OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[suspicious - maybe spam] php-general Digest 31 Aug 2005 08:07:02 -0000 Issue 3655

php-general-digest-helplists.php.net
Date: Wed Aug 31 2005 - 03:07:02 CDT


php-general Digest 31 Aug 2005 08:07:02 -0000 Issue 3655

Topics (messages 221613 through 221633):

Help in upgrade
        221613 by: PHP

[suspicious - maybe spam] PHP/MySQL/XmlHTTPRequest
        221614 by: Death Gauge
        221615 by: Manuel Lemos

Re: [suspicious - maybe spam] [PHP] [suspicious - maybe spam] PHP/MySQL/XmlHTTPRequest
        221616 by: Jasper Bryant-Greene

Re: ZCE Reccommendations
        221617 by: Chris Shiflett

Setup tips for oracle 9i development
        221618 by: robert mena
        221619 by: Jay Blanchard
        221622 by: Edin Kadibasic
        221623 by: Edin Kadibasic

Re: security while building online store
        221620 by: Christian Heinrich

Re: Browsing Into Levels
        221621 by: areguera

[suspicious - maybe spam] RE: [PHP] Re: [suspicious - maybe spam] PHP/MySQL/XmlHTTPRequest
        221624 by: Death Gauge

htpasswd-style password generation w/PHP
        221625 by: Dan Trainor

IMAP socket?
        221626 by: Patrick Barnes
        221627 by: Jasper Bryant-Greene

Re: [suspicious - maybe spam] [PHP] [suspicious - maybe spam] RE: [PHP] Re: [suspicious - maybe spam] PHP/MySQL/XmlHTTPRequest
        221628 by: Jasper Bryant-Greene

displaying certain number of character
        221629 by: Ross
        221630 by: Ross
        221631 by: Philip Hallstrom
        221633 by: Shafiq Rehman

(Yet another) I'm blind ... post
        221632 by: Martin S

Administrivia:

To subscribe to the digest, e-mail:
        php-general-digest-subscribelists.php.net

To unsubscribe from the digest, e-mail:
        php-general-digest-unsubscribelists.php.net

To post to the list, e-mail:
        php-generallists.php.net

----------------------------------------------------------------------

attached mail follows:


Hi,
I am trying to upgrade my server to apache 2 from apache 1, but i am running into a problem

in apache 1, i had the following line:

AddType application/x-httpd-php .php .php3 .phtml .htm .html

now if there is a certain directory where i specify to turn the engine off:
<Directory "/home/httpd/test">
php_flag engine on
</Directory>

it would still server the regular .htm pages fine.

Unfortuanetly, it seems in apache 2, it does not allow this.
if i try to server a page from a directory where i have turned the engine off, it prompts the my browser to download the .htm file now.

i can't remove .htm and .html from my AddType because I have .html files that have php code unfortuanetly.

has anyone found a way around this?

thanks

No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.10.17/85 - Release Date: 8/30/2005

attached mail follows:


Where do I go learn about XmlHTTPRequest? I've done googles and all I've
found was stuff about toolkits no tutorials or documents telling how to use
it.
--Death Gauge
"How do you gauge your death?!"

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

attached mail follows:


Hello,

on 08/30/2005 04:51 PM Death Gauge said the following:
> Where do I go learn about XmlHTTPRequest? I've done googles and all I've
> found was stuff about toolkits no tutorials or documents telling how to
> use it.

Here you may find at least 3 solutions to take advantage of
XMLHttpRequest AJAX technology from PHP:

http://www.phpclasses.org/najax

http://www.phpclasses.org/pajax

http://www.phpclasses.org/httprequest

--

Regards,
Manuel Lemos

PHP Classes - Free ready to use OOP components written in PHP
http://www.phpclasses.org/

PHP Reviews - Reviews of PHP books and other products
http://www.phpclasses.org/reviews/

Metastorage - Data object relational mapping layer generator
http://www.meta-language.net/metastorage.html

attached mail follows:


Death Gauge wrote:
> Where do I go learn about XmlHTTPRequest? I've done googles and all I've
> found was stuff about toolkits no tutorials or documents telling how to
> use it.

