[PHP] LDAP & Active Directory Authentication

2006-12-04 Thread [EMAIL PROTECTED]
Hello list, I am going to need to build LDAP and AD modules for a project that I'm working on. Could any of you who have delt with PHP/LDAP/AD point me in the direction of some decent resources/papers/books? Thanks.

Re: [PHP] Distinguishing between a mouse click and a refresh?

2006-12-04 Thread Casey Chu
Oooh... now that I think about it, it doesn't work. Sorry =( On 12/4/06, Paul Novitski <[EMAIL PROTECTED]> wrote: Hi Casey, Yes, I can see that your javascript function adds a random number to the href of a clicked link, but how does that help PHP distinguish between a page loaded that way and

[PHP] Pass a relative path [with slashes] into a 'clean' url

2006-12-04 Thread Graham Anderson
What is a good/accepted way to pass a relative or absolute path into a clean url ? I could replace the relative url's slashes with another character, but would love to know a cleaner less confusing way...if it exists example url: http://localhost/testscript/../image.png/jpeg/42/0/ e

[PHP] erratic bounced message notices

2006-12-04 Thread jekillen
The following is a response to a message I sent to the link in a bounced e-mail notice from this list: This is an automated response to your message to "[EMAIL PROTECTED]" If you are trying to post to one of the PHP mailing lists, the correct address looks something like [EMAIL PROTECTED] If

Re: [PHP] problem with register globals on new server

2006-12-04 Thread Chris
Tony Marston wrote: ""Richard Lynch"" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] On Sun, December 3, 2006 5:22 am, Tony Marston wrote: ""Richard Lynch"" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] On Sat, December 2, 2006 5:31 am, Tony Marston wrote: I think it

Re: [PHP] hiding passwd in cmdlines that appear in the process list

2006-12-04 Thread Chris
Jochem Maas wrote: [EMAIL PROTECTED] wrote: You'd assume those ENV variables are secure.. or secure "enough". I know there's no such thing as perfect security, but I still wonder if there's a better way. Although at this point, if there was a way to read other process/subprocess ENV variable

RE: [PHP] Distinguishing between a mouse click and a refresh?

2006-12-04 Thread Paul Novitski
At 12/4/2006 01:08 PM, Jay Blanchard wrote: [snip] Is there any way for PHP to know whether it is being called due to a browser refresh versus a mouse click? I think the answer is no but I just want to be sure. Thanks. [/snip] Not unless you specifically capture and send a JavaScript onClick e

Re: [PHP] Distinguishing between a mouse click and a refresh?

2006-12-04 Thread Russell Jones
Yes, sort of. lets say that your page is 'http://www.php.net' and you want to make sure your visitor got there with a click, and not a refresh... first, get the referer... $_SERVER['HTTP_REFERER']; then do something like this... $refsite = file_get_contents($_SERVER['HTTP_REFERER']); $refsite

Re: [PHP] Distinguishing between a mouse click and a refresh?

2006-12-04 Thread Paweł Stradomski
W liście Mark London z dnia poniedziałek 04 grudnia 2006 22:03: > Is there any way for PHP to know whether it is being called due to a > browser refresh versus a mouse click? I think the answer is no but I > just want to be sure. Thanks. Perhaps looking at REFERER HTTP header could give you some

RE: [PHP] Distinguishing between a mouse click and a refresh?

2006-12-04 Thread Jay Blanchard
[snip] Is there any way for PHP to know whether it is being called due to a browser refresh versus a mouse click? I think the answer is no but I just want to be sure. Thanks. [/snip] Not unless you specifically capture and send a JavaScript onClick event. A mouse click typically takes you some

[PHP] Distinguishing between a mouse click and a refresh?

