NEOHAPSIS - Peace of Mind Through Integrity and Insight

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com

Neohapsis > Archives > PHP Discussion Digest> 2002-07

php-general-digest-help_at_lists.php.net
Date: Sat Jul 13 2002 - 13:40:35 CDT

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

php-general Digest 13 Jul 2002 18:40:35 -0000 Issue 1462

Topics (messages 107495 through 107536):

Re: safe_mode
107495 by: Liam MacKenzie

Re: Convert MySQL table into Access or Excell format
        107496 by: Alex Shi
        107497 by: Darren Young
        107498 by: Darren Young
        107499 by: Jason Wong
        107501 by: Alex Shi

Re: Restricting access using IPs
107500 by: Michael Hall
107502 by: Michael Hall

PHP install - what features?
107503 by: olinux
107504 by: Jason Wong

Multiple Tables -add, edit, delete
        107505 by: Paul Dionne
        107529 by: Analysis & Solutions
        107530 by: Analysis & Solutions

unsuscribe
107506 by: gys

For Unsubscribe send a blank mail to ( php-general-unsubscribelists.php.net)
107507 by: Balaji Ankem

hello the list
        107508 by: Nicolas GUILLOU
        107511 by: Alberto Serra
        107520 by: Matt

how can this be? GET instead of POST -> db error
        107509 by: Andy
        107516 by: Dyon Beaart
        107518 by: Matt

New 2 PHP
107510 by: George Ewing
107512 by: vins

html entry within XML "database"
107513 by: William S.
107515 by: Cal Evans

configure failed after autoconf update
107514 by: Steve Alberty

Re: How do I send files with HTTP socket post (PostToHost)
107517 by: Peter

Re: Connecting LocalHost & Remote mySQL DB
107519 by: John Holmes

php + javascript hard day together ?
        107521 by: David D
        107523 by: Jason Wong
        107531 by: David D

Re: Advice needed
107522 by: Mike Tuller
107528 by: Analysis & Solutions

Can this be done with mail()?
107524 by: Manuel
107533 by: Peter

recusive functions
107525 by: Alexander Ross

mail() problem
107526 by: Duncan
107527 by: Chris Knipe

how to defend this atack?
107532 by: Andy
107534 by: Chris Shiflett

objects in an array
107535 by: Alexander Ross

Install 2 php
107536 by: Pierre

Administrivia:

To subscribe to the digest, e-mail:
php-general-digest-subscribelists.php.net

To unsubscribe from the digest, e-mail:
php-general-digest-unsubscribelists.php.net

To post to the list, e-mail:
php-generallists.php.net

----------------------------------------------------------------------

attached mail follows:

<VirtualHost *>
DocumentRoot /home/scripts
ServerName scripts.blahblah.com
ErrorLog /home/nobody/logs/hosting/error.scripts.blahblah.com.log
CustomLog /home/nobody/logs/hosting/access.scripts.blahblah.com.log common

php_admin_flag safe_mode off (or on)

</VirtualHost>

----- Original Message -----
From: "Chris Knipe" <savagesavage.za.org>
To: <php-generallists.php.net>
Sent: Friday, July 12, 2002 12:23 PM
Subject: [PHP] safe_mode

> Lo all,
>
> Does anyone have some examples, ideas, or references on how to setup php's
> safe_mode operation so that I can provide a reasonably secure environment
for
> hosting php3 and php4 (public web sites, with public users).
>
> This is for a public type hosting environment, so I'll definately need to
> protect the servers from malicious code (such as exec(rm... ), and
everything
> else that goes with it...
>
> Any pointers or web sites that may be of help will be appreciated
> tremendiously.
>
> --
> me
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

attached mail follows:

"Jason Wong" <php-generalgremlins.com.hk> wrote in message
news:200207131410.04654.php-generalgremlins.com.hk...
> On Saturday 13 July 2002 14:00, Alex Shi wrote:
> > "Jason Wong" <php-generalgremlins.com.hk> wrote in message
> > news:200207131352.42073.php-generalgremlins.com.hk...
> >
> > > On Saturday 13 July 2002 13:31, Alex Shi wrote:
> > > > The thing is that, the MySQL table resides on a remote web server,
my
> > > > client want to download it and access it in Access.
> > >
> > > Doesn't matter, ODBC works across a network.
> >
> > But what can we do if the ISP closed 3306 port on their firewall?
>
> This thread is leading into non-PHP territory (ie you're better off asking
on
> the mysql list). Put simply, you can specify which port you want MySQL to
> use. However if the ISP only allows certain ports, eg SMTP, HTTP, _and_
> you're already using those ports, then you're stuck up a creek.
>
> Of course you can always ask your ISP to unblock that port. Why are _they_
> firewalling _your_ network anyway?

Sorry for the confusing...the "ISP" is the hosting company where my client's
web site hosted. That's why I need a php solution for this...

>
> --
> Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
> Open Source Software Systems Integrators
> * Web Design & Hosting * Internet & Intranet Applications Development *
>
> /*
> What we do not understand we do not possess.
> -- Goethe
> */
>

attached mail follows:

I seem to remember some Windows application that will do the conversion
for you. I believe it's called mysql2access and the other way is
access2mysql. IIRC, it's not open/free though.