How about the top three results on Google?

http://www.google.com/search?q=XMLHTTPRequest

--
Jasper Bryant-Greene
Freelance web developer
http://jasper.bryant-greene.name/

If you find my advice useful, please consider donating to a poor
student! You can choose whatever amount you think my advice was
worth to you. http://tinyurl.com/7oa5s

attached mail follows:


hitek wrote:
> I'm taking my ZCE exam soon and would like general advice on
> what to study up on.

This is a good resource:

http://zend.com/store/education/certification/zend-php-certification-objectives.php

You picked a good month to take the exam, since it's $125 this month
(normally $200).

Chris

--
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/

attached mail follows:


hi, I'd like to start developing php applications that will access oracle 9i
databases.
 I am trying to setup a development enviroment using Linux so I was
wondering what should I download/install from oracle's web site in order to
compile php with 9i support.
 I am assuming that there is some sort of devel package only with the
libraries and headers...
 The database is already running (under Windows).
 regards,
mena

attached mail follows:


[snip]
hi, I'd like to start developing php applications that will access
oracle 9i
databases.
 I am trying to setup a development enviroment using Linux so I was
wondering what should I download/install from oracle's web site in order
to
compile php with 9i support.
 I am assuming that there is some sort of devel package only with the
libraries and headers...
 The database is already running (under Windows).
[/snip]

Have you read the fine manual at http://www.php.net/oracle ?

attached mail follows:


Jay Blanchard wrote:
> [snip]
> hi, I'd like to start developing php applications that will access
> oracle 9i
> databases.
> I am trying to setup a development enviroment using Linux so I was
> wondering what should I download/install from oracle's web site in order
> to
> compile php with 9i support.
> I am assuming that there is some sort of devel package only with the
> libraries and headers...
> The database is already running (under Windows).
> [/snip]
>
> Have you read the fine manual at http://www.php.net/oracle ?

Except one should use http://www.php.net/oci8
ext/oracle is sort of bitrotten :)

Edin

attached mail follows:


robert mena wrote:
> hi, I'd like to start developing php applications that will access oracle 9i
> databases.
> I am trying to setup a development enviroment using Linux so I was
> wondering what should I download/install from oracle's web site in order to
> compile php with 9i support.
> I am assuming that there is some sort of devel package only with the
> libraries and headers...
> The database is already running (under Windows).
> regards,
> mena

You will need to download and install Oracle Instant Client which is
free. How to setup PHP to use it, you can read at http://www.php.net/oci8

Edin

attached mail follows:


Hi,

most probably, things like XSS (Cross-Site-Scripting) and SQL-Injections
might lead to a successfull hacking-attempt.
If you try to write your own online store, make sure that you do NOT use
register_globals!

Try to google for XSS and SQL-Injections, there might be plenty of
information on the web.

"Good night"-wishes from Germany
Christian

> Hi,
> I was checking on several php/mysql based on line store, free and
> commercial, but didn't find any that fits the best for us. Looks like,
> it would be the best to develop one.
> To make a online store that works fine - it shouldn't be such a big
> problem.
> To make a SECURE ad SAFE online store - that's the tough one form me.
>
> Before I even start building the store, can somebody point usual
> "traps" and problems, and security problems that usually happen, some
> advices, any advices?
>
> Thanks for any help!
>
> -afan
>

attached mail follows:


Thanks for the replay.
 
> >> They are called breadcrumbs:
> >> http://www.google.com/search?q=php+breadcrumbs

I didn't know the key :) (breadcrumbs), so it is now a very good help to me.

> > use either the existing directory/file
> > structure or a hard-coded array of your site structure to create the
> > breadcrumbs.

feel these are great solutions, specially hard-coded array, it would
make me able to take full control of level browsing even though when
sections are reused(I guess).

ex.

home > Departments > Articles
home > Categories > Articles
home > Users > Subscriptions > Articles

Here 'Articles' would be an action that can be reused to show articles
from different patterns and levels, so with the hard-coded array I
would do this, but now I must see how to call the show_location()
function(where I implement the logic) and with what arguments, from
the Articles' Action and how make it decide that is one section and no
other(keeping the track) in some dynamic way. Hope don't fall into
redundant jumping again.

What do you think?...

attached mail follows:


Ok how do I get rid of the annoying "[suspicious - maybe spam]" crap that
appears when I post?

