[PHP] this newsgroup and OE

2011-06-22 Thread Jim Giner
Perhaps someone can tell me the secret to getting problem-free access to the php newsgroups using OE. I have two other newsgroup servers configured in OE which do not give me any difficulties at all. My setup for news.php.net however gives me nothing but problems. Inability to connect to mess

Re: [PHP] this has got me baffled: imagesx() andimagesy()reporting the wrong size?

2009-11-16 Thread Jason Young
Indeed. Using ImageMagick's 'identify' command, the first layer is 30x24 on a 32x32 canvas. radioactive-bread-eek.gif[0] GIF 30x24 32x32+2+6 8-bit PseudoClass 256c 2.11kb radioactive-bread-eek.gif[1] GIF 32x27 32x32+0+4 8-bit PseudoClass 256c 2.11kb If getimagesize() works on the canvas, the

Re: [PHP] this has got me baffled: imagesx() andimagesy()reporting the wrong size?

2009-11-15 Thread Ben
Ashley Sheridan wrote: On Sun, 2009-11-15 at 16:25 -0500, Ben wrote: Ashley Sheridan wrote: On Sun, 2009-11-15 at 15:07 -0500, Ben wrote: On my site I have a web form for users to upload graphics, however there are constraints on the size allowed. Recently, a user has been having problems,

Re: [PHP] this has got me baffled: imagesx() and imagesy()reporting the wrong size?

2009-11-15 Thread Ashley Sheridan
On Sun, 2009-11-15 at 16:25 -0500, Ben wrote: > Ashley Sheridan wrote: > > On Sun, 2009-11-15 at 15:07 -0500, Ben wrote: > >> On my site I have a web form for users to upload graphics, however there > >> are constraints on the size allowed. Recently, a user has been having > >> problems, becaus

Re: [PHP] this has got me baffled: imagesx() and imagesy()reporting the wrong size?

2009-11-15 Thread Ben
Ashley Sheridan wrote: On Sun, 2009-11-15 at 15:07 -0500, Ben wrote: On my site I have a web form for users to upload graphics, however there are constraints on the size allowed. Recently, a user has been having problems, because the code is reporting the wrong size - a size too small to be a

Re: [PHP] this has got me baffled: imagesx() and imagesy() reporting the wrong size?

2009-11-15 Thread Ashley Sheridan
On Sun, 2009-11-15 at 15:07 -0500, Ben wrote: > On my site I have a web form for users to upload graphics, however there > are constraints on the size allowed. Recently, a user has been having > problems, because the code is reporting the wrong size - a size too > small to be allowed! They sen

[PHP] this has got me baffled: imagesx() and imagesy() reporting the wrong size?

2009-11-15 Thread Ben
On my site I have a web form for users to upload graphics, however there are constraints on the size allowed. Recently, a user has been having problems, because the code is reporting the wrong size - a size too small to be allowed! They sent me a copy of the image so I could confirm the error

Re: [PHP] This isn't infinitely recursive is it?

2009-07-30 Thread Jonathan Tapicer
Hi, Well, you will have an infinite recursion there if the mapping has cycles, something like A->B, B->C, C->A would generate an invite recursion. Checking if the mapping has cycles is pretty simple: you have to create a directed graph and then go through the graph in DFS marking each visited nod

[PHP] This isn't infinitely recursive is it?

2009-07-30 Thread Matt Neimeyer
I'm cleaning up some inherited code in our data import module. For a variety of reasons we have to support old standards of the import format. Since some of those old versions were created we have since renamed some fields in our data structure. So right now I've a hard map for some field names...

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-26 Thread Per Jessen
Robert Cummings wrote: > Don't forget nobody is being paid to handle bug reports, it's all on a > volunteer basis and I'm quite certain they get oodles of real bogus > bugs. Hi Robert it's a two-way thing - nobody is paying me to write any bug reports, I'm also volunteering my time and effort. N

Re: [PHP] This is the kind of [expletives deleted] answer that iscertain to prevent bugs being reported.

2009-07-25 Thread Paul M Foster
On Fri, Jul 24, 2009 at 04:07:54PM -0500, Greg Beaver wrote: > Robert Cummings wrote: > > > I understand where you're coming from, and I've been on the same road > > before with PHP bug reports. And while I remember being really annoyed, > > especially when it turned out to actually be a bug, I h

Re: [PHP] This is the kind of [expletives deleted] answer that iscertain to prevent bugs being reported.