On Sat, 13 Jul 2002, Alex Shi wrote:

> The thing is that, the MySQL table resides on a remote web server, my client
> want to download it and access it in Access.
>
> Alex
>
> > You can also use ODBC (Ships with Acess) to make a DSN connection to
> MySQL.
> > Access can retrieve data from any ODBC DSN.
> >
> > Jason White
> >
> > ----- Original Message -----
> > From: "Jason Wong" <php-generalgremlins.com.hk>
> > To: <php-generallists.php.net>
> > Sent: Friday, July 12, 2002 9:48 PM
> > Subject: Re: [PHP] Convert MySQL table into Access or Excell format
> >
> >
> > > On Saturday 13 July 2002 06:48, Alex Shi wrote:
> > > > Hello,
> > > >
> > > > My client has a website and it support MySQL/PHP. The client want
> > > > to download the MySQL tables and then access them in Excell or
> > > > Access. So my question is, is it possible to convert MySQL table into
> > > > Access or Excell format? Thanks in advance for all answer!
> > >
> > > archives -> "mysql excel"
> > >
> > > --
> > > Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
> > > Open Source Software Systems Integrators
> > > * Web Design & Hosting * Internet & Intranet Applications Development *
> > >
> > > /*
> > > After years of research, scientists recently reported that there is,
> > > indeed, arroz in Spanish Harlem.
> > > */
> > >
> > >
> > > --
> > > PHP General Mailing List (http://www.php.net/)
> > > To unsubscribe, visit: http://www.php.net/unsub.php
> > >
> > >
> >
>
>
>

attached mail follows:

Tunnel port 3306 over an SSH connection if you can get an SSH session to
open to the remote.

On Sat, 13 Jul 2002, Alex Shi wrote:

> "Jason Wong" <php-generalgremlins.com.hk> wrote in message
> news:200207131352.42073.php-generalgremlins.com.hk...
> > On Saturday 13 July 2002 13:31, Alex Shi wrote:
> > > The thing is that, the MySQL table resides on a remote web server, my
> > > client want to download it and access it in Access.
> >
> > Doesn't matter, ODBC works across a network.
>
> But what can we do if the ISP closed 3306 port on their firewall?
>
> >
> > --
> > Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
> > Open Source Software Systems Integrators
> > * Web Design & Hosting * Internet & Intranet Applications Development *
> >
> > /*
> > The young lady had an unusual list,
> > Linked in part to a structural weakness.
> > She set no preconditions.
> > */
> >
>
>
>

attached mail follows:

On Saturday 13 July 2002 14:51, Alex Shi wrote:

> > the mysql list). Put simply, you can specify which port you want MySQL to
> > use. However if the ISP only allows certain ports, eg SMTP, HTTP, _and_
> > you're already using those ports, then you're stuck up a creek.
> >
> > Of course you can always ask your ISP to unblock that port. Why are
> > _they_ firewalling _your_ network anyway?
>
> Sorry for the confusing...the "ISP" is the hosting company where my
> client's web site hosted. That's why I need a php solution for this...

OK, export mysql tables to CSV, import into Access.

-- Jason Wong -> Gremlins Associates -> www.gremlins.com.hk Open Source Software Systems Integrators * Web Design & Hosting * Internet & Intranet Applications Development *

/* Try to be the best of whatever you are, even if what you are is no good. */

attached mail follows:

> > > the mysql list). Put simply, you can specify which port you want MySQL to > > > use. However if the ISP only allows certain ports, eg SMTP, HTTP, _and_ > > > you're already using those ports, then you're stuck up a creek. > > > > > > Of course you can always ask your ISP to unblock that port. Why are > > > _they_ firewalling _your_ network anyway? > > > > Sorry for the confusing...the "ISP" is the hosting company where my > > client's web site hosted. That's why I need a php solution for this... > > OK, export mysql tables to CSV, import into Access.

okay thanks a lot!

> > -- > Jason Wong -> Gremlins Associates -> www.gremlins.com.hk > Open Source Software Systems Integrators > * Web Design & Hosting * Internet & Intranet Applications Development * > > /* > Try to be the best of whatever you are, even if what you are is no good. > */ >

attached mail follows:

$substring = substr($localip,0,9);

if ($substring == '192.168.0') { // you're in }

On Sat, 13 Jul 2002, Liam MacKenzie wrote:

> If I enter 192.168.0.13 (My IP) it works, I'm allowed in and any other IP > isn't. > However, I need to grant access to this whole network, not just me. So I > need 192.168.0.* to be able to access it, everyone else should get "Access > Denied" > > So I need to know how to write this bit: > $localip = "192.168.0.13"; > so that it's the network, not just me. > > I tried these but they didn't work: > $localip = "192.168.0.0"; > $localip = "192.168.0.*"; > $localip = "192.168.0.0/24"; > > > Any other ideas? > > Cheers > > > > ----- Original Message ----- > From: "Jason Wong" <php-generalgremlins.com.hk> > To: <php-generallists.php.net> > Sent: Saturday, July 13, 2002 3:49 PM > Subject: Re: [PHP] Restricting access using IPs > > > > On Saturday 13 July 2002 13:10, Liam MacKenzie wrote: > > > Hey all, I'm looking to deny access to all IPs except those that fall > into > > > a specific IP range. 192.168.0.* in this case. > > > Am I missing something out of this code, it don't work too well ;-) > > > > HOW doesn't it work too well? It displays a picture of a naked guy instead > of > > the naked girl that you was expecting? > > > > > <? > > > $localip = "192.168.0.13"; > > > if ($REMOTE_ADDR == $localip) { > > > ?> > > > > > > Allowed! > > > > > > <? > > > } > > > else { > > > ?> > > > > > > Denied! > > > > > > <? > > > } > > > > > > ?> > > > > > > -- > > Jason Wong -> Gremlins Associates -> www.gremlins.com.hk > > Open Source Software Systems Integrators > > * Web Design & Hosting * Internet & Intranet Applications Development * > > > > /* > > GOOD-NIGHT, everybody ... Now I have to go administer FIRST-AID to my > > pet LEISURE SUIT!! > > */ > > > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, visit: http://www.php.net/unsub.php > > > > > > > >

