Re: [PHP] Re: sql injection protection

2012-01-17 Thread Haluk Karamete
Thanks Alex. I re-read Ross's reply but I don't think you and him ( and even me ) is saying something different. It's all about validating the input. In my dictionary of programming vocabulary, validation is not just validating user input but also sanitizing it. You summed it up nicely by saying p

[PHP] Bug 51860

2012-01-17 Thread Christian Grobmeier
Hello folks, any chance this one is ever fixed? https://bugs.php.net/bug.php?id=51860 I am a customer of 1&1. They told me they will not upgrade until this one is fixed. Imagine that there are thousands of customers running php 5.2.17 just because of this issue. Unfortunately I am not able to fix

Re: [PHP] sessions and expirations and isolations

2012-01-17 Thread Haluk Karamete
Back to this session expiration... that old quote said... The default behaviour for sessions is to keep a session open indefinitely and only to expire a session when the browser is closed. This behaviour can be changed in the php.ini file by altering the line: session.cookie_lifetime = 0 If you

Re: [PHP] Re: sql injection protection

2012-01-17 Thread Alex Nikitin
Haluk, don't listen to Ross, escaping fails, it was and is a bad solution to an old and still largely unresolved problem. The problem is and has been that of language interoperability, and we have been and continue failing at making a good way for languages to talk to each other, but because this i

Re: [PHP] sql injection protection

2012-01-17 Thread Haluk Karamete
>> This is an interesting conversation, so I'm glad it got brought up,but I >> find myself curious: Are you actually trying to avoid PDO, or just trying >> to learn how the security actually works? Well, It's a learning process. my point is this... If I can make it safe and sound without the PD

Re: [PHP] When will the ereg extension be removed from PHP?

2012-01-17 Thread Kirk . Johnson
kirk.john...@zootweb.com wrote on 01/17/2012 09:59:43 AM: > The ereg extension was deprecated as of version 5.3.0. Does anyone know > what the schedule is for removing it completely? Answering my own question, it looks like not before 6.0: http://marc.info/?l=php-internals&m=132618195307998&w=2

[PHP] When will the ereg extension be removed from PHP?

2012-01-17 Thread Kirk . Johnson
All, The ereg extension was deprecated as of version 5.3.0. Does anyone know what the schedule is for removing it completely? Thanks. Kirk

Re: [PHP] SOAP

2012-01-17 Thread lars
Hey there, If you are running php5 then ot is relativly easy to use the SoapClient object. It also supports ssl. Look it up in the phpmanual. Regards Lars Nielsen > Hello! > > > > I am looking for some help on Web Services (SOAP) client. > > > > Is there anyone here who has already worked with su

[PHP] SOAP

2012-01-17 Thread OK Cosméticos
Hello! I am looking for some help on Web Services (SOAP) client. Is there anyone here who has already worked with such client? Thank you Deleo

[PHP] Re: sql injection protection

2012-01-17 Thread Ross McKay
On Mon, 16 Jan 2012 19:34:09 -0800, Haluk Karamete wrote: >I understand some ways are better than others in this one, and it >looks like the PDO based implementations shine the most as far as SQL >Injection. PDO is one way (and happens to be the one I prefer), but there are others. Essentially, y

Re: [PHP] if http_referer is not reliable then how do we ...

2012-01-17 Thread ma...@behnke.biz
Haluk Karamete hat am 17. Januar 2012 um 04:51 geschrieben: > Let' say we have a form mailer script, which takes any form ( whose > action is directed to it ) and goes thru the submitting form's fields > list ( programmatically) , to build a nice email on the fly and email > the build up string