2009-07-24 Thread Greg Beaver
Robert Cummings wrote: > I understand where you're coming from, and I've been on the same road > before with PHP bug reports. And while I remember being really annoyed, > especially when it turned out to actually be a bug, I have to say if you > define your case clearly and state where either the

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Robert Cummings
Per Jessen wrote: Daniel Brown wrote: On Fri, Jul 24, 2009 at 15:25, Per Jessen wrote: Daniel Brown wrote: In reality, those are canned responses. Jani didn't type that up himself, he just selected it from a drop-down that we have. In all honesty, that only makes it worse. To make an effor

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Per Jessen
Daniel Brown wrote: > On Fri, Jul 24, 2009 at 15:25, Per Jessen wrote: >> Daniel Brown wrote: >>> In reality, those are canned responses.  Jani didn't type that up >>> himself, he just selected it from a drop-down that we have. >> >> In all honesty, that only makes it worse.  To make an effort to

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Daniel Brown
On Fri, Jul 24, 2009 at 15:25, Per Jessen wrote: > Daniel Brown wrote: >>     In reality, those are canned responses.  Jani didn't type that up >> himself, he just selected it from a drop-down that we have. > > In all honesty, that only makes it worse.  To make an effort to improve > on things only

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Per Jessen
Daniel Brown wrote: > On Fri, Jul 24, 2009 at 13:18, Per Jessen wrote: >> >> As for being aggressive - well, being fobbed off with an RTFM when >> >> 1) I've spent some time and effort in testing, documenting and >> reporting the bug, and >> 2) the behaviour is at best undocumented, >> >> well, ye

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Per Jessen
Ben Dunlap wrote: > Per Jessen wrote: > >> Which is exactly the bug I reported. An application that >> deliberately ignores the locale setting passed from the environment >> is buggy unless it is clearly documented. Why should a developer be >> forced to be aware of the locale when it has alrea

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Daniel Brown
On Fri, Jul 24, 2009 at 13:18, Per Jessen wrote: > > As for being aggressive - well, being fobbed off with an RTFM when > > 1) I've spent some time and effort in testing, documenting and reporting > the bug, and > 2) the behaviour is at best undocumented, > > well, yes, it p.. me off.  It's jus

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Ben Dunlap
Per Jessen wrote: > Which is exactly the bug I reported. An application that deliberately > ignores the locale setting passed from the environment is buggy unless > it is clearly documented. Why should a developer be forced to be aware > of the locale when it has already been done for him? That

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Per Jessen
Jim Lucas wrote: > From what I can tell, the op is trying to set the locale /AT/ the cli, > not from within the script. Exactly Jim. A typical Linux installation in France/Germany/Greece/ Russia/whereever will have an appropriate environment (e.g. LC_ALL) set such that unix commands such as "dat

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Kyle Smith
Jim Lucas wrote: Kyle Smith wrote: Per Jessen wrote: Kyle Smith wrote: Per Jessen wrote: See http://bugs.php.net/?id=48612 "Thank you for taking the time to write to us, but this is not a bug. And RTFM". (RTFM is my interpretation of the rest). And that only t

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Per Jessen
Kyle Smith wrote: > I don't think your aggressive attitude to the situation is helping > anyone here. The manual *explicitly* states that using > setlocale(LC_xyz,'') will use the environment variable setting for > that LC_xyz option. This *implies* that, by default, those > environment variabl

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Jim Lucas
Kyle Smith wrote: > Per Jessen wrote: >> Kyle Smith wrote: >> >> >>> Per Jessen wrote: >>> See http://bugs.php.net/?id=48612 "Thank you for taking the time to write to us, but this is not a bug. And RTFM". (RTFM is my interpretation of the rest). And that only to

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Kyle Smith
Per Jessen wrote: Kyle Smith wrote: Per Jessen wrote: See http://bugs.php.net/?id=48612 "Thank you for taking the time to write to us, but this is not a bug. And RTFM". (RTFM is my interpretation of the rest). And that only took a little more than a month. Thanks very much. Can anyo

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Per Jessen
Kyle Smith wrote: > Per Jessen wrote: >> See http://bugs.php.net/?id=48612 >> >> "Thank you for taking the time to write to us, but this is not >> a bug. And RTFM". (RTFM is my interpretation of the rest). >> >> And that only took a little more than a month. Thanks very much. >> >> Can anyone here

Re: [PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Kyle Smith
Per Jessen wrote: See http://bugs.php.net/?id=48612 "Thank you for taking the time to write to us, but this is not a bug. And RTFM". (RTFM is my interpretation of the rest). And that only took a little more than a month. Thanks very much. Can anyone here tell me why the CLI behaviour reported

[PHP] This is the kind of [expletives deleted] answer that is certain to prevent bugs being reported.

