efficient :) On 2/7/06, Curt Zirzow <[EMAIL PROTECTED]> wrote: > > On Tue, Feb 07, 2006 at 10:38:37AM -0800, Sam Smith wrote: > > > > From a on a web form I'm

[PHP] Re: How to user curl_setopt?

2006-02-07 Thread Hybau Leu
Thanks for your input. However, I still can't get it work. Do you have success examples? I really don't know how to set the curl options. I am confusing to the options of CURLOPT_CAINFO, CURLOPT_SSLCERT, CURLOPT_SSLKEY, etc. lhb "James Benson" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PR

[PHP] image location hiding techniques

2006-02-07 Thread hbeaumont hbeaumont
Hi, I have a site with images that I want people to download but not have the direct path to. ie. I do not want them to be able to just view the source, find the dir and then download everything or direct link to them. However I can see no way to do this other than keeping the images on disk, hav

Re: [PHP] PHP Application Vuln. Testing

2006-02-07 Thread Ligaya Turmelle
Have you looked over phpsec.org site? read over the security guide, and the various articles? Jason Gerfen wrote: Richard Davey wrote: On 7 Feb 2006, at 16:54, Jason Gerfen wrote: Is there any product available, commercial or free which performs source code auditing which *specificly sear

Re: [PHP] str_replace ? \r

2006-02-07 Thread Curt Zirzow
On Tue, Feb 07, 2006 at 10:38:37AM -0800, Sam Smith wrote: > > From a on a web form I'm attempting to convert all returns(\r), > from the users input, to "", for db INSERT, and then back again for > display in the . (They remain as s for normal HTML web page > display.) You really shouldnt conve

Re: [PHP] PHP Application Vuln. Testing

2006-02-07 Thread Matt Stone
- Original Message - From: "Jason Gerfen" <[EMAIL PROTECTED]> To: "PHP General (E-mail)" Sent: Tuesday, February 07, 2006 4:54 PM Subject: [PHP] PHP Application Vuln. Testing > > Is there any product available, commercial or free which performs source > code auditing which *specificly

Re: [PHP] echo date("l");

2006-02-07 Thread Stut
John Nichel wrote: Khristian Hamilton-Bailey wrote: Hi, I currently use the date function as follows: so I can then use this to call records from a database where todays day matches that of a record, however I would also like to call records for tomorrow, is there a way in which I could u

Re: [PHP] echo date("l");

2006-02-07 Thread John Nichel
Khristian Hamilton-Bailey wrote: Hi, I currently use the date function as follows: so I can then use this to call records from a database where todays day matches that of a record, however I would also like to call records for tomorrow, is there a way in which I could use the date function

[PHP] echo date("l");

2006-02-07 Thread Khristian Hamilton-Bailey
Hi, I currently use the date function as follows: so I can then use this to call records from a database where todays day matches that of a record, however I would also like to call records for tomorrow, is there a way in which I could use the date function to add one day so that as well as th

Re: [PHP] str_replace ? \r

2006-02-07 Thread Jay Paulson
http://us3.php.net/manual/en/function.nl2br.php Instead of using I would use tags. That's just me though. :) On 2/7/06 12:38 PM, "Sam Smith" <[EMAIL PROTECTED]> wrote: > > From a on a web form I'm attempting to convert all returns(\r), > from the users input, to "", for db INSERT, and then

[PHP] str_replace ? \r

2006-02-07 Thread Sam Smith
>From a on a web form I'm attempting to convert all returns(\r), from the users input, to "", for db INSERT, and then back again for display in the . (They remain as s for normal HTML web page display.) code: // From textarea to db UPDATE function addBR($tv) { $tv = addslashes($tv); $tv

Re: [PHP] PHP Application Vuln. Testing

2006-02-07 Thread John Nichel
Jason Gerfen wrote: I have a question which as of yet I am unable to find any information about from googling. Lets say you have just written a fairly robust PHP/MySQL application and would like to put it on your production server. For reasons of clarification lets say this application handle

Re: [PHP] Window close.

2006-02-07 Thread Jason Petersen
On 2/7/06, Miles Thompson <[EMAIL PROTECTED]> wrote: > > > Actually, expand it a little bit, and you avoid the JS Alert. > > function close_opener(){ > parentwin = window.self; // Make handle for current > window named "parentwin" > parentwin.opener = window.self;//

Re: [PHP] PHP Application Vuln. Testing

2006-02-07 Thread Jason Gerfen
Richard Davey wrote: On 7 Feb 2006, at 16:54, Jason Gerfen wrote: Is there any product available, commercial or free which performs source code auditing which *specificly searches PHP code for SQL, XSS type of attacks or vulnerabilities? TIA. No. But there are people who can perform the

Re: [PHP] PHP Application Vuln. Testing

2006-02-07 Thread Richard Davey
On 7 Feb 2006, at 16:54, Jason Gerfen wrote: Is there any product available, commercial or free which performs source code auditing which *specificly searches PHP code for SQL, XSS type of attacks or vulnerabilities? TIA. No. But there are people who can perform the service for you (Brai

[PHP] PHP Application Vuln. Testing

2006-02-07 Thread Jason Gerfen
I have a question which as of yet I am unable to find any information about from googling. Lets say you have just written a fairly robust PHP/MySQL application and would like to put it on your production server. For reasons of clarification lets say this application handles sensitive customer

