[PHP] Re: Formating datevariables...

2002-07-23 Thread Ragnar

Thanx for the help..

I ended up with this solution ;)

$dag = substr ( $row['endret_dato'], 7, 2 );
$mnd = substr ( $row['endret_dato'], 4, 2 );
$aar = substr ( $row['endret_dato'], 0, 4 );

date ("dmY", mktime(0,0,0,$mnd,$dag,$aar) )

-R

"Ragnar" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I have a column in a mysql table with a timestamp. The value of this
column
> is for instance:
>
> 20020722185242
>
> How do i change the format on this to "DDMM" (22072002) in php?
>
> Thanx
>
> -R
>
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] Re: Formating datevariables...

2002-07-24 Thread Ragnar

Hi, i dont know if im always going to use mysql, thow your solution to my
problem will be something like this:

SELECT DATE_FORMAT( endret_dato, \"%d%m%Y\" ) as endret_dato
, headline
, news
from rnr_news
order by endret_dato desc
limit " . $index . "," . ($index+10));

Thanx for your help!

-R

"John Holmes" <[EMAIL PROTECTED]> wrote in message
01c232b4$11419d10$b402a8c0@mango">news:01c232b4$11419d10$b402a8c0@mango...
> > Thanx for the help..
> >
> > I ended up with this solution ;)
> >
> > $dag = substr ( $row['endret_dato'], 7, 2 );
> > $mnd = substr ( $row['endret_dato'], 4, 2 );
> > $aar = substr ( $row['endret_dato'], 0, 4 );
> >
> > date ("dmY", mktime(0,0,0,$mnd,$dag,$aar) )
>
> Did you even read the replies? Why are you going to do a bunch of string
> manipulation, mktime, and date calls in PHP when you can just use
> DATE_FORMAT() in your query and get exactly what you want without any
> additional work by PHP?
>
> Take a little time and Read Chapter 6 of the MySQL manual. It will save
> you a ton of work later on...
>
> ---John Holmes...
>
>
> > -R
> >
> > "Ragnar" <[EMAIL PROTECTED]> wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > I have a column in a mysql table with a timestamp. The value of this
> > column
> > > is for instance:
> > >
> > > 20020722185242
> > >
> > > How do i change the format on this to "DDMM" (22072002) in php?
> > >
> > > Thanx
> > >
> > > -R
> > >
> > >
> >
> >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, visit: http://www.php.net/unsub.php
>
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] timestamp triggered only on update?

2002-07-25 Thread Ragnar

Maybe the wrong forum, but im giving it a try.

Im used to for instance 2 columns in each table indicating when it was
created and when it was last updated:

Changed_date
Registered_date

In mysql it seems it is only possible to define a column as a timestamp, and
this will trigger both on insert and delete. Is it possible to define
changed_date to trigger only on update in mysql or do i have do give the
correct timestamp "manually" from php?

Thanx

-R



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] Re: timestamp triggered only on update?

2002-07-25 Thread Ragnar

hehe.. ofcourse i ment:


...this will trigger both on insert and update.

"Ragnar" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Maybe the wrong forum, but im giving it a try.
>
> Im used to for instance 2 columns in each table indicating when it was
> created and when it was last updated:
>
> Changed_date
> Registered_date
>
> In mysql it seems it is only possible to define a column as a timestamp,
and
> this will trigger both on insert and delete. Is it possible to define
> changed_date to trigger only on update in mysql or do i have do give the
> correct timestamp "manually" from php?
>
> Thanx
>
> -R
>
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] Displaying images with php?

2002-06-05 Thread Ragnar

What is the best way to display images in the browser with php? If i for
instance have the pictures in ..\pictures\

??

-Ragnar



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] Displaying images with php?

2002-06-05 Thread Ragnar

Thx,

no, you did not misunderstand. Thats the way im building the html code for
displaying images now, but in the manual there is a lot of image-functions.
I thought that there maybe was some better way of displaying the images..