2009-07-24 Thread Per Jessen
See http://bugs.php.net/?id=48612 "Thank you for taking the time to write to us, but this is not a bug. And RTFM". (RTFM is my interpretation of the rest). And that only took a little more than a month. Thanks very much. Can anyone here tell me why the CLI behaviour reported is not a bug? An ex

Re: [PHP] This Friday's OT Thread

2009-06-26 Thread Paul M Foster
On Fri, Jun 26, 2009 at 09:48:06AM -0400, Daniel Brown wrote: > On Fri, Jun 26, 2009 at 09:43, Tom Worster wrote: > > On 6/26/09 9:20 AM, "Michelle Konzack" > > wrote: > > > >> ...and no one care about the foreign (european) sniper WHO  killed  Neda > >> in Iran. > > > > i don't know why you'd th

RE: [PHP] This Friday's OT Thread

2009-06-26 Thread Arno Kuhl
-Original Message- From: Michelle Konzack [mailto:linux4miche...@tamay-dogan.net] Sent: 26 June 2009 03:20 PM To: php-general@lists.php.net Subject: Re: [PHP] This Friday's OT Thread ...and no one care about the foreign (european) sniper WHO killed Neda in Iran. Note: I ca

Re: [PHP] This Friday's OT Thread

2009-06-26 Thread Daniel Brown
On Fri, Jun 26, 2009 at 09:43, Tom Worster wrote: > On 6/26/09 9:20 AM, "Michelle Konzack" > wrote: > >> ...and no one care about the foreign (european) sniper WHO  killed  Neda >> in Iran. > > i don't know why you'd think that. the story is all over the news. american > pols have been exploiting

Re: [PHP] This Friday's OT Thread

2009-06-26 Thread Tom Worster
On 6/26/09 9:20 AM, "Michelle Konzack" wrote: > ...and no one care about the foreign (european) sniper WHO killed Neda > in Iran. i don't know why you'd think that. the story is all over the news. american pols have been exploiting it. cnn reports cia hay have been behind the shooting. --

Re: [PHP] This Friday's OT Thread

2009-06-26 Thread Michelle Konzack
...and no one care about the foreign (european) sniper WHO killed Neda in Iran. Note: I can not reach my Company Website in Tehran nor can I reach my Office over fixed telephone lines. I can not even contact one of my 57 employees privately. No one has tried to access

Re: [PHP] This Friday's OT Thread

2009-06-26 Thread Bastien Koert
2009/6/26 Robert Cummings : > :( > > > > Tom Worster wrote: >> >> and Kaleem Omar. >> >> and 15 people in Baghdad when motorcycle loaded with nails and >> ball-bearings >> exploded in a crowded bazaar. >> >> >> >> On 6/26/09 4:27 AM, "Robert Cummings" wrote: >> >>> Farah Fawcett has also died. I g

Re: [PHP] This Friday's OT Thread

2009-06-26 Thread Robert Cummings
:( Tom Worster wrote: and Kaleem Omar. and 15 people in Baghdad when motorcycle loaded with nails and ball-bearings exploded in a crowded bazaar. On 6/26/09 4:27 AM, "Robert Cummings" wrote: Farah Fawcett has also died. I guess you gotta go sometime :| Björn Bartels wrote: Hello fello

Re: [PHP] This Friday's OT Thread

2009-06-26 Thread Tom Worster
and Kaleem Omar. and 15 people in Baghdad when motorcycle loaded with nails and ball-bearings exploded in a crowded bazaar. On 6/26/09 4:27 AM, "Robert Cummings" wrote: > Farah Fawcett has also died. I guess you gotta go sometime :| > > Björn Bartels wrote: >> Hello fellow coders... >> >> T

Re: [PHP] This Friday's OT Thread

2009-06-26 Thread Robert Cummings
Farah Fawcett has also died. I guess you gotta go sometime :| Björn Bartels wrote: Hello fellow coders... THE 'KING OF POP' IS DEAD ! Tonight (here in Germany), Mr. Michael Joseph Jackson, also known as 'the king of pop', died on heart failure in the age of 50. I just want to express my

[PHP] This Friday's OT Thread

2009-06-25 Thread Björn Bartels
Hello fellow coders... THE 'KING OF POP' IS DEAD ! Tonight (here in Germany), Mr. Michael Joseph Jackson, also known as 'the king of pop', died on heart failure in the age of 50. I just want to express my condolences to his family and friends and all the people who loved him and his music