-- -------------------------------- n i n t i . c o m php-python-perl-mysql-postgresql -------------------------------- Michael Hall ninti

ninti.com --------------------------------

attached mail follows:

Oops, wrong variable. That should be:

$substring = substr($REMOTE_ADDR,0,9); if ($substring == '192.168.0') { // you're in }

Michael

> On Sat, 13 Jul 2002, Liam MacKenzie wrote: > > > If I enter 192.168.0.13 (My IP) it works, I'm allowed in and any other IP > > isn't. > > However, I need to grant access to this whole network, not just me. So I > > need 192.168.0.* to be able to access it, everyone else should get "Access > > Denied" > > > > So I need to know how to write this bit: > > $localip = "192.168.0.13"; > > so that it's the network, not just me. > > > > I tried these but they didn't work: > > $localip = "192.168.0.0"; > > $localip = "192.168.0.*"; > > $localip = "192.168.0.0/24"; > > > > > > Any other ideas? > > > > Cheers > > > > > > > > ----- Original Message ----- > > From: "Jason Wong" <php-generalgremlins.com.hk> > > To: <php-generallists.php.net> > > Sent: Saturday, July 13, 2002 3:49 PM > > Subject: Re: [PHP] Restricting access using IPs > > > > > > > On Saturday 13 July 2002 13:10, Liam MacKenzie wrote: > > > > Hey all, I'm looking to deny access to all IPs except those that fall > > into > > > > a specific IP range. 192.168.0.* in this case. > > > > Am I missing something out of this code, it don't work too well ;-) > > > > > > HOW doesn't it work too well? It displays a picture of a naked guy instead > > of > > > the naked girl that you was expecting? > > > > > > > <? > > > > $localip = "192.168.0.13"; > > > > if ($REMOTE_ADDR == $localip) { > > > > ?> > > > > > > > > Allowed! > > > > > > > > <? > > > > } > > > > else { > > > > ?> > > > > > > > > Denied! > > > > > > > > <? > > > > } > > > > > > > > ?> > > > > > > > > > -- > > > Jason Wong -> Gremlins Associates -> www.gremlins.com.hk > > > Open Source Software Systems Integrators > > > * Web Design & Hosting * Internet & Intranet Applications Development * > > > > > > /* > > > GOOD-NIGHT, everybody ... Now I have to go administer FIRST-AID to my > > > pet LEISURE SUIT!! > > > */ > > > > > > > > > -- > > > PHP General Mailing List (http://www.php.net/) > > > To unsubscribe, visit: http://www.php.net/unsub.php > > > > > > > > > > > > > > > >

-- -------------------------------- n i n t i . c o m php-python-perl-mysql-postgresql -------------------------------- Michael Hall ninti

ninti.com --------------------------------

attached mail follows:

Hi all,

I have searched the archive for a message subject something like "PHP Wish List" and was unsuccessful.

I am going to have our new server setup and would like to know which features should be enabled - I know a few that I will need, but what features should i get now that I will be requesting a recompile later on for?

Here are the features I think will be best - am I missing anything?

do excess features slow down php?

--with-xml -with-mysql -with-gd -with-ttf -with-pdflib -with-pear -with-openssl -with-zlib -with-curl -enable-ftp -with-mnoGoSearch -enable-sockets -enable-safe-mode -with-exec-dir --with-apache

Thanks much, olinux

__________________________________________________ Do You Yahoo!? Yahoo! Autos - Get free new car price quotes http://autos.yahoo.com

attached mail follows:

On Saturday 13 July 2002 16:15, olinux wrote:

> I have searched the archive for a message subject > something like "PHP Wish List" and was unsuccessful.

I doubt whether someone else's wishlist is of much use to _you_. Their needs are most likely different to yours.

> I am going to have our new server setup and would like > to know which features should be enabled - I know a > few that I will need, but what features should i get > now that I will be requesting a recompile later on > for?

Simply compile the features that you _need_ right now. Recompiling is trivial, so you can always add whatever you need, _when_ you need it.

> do excess features slow down php?

If they're not compiled as modules then most likely yes, as at the very least it results in a larger executable. Whether the slow down is noticeable, you'll have to benchmark for yourself.

-- Jason Wong -> Gremlins Associates -> www.gremlins.com.hk Open Source Software Systems Integrators * Web Design & Hosting * Internet & Intranet Applications Development *

/* Everything might be different in the present if only one thing had been different in the past. */

attached mail follows:

Hello all. Hope you are doing well.