But... hey, if this is the way it is done i guess everything is ok ;)

Thanx again!!

.Ragnar

"Nick Wilson" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
>
> * and then Ragnar declared
> > What is the best way to display images in the browser with php? If i for
> > instance have the pictures in ..\pictures\
>
> print("");
>
> Or did i misunderstand you?
> - --
> Nick Wilson //  www.explodingnet.com
>
>
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.0.6 (GNU/Linux)
>
> iD8DBQE8/npAHpvrrTa6L5oRApm0AJ4sQ3jB12uGe3ToxMHgsKoxffon5wCfaUOI
> Yvdfm+C55uKT/JJFpfVjYeQ=
> =XZLu
> -END PGP SIGNATURE-



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] How can i resize images after upload?

2002-06-06 Thread Ragnar

Is there a way in php to change the size of a posted/uploaded image
regardless of the imagetype?

-R



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] Formating datevariables...

2002-07-22 Thread Ragnar

I have a column in a mysql table with a timestamp. The value of this column
is for instance:

20020722185242

How do i change the format on this to "DDMM" (22072002) in php?

Thanx

-R



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] Why cant i refer to $userfile and $userfile_name?

2002-05-22 Thread Ragnar

Hi,

 im a newbie to php and are trying to make a small upload script. So i have
 read about the variables $userfile and $userfile_name. When i try to run
the
 script i get the following error:

 Notice: Undefined variable: userfile
 Notice: Undefined variable: userfile_name

 Some of the code:

 if ( is_uploaded_file ( $_FILES  [$userfile] [$userfile_name] ) )

 Why cant i use the variables?




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] Upload wont work

2002-05-23 Thread Ragnar

Hi and thanx for previous help!!!

Still a newbie ;)

I have tried to make the example from php manual working and have the
following code:

upload.html:



Send this file: 



demo_up.php:





This always ends up displaying "File not uploadet" + Filename. The file
doesnt seem to upload at all. Im using IIS 5.1 and latest version of php.

Any ideas?

Thanx!



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] Re: Upload wont work

2002-05-23 Thread Ragnar

It seems that i have passed the original problem.. now i get this
errormessage:

Warning: Unable to create 'C:\Inetpub\wwwroot\demos': Permission denied in
c:\inetpub\wwwroot\demo_up.php on line 7

This is where i try to copy the uploaded file to the demo directory. So i
try to enable write access to the demo directory in IIS, but this has no
effect.




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] Re: Upload wont work

2002-05-23 Thread Ragnar

hmm.. im using fat32, maybe i should convert the partition to ntfs..

"John Holmes" <[EMAIL PROTECTED]> wrote in message
001301c202ad$fcb42f60$b402a8c0@mango">news:001301c202ad$fcb42f60$b402a8c0@mango...
> If you're using NTFS, the IUSR_ user has to have write
> permissions to that folder.
>
> ---John Holmes...
>
>
> > -Original Message-
> > From: Ragnar [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, May 23, 2002 6:51 PM
> > To: [EMAIL PROTECTED]
> > Subject: [PHP] Re: Upload wont work
> >
> > It seems that i have passed the original problem.. now i get this
> > errormessage:
> >
> > Warning: Unable to create 'C:\Inetpub\wwwroot\demos': Permission
> denied in
> > c:\inetpub\wwwroot\demo_up.php on line 7
> >
> > This is where i try to copy the uploaded file to the demo directory.
> So i
> > try to enable write access to the demo directory in IIS, but this has
> no
> > effect.
> >
> >
> >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, visit: http://www.php.net/unsub.php
>
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] Re: Upload wont work

2002-05-24 Thread Ragnar

lol... the problem was in this line:

move_uploaded_file($_FILES['userfile']['tmp_name'],"c:\\inetpub\\wwwroot\\up
load\\".$_FILES['userfile']['name']);

I used single backslash.. and thats no good i think ;)