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Eddie Drapkin
Wait, that's not how everyone else gets ready for a coding marathon? You guys are doing it wrong! On Fri, Jun 19, 2009 at 7:03 PM, Dotan Cohen wrote: >>> I'm self-employed. I don't plan on ever laying myself off. >> >>    Mind out of the gutter, Rob.  Words like "self," "laying," and >> "off" wil

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Dotan Cohen
>> I'm self-employed. I don't plan on ever laying myself off. > >    Mind out of the gutter, Rob.  Words like "self," "laying," and > "off" will get you flagged. > How naive I was to think that I might be the only one to make the connection! -- Dotan Cohen http://what-is-what.com http://gibber

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Dotan Cohen
> I'm self-employed. I don't plan on ever laying myself off. > Wow, I really replaced "laying" with "getting" in my mental eye and that sentence made too much sense. Please, don't ever do that to me again! -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing Li

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Nitsan Bin-Nun
Collage? you better try highschool ;) Anyway tomorrow my sis has bat-mitzva ;) Good night folks! On Fri, Jun 19, 2009 at 8:42 PM, Daniel Brown wrote: >Hey, folks; > >It's been a while since we've launched a Friday OT thread, so here > ya' go. Feel free to post nonsense, babble, share

RE: [PHP] This Friday's OT Thread

2009-06-19 Thread Jay Blanchard
[snip] ...stuff... [/snip] NRSFW - but it is just words and a chick flipping you off and some other really funny stuff (some of it reminds me of our very own PJ); http://www.27bslash6.com/strata.html -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/un

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Daniel Brown
On Fri, Jun 19, 2009 at 15:22, Jason Pruim wrote: > > I just had my interview with them today. They are starting the background > check right now. Ahh, fantastic! Let me know the area code from which they'll be calling so that, if they do, I'll make it a priority to answer it rather than lett

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Jason Pruim
Jason Pruim On Jun 19, 2009, at 3:14 PM, Daniel Brown wrote: On Fri, Jun 19, 2009 at 15:00, Jason Pruim wrote: Wow dan, must be nice to have the time to read all that :P I could rant about how hard it is to find a job when you don't have much verifiable experience But instead I put

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Daniel Brown
On Fri, Jun 19, 2009 at 15:00, Jason Pruim wrote: > Wow dan, must be nice to have the time to read all that :P > > I could rant about how hard it is to find a job when you don't have much > verifiable experience But instead I put together a website which has > links to everywhere that I'm watch

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Robert Cummings
Daniel Brown wrote: On Fri, Jun 19, 2009 at 15:05, Robert Cummings wrote: I'm self-employed. I don't plan on ever laying myself off. Mind out of the gutter, Rob. Words like "self," "laying," and "off" will get you flagged. Gutter? It's sounds like your alluding to basic personal mainten

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Bastien Koert
On Fri, Jun 19, 2009 at 3:07 PM, Daniel Brown wrote: > On Fri, Jun 19, 2009 at 15:05, Robert Cummings wrote: >> >> I'm self-employed. I don't plan on ever laying myself off. > >    Mind out of the gutter, Rob.  Words like "self," "laying," and > "off" will get you flagged. > > -- > > daniel.br...@

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Daniel Brown
On Fri, Jun 19, 2009 at 15:05, Robert Cummings wrote: > > I'm self-employed. I don't plan on ever laying myself off. Mind out of the gutter, Rob. Words like "self," "laying," and "off" will get you flagged. -- daniel.br...@parasane.net || danbr...@php.net http://www.parasane.net/ || http:/

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Robert Cummings
Jason Pruim wrote: Wow dan, must be nice to have the time to read all that :P I could rant about how hard it is to find a job when you don't have much verifiable experience But instead I put together a website which has links to everywhere that I'm watching. So if anyone is in central

Re: [PHP] This Friday's OT Thread

2009-06-19 Thread Jason Pruim
Wow dan, must be nice to have the time to read all that :P I could rant about how hard it is to find a job when you don't have much verifiable experience But instead I put together a website which has links to everywhere that I'm watching. So if anyone is in central Florida and looking

[PHP] This Friday's OT Thread

2009-06-19 Thread Daniel Brown
Hey, folks; It's been a while since we've launched a Friday OT thread, so here ya' go. Feel free to post nonsense, babble, share links, blow off some steam, bitch and complain about a colleague, whatever. Just remember that you're live to the world and are being archived and preserved fo