I would like some guidance here, meat of problem is in all caps: tblContacts -basic contact information on companies/non-government organizations/media outlets... tblCountriesOfOperation (tblContactsID, CountryID) -countries that tblContacts operate in. tblIndustrySectorsOfOperation (tblContactsID, IndustryID) - Industry sectors that tblContacts operate in.

Would like a form to edit records.

Problem: How do I display all the tblCountriesOfOperation for one tblContacts record SO THAT MULTIPLE COUNTRIES CAN BE ADDED OR DELETED FOR THAT RECORD?

Same for tblIndustrySectorsOfOperation.

I assume that I have to output the list of Countries of Operation in a loop then loop back through it after use has made changes to see what records have been changed.

Or I guess I could present a dropdown of all remaining possible countries, after they click the data is refreshed and they are given the option of adding another country.

Recommendations, sample code, general help all apreciated.

thanks in advance, Paul

attached mail follows:

Oh, yes! I forgot about deleting countries that have been unchecked! Hmm... Lock the table to prevent people from reading from it, delete all records for that company, then loop through and insert the new data, then unlock the table.

--Dan

-- PHP classes that make web design easier SQL Solution | Layout Solution | Form Solution sqlsolution.info | layoutsolution.info | formsolution.info T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y 4015 7 Av #4AJ, Brooklyn NY v: 718-854-0335 f: 718-854-0409

attached mail follows:

On Fri, Jul 12, 2002 at 10:57:08AM +0200, Paul Dionne wrote: > > Problem: How do I display all the tblCountriesOfOperation for one > tblContacts record SO THAT MULTIPLE COUNTRIES CAN BE ADDED OR DELETED FOR > THAT RECORD?

Use an option list with multiple selections. My SQL Solution does this very simply.

In essence, when doing the record lookup to display, run a query against the countryies of operation table with the company id. Loop through the recordset placing each row into an array, say $CountriesIn[]

Run a second query against the table of all countries and use that to make an option list. As you're looping through the option list creation process, check the current() element of the $CountriesIn[] array. If it matches, print out a "selected" and do a next(). (Simlarly, and probably better, you could skip the current()/next() by doing an in_array().)

Now, when saving the changes after editing, loop through the array returned by the countries of operation option list doing an INSERT INTO query to the countries of operation table. (The table should be primary keyed CompanyID and CountryID). If the current query would create duplicate data, the database wouldn't insert the record, no problem.

Make sense?

--Dan

attached mail follows:

Hi guys,

To unsubscribe from the list send a mail to php-general-unsubscribelists.php.net

Visit http://www.php.net/unsub.php .

Pls. Donot send a mail tp php-generallists.php.net.

Best regards Balaji

-----Original Message----- From: gys [mailto:gcarpintero1mi.madritel.es] Sent: Saturday, July 13, 2002 5:03 PM To: php-generallists.php.net Subject: [PHP] unsuscribe

text/plain attachment: Wipro_Disclaimer.txt

attached mail follows:

i'm new and i'm trouble with this code :'( can U help me please ??

this is the code :

while ($cd_tbl = mysql_fetch_array ($result)) { $cd_id = $cd_tbl['cd_id']; $cd_oeuvre = $cd_tbl['cd_oeuvre']; $cd_chef = $cd_tbl['cd_chef']; $cd_compositeur = $cd_tbl['cd_compositeur'];

<-------------------partie concernée---------------------> //-Debut Seth //-------------------------- // name : _ALTERNANCE_COULEUR_ // desc : test de 'id' pour l'alternance de couleur //--------------------------

if(is_int("$cd_id") = TRUE) { $bgcolor="#000000"; } else { $bgcolor="#333333"; } echo "<tr>"; echo "<td bgcolor="$bgcolor">$cd_id</td>"; echo "<td bgcolor="$bgcolor">$cd_compositeur</td>"; echo "<td bgcolor="$bgcolor">$cd_oeuvre</td>"; echo "<td bgcolor="$bgcolor">$cd_chef</td>"; echo "<td bgcolor="$bgcolor">"; echo "<a href=detail.php?cd_id=$cd_id>Fiche complète</a>"; echo "</td>"; echo "</tr>"; }

//- Fin Seth

echo "</table>"; }

^lease help me !!!!!!!!!! :'( thx ! Seth

attached mail follows:

Message-ID: <3D3014E1.5070607

gala.net> Date: Sat, 13 Jul 2002 14:54:09 +0300 From: Alberto Serra <albertoserra

gala.net> MIME-Version: 1.0 CC: php-general

lists.php.net Content-Type: text/plain; charset=KOI8-R; formatowed Content-Transfer-Encoding: 8bit Subject: Re: [PHP] hello the list

ðÒÉ×ÅÔ!

Nicolas GUILLOU wrote:

You may either write:

> echo "<td bgcolor='$bgcolor'>$cd_id</td>";

> echo "<td bgcolor=".$bgcolor.">$cd_compositeur</td>";

ðÏËÁ áÌØÂÅÒÔÏ ëÉÅ×

-_=}{=_--_=}{=_--_=}{=_--_=}{=_--_=}{=_--_=}{=_--_=}{=_-

LoRd, CaN yOu HeAr Me, LiKe I'm HeArInG yOu? lOrD i'M sHiNiNg... YoU kNoW I AlMoSt LoSt My MiNd, BuT nOw I'm HoMe AnD fReE tHe TeSt, YeS iT iS ThE tEsT, yEs It Is tHe TeSt, YeS iT iS ThE tEsT, yEs It Is.......

attached mail follows:

> echo "<td bgcolor="$bgcolor">$cd_id</td>";

Strings work differently when the outer quotes are double or single quotes. Inside double quotes variables will be converted into their values. Inside single they will not. So: $var = 'Hello World'; echo "$var \n";

will result in Hello World <newline>

and: $var = 'Hello World'; echo '$var \n';

will result in $var \n //actual two characters '\' and 'n' and not newline.