2006-12-04 Thread Mark London
Is there any way for PHP to know whether it is being called due to a browser refresh versus a mouse click? I think the answer is no but I just want to be sure. Thanks. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Random pictures - not twice

2006-12-04 Thread Gustav Wiberg
- Original Message - From: "tedd" <[EMAIL PROTECTED]> To: "Gustav Wiberg" <[EMAIL PROTECTED]>; "PHP General" Sent: Monday, December 04, 2006 4:15 PM Subject: Re: [PHP] Random pictures - not twice At 11:20 PM +0100 12/3/06, Gustav Wiberg wrote: Hi there! I have created a script th

RE: [PHP] security and .htaccess

2006-12-04 Thread tedd
At 8:46 AM -0700 12/4/06, Frank Reichenbacher, Bio-Concepts, Inc. wrote: > -Original Message- From: tedd [mailto:[EMAIL PROTECTED] Sent: Monday, December 04, 2006 08:29 To: php-general@lists.php.net; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [PHP] security and .htaccess

[PHP] illegal characters

2006-12-04 Thread M.Ozan Hazer
Hi all, I'm getting these errors: [04-Dec-2006 18:21:56] PHP Warning: Unknown: The session id contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,' in Unknown on line 0 [04-Dec-2006 18:21:56] PHP Warning: Unknown: Failed to write session data (files). Please verify that th

Re: [PHP] EZ array problem - What's wrong with my brain?

2006-12-04 Thread Martin Alterisio
2006/11/30, Brian Dunning <[EMAIL PROTECTED]>: var_dump() gives me this: array(1) { ["1.2"]=> array(2) { ["code"]=> array(1) { [0]=> string(3) "111" } ["status"]=> array(1) { [0]=> string(3) "new" } } } I'm trying to set a vari

Re: [PHP] hiding passwd in cmdlines that appear in the process list

2006-12-04 Thread Jochem Maas
[EMAIL PROTECTED] wrote: > You'd assume those ENV variables are secure.. or secure "enough". I know > there's no such thing as perfect security, but I still wonder if there's a > better way. > > Although at this point, if there was a way to read other process/subprocess > ENV variables, it'd m

Re: [PHP] hiding passwd in cmdlines that appear in the process list

2006-12-04 Thread Jochem Maas
T.Lensselink wrote: > Doesn't it show up on the phpinfo(); page under "Environment" when > using the putenv(); call? I'd be surprised - firstly I'm not dealing with 'pages' because the code in question constitutes a cmdline script that only runs with the CLI version of php; secondly the putenv() c

Re: [PHP] Sending E-mail

2006-12-04 Thread Jochem Maas
Janet Smith wrote: > I wasn't really sure where to start looking, but I think I have enough > information that I can go and look at how we have things set up. I will > try to provide more information as I find it. chances are that the following function is being used. http://php.net/mail you sh

Re: [PHP] Sending E-mail

2006-12-04 Thread Janet Smith
I wasn't really sure where to start looking, but I think I have enough information that I can go and look at how we have things set up. I will try to provide more information as I find it. Thanks >>> Jochem Maas <[EMAIL PROTECTED]> 12/4/2006 10:42 AM >>> Janet Smith wrote: > We have an applicati

RE: [PHP] security and .htaccess

2006-12-04 Thread Frank Reichenbacher, Bio-Concepts, Inc.
> -Original Message- > From: tedd [mailto:[EMAIL PROTECTED] > Sent: Monday, December 04, 2006 08:29 > To: php-general@lists.php.net; [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: RE: [PHP] security and .htaccess > > > At 8:57 PM -0700 12/3/06, Frank Reichenbacher wrote: > >That is t

Re: [PHP] EZ array problem - What's wrong with my brain?

2006-12-04 Thread Jochem Maas
Richard Lynch wrote: > On Fri, December 1, 2006 9:28 am, Ray Hauge wrote: >> I forgot to mention that you won't be able to use "0", "1", etc. as >> PHP >> will convert those to integers. If you do use them, then they will >> replace [0] with whatever you put in there, and if you are using the >> r

Re: [PHP] EZ array problem - What's wrong with my brain?