Re: [PHP] $this = new Class();

2009-05-07 Thread Richard Quadling
2009/4/30 Olivier Lalonde : > Hi all, > > Since I can't do $this = new Class(); within my class (it gives an > error), I was looking for ways to get the same result by other means. > > I am actually working on an ORM and trying to implement lazy loading. > > $book = $orm->getBook('id'); // returns

Re: [PHP] $this = new Class();

2009-05-07 Thread Richard Quadling
2009/5/7 Richard Quadling : > 2009/4/30 Olivier Lalonde : >> Hi all, >> >> Since I can't do $this = new Class(); within my class (it gives an >> error), I was looking for ways to get the same result by other means. >> >> I am actually working on an ORM and trying to implement lazy loading. >> >> $b

[PHP] $this = new Class();

2009-04-30 Thread Olivier Lalonde
Hi all, Since I can't do $this = new Class(); within my class (it gives an error), I was looking for ways to get the same result by other means. I am actually working on an ORM and trying to implement lazy loading. $book = $orm->getBook('id'); // returns an Orm object $book->load(); // $book sh

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread Stuart
2009/3/11 Jochem Maas > Stuart schreef: > > Escape stuff coming in and escape stuff going out. There are no > exceptions. > > > actually that should be: filter stuff coming in, escape stuff going out. > Good schreef! Erm, I mean, quite right to. Top o' the morning. Etc. -Stuart -- http://stu

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread Jochem Maas
Stuart schreef: > Please include the list when replying unless you're looking to hire me! > > 2009/3/11 filtered > >> On Wed, Mar 11, 2009 at 13:41, Stuart wrote: >>> 2009/3/11 filtered >>> $_GET['cam'] looks fine. $_GET['studio'] is not. >>> I could build a URL that would output a javascript

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread haliphax
On Wed, Mar 11, 2009 at 7:56 AM, Michael A. Peters wrote: > filtered wrote: >> >> On Wed, Mar 11, 2009 at 13:44, Jochem Maas wrote: >>> >>> filtered schreef: Hi, we have script containing   >>> >>> let say I do: >>> >>> example.com/yourscript.php?studio=alert('I >>>

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread Michael A. Peters
filtered wrote: On Wed, Mar 11, 2009 at 13:44, Jochem Maas wrote: filtered schreef: Hi, we have script containing let say I do: example.com/yourscript.php?studio=alert('I am an evil haxor'); excusing the fact that the query is not urlencoded, what happens on your site (replace domain a

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread Virgilio Quilario
> filtered schreef: >> Hi, >> >> we have script containing >> >>   > > let say I do: > > example.com/yourscript.php?studio=alert('I am > an evil haxor'); > > excusing the fact that the query is not urlencoded, what happens on your site > (replace domain and script name to match your site/script) >

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread Stuart
Please include the list when replying unless you're looking to hire me! 2009/3/11 filtered > On Wed, Mar 11, 2009 at 13:41, Stuart wrote: > > 2009/3/11 filtered > > > > > $_GET['cam'] looks fine. $_GET['studio'] is not. > > I could build a URL that would output a javascript tag to do anything

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread Michael A. Peters
filtered wrote: Hi, we have script containing http://www.yourwebsite.org/yourpage.php?studio=alert('xss'); and http://example.com""; />'; } ?> That I don't think is exploitable since you are not doing anything with cam directly but are only acting if it is a string ma

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread filtered
On Wed, Mar 11, 2009 at 13:44, Jochem Maas wrote: > filtered schreef: >> Hi, >> >> we have script containing >> >>   > > let say I do: > > example.com/yourscript.php?studio=alert('I am > an evil haxor'); > > excusing the fact that the query is not urlencoded, what happens on your site > (replace

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread Michael A. Peters
filtered wrote: Hi, we have script containing and http://example.com""; />'; } ?> Is this code prone to XSS attacks or for attacking the local webserver and if so, how? $cam isn't used anywhere else. -a It certainly is XSS vulnerable through a reflective XSS attack. cl

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread Jochem Maas
filtered schreef: > Hi, > > we have script containing > > let say I do: example.com/yourscript.php?studio=alert('I am an evil haxor'); excusing the fact that the query is not urlencoded, what happens on your site (replace domain and script name to match your site/script) > > and > >

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread Stuart
2009/3/11 filtered > Hi, > > we have script containing > > > > and > >$cam = $_GET['cam']; > >if ($cam == '1') { >echo 'http://example.com""; />'; >} > ?> > > Is this code prone to XSS attacks or for attacking the local webserver > and if so, how? > >