"Ragnar" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi and thanx for previous help!!!
>
> Still a newbie ;)
>
> I have tried to make the example from php manual working and have the
> following code:
>
> upload.html:
>
> 
> 
> Send this file: 
> 
> 
>
> demo_up.php:
>
> 
> function upload ()
> {
>if ( is_uploaded_file ($_FILES['userfile']['name'] ) )
>{
>   copy($_FILES['userfile']['name'], "/demos/");
>}
>
>else
>{
>   echo "File not uploaded: " . $_FILES['userfile']['name'];
>}
> }
>
> ?>
>
>  upload();
> ?>
>
> This always ends up displaying "File not uploadet" + Filename. The file
> doesnt seem to upload at all. Im using IIS 5.1 and latest version of php.
>
> Any ideas?
>
> Thanx!
>
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] PhP, mysql and pictures

2002-05-27 Thread Ragnar

Is it possible to display images in a browser that are stored as a blob
column in a mysql table? Or is it better to store images in a direcotory and
display them "from" there?

-Ragnar



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] [PHP-NIX] File upload

2004-04-22 Thread Ragnar
Hi guys/girls,

I am having some major pain here with a php script handling file uploads.
It's part of an CMS and the file in question takes a PDF, makes a thumbnail
of it and then moves it to it's proper location on the server.

All this works fine with smaller files < ~ 2 MB.

I am having a file that needs to be uploaded to the server though, that is
2.3MB and the script just doesn't handle it.

I have already increased all the PHP.ini setting (i.e. max_file_size,
max_input_time, max_execution_time etc.) but to no avail.

All the setting are well beyond of what the actual process takes, and the
script itself doesn't seem to timeout, it just comes back with:

"Warning: Unable to open 'none' for reading: No such file or directory in
..."

which is pointing to the line where the file is copied from it's temp
location on the server /tmp/ to it's proper folder.
It seems to me, the file (temporary) never actually ends up on the server in
the first place.

As I said above, for smaller files everything works fine.

All this is running on:
Apache, PHP 4.1.2, Linux

The increase for the php.ini variables is only made for one of
the domains hosted on that machine via entries in the virtual host part
of the httpd.conf and I checked with phpinfo() wether the variables that
increased via those setting are actually changing accordingly.
All that looked fine.


Does anyone have an idea what could be going on?
I'd appreciate any help on this, as the client is expecting this to
be fixed ASAP.

cheers,

Ben

-- 
"Sie haben neue Mails!" - Die GMX Toolbar informiert Sie beim Surfen!
Jetzt aktivieren unter http://www.gmx.net/info

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] Re: [PHP-WIN] [PHP-NIX] File upload

2004-04-23 Thread Ragnar
Hi Vk,

I tried this beforehand, but to no avail. The documentation
also states that this form field entry does not overwrite the
max_filesize_setting in php.ini, when uploading.

so even if I set the hidden form field to 30MB and the .ini
setting is 8MB the file will be rejected if it's over 8MB.

I am am wrong on this, let me know.

