[PHP] Who's having a good hosting experience these days?

[The_RadiX]

Um Justin..

Hi..

or should I say.. Hi fellow Aussie mate .. :)


Yeah I am in oz too and asked some hosting questions a while back..

Your host has only 2GB downloads on the UNIX plan and also that's at US$15
p/m.. isnt that a tad pricey?


I was looking into powweb.com or aletia.com at much cheaper pricing and
larger services (200mb storage, 10/12Gb p/m,etc)



What do you think of these..



Thanks...
:::
:  Julien Bonastre [The-Spectrum.org CEO]
:  A.K.A. The_RadiX
:  [EMAIL PROTECTED]
:  ABN: 64 235 749 494
:  QUT Student #: 04475739
:::
- Original Message -
From: "Justin French" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 06, 2002 10:22 AM
Subject: Re: [PHP] Who's having a good hosting experience these days?


> Cheap?
> I've been with experthost.com for around 8 months, with very little to
> complain about... I've got a reseller account with about 12 domains, so
i'm
> paying around US$6each, and I think the standard is US$15each for one,
$10ea
> for two, and then a sliding scale up to 25 domains @ $5ea or something.
>
> It *shouldn't* be about the money, but I'm currently making a healthy
profit
> out of hosting some client domains under my account.
>
>
> Reliable?
> They have intelligent support staff on 24/7, and they've had one service
> fallout in this time.  It was a biggie, and I had to reload some data from
> my local copy, but I'd like to believe this was a one-off.
>
>
> Fast?
> The service seems fast (although I'm in Australia, so pings times are
> affected by sheer distance).
>
>
> Feature Rich?
> 50meg, 20POPs, redirects, groups, auto-responders, 2GB bandwidth, MySQL,
> webmail, recent versions of Apache/MySQL/PHP, intelligent support staff,
etc
> etc.
>
>
> I'm pretty happy.  Better still, they offer a free 1 month test account,
so
> you can try them for yourself.
>
>
> Justin French
> 
> Creative Director
> http://Indent.com.au
> 
>
>
>
>
>
> on 06/05/02 9:19 AM, David Freeman ([EMAIL PROTECTED]) wrote:
>
> >
> >> My hosting service which WAS cool about 2 years ago has
> >> grown into a bloated mess of zero logic.
> >
> > Fast, Reliable, Cheap, Feature-Rich
> >
> > Now pick any three.
> >
> > In the end I guess you get what you pay for.  If you can only afford a
> > lower price host then you only get lower value.
> >
> > CYA, Dave
> >
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Secure user authentication

[Pedro Pontes]

I wasn't in fact aware of that domain test thingie. So my main worry is no
more.

Thank you guys.