[PHP] This code using _GET exploitable

2009-03-11 Thread filtered
Hi, we have script containing and http://example.com""; />'; } ?> Is this code prone to XSS attacks or for attacking the local webserver and if so, how? $cam isn't used anywhere else. -a -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.p

Re: [PHP] $this->value VS $value

2008-09-24 Thread Eric Butera
On Tue, Sep 23, 2008 at 7:30 PM, Nathan Nobbe <[EMAIL PROTECTED]> wrote: > On Tue, Sep 23, 2008 at 5:25 PM, Eric Butera <[EMAIL PROTECTED]> wrote: >> >> I generate my data access objects too. It goes against my better >> judgment, but performance wins out in this specific situation. > > getting of

Re: [PHP] $this->value VS $value

2008-09-23 Thread Nathan Nobbe
On Tue, Sep 23, 2008 at 5:25 PM, Eric Butera <[EMAIL PROTECTED]> wrote: > I generate my data access objects too. It goes against my better > judgment, but performance wins out in this specific situation. > getting off the point of the thread (i could care less :D), but have you seen the model ta

Re: [PHP] $this->value VS $value

2008-09-23 Thread Eric Butera
On Tue, Sep 23, 2008 at 7:20 PM, Nathan Nobbe <[EMAIL PROTECTED]> wrote: > On Tue, Sep 23, 2008 at 4:42 PM, Eric Butera <[EMAIL PROTECTED]> wrote: >> >> Active Record sucks :P > > i prefer code generation to runtime introspection, but runtime > introspection+code generation, well thats a compromise

Re: [PHP] $this->value VS $value

2008-09-23 Thread Nathan Nobbe
On Tue, Sep 23, 2008 at 4:42 PM, Eric Butera <[EMAIL PROTECTED]> wrote: > Active Record sucks :P > i prefer code generation to runtime introspection, but runtime introspection+code generation, well thats a compromise i can live w/ ;) -nathan

Re: [PHP] $this->value VS $value

2008-09-23 Thread Nathan Nobbe
On Tue, Sep 23, 2008 at 4:25 PM, Jochem Maas <[EMAIL PROTECTED]> wrote: > ... now had 'self' been late (statically) bound ... no I won't go there, we > get > 'static' very soon now :-P and lets not forget the __*Static() magic method suite we're getting too :) -nathan

Re: [PHP] $this->value VS $value

2008-09-23 Thread Eric Butera
On Tue, Sep 23, 2008 at 6:25 PM, Jochem Maas <[EMAIL PROTECTED]> wrote: > Nathan Nobbe schreef: >> >> On Tue, Sep 23, 2008 at 10:41 AM, Micah Gersten <[EMAIL PROTECTED]> wrote: >> >>> Eric Butera wrote: On Tue, Sep 23, 2008 at 12:26 PM, Jochem Maas <[EMAIL PROTECTED]> >>> >>> wrote: >

Re: [PHP] $this->value VS $value

2008-09-23 Thread Jochem Maas
Nathan Nobbe schreef: On Tue, Sep 23, 2008 at 10:41 AM, Micah Gersten <[EMAIL PROTECTED]> wrote: Eric Butera wrote: On Tue, Sep 23, 2008 at 12:26 PM, Jochem Maas <[EMAIL PROTECTED]> wrote: (using $this->foo or MyClass::$foo for static properties). also self:: Actually within a class, I

Re: [PHP] $this->value VS $value

2008-09-23 Thread Nathan Nobbe
On Tue, Sep 23, 2008 at 10:41 AM, Micah Gersten <[EMAIL PROTECTED]> wrote: > > Eric Butera wrote: > > On Tue, Sep 23, 2008 at 12:26 PM, Jochem Maas <[EMAIL PROTECTED]> > wrote: > > > >> (using $this->foo or MyClass::$foo for static properties). > >> > > > > also self:: > > > > > Actually within a

Re: [PHP] $this->value VS $value

2008-09-23 Thread Micah Gersten
Eric Butera wrote: > On Tue, Sep 23, 2008 at 12:26 PM, Jochem Maas <[EMAIL PROTECTED]> wrote: > >> (using $this->foo or MyClass::$foo for static properties). >> > > also self:: > > Actually within a class, I think you must self:: before a static property or something shows up in the err

Re: [PHP] $this->value VS $value

2008-09-23 Thread Eric Butera
On Tue, Sep 23, 2008 at 12:26 PM, Jochem Maas <[EMAIL PROTECTED]> wrote: > (using $this->foo or MyClass::$foo for static properties). also self:: -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] $this->value VS $value