> 
> are you uploading the file through a HTML form? if so check the FORM for
> the
> following
> hidden input field...
>   
>   increace the above value (in bytes) to a bit
> more
> value than your maximum
> file size you are tring to upload.
> 
> happy coding...
> 
> Vk.
> 
> 
> Ragnar wrote:
> 
> > Hi guys/girls,
> >
> > I am having some major pain here with a php script handling file
> uploads.
> > It's part of an CMS and the file in question takes a PDF, makes a
> thumbnail
> > of it and then moves it to it's proper location on the server.
> >
> > All this works fine with smaller files < ~ 2 MB.
> >
> > I am having a file that needs to be uploaded to the server though, that
> is
> > 2.3MB and the script just doesn't handle it.
> >
> > I have already increased all the PHP.ini setting (i.e. max_file_size,
> > max_input_time, max_execution_time etc.) but to no avail.
> >
> > All the setting are well beyond of what the actual process takes, and
> the
> > script itself doesn't seem to timeout, it just comes back with:
> >
> > "Warning: Unable to open 'none' for reading: No such file or directory
> in
> > ..."
> >
> > which is pointing to the line where the file is copied from it's temp
> > location on the server /tmp/ to it's proper folder.
> > It seems to me, the file (temporary) never actually ends up on the
> server in
> > the first place.
> >
> > As I said above, for smaller files everything works fine.
> >
> > All this is running on:
> > Apache, PHP 4.1.2, Linux
> >
> > The increase for the php.ini variables is only made for one of
> > the domains hosted on that machine via entries in the virtual host part
> > of the httpd.conf and I checked with phpinfo() wether the variables that
> > increased via those setting are actually changing accordingly.
> > All that looked fine.
> >
> > Does anyone have an idea what could be going on?
> > I'd appreciate any help on this, as the client is expecting this to
> > be fixed ASAP.
> >
> > cheers,
> >
> > Ben
> >
> > --
> > "Sie haben neue Mails!" - Die GMX Toolbar informiert Sie beim Surfen!
> > Jetzt aktivieren unter http://www.gmx.net/info
> >
> > --
> > PHP Windows Mailing List (http://www.php.net/)
> > To unsubscribe, visit: http://www.php.net/unsub.php
> 
> 

-- 
NEU : GMX Internet.FreeDSL
Ab sofort DSL-Tarif ohne Grundgebühr: http://www.gmx.net/dsl

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] How do I POST data with headers & make the browser follow?

2005-10-06 Thread Ragnar

Hi guys/girls,

I have to apologize if this issue has been discussed in detail before but I
couldn't find anything obvious so far.

What I need/want to do is to :

1. Take POST data from a form (no problem)
2. Do whatever i need to on the target page (no problem)
3. Pass some other data on to a 3rd page as a POST
   request.
4. Get the browser to follow to said 3rd page.


All this is happening via SSL.

So basically what i am trying to do is to "fake" whatever happens
at a normal POST request that is handled by the browser.

Now point 4. in my example above is giving me a massive headache,
I have managed to pass data on to the 3rd page as POST quite comfortably
using cURL but the browser doesn't follow (ie. the URL in the address bar
remains unchanged).

I did see that there is a FOLLOWLOCATION option you can set in cURL when you
do you request, and though "wicked, just what I needed" only to find out
that it's not working (probably because I understand what it does wrong).

Pretty pretty please if anyone knows a solution for the above, let me know. 

Oh, and I'd also like to add that the information I am trying to get to the
3rd page in the example is sensitive (Credit Card details etc.), so $_GET
and $_COOKIE are out of the question.

ANY help would be appreciated.

Kind regards,
Ben

-- 
5 GB Mailbox, 50 FreeSMS http://www.gmx.net/de/go/promail
+++ GMX - die erste Adresse für Mail, Message, More +++

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] How do I POST data with headers & make the browser follow?

2005-10-06 Thread Ragnar

The information that comes in from the first page is a creditcard form
with the standard values (CCnumber, Expiry Date, Cardholder name etc).

On page 2 an XMLrequest is done with a verification gateway (in this case to
check for enrolment in 3D-Secure), the result for that I get back on the
same page and no redirection needs to be done. 

However AFTER the enrolment check with the gateway I need to send the user
along to the 3rd page, which is a URL that is provided by the verification
process. 
So to get there, as I need to pass a heap of data to that 3rd page I can
either use GET or POST, but since the amount of data is fairly big the only
real option for this part seems POST.

So it's not really about keeping the data persistent, it's more about the
fact on how to push the user along correctly. 

Hope that makes sense somehow.

Thanks for the reply.