[PHP] Re: The Big Date and Time Debacle

2006-02-07 Thread Dan Baker
"Stephen Martindale" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] >I am having great difficulty understanding dates and times with PHP and >MySql. > > As far as I understand them, the PHP date and time construct is timezone > and DST aware, but MySql's DATETIME and TIMESTAMP field

Re: [PHP] Recompile PHP on pre-installed system

2006-02-07 Thread Marcus Bointon
On 7 Feb 2006, at 11:13, Jochem Maas wrote: in theory your done, in practice something might bite you in the ass ... oh and then there is the issue of making sure that the redhat package manager really won't overwrite your handbuilt php install (cannot for the life of me remember what you h

Re: [PHP] The Big Date and Time Debacle

2006-02-07 Thread Christopher Taylor
Stephen Martindale wrote: I am having great difficulty understanding dates and times with PHP and MySql. As far as I understand them, the PHP date and time construct is timezone and DST aware, but MySql's DATETIME and TIMESTAMP fields are not. I believe that this is where my confusion origina

[PHP] The Big Date and Time Debacle

2006-02-07 Thread Stephen Martindale
I am having great difficulty understanding dates and times with PHP and MySql. As far as I understand them, the PHP date and time construct is timezone and DST aware, but MySql's DATETIME and TIMESTAMP fields are not. I believe that this is where my confusion originates from. After searching

Re: [PHP] setting Headers using htmlMimeMail class?

2006-02-07 Thread Angelo Zanetti
Richard Heyes wrote: Angelo Zanetti wrote: Ok I take it, it will be something like this: $mail = new htmlMimeMail(); $mail->setHeader("Return-Path", $proxy_from); $mail->setHeader("Reply-To", $proxy_from); ?? Correct. yip it worked thanks!! -- PHP General Mailing List (http://www.php.

Re: [PHP] setting Headers using htmlMimeMail class?

2006-02-07 Thread Richard Heyes
Angelo Zanetti wrote: Ok I take it, it will be something like this: $mail = new htmlMimeMail(); $mail->setHeader("Return-Path", $proxy_from); $mail->setHeader("Reply-To", $proxy_from); ?? Correct. -- Richard Heyes -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: htt

Re: [PHP] APD generates no output

2006-02-07 Thread Gustavo Narea
Hello, Jochem. Thanks for your response. I just filled a bug report because I realized there are many bugs like the one I have, specially with PHP v5.0.3. Cheers! Jochem Maas wrote: Gustavo Narea wrote: Hello everybody. I'm trying to use the Advanced PHP Debugger (APD), but it generates n

Re: [PHP] Window close.

2006-02-07 Thread Miles Thompson
At 03:42 AM 2/7/2006, Labunski wrote: It can'tbe done with PHP, cause it must be client side script, aka Javascript: "javascript: window.close();" -- Actually, expand it a little bit, and you avoid the JS Alert. function close_opener(){ parentwin = window.self; // Make han

Re: [PHP] Recompile PHP on pre-installed system

2006-02-07 Thread Jochem Maas
Justin Cook wrote: Before I came to my company, they created a Redhat server for our web server. Of course they let the redhat installer install PHP. It all works great but now I need to compile a module into php. Is this possible to do without causing havok? Bascially we really can't have more do

Re: [PHP] Re: Get recursive array

2006-02-07 Thread Jochem Maas
Bruno B B Magalhães wrote: Hi Jochem, well, thanks for the code... it's working perfect, but it seams a little bit slow as it's using while... doesn't? slow as compared to what? - its a very basic loop. maybe a foreach loop would run quicker but unless you we're calling this method 10,000s o

[PHP] Re: How to user curl_setopt?

2006-02-07 Thread James Benson
should it not be:- G:\\test\ssl\mes1.cer' notice how I changed the path to reflect a proper windows drive path! James lhb wrote: Hello, Now I need to use curl to connect to a secure website, I have three certificates files, two .cer files and one .pfx file. After I import the certificat

Re: [PHP] mail problem

2006-02-07 Thread Angelo Zanetti
Chris wrote: check your SMTP settings in the PHP.ini file. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] How to user curl_setopt?

2006-02-07 Thread lhb
Hello, Now I need to use curl to connect to a secure website, I have three certificates files, two .cer files and one .pfx file. After I import the certificates into IE browser, the visit is OK. However, when I use curl_setopt to configure the certificates, it failed. Can anybody help me? Thanks.

[PHP] Re: Window close.

2006-02-07 Thread Barry
Oliver Grätz wrote: Just for the laugh: You could send a redirection to a page that causes the browser to crash ;-) No client side scripting involved *g*. OLLi Or fill up the buffer till browser crashes ^_^ -- Smileys rule (cX.x)C --o(^_^o) Dance for me! ^(^_^)o (o^_^)o o(^_^)^ o(^_^o) -- PHP

Re: [PHP] APD generates no output

2006-02-07 Thread Jochem Maas
Gustavo Narea wrote: Hello everybody. I'm trying to use the Advanced PHP Debugger (APD), but it generates no output. Actually, It does generate a file, but with no content. What's going on? 1.- I installed the APD by running `pear install APD` with no problem. 2.- Setup my php.ini file the s