2008-09-23 Thread Jochem Maas
uaca man schreef: Hello to all my fellow members of the PHP community. As a personal rule i always use $this in front of class members, but i always knew from others programing languages and i guess I just thought it was same in PHP that without $this keyword it should work just the same, howeve

Re: [PHP] $this->value VS $value

2008-09-23 Thread Nathan Nobbe
On Tue, Sep 23, 2008 at 9:55 AM, uaca man <[EMAIL PROTECTED]> wrote: > Hello to all my fellow members of the PHP community. > > As a personal rule i always use $this in front of class members, but i > always knew from others programing languages and i guess I just > thought it was same in PHP that

[PHP] $this->value VS $value

2008-09-23 Thread uaca man
Hello to all my fellow members of the PHP community. As a personal rule i always use $this in front of class members, but i always knew from others programing languages and i guess I just thought it was same in PHP that without $this keyword it should work just the same, however in the code bellow

Re: [PHP] This beats me (variable not being passed through pages)

2008-03-24 Thread Jim Lucas
Mário Gamito wrote: Hi, I have a ASP.NET / C# page calling a webmail Linux server: WebRequest request = WebRequest.Create("http://192.168.1.4/horde/imp/index.php?username=gamito";); (etc...) It seems to work as in my Linux Apache logs, i get: (...) "GET /horde/imp/index.php?username=gamito

[PHP] This beats me (variable not being passed through pages)

2008-03-24 Thread Mário Gamito
Hi, I have a ASP.NET / C# page calling a webmail Linux server: WebRequest request = WebRequest.Create("http://192.168.1.4/horde/imp/index.php?username=gamito";); (etc...) It seems to work as in my Linux Apache logs, i get: (...) "GET /horde/imp/index.php?username=gamito HTTP/1.1" 200 223 F

RE: [PHP] This, then that.

2007-10-21 Thread Robert Cummings
On Sat, 2007-10-20 at 18:45 -0700, Instruct ICC wrote: > > > > > > > >One idea that has always been REALLY popular around here... stuff your > > > >image in a database. *MUHAWHAWHAWHAWHAW* *Ducks from the flying rocks*. > > > > > > > >Cheers, > > > >Rob. > > > >-- > > > > > > Rob: > > > > > > Tha

RE: [PHP] This, then that.

2007-10-20 Thread Instruct ICC
> > >> > I want to prohibit an image from being shown to anyone who is not > > >> > permitted (i.e., logged in). > > >> > > > >> > The way I want to do this is to: > > >> > > > >> > 1. Set [file] permissions... > > >> > > >> > > >> > > >> What if 2 or more users access the application at th

RE: [PHP] This, then that. [solved?]

2007-10-20 Thread Instruct ICC
> >> I think I found a solution. > >> > >> Here's the url: > >> > >> http://www.webbytedd.com/bbb/image-test1/ > >> > >> The point is that the image is only accessible via this script, is > >> this correct? > > > >I can access it without a script: > >http://www.webbytedd.com/bbb/image-test1/i

RE: [PHP] This, then that.

2007-10-20 Thread tedd
At 11:58 AM -0400 10/20/07, Robert Cummings wrote: Most likely though, you have access to .htaccess and so you could create a locked images directory that exists within the web tree but which can't be accessed by a browser. This would give you what you need to be within the confines of safe mode

RE: [PHP] This, then that.

2007-10-20 Thread tedd
Hi gang: Does this work any better at keeping the image safe? http://www.webbytedd.com/bbb/image-test2/ Cheers, tedd -- --- http://sperling.com http://ancientstones.com http://earthstones.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/un

RE: [PHP] This, then that.

2007-10-20 Thread Robert Cummings
On Sat, 2007-10-20 at 09:59 -0400, tedd wrote: > At 4:59 PM -0400 10/19/07, Robert Cummings wrote: > >On Fri, 2007-10-19 at 13:31 -0700, Instruct ICC wrote: > >> > I want to prohibit an image from being shown to anyone who is not > >> > permitted (i.e., logged in). > >> > > >> > The way I want

RE: [PHP] This, then that. [solved?]

2007-10-20 Thread tedd
At 1:45 PM -0700 10/19/07, Instruct ICC wrote: > Hi gang: I think I found a solution. Here's the url: http://www.webbytedd.com/bbb/image-test1/ The point is that the image is only accessible via this script, is this correct? I can access it without a script: http://www.webbytedd.com/

RE: [PHP] This, then that. [solved?]