--Death Gauge
"How do you gauge your death?!"

----Original Message Follows----
From: Manuel Lemos <mlemosacm.org>
To: Death Gauge <clay_hghotmail.com>
CC: php-generallists.php.net
Subject: [PHP] Re: [suspicious - maybe spam] PHP/MySQL/XmlHTTPRequest
Date: Tue, 30 Aug 2005 17:11:47 -0300

Hello,

on 08/30/2005 04:51 PM Death Gauge said the following:
>Where do I go learn about XmlHTTPRequest? I've done googles and all I've
>found was stuff about toolkits no tutorials or documents telling how to use
>it.

Here you may find at least 3 solutions to take advantage of XMLHttpRequest
AJAX technology from PHP:

http://www.phpclasses.org/najax

http://www.phpclasses.org/pajax

http://www.phpclasses.org/httprequest

--

Regards,
Manuel Lemos

PHP Classes - Free ready to use OOP components written in PHP
http://www.phpclasses.org/

PHP Reviews - Reviews of PHP books and other products
http://www.phpclasses.org/reviews/

Metastorage - Data object relational mapping layer generator
http://www.meta-language.net/metastorage.html

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

_________________________________________________________________
Don’t just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/

attached mail follows:


Hello, all -

I've been trying to figure out a reliable way of creating user:pass
combinations to be used from within an Apache-based .htpasswd file.

From what I understand, PHP's crypt() function is almost identical to
the Linux system crypt() function, which 'htpasswd' uses. However, when
using PHP's crypt(), my result string is much longer than the one that
can be found in your ordinary .htpasswd file generated by 'htpasswd'.

However, thi smight be what I'm looking for, since 'htpasswd' is know to
use two different types of password encryption:

(from htpasswd's manpage)

"htpasswd encrypts passwords using either a version of MD5 modified
for Apache, or the system’s crypt() routine. Files managed by htpasswd
may contain both types of passwords; some user records may have
MD5-encrypted passwords while others in the same file may have passwords
encrypted with crypt()."

Does PHP's crypt() use that modified version of an MD5 routine, and
that's what I'm seeing?

Basically I'd like to make an application that can modify any .htpasswd
file, adding and deleting users, without actually running the 'htpasswd'
utility.

Thanks!
-dant

attached mail follows:


Hi there,

Is there any way to get the file descriptor of an IMAP stream opened
with imap_open?

Patrick

attached mail follows:


Patrick Barnes wrote:
> Is there any way to get the file descriptor of an IMAP stream opened
> with imap_open?

No. You'd have to manually connect to the IMAP server with socket
functions or whatever.

One way to look at it is that imap_* functions are a higher level of
abstraction than raw file descriptors and sockets, so providing the file
descriptor would break that abstraction.

--
Jasper Bryant-Greene
Freelance web developer
http://jasper.bryant-greene.name/

If you find my advice useful, please consider donating to a poor
student! You can choose whatever amount you think my advice was
worth to you. http://tinyurl.com/7oa5s

attached mail follows:


Death Gauge wrote:
> Ok how do I get rid of the annoying "[suspicious - maybe spam]" crap
> that appears when I post?

This won't help with that, but please stop top-posting.

Your ISP is probably adding it because it thinks you're message is spam.
It might be something to do with your signature, maybe the word "gauge"...

Talk to your ISP.

Jasper

attached mail follows:


$words= "If length is given and is negative,
 then that many characters will be omitted from
 the end of string (after the start position has
 been calculated when a start is negative). If start
 denotes a position beyond this truncation, an empty
 string will be returned. ";

 echo substr($words, 0, 50).".......";
 ?>

I have been using this but how can I make sure I do not split a word in
half? - Finishing on a <space> would probably do it.

R.

attached mail follows:


$words= "If length is given and is negative,
 then that many characters will be omitted from
 the end of string (after the start position has
 been calculated when a start is negative). If start
 denotes a position beyond this truncation, an empty
 string will be returned. ";

 echo substr($words, 0, 50).".......";
 ?>

I have been using this but how can I make sure I do not split a word in
half? - Finishing on a <space> would probably do it.