--


Pedro Alberto Pontes

"The_radix" <[EMAIL PROTECTED]> wrote in message
004c01c1f348$2db81c40$3200a8c0@oracle">news:004c01c1f348$2db81c40$3200a8c0@oracle...
> Pedro Pontes wrote:
> > with a SIMPLE "equals" test. So if a user happens to get that crypted
> value
> > of the password (from a temporary file on the server, for example), then
> all
> > the little devil has to do is to create a dummy session user object, or
in
> > your case, array, set its password value to the stolen crypted hash and
> then
> > link freely to any of your pages.
>
>
> well simply put? no..
>
> If a user can get the crypted value off your server, AND also figure how
to
> trick the PHP engine into accepting a session cookie that wasn't created
on
> your domain, then that would be either:
> a) you have dangerous and volatile PHP scripts that allow users to perform
> such nasty tricks
> b) your server security should be greatly improved..
>
>
> Jon Haworth wrote:
> > Why are you passing the password around, hashed or not, in the first
> place?
> > Just have a yes/no flag for whether the session is an authenticated user
> or
> > not.
>
> > Is there any particular reason why you'd need to reauthenticate on every
> > page?
>
> yes.. too true.. and simply put.. I could just pass the key or something
> around instead and then in my PHP header that runs on each and every page
> just reload a array with all the details anyway.. instead of passing
around
> the array..
>
> oh and as for "reauthenticating" well that's done because.. well stupid
> really when you think of it.. Unless they breach PHP as mentioned above,
and
> trick the session system, then there is little need to keep auth'ing
them..
>
>
> Haha.. Actually I just looked at my code.. Sorry I was mistaken.. due to
the
> complexity of my site. it doesn't actually "reauth" as such.. instead it
> checks to see the "status" of the user and does some log updates.. (to
keep
> track of user's still online etc..) ... when I say status.. I mean if I
> ban/block users while logged in.. the changes happen AS SOON as they view
> another page on the site and they get a lovely page telling them of their
> predicament :)
>
>
>
> Anywayz.. very interesting topic.. I will keep an eye on this..
>
>
> Miguel says:
> > This would only work if some other user is able to create files that the
> > web server thinks are part of your domain (since the session cookies are
> > domain-specific). Sounds to me like your problem here is severe server
> > misconfiguration. If your server environment is that insecure, then
> > worrying about anything else is sort of a waste of time.
>
> Yes.. Too true..
>
>
> Michael Kismal says:
> > What I can't figure out is why you're allowing people to just randomly
> > put pages on your server.  If someone was to randomly register a similar
> > user object, etc - why bother?  If I can put pages on your server and
> > execute them, I'd do some something far more malicious than just pretend
> > I'm "user X".
>
>
> Precisely what I am getting at too..
>
>
> Yes the general opinion seems to be: "If someone can get the session
handler
> of the PHP engine tricked so easily, or gain access so easily to your
> site... Then you'd better look into that WAY before you start picking on
> authentication schemes"..
>
>
> No harm intended ok.. Just pointing out some facts..
>
>
> Hope I can help.. Would love to demonstate some ideas/etc.. about how I do
> security stuff..
>
>
>
> Bye
> :::
> :  Julien Bonastre [The-Spectrum.org CEO]
> :  A.K.A. The_RadiX
> :  [EMAIL PROTECTED]
> :  ABN: 64 235 749 494
> :  QUT Student :: 04475739
> :::
> - Original Message -
> From: "Pedro Pontes" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Saturday, May 04, 2002 12:33 AM
> Subject: Re: [PHP] Secure user authentication
>
>
> > First of all, thank you for your devote answer.
> >
> > The method I was thinking about before was to pass the md5 hash of the
> > password around, as the passwords are already md5'ed in the DB. Your
> method
> > seems more secure as you use a totally spiced-up and personalized
> encryption
> > engine.
> >
> > But, the main question remains, I think. If you pass your crypted
password
> > around, then, in each page, you must check it agains't the database
entry
> > with a SIMPLE "equals" test. So if a user happens to get that crypted
> value
> > of the password (from a temporary file on the server, for example), then
> all
> > the little devil has to do is to create a dummy session user object, or
in
> > your case, array, set its password value to the stolen crypted hash and
> then
> > link freely to any of your pages.
> >
> > Am I right? Thanks again.
> >
> > --
> >
> >
> > Pedro Alberto Pontes
> >
> > "The_radix" <[EMAIL PROTECTED]> wrote in message
> > 003601c1f2aa$6120dbb0$f86086c

Re: [PHP] Newbie needs compile

[Miguel Cruz]

On Mon, 6 May 2002, Julian wrote:
> I didn't think that PHP could run w/o one though, so my idea was to use a
> text browser, have it run the script, then exit out.  As I said, I was
> probably wrong ;)

Build the CGI version of PHP and you can run it from the command line like 
any other interpreter.

miguel


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Zend - Studio, Encoder, Optimiser...

[Brian McGarvie]

I am writing several php applications wich demand speed & security.

I'm just looking for some reassurances from some ppl that might be using
the ZEND products to deliver this.

Is the speed increase using the optimiser noticable?

How well does the Encoder work?

I will be trying them out today (the encoder neway), and Studio.

Any comments would be appreciated by ppl who use it on any medium to
large-scale deployment...

Cheers,

   Brian...

===
  Brian M McGarvie,
Web Appications Co-ordinator/Consultant
===
[ www.mcgarvie.net | www.lennox-mckinlay.co.uk]
===

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Constructing a tree with recursion

[Sasa Velickovic]

Hi all,

ok, here is my problem.

I have a table in my db which is like this:

id  nameparent_id
1   menu1   0
2   menu2   0
3   menu3   0
4   menu4   0
5   sub11
6   sub22
7   sub33
8   sub46
9   sub57
10  sub69


which would be a tree like this (well, not actually a tree, more like a couple 
of linear linear lists starting from a point where parent_id == 0):

menu1 -> sub1
menu2 -> sub2 -> sub4
menu3 -> sub3 -> sub5 -> sub6
menu4

or something like this :)

The table always has less than 200 rows, so I just go right ahead an read all 
values into my array $categories. So now everything is let's say in:
$categories['id']
$categories['name'] and
$categories['parent_id']

I now make my $tree array and push every array from categories on it if it 
meets $categories['parent_id'] == 0 to start with


for ($i=0; $i < count($categories); $i++)
{
  if ($categories['parent_id'] == 0)
$tree[] = $categories[$i];
}

Now comes the hard part where help would be appreciated. How do I recursively 
run through $categories and add all the subs to the right $tree?