> --- Ursprüngliche Nachricht ---
> Von: Brent Baisley <[EMAIL PROTECTED]>
> An: Ragnar <[EMAIL PROTECTED]>
> Kopie: php-general@lists.php.net
> Betreff: Re: [PHP] How do I POST data with headers & make the browser
> follow?
> Datum: Thu, 6 Oct 2005 08:57:02 -0400
> 
> If the information is sensitive, why are you trying to fake a POST  
> submission? A POST can be received from anywhere. SSL is just  
> encrypting it, not verifying the client is the same. I would use  
> session variables to store information you need to access from page  
> to page. That way you can verify that you are talking to the same  
> computer from the first two pages.
> 
> 
> On Oct 6, 2005, at 5:52 AM, Ragnar wrote:
> 
> >
> > Hi guys/girls,
> >
> > I have to apologize if this issue has been discussed in detail  
> > before but I
> > couldn't find anything obvious so far.
> >
> > What I need/want to do is to :
> >
> > 1. Take POST data from a form (no problem)
> > 2. Do whatever i need to on the target page (no problem)
> > 3. Pass some other data on to a 3rd page as a POST
> >request.
> > 4. Get the browser to follow to said 3rd page.
> >
> >
> > All this is happening via SSL.
> >
> > So basically what i am trying to do is to "fake" whatever happens
> > at a normal POST request that is handled by the browser.
> >
> > Now point 4. in my example above is giving me a massive headache,
> > I have managed to pass data on to the 3rd page as POST quite  
> > comfortably
> > using cURL but the browser doesn't follow (ie. the URL in the  
> > address bar
> > remains unchanged).
> >
> > I did see that there is a FOLLOWLOCATION option you can set in cURL  
> > when you
> > do you request, and though "wicked, just what I needed" only to  
> > find out
> > that it's not working (probably because I understand what it does  
> > wrong).
> >
> > Pretty pretty please if anyone knows a solution for the above, let  
> > me know.
> >
> > Oh, and I'd also like to add that the information I am trying to  
> > get to the
> > 3rd page in the example is sensitive (Credit Card details etc.), so  
> > $_GET
> > and $_COOKIE are out of the question.
> >
> > ANY help would be appreciated.
> >
> > Kind regards,
> > Ben
> >
> > -- 
> > 5 GB Mailbox, 50 FreeSMS http://www.gmx.net/de/go/promail
> > +++ GMX - die erste Adresse für Mail, Message, More +++
> >
> > -- 
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, visit: http://www.php.net/unsub.php
> >
> >
> >
> 
> -- 
> Brent Baisley
> Systems Architect
> Landover Associates, Inc.
> Search & Advisory Services for Advanced Technology Environments
> p: 212.759.6400/800.759.0577
> 
> 

-- 
10 GB Mailbox, 100 FreeSMS/Monat http://www.gmx.net/de/go/topmail
+++ GMX - die erste Adresse für Mail, Message, More +++

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] Re: How do I POST data with headers & make the browser follow?

2005-10-06 Thread Ragnar
Message-ID: <[EMAIL PROTECTED]>
To: php-general@lists.php.net
Date: Thu, 06 Oct 2005 15:04:41 +0200
From: Petr Smith <[EMAIL PROTECTED]>
Subject: Re: How do I POST data with headers & make the browser follow?

> I have to apologize if this issue has been discussed in detail before but
I
> couldn't find anything obvious so far.
> 
> What I need/want to do is to :
> 
> 1. Take POST data from a form (no problem)
> 2. Do whatever i need to on the target page (no problem)
> 3. Pass some other data on to a 3rd page as a POST
>request.
> 4. Get the browser to follow to said 3rd page.
> 
> 
> All this is happening via SSL.
> 
> So basically what i am trying to do is to "fake" whatever happens
> at a normal POST request that is handled by the browser.
> 
> Now point 4. in my example above is giving me a massive headache,
> I have managed to pass data on to the 3rd page as POST quite comfortably
> using cURL but the browser doesn't follow (ie. the URL in the address bar
> remains unchanged).
> 
> I did see that there is a FOLLOWLOCATION option you can set in cURL when
you
> do you request, and though "wicked, just what I needed" only to find out
> that it's not working (probably because I understand what it does wrong).
> 
> Pretty pretty please if anyone knows a solution for the above, let me
know. 
> 
> Oh, and I'd also like to add that the information I am trying to get to
the
> 3rd page in the example is sensitive (Credit Card details etc.), so $_GET
> and $_COOKIE are out of the question.