R.

attached mail follows:


> $words= "If length is given and is negative,
> then that many characters will be omitted from
> the end of string (after the start position has
> been calculated when a start is negative). If start
> denotes a position beyond this truncation, an empty
> string will be returned. ";
>
> echo substr($words, 0, 50).".......";
> ?>
>
>
> I have been using this but how can I make sure I do not split a word in
> half? - Finishing on a <space> would probably do it.

You could use wordwrap() to wrap lines at 50 characters and then just take
the first line....

http://us3.php.net/wordwrap

-philip

attached mail follows:


Hey Philip you can use this function

function cuttext($text, $maxChars = 20, $tail = '')
{
$arrWords = explode(" ", $text);
$temp = "";
for ($i=0; $i<count($arrWords); $i++)
{
$temp = ($i == 0 ? $arrWords[$i] : " ". $arrWords[$i] );
if (strlen($temp) < $maxChars)
{
$returnStr = $temp;
}
else
{
return $returnStr.$tail;
}
}
return $returnStr;
}

Usage:
echo cuttext("Please visit my site", 15, $tail = '..');
This will echo "Please visit"

On 8/31/05, Philip Hallstrom <phpphilip.pjkh.com> wrote:
>
> > $words= "If length is given and is negative,
> > then that many characters will be omitted from
> > the end of string (after the start position has
> > been calculated when a start is negative). If start
> > denotes a position beyond this truncation, an empty
> > string will be returned. ";
> >
> > echo substr($words, 0, 50).".......";
> > ?>
> >
> >
> > I have been using this but how can I make sure I do not split a word in
> > half? - Finishing on a <space> would probably do it.
>
> You could use wordwrap() to wrap lines at 50 characters and then just take
> the first line....
>
> http://us3.php.net/wordwrap
>
> -philip
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

--
*** phpgurru.com <http://phpgurru.com> [A php resource provider] ***

\\\|///
\\ - - //
( ) PHP is too logical for my brain
+---oOOo-(_)-oOOo------------------------------------------+
| Mian Shafiq ur Rehman
| phpgurru.com <http://phpgurru.com> [A php resource provider]
| 107 B, New Town, Multan Road
| Lahore Pakistan
|
| Mobile: 0300 423 9385
|
| ooo0 http://www.phpgurru.com
| ( ) 0ooo E-Mail: rehmanmsgmail.com
+---\ (----( )------------------------------------------+
\_) ) /
(_/

attached mail follows:


In this code, I'm not getting the value of $list passed to the Mailman page.
I've checked this umpteen times by now, but fail to see the error. I've
beaten myself suitably with a steel ruler -- but it didn't help. Nor does
the cold I'm coming down with I suppose.

Anyone see the error, and feel like pointing it out to me?

Martin S

<?php
print "<H2><B>Join the lists</b></H2>";
print "<FORM Method=POST
ACTION='http://www.bollmora.org/mailman/subscribe/' . $lista . '><br>'";
print "Your E-mail address: <INPUT type=\"Text\" name=\"email\" size=\"30\"
value=\"\"><br>";
print "Your Name (optional): <INPUT type=\"Text\" name=\"fullname\"
size=\"30\" value=\"\"><br><br>";
print "Lista: <select name=\"lista\" />";
print "<option value=\"tvl_bollmora.org\">Tävling</option>";
print "<option value=\"jpg_bollmora.org\">JGP</option>";
print "<option value=\"styrelse_bollmora.org\">Styrelse</option>";
print "</select><br>";
print "You may enter a privacy password below. This provides only mild
security, but should<br>
 prevent others from messing with your subscription. <b>Do not use a
valuable password</b> as it<br>
 will occasionally be emailed back to you in cleartext.<br><br>
 If you choose not to enter a password, one will be automatically generated
for you, and it will<br>
 be sent to you once you've confirmed your subscription. You can always
request a mail-back<br>
 of your password when you edit your personal options.<br><br>";
 print "Would you like to receive list mail batched in a daily digest? (You
may choose NoMail after you join.)<BR><br>";
 print "<input type=radio name=\"digest\" value=\"0\" CHECKED> No <input
type=radio name=\"digest\" value=\"1\"> Yes<br><br>";
 print "<INPUT type=\"Submit\" name=\"email-button\" value=\"Subscribe\">";
 print "</FORM>";
 ?>