If you have any ideas I would be very glad.

Sasa Velickovic
http://www.hexatex.de

PS: I don't look for a nested sets algo to recursively select the right 
datasets from the database ...



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP] Newbie needs compile

[John Holmes]

> > He did say he did /not/ want to invoke it from a browser :)
> I didn't think that PHP could run w/o one though, so my idea was to
use a
> text browser, have it run the script, then exit out.  As I said, I was
> probably wrong ;)

Actually, that's exactly how it's typically done, using wget or lynx.
Yes, you can compile a standalone version of PHP and use it directly,
but most hosts do not have that. So, you add a line to your cron file
that calls up your PHP script through lynx. Your script shouldn't return
anything, just do what it has to do, or it should redirect output to a
file or email. You can use the -dump switch for lynx to dump any output
that does occur.

I know he said he did not want to invoke it from a browser, but I think
he meant that he didn't want to have to physically go to and load up the
page himself.

---John Holmes...


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Newbie needs compile

[Sogno Kahlenberg]

Hi Miguel,

It IS the CGI version. You mean I can

~~/php4/php /cgi-bin/cmanage/reindex.php

to run it? Any other key points? Thanx.


"Miguel Cruz" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> On Mon, 6 May 2002, Julian wrote:
> > I didn't think that PHP could run w/o one though, so my idea was to use
a
> > text browser, have it run the script, then exit out.  As I said, I was
> > probably wrong ;)
>
> Build the CGI version of PHP and you can run it from the command line like
> any other interpreter.
>
> miguel
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Question about fsockopen

[Luc Saint-Elie]

Hello

I use a class to parse a RSS feed, my problem is that when the distant site 
is down my own site is stuck (because my class waits for an answer that 
doesn't come..)
The logical answer is to use a fsockopen before to control the connection.
Reading the doc I see :
int fsockopen ( string hostname, int port [, int errno [, string errstr [, 
float timeout]]])

fsockopen allows to control if the hostname is up and running

My problem is that hostname returns the home page that is in HTML, the page 
that I want is a php page.

HTML page are not often down (only when all the server is down) php pages 
are often down (because mySQL problem or PHP problems)

So I'd like to be able to control if a specific url is OK and not only the 
hostname.

How can I do that ?

Thanks in advance

Luc


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: Zend - Studio, Encoder, Optimiser...

[Henrik Hansen]

[EMAIL PROTECTED] (Brian McGarvie) wrote:

 > I am writing several php applications wich demand speed & security.
>
 > I'm just looking for some reassurances from some ppl that might be using
 > the ZEND products to deliver this.
>
 > Is the speed increase using the optimiser noticable?
>
 > How well does the Encoder work?

for this part I can say it works very well, you just encode your code
with the command line encoder, upload it to wherever and it runs
(if the zend optimizer is running) and the code is very unreadable.

-- 
Henrik Hansen

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] phpMyAdmin Question

[Scott Reismanis]

Hey all,
 
This question is mainly mySQL related however I believe the problem
maybe caused by phpMyAdmin which is why I am posting it here. Anyhow
does mySQL tables allow for a mix of char / varchar columns? Because if
I try to create a table in phpMyAdmin for example:
 
CREATE TABLE generic (
  title char(20) NOT NULL,
  title_alternate varchar(40) NOT NULL
) TYPE=MyISAM;
 
it will always be stored as:
 
CREATE TABLE generic (
  title varchar(20) NOT NULL,
  title_alternate varchar(40) NOT NULL
) TYPE=MyISAM;
 
and I am unable to force it to char. The only reason why this is a
problem is char columns are quicker to process thus it would be ideal to
mix such columns rather than be forced to create another table for
example,
 
Thanks for your time,
 
Scott Reismanis
 
 
 

[PHP] Confirm Remote File exists !

[John Fishworld]

I've got a form where people can enter a link into !

What's the best and quickest way of confirming if the link exists !
Just use fpassthru and see if you get an error ?
Or has anyone got any better suggestions ??



Regards
John



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Defining PHP varibles from URL

[webmaster]

I don't mean to be a pain but could someone send me 
a working example?
 
I am what you would probably call a 
'newbie'
 
For those who don't know here is my previous 
message
 
 can't seem to define a varible from the url 
entered into a browser.
 
I wish to use the following code or something like 
it.

="php">

$file = "";
//the above is defined from the url

include "$file";



It could be 
what I was typing in the url bar.
file.php?file=foobar.inc
 
Thanks,
JJ 
Harrison[EMAIL PROTECTED]www.tececo.com

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php