[PHP] Re: Guru's advice needed ........[Security: SQL injection]

2004-03-19 Thread Andre Cerqueira
you need to ask yourself how the environment that you are using will interpret things if you are sending this query: "SELECT ... FROM ... WHERE field1='". $_POST['field1'] ."'" and $_POST['field1'] is: 0' OR field2=0 AND ''=' the resulting string would be: SELECT ... FROM ... WHERE field1='0' OR

[PHP] Re: date()

2004-03-19 Thread Andre Cerqueira
is that all? Khalid Judeh wrote: hello all, i am new to php, i am trying to call the date function this way: and the result i get is: object18/03/04 any help would be appreciated Khaled Jouda cell. phone: 0163-2382758 fax: 1(801)439-125

[PHP] Re: Thank you, Microsoft! Now I need an alternate login method

2004-03-18 Thread Andre Cerqueira
try absolute urls on 'Location' headers if thats the problem, ie is not exactly broken, just making some (questionable) standards mandatory Chris De Vidal wrote: Microsoft broke IE 6.0 SP1 on XP in January, requiring this patch to be able to log into our MySQL-authenticated website: http://www.mi

[PHP] Re: XSS Vulnerabilities and strip_tags

2004-03-12 Thread Andre Cerqueira
i didnt know what XSS was, just read it on webopedia.com now, maybe i got the wrong idea... strip_tags should prevent a kind of explotation, but maybe its behavior is not exactly what you want... see also htmlentities (http://www.php.net/htmlentities) you need to ask yourself how the environmen

[PHP] Re: FIle Upload problems

2004-03-05 Thread Andre Cerqueira
try echo'ing $_FILES['image_upload']['tmp_name'], and check if the path exists maybe some wrong configuration on php.ini upload_tmp_dir ? it is usually a good idea trying to isolate the smallest piece of code that gives the unwanted result makes it easier for other ppl to help, and sometimes you

[PHP] Re: scope problem

2004-03-05 Thread Andre Cerqueira
can you post something that would run on php? Larry Brown wrote: Apparently I'm having some kind of meltdown here. Can anyone explain the logic behind why the following variable has the original value and how I can pull/push the value to access it at the end? while loop { $variable = 1

[PHP] Re: ASCII

2004-03-05 Thread Andre Cerqueira
char->decimal = ord('a') http://www.php.net/manual/en/function.ord.php Csko wrote: Hi! Is there a function to convert a ASCII char to decimal or binary? Or a program? csko -- André Cerqueira signature.asc Description: OpenPGP digital signature

[PHP] Re: Necesito una función

2004-03-05 Thread Andre Cerqueira
spanish newsgroup: http://news.php.net/group.php?group=php.general.es php.general.es just complementing Alex Hogan words: http://www.php.net/manual/en/function.getenv.php (read the comments, they have the code you want) :: N A S S A T :: Depto Tecnico wrote: En una news de www.php.net informan d

[PHP] Re: Forms, or multiple headers?

2004-03-05 Thread Andre Cerqueira
i think you have to give each checkbox a different name try: del0, del1, del2,... and each one with the id of the thing you are displaying than you do something like this: for ($i=0; isset($_POST['del'.$i]); $i++) { if (!empty($_POST['del'.$i])) $res = mysql_query("DELETE FROM $table_name

[PHP] Re: Parse error, unexpected T_STRING!!

2004-03-04 Thread Andre Cerqueira
Enrique Martinez wrote: Hello, I'm getting an error that says: Parse error, unexpected T_STRING on line 73 line 73 is: this is what I have below line 73: http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> http://www.w3.org/1999/xhtml";> I have PHP-4.2.2, Apache 2.0 on RedHat Linux 9.

[PHP] Re: Loop Oops....

2004-03-03 Thread Andre Cerqueira
probably, some of those $_SESSION['question#'] are unset, or arent arrays.. try: foreach ($answers as $questions) { $question .= "__"; if (!is_array($questions)) continue; foreach ($questions as $subquestion) $question .= $subquestion."--"; } } >$insert_query = "INSERT INTO Survey

[PHP] Re: Session performance

2004-03-02 Thread Andre Cerqueira
i got that doubt too than i checked the manual: http://www.php.net/session seems like it can cache, but the default is no cache using http://br.php.net/manual/en/function.session-cache-limiter.php , you can tune it (dont know how good it would do it) anyway... i use mysql heap table (it stays on

[PHP] Re: PHP Sessions

2004-02-29 Thread Andre Cerqueira
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 if you try, i think you will see that you can Paul Higgins wrote: Hello everyone, I'm beginning to experiment with PHP sessions. I was wondering if it is possible to place objects into the session? Thanks, Paul _

[PHP] Re: PHPdoc web interface

2004-02-29 Thread Andre Cerqueira
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 i think you are talking about this: http://www.phpdoc.de/ while this newsgroups is about this: http://www.php.net/ you may find what you want to now here, but maybe you would have more luck here: http://www.phpdoc.de/doc/ or here: http://www.phpdoc.de/

[PHP] Re: 2 questions - PHP site Automatic search and slow display

2004-02-28 Thread Andre Cerqueira
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 (1) dont know if u understood, but have you tryed flush()? (http://www.php.net/flush) (2) i think you could make a script for 404 error, and that script could take that path in the url and use it for searching... Ryan A wrote: Hi, I have to question

[PHP] Re: PHP5 simpleXML bug or am i just being silly :)

2004-02-26 Thread Andre Cerqueira
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 or this: print('$this->user->site[0]::'); print_r($this->user->site[0]); wait... thats what he done hehe nvm? what is your php5 build? have you tried the examples? (http://www.php.net/manual/en/ref.simplexml.php) did they work? anyway, it looks prett

[PHP] Re: Uploading a file to server behind a firewall

2004-02-26 Thread Andre Cerqueira
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 i dont know if that can be fixed using php, it looks like a firewall setup problem? which port is apache running? i got confused with your ponctuation and explanations, maybe some rephrasing and more details, like error message, could help Rick La