Inside double or single quotes, you can use the other quote: $var = 'Hello "World"'; echo "$var \n"; Hello "World" <newline>

$var = "Hello 'World'"; echo "$var \n"; Hello 'World' <newline>

Your trouble is that you're using double quotes inside a double quoted string and the second double quote that php encounters will terminate the string. The next thing encountered is your variable $bgcolor, but that syntax isn't correct. php sees your string as three pieces: 1. "<td bgcolor=" 2. $bgcolor 3. ">$cd_id</td>";

So you could either convert the double quotes inside the string into single quotes: echo "<td bgcolor='$bgcolor'>$cd_id</td>";

or escape the double quotes like this: echo "<td bgcolor=\"$bgcolor\">$cd_id</td>";

or you could concatenate the three pieces: echo "<td bgcolor=" . $bgcolor .">$cd_id</td>";

I personally like all of the tag values double quoted so I'd echo "<td bgcolor=\"$bgcolor"\>$cd_id</td>";

When php parses the outside double quoted string, it has to do extra work to convert variables. I generally use single quotes unless there's a variable or special char to convert (like newline). It doesn't really matter though, it's fast anyway.

If your using arrays inside a double quoted string, you need to help php out and use special coding. This code won't work: $arr = array('fish' =>'Tuna','reptile' => 'Snake','rodent' => 'mouse'); echo "$arr['fish'] \n";

This will work: $arr = array('fish' =>'Tuna','reptile' => 'Snake','rodent' => 'mouse'); echo "{$arr['fish']} \n"; // note the curly braces around the array

attached mail follows:

Hi everybody,

I am just trying to find out how some db errors happened during a user was browsing my web app.

This is out of the Apache log:

GET /subapp_profiles/act_upload_image.php HTTP/1.1" 200 160 POST /subapp_profiles/act_upload_image.php HTTP/1.1" 302 5

I do not have a clue where this GET request could come from. This has caused a empty sql statement and therefore a db error. How can could this be achieved? By clicking back in the browser window? I dont think so since the same user was on another site before.

Has anybody a idea on that?

Andy

attached mail follows:

I dont know what causus it, but I have a kind of a solution for your problem...

you probably have something like $_GET["myvar"] in your query, try to do something like this : $_VARS="_$REQUEST_METHOD"; $_VARS=$$_VARS;

And then instead of using the _GET, you use the _VARS...

"Andy" <news.lettersgmx.de> schreef in bericht news:20020713105302.54194.qmailpb1.pair.com... > Hi everybody, > > I am just trying to find out how some db errors happened during a user was > browsing my web app. > > This is out of the Apache log: > > GET /subapp_profiles/act_upload_image.php HTTP/1.1" 200 160 > POST /subapp_profiles/act_upload_image.php HTTP/1.1" 302 5 > > I do not have a clue where this GET request could come from. This has caused > a empty sql statement and therefore a db error. How can could this be > achieved? By clicking back in the browser window? I dont think so since the > same user was on another site before. > > Has anybody a idea on that? > > Andy > >

attached mail follows:

> This is out of the Apache log: > > GET /subapp_profiles/act_upload_image.php HTTP/1.1" 200 160 > POST /subapp_profiles/act_upload_image.php HTTP/1.1" 302 5 > > I do not have a clue where this GET request could come from. This has caused > a empty sql statement and therefore a db error. How can could this be > achieved? By clicking back in the browser window? I dont think so since the > same user was on another site before.

The GET is coming from the person on the browser is requesting the page the either via a link or directly typing it in. That's how the HTTP works, right? Almost all web requests are GETs. When a person clicks on a link on www.mysite.com whose href="/subapp_profiles/act_upload_image.php", the browser will send (at least) the following to the server:

GET /subapp_profiles/act_upload_image.php HTTP/1.1\r\n Accept: */*\r\n User-Agent: Mozilla (blah; blah)\r\n Host: www.mysite.com\r\n Connection: Keep-Alive\r\n \r\n

The web server on the other end will then fulfill that reques if it can. The 200 on the end of your log entry for the GET indicates success.

So what happens is: 1. browser requests the formact_upload_image.php via GET. 2. Web server sends the data. 3. Browser Displays the form 4. person clicks submit on your act_upload_image.php which has a method of POST and server gets the posted data.

The solution is to check $_SERVER['REQUEST_METHOD'] and only process the form if the method is POST.

attached mail follows:

Hi Everyone.

Yup.. another dummy who can't suss out php.

I'm running win2000 server and have installed php (by the book), also have mysql running.

Can seem to get php recognised though?

Check out http://www.geeing.com/source/chapter01/

Says can't find page.. but is defo there.

I can run this page on my redhat 7.3 server but not windows? Anyone help?