2007-10-20 Thread tedd
At 1:57 PM -0700 10/19/07, Instruct ICC wrote: > but in the img tag, try src="display_image.php?id=anId" and in display_image.php, test if the user is authorized before displaying the image. Then a direct call to display_image.php?id=anId would still have a chance to authenticate the user.

RE: [PHP] This, then that.

2007-10-20 Thread tedd
At 4:59 PM -0400 10/19/07, Robert Cummings wrote: On Fri, 2007-10-19 at 13:31 -0700, Instruct ICC wrote: > I want to prohibit an image from being shown to anyone who is not > permitted (i.e., logged in). > > The way I want to do this is to: > > 1. Set [file] permissions... What if 2 or

RE: [PHP] This, then that.

2007-10-20 Thread tedd
At 1:31 PM -0700 10/19/07, Instruct ICC wrote: > I want to prohibit an image from being shown to anyone who is not permitted (i.e., logged in). The way I want to do this is to: > 1. Set [file] permissions... What if 2 or more users access the application at the same time? Set the perm

Re: [PHP] This, then that.

2007-10-20 Thread tedd
At 1:09 PM -0400 10/19/07, Wolf wrote: actually, you could run it by 1. making the page 2. flushing the output buffer (which puts it in the screen) 3. run the 2nd script Nope, tried it. Whatever is done in a script is done before any output to the browser. Cheers, tedd -- --- http://sp

Re: [PHP] This, then that.

2007-10-20 Thread tedd
At 6:23 PM +0200 10/19/07, Zoltán Németh wrote: 2007. 10. 19, péntek keltezéssel 12.07-kor tedd ezt írta: At 8:19 PM -0400 10/18/07, TG wrote: >Describe the process a little more. Ok, here's what I want to do. I want to prohibit an image from being shown to anyone who is not permitted (i.

RE: [PHP] This, then that.

2007-10-19 Thread Robert Cummings
On Fri, 2007-10-19 at 13:31 -0700, Instruct ICC wrote: > > I want to prohibit an image from being shown to anyone who is not > > permitted (i.e., logged in). > > > > The way I want to do this is to: > > > > 1. Set [file] permissions... > > > > What if 2 or more users access the application at

RE: [PHP] This, then that. [solved?]

2007-10-19 Thread Instruct ICC
> but in the img tag, try src="display_image.php?id=anId" > and in display_image.php, test if the user is authorized before displaying > the image. > Then a direct call to display_image.php?id=anId would still have a chance to > authenticate the user. Forgot to reiterate: Keep the images where

RE: [PHP] This, then that. [solved?]

2007-10-19 Thread Instruct ICC
> Hi gang: > > I think I found a solution. > > Here's the url: > > http://www.webbytedd.com/bbb/image-test1/ > > The point is that the image is only accessible via this script, is > this correct? I can access it without a script: http://www.webbytedd.com/bbb/image-test1/images/a.jpg It may

RE: [PHP] This, then that.

2007-10-19 Thread Instruct ICC
> I want to prohibit an image from being shown to anyone who is not > permitted (i.e., logged in). > > The way I want to do this is to: > > 1. Set [file] permissions... What if 2 or more users access the application at the same time? Set the permissions so only the PHP application can acces

Re: [PHP] This, then that. [solved?]

2007-10-19 Thread Philip Thompson
On 10/19/07, Philip Thompson <[EMAIL PROTECTED]> wrote: > > On 10/19/07, tedd <[EMAIL PROTECTED]> wrote: > > > > Hi gang: > > > > I think I found a solution. > > > > Here's the url: > > > > http://www.webbytedd.com/bbb/image-test1/ > > > > The point is that the image is only accessible via this scr

Re: [PHP] This, then that. [solved?]

2007-10-19 Thread tedd
Hi gang: I think I found a solution. Here's the url: http://www.webbytedd.com/bbb/image-test1/ The point is that the image is only accessible via this script, is this correct? The technique I used simply runs the first php script, which creates the page that has uses ajax to trigger anothe

Re: [PHP] This, then that.

2007-10-19 Thread Wolf
actually, you could run it by 1. making the page 2. flushing the output buffer (which puts it in the screen) 3. run the 2nd script tedd <[EMAIL PROTECTED]> wrote: > At 12:06 AM -0400 10/19/07, Nathan Hawks wrote: > >If by "creates a web page" you just mean it echos output to the browser,

  1   2   3   >