2006-12-04 Thread Jochem Maas
Youri LACAN-BARTLEY wrote: > Hi Jochem, > > I meant "overly-complicated" in this specific context. > If each key of this array is going to contain only one value why not > reduce the array to something like this : > > array(1) { > ["1.2"]=> > array(2) { > ["code"]=> string(3) "111" >

Re: [PHP] Sending E-mail

2006-12-04 Thread Jochem Maas
Janet Smith wrote: > We have an application using PHP. If users have forgotten their > password, they click on the link 'Forgot Password' and enter this e-mail > address. This is suppose to send their new password to the e-mail > address provided. We can not get the e-mail to be sent. I have change

RE: [PHP] security and .htaccess

2006-12-04 Thread tedd
At 5:46 PM -0600 12/3/06, Richard Lynch wrote: On Sun, December 3, 2006 9:57 am, tedd wrote: > But, the "_vit_pvt" folder is not apparent. I can't get to it -- is > this a host file that only they can access, or is there a secret > handshake I need to get to it, or what? That's a bull-crap m

Re: [PHP] Random pictures - not twice

2006-12-04 Thread tedd
At 11:20 PM +0100 12/3/06, Gustav Wiberg wrote: Hi there! I have created a script the generates random pictures... -snip- With this above script the same picture can be shown twice. Is there any smart way of avoiding this without having to rely on cookies/sessionids? Random does mean it c

Re: [PHP] hiding passwd in cmdlines that appear in the process list

2006-12-04 Thread T . Lensselink
Doesn't it show up on the phpinfo(); page under "Environment" when using the putenv(); call? On Mon, 04 Dec 2006 13:55:56 +0100, Jochem Maas <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] wrote: >> If you did use ENV to set the username and password, you could always > unset it using the same meth

Re: [PHP] Sending E-mail

2006-12-04 Thread T . Lensselink
Without any error messages it will be hard to resolve.. Try to provide some more information about the problem. On Mon, 04 Dec 2006 09:11:05 -0500, "Janet Smith" <[EMAIL PROTECTED]> wrote: > We have an application using PHP. If users have forgotten their > password, they click on the link 'Forgot

Re: [PHP] hiding passwd in cmdlines that appear in the process list

2006-12-04 Thread tg-php
You'd assume those ENV variables are secure.. or secure "enough". I know there's no such thing as perfect security, but I still wonder if there's a better way. Although at this point, if there was a way to read other process/subprocess ENV variables, it'd most likely be something an attacker w

[PHP] Sending E-mail

2006-12-04 Thread Janet Smith
We have an application using PHP. If users have forgotten their password, they click on the link 'Forgot Password' and enter this e-mail address. This is suppose to send their new password to the e-mail address provided. We can not get the e-mail to be sent. I have changed the php.ini file to inclu

Re: [PHP] hiding passwd in cmdlines that appear in the process list

2006-12-04 Thread Jochem Maas
[EMAIL PROTECTED] wrote: > If you did use ENV to set the username and password, you could always unset > it using the same method after you ran the mysql command. So it'd only be > exposed for a very brief period of time and slightly less accessible than > just running a process list. > indee

Re: [PHP] Re: on OS X

2006-12-04 Thread Dotan Cohen
On 01/12/06, Michelle Konzack <[EMAIL PROTECTED]> wrote: Am 2006-11-27 03:28:08, schrieb Dotan Cohen: > Actually, it does. He can global replace " Yes, that's what I meant. Dotan Cohen http://what-is-what.com/what_is/bios.html -- PHP General Mailing List (http://www.php.net/) To unsubscribe,

Re: [PHP] problem with register globals on new server

2006-12-04 Thread Tony Marston
""Richard Lynch"" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > On Sun, December 3, 2006 5:22 am, Tony Marston wrote: >> >> ""Richard Lynch"" <[EMAIL PROTECTED]> wrote in message >> news:[EMAIL PROTECTED] >>> On Sat, December 2, 2006 5:31 am, Tony Marston wrote: >>> I think it is