Thanks in advance George.

attached mail follows:

Message-ID: <20020713121029.84293.qmail

pb1.pair.com> To: php-general

lists.php.net Reply-To: "vins" <vins

webonline.co.za> From: "vins" <vins

webonline.co.za> Date: Sat, 13 Jul 2002 14:10:54 +0200 Subject: Re: New 2 PHP

OK For one you don't have an index.php file. I can't see the others coz you have pwd protected everything.

What exactly is the error.... ???

"George Ewing" <georgegeeing.com> wrote in message news:000c01c22a64$b3c14840$6401a8c0pavilion... Hi Everyone.

Yup.. another dummy who can't suss out php.

I'm running win2000 server and have installed php (by the book), also have mysql running.

Can seem to get php recognised though?

Check out http://www.geeing.com/source/chapter01/

Says can't find page.. but is defo there.

I can run this page on my redhat 7.3 server but not windows? Anyone help?

Thanks in advance George.

attached mail follows:

I am experimenting with using an XML file as a database. One of the things I do is provide a way of adding records to the database by an html form.

This seems to work out well so far unless one of the fields in a record contains an html reference. The result is a Sablotron parse error.

What is the best way around this? Should I validate the form before it is submitted so that html references are rejected? How would I do this?

-- Bill Amsterdam, NL

attached mail follows:

As a general rule of thumb you should ALWAYS validate the information posted as a form before sending it on to whatever backend you are using.

=C=

* * Cal Evans * The Virtual CIO * http://www.calevans.com *

-----Original Message----- From: William S. [mailto:wstanxs4all.nl] Sent: Saturday, July 13, 2002 7:37 AM To: php Subject: [PHP] html entry within XML "database"

I am experimenting with using an XML file as a database. One of the things I do is provide a way of adding records to the database by an html form.

This seems to work out well so far unless one of the fields in a record contains an html reference. The result is a Sablotron parse error.

What is the best way around this? Should I validate the form before it is submitted so that html references are rejected? How would I do this?

-- Bill Amsterdam, NL

-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

attached mail follows:

Hi,

after my systemtools update to autoconf 2.52, automake 1.6.2, libtool 1.4.2, bison 1.35 php (cvs tree) configure failed with this strange message:

--- checking for Apache 2.0 module support via DSO through APXS... ./configure: line 3848: syntax error near unexpected token `PHP_AP_EXTRACT_VERSION($APXS_HTTPD)' ./configure: line 3848: ` PHP_AP_EXTRACT_VERSION($APXS_HTTPD)' ----

but i have only requested: ./cvsclean ./buildconf ./configure --with-apxs=/usr/local/apache/current/bin/apxs

on my other system, with exactly the same configuration the configure script works fine.

Can anyone please help?

Thanks in advance,

Steve

attached mail follows:

can you not open the file in binary mode and then transfer it as you would with ASCII?

"Kevin Stone" <kevinhelpelf.com> wrote in message news:070301c229d5$42420130$6501a8c0kevin... > Okay enough answering questions this week, now I have a question to ask. :) > > I have a situation where two web servers need to share files with one > another. FTP is not an option. So I am resorting to HTTP socket > connection. I am able to open the connection (using Rasmus's PostToHost > function) to PHP scripts running on both servers and send structured queries > back and forth. This was easy. The queries can trigger actions so that I > can communicate seamlessly and do work. But I cannot for the life of me > figure out how to send whole files (mostly image files). There's obviously > more to it than just sending the ASCII conversion. > > I really don't have any meaningful code to show you. The code is all > standard anyway so if you know what I'm talking about then you have probably > coded it yourself at one point or another. Are there any tutorials or > examples out there that will show me how to send files using fsocketopen() > and POST method? > > Much thanks! > Kevin Stone > Helpelf, Inc. >

attached mail follows:

> Exactly.. that IS the problem. > You see, my mySQL DB on the Server/Internet, on my > website.. it DOES NOT allow Remote Host Connection. > That's why i need to use a PHP page, that too based on > the server. Because i need to move tabel data on my > Client/My Computer to the Tables on my Website mySQL.

Just use mysqldump, like someone else suggested. Dump your local database, upload it, and import it.

Any PHP solution isn't going to be 100% dependable, because you will run into the 30 second time limit on scripts. You can't really get that many queries done in 30 seconds...

---John Holmes...

attached mail follows:

Hi all,

I can manage this script to work. Js warn about listid[], he doesnt like [] in a var name ! Php needs them to collect an array from form checkboxes.

Here is my source :

<!doctype html public "-//W3C//DTD HTML 4.0 //EN"> <html> <head> <title>Title here!</title>

<? print_r($listid); // what in listid ? ?>

</script> </body> </html>

Thanks.

attached mail follows:

On Saturday 13 July 2002 23:37, David D wrote: > Hi all, > > I can manage this script to work. > Js warn about listid[], he doesnt like [] in a var name !

There's nothing you can do about that.

> Php needs them to collect an array from form checkboxes.

You'll just have to rename your checkboxes to something like listid_1, listid_2 etc. Then loop:

# Untested code, use with caution

for ($i = 1; $i < $number_of_checkboxes; $i++) { if (isset($_GET["listid_$i"])) { echo "listid_$i is checked "; } }

-- Jason Wong -> Gremlins Associates -> www.gremlins.com.hk Open Source Software Systems Integrators * Web Design & Hosting * Internet & Intranet Applications Development *

/* Bunker's Admonition: You cannot buy beer; you can only rent it. */

attached mail follows:

I hack js no need to change in php :

I pass teh form to the function and scan its elements

attached mail follows:

After much thought, I think I have figured out what I am going to do. I am going to create on the first page, a place to add the hardware type, and that will add a row to the database, and create the key I need. It will then go to another page where I can enter the information, and I will have the key to be able to do the volume stuff that I want. So I would have a dropdown menu to select the type of hardware and and add hardware button only.

This would also allow me to make this front end more customizable. For instance if I have a drop down that contains workstation, server, printer, etc. I could write the code so that when workstation is selected, and I hit add, it brings up the page to enter workstation information. If I select printer, then I can enter printer information. If later I decide to add other items, even if they aren't computer related, I could with ease.

If anyone see a problem with this idea, let me know. I think this would work, but I haven't started coding yet.

Mike

----- Original Message ----- From: "Alberto Serra" <albertoserragala.net> Cc: <php-generallists.php.net> Sent: Friday, July 12, 2002 10:35 PM Subject: Re: [PHP] Advice needed

> ðÒÉ×ÅÔ! > > Mike Tuller wrote: > > So I would have the progressive key inside the addvolume window? Can you > > explain how to go about doing this? > > How you organize your HTML output should *never* interfere with the way > you organize your data, they are two different things and must be kept > well separated. In a perfect world design, process flow and datamodeling > should be free to evolve without stepping into each other's way. It's > obviously impossible to fully meet this condition in the real world, but > one should always try and get as close to it as he can. > > Just do this: > > Think of your data as a temporary table, in which you have two keys: > 1) the real key, whenever available (will be blank on the stuff you > haven't written in the database yet) > 2) a progressive key, assigned by your php scripts by some means > > You just have the two keys constantly in your forms as hidden fields, so > that at process time you can still tell which is which when it comes to > relations, even if you do not have an already established relation > system (which is the case on new data). > > So: > you load your hdw components, they all have a db id already, so your > dataset will look like this: > > 1) hdw 1, its real id, your own internal key (say 1), rest of the data > 2) hdw 2, its real id, your own internal key (say 2), rest of the data > ... > > you add a new component and save the result on a temporary table, now > your temporary dataset is: > > 1) hdw 1, its real id, your own internal key (say 1), rest of the data > 2) hdw 2, its real id, your own internal key (say 2), rest of the data > 3) hdw new, no real id, your own internal key (say 3), rest of the data > ... > > You add a new volume and stock the data on a second temporary table, > which contains: > > 1) vol 1, no real id, your own hdw internal key (should be 3 since you > are adding to the last new hdw), your own internal volume id (say 1), > rest of the data > > You can repeat this step all over as much as you want (like fully > building up a number of new disks, volumes or whatever), and have it as > multilayered as you want (it will just take as many temporary tables as > are the real tables involved). > > Once your user finally reviews his/her data (say you entered a totally > new system, reviewed it and felt satisfied with it) he will have a > "fire" button somewhere. > > At this point your final script just takes the data off the temporary > tables and uses them to build the real thing. > > Notice that this way you also sort of implemented a transaction. Not a > real one, since it will not protect you if your final script fails at > runtime. Yet you can be sure no unconsistent data from unterminated > sessions will ever enter your stable datamodel, and that's were 99.99% > of the risk would come from. > > ðÏËÁ > áÌØÂÅÒÔÏ > ëÉÅ× > > > -_=}{=_--_=}{=_--_=}{=_--_=}{=_--_=}{=_--_=}{=_--_=}{=_- > > LoRd, CaN yOu HeAr Me, LiKe I'm HeArInG yOu? > lOrD i'M sHiNiNg... > YoU kNoW I AlMoSt LoSt My MiNd, BuT nOw I'm HoMe AnD fReE > tHe TeSt, YeS iT iS > ThE tEsT, yEs It Is > tHe TeSt, YeS iT iS > ThE tEsT, yEs It Is....... > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > >

attached mail follows:

On Sat, Jul 13, 2002 at 11:13:38AM -0500, Mike Tuller wrote: > After much thought, I think I have figured out what I am going to do. I am > going to create on the first page, a place to add the hardware type, and > that will add a row to the database, and create the key I need. It will then > go to another page where I can enter the information

Sounds like you could end up with a situation with incomplete input validation. If certain fields are required, you might not get them when someone enters the first entry, but doesn't do the rest of the entry procedure. Not that big a deal if you're the person doing all the entry, I guess.

--Dan

attached mail follows:

I need to query a database and return a resultset. A php script will then sort through the data and send the data to the browser in the form of a table.

Is it possible to gather the the results with html tags and store them in a variable so that the results can be emailed to someone? If so, how would this be done?

--------------------------------- Do You Yahoo!? Yahoo! Autos - Get free new car price quotes

attached mail follows:

Message-ID: <20020713180109.21417.qmail

pb1.pair.com> To: php-general

lists.php.net From: "Peter" <newsaddress

saracenvsu.org.uk> Date: Sat, 13 Jul 2002 18:59:11 -0700 Subject: Re: Can this be done with mail()?

Yes. I'm sure you could just mail out the table in an email. You'd have to do it as a multipart email (i think that's what it's called) as just mailing out the html code wouldn't show as a table in a mail client. Here's the source of a HTML spam I got this morning - should give you an idea how to do it. Note: you still mail out using the mail() function.

Received: from xmail02.nationala-1advertising.com ([208.236.10.104]) by mc2-f11.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.4905); Sat, 13 Jul 2002 02:38:25 -0700 Received: (qmail 22574 invoked from network); 12 Jul 2002 23:51:55 -0000 Received: from unknown (HELO CAMPAIGN) (208.236.10.4) by 0 with SMTP; 12 Jul 2002 23:51:55 -0000 From: AccuLotto <AccuLottonews.free.com> To: <mehotmail.com> Subject: WIN $10,000 in 6 months - Guaranteed! mehotmail.com Date: Fri, 12 Jul 2002 19:54:23 -0700 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="Boundary.11111111.11111111" Return-Path: AccuLottonews.free.com Message-ID: <MC2-F11ZLwvLJ6u7QAh001e7fc1mc2-f11.law16.hotmail.com> X-OriginalArrivalTime: 13 Jul 2002 09:38:25.0416 (UTC) FILETIME=[09287880:01C22A51]

--Boundary.11111111.11111111 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit

This message can only be viewed in HTML

--Boundary.11111111.11111111 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit

<center> If the above links do not work or appear, simply copy this URL and paste it into your browser's address field: <a href="http://www.acculotto.com/p.pl/M2" TARGET="_blank"> http://www.acculotto.com/p.pl/M2> </center> <HR SIZE=1 width="90%">

Note: This email was sent to you because you registered at Free.com and subscribed to this newsletter. The email address was then verified and the agreement confirmed by someone responding from your email address that required confirmation of registration. This is a double opt-in list and can NOT in any way be construed as spam. If you wish to unsubscribe from Free.com, please click the link below: <a href="http://www.Free.com/OptOut.asp?o=227825">Unsubscribe Here</a> and you will never receive another wonderful, free offer from us! Please note, it may take up to a week for you to be removed from our database. <hr> </body> </html>

--Boundary.11111111.11111111--

"Manuel" <manuelochoa-usa.com> wrote in message news:20020713162847.31419.qmailweb20706.mail.yahoo.com... > > I need to query a database and return a resultset. A php script will then sort through the data and send the data to the browser in the form of a table. > > Is it possible to gather the the results with html tags and store them in a variable so that the results can be emailed to someone? If so, how would this be done? > > > > --------------------------------- > Do You Yahoo!? > Yahoo! Autos - Get free new car price quotes

attached mail follows:

Does exit() in a recursive function exit the entire function, of does it only exit that iteration of teh function?? Thanks

attached mail follows:

Hi,

i am currently having some problems with the mail() function, because emails don't get send, or if they do, they arrive with a huge delay. (~ 5% of mail() sent emails arrive) This only happens, if i try to email s.o. outside my network.

Does anyone have an idea, what might cause this problem? Could it be the ISP, or do i need to add additional info, when i call the mail() function in order to send emails outside my network?

This is what i used to test if the emails get sent or not:

<? mail(testtest.com,"test-subject","Test-content","From: testtest.com\r\n"."Reply-To:testtest.com\r\n"); ?>

Regards,

Duncan

attached mail follows:

Message-ID: <000a01c22a91$3fe51f00$fe01a8c0

genocide> From: "Chris Knipe" <savage

savage.za.org> To: "Duncan" <php-general

ring-wraith.com>, <php-general

lists.php.net> Date: Sat, 13 Jul 2002 19:18:04 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Subject: Re: [PHP] mail() problem

> Does anyone have an idea, what might cause this problem? > Could it be the ISP, or do i need to add additional info, when i call the mail() function in order to send emails outside my network?

Could be your ISP...

> This is what i used to test if the emails get sent or not:

> <? > mail(testtest.com,"test-subject","Test-content","From: testtest.com\r\n"."Reply-To:testtest.com\r\n"); > ?>

Mail from testtest.com may be your problem, if the ISP is doing sender address verification (which is more than likely the case).

Try sending the mail from a valid exisiting email address, and see if that may help you.

attached mail follows:

Hi there,

I am getting from time to time such GET requests. I think this is kind of a atack against the webserver. DNS maybe. Here is the log entry:

218.5.149.77 - - [13/Jul/2002:19:57:09 +0200] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3% u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 321

can anybody tell me more about this. How could this harm the server or application installed and what can I do against it?

Thank you for any help on that,

Andy

attached mail follows:

This looks like a variant of the code red worm and will only bother you if you are running IIS, which I would hope you are not. :-)

218.5.149.77 is apparently running an infected IIS Web server. You might want to let them know.

Happy hacking.

Chris

andy wrote:

>Hi there, > >I am getting from time to time such GET requests. I think this is kind of a >atack against the webserver. DNS maybe. Here is the log entry: > >218.5.149.77 - - [13/Jul/2002:19:57:09 +0200] "GET >/default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN >NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN >NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN >NNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3% >u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a >HTTP/1.0" 400 321 >

attached mail follows:

I have an array filled with objects. Each object has a method called "display".

I have

$var = $arr[0]; $var->display();

but I keep getting an error. What am I doing wrong? (I do a print_r of the array immediately before this code and there is an object at array[0])

Thanks Alex

attached mail follows:

Hi,

I want to install 2 different php4 on my webserver (RH 7.1) for having 2 different php.ini (to stop some function for some vhost) and call him with different extension with the addhandler directive in the vhost of apache. ( I have php in cgi and suexec )

Thanks for your responses,

Pierre

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]