>Hi,
>
>it seems you have no understanding how http protocol works.. I can't 
>learn you the whole thing, but I can give you some hints. Read something 
>about HTTP 
>(http://www.digital-web.com/articles/powering_the_web_with_http/), 
>install some network sniffer (ethereal, HttpWatch for IE - great tool 
>for beginners) and see what happens.
>
>- you cannot force browser to POST something somewhere with PHP. You 
>have to realize, that PHP is running on server, but the browser is the 
>client.
>- you cannot use curl to do it. With curl it all happens on the server. 
>If you want to use curl, you have to use same technique used by "web 
>based anonymous proxy". Return all loaded data to client, rewrite urls 
>to your script, handle everything correctly until client closes browser. 
>Very complex stuff
>- followlocation has nothing to do with browser. it only says to curl to 
>evaluate Location header and do auto-redirection
>- sensitive information? GET, POST, COOKIE, everything could be
>intercepted
>- your only help is javascript. You can generate something like this to 
>client browser with php. But you couldn't hide sensitive information 
>this way.
>
>
>   
>
>- think about your problem and possible solutions again

>Petr

Hi Petr,

thanks for the reply, first off i certainly didn't claim to be an expert on
the HTTP, which is why i was asking the question I did.
I do realise that PHP runs on the server and can't force the browser to do
anything directly, I was merely wondering why header("Location:"); got the
browser to follow and if there was a way for me to get the same behaiviour
working when PHP was posting data.

Anyway, I will look at my problem at hand again and will try something else.

Thanks for the tips.


-- 
Highspeed-Freiheit. Bei GMX supergünstig, z.B. GMX DSL_Cityflat,
DSL-Flatrate für nur 4,99 Euro/Monat*  http://www.gmx.net/de/go/dsl

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] How do I POST data with headers & make the browser follow?

2005-10-07 Thread Ragnar

Hi Richard,

just to stop and everyone from getting a heart attack right this instant
what I am doing with cURL and the multiple pages attempt is not much
more scary than any other "person leaves credit card info on form" 
script you come across.

The server that I am re-sending the data to is our own and I know what 
i am sending and where, so it's not like I am toying around sending peoples
creditcard info to some dodgy location.

So what's happening is nothing other than peoples data being re-sent
by the server that belongs to us to a know and trusted source.
Since the data comes in via the checkout form already it is not any "less"
secure than usual.

The main issue for me was that I did not want to store the credit card
details for the second step of the processing.

Anyway, to stop me lamenting and clear this up I am not passing credit card
info around any places that are not verified or trustworthy and was merely
looking for a way to pass this information along without having to store
them on my end before the go across to the payment gateway.

I'll have another look at what I could do differently in this case. 
Usually I wouldn't to deal with an issue like this as payment information
would go straight to the payment gateway (handled there, processed there,
stored there) but in this case there was an inbetween step, which I didn't
know how to solve.

Thanks for the input.



> --- Ursprüngliche Nachricht ---
> Von: "Richard Lynch" <[EMAIL PROTECTED]>
> An: "Ragnar" <[EMAIL PROTECTED]>
> Kopie: php-general@lists.php.net
> Betreff: Re: [PHP] How do I POST data with headers & make the browser    
> follow?
> Datum: Fri, 7 Oct 2005 15:56:09 -0500 (CDT)
> 
> On Thu, October 6, 2005 4:52 am, Ragnar wrote:
> Everything you are trying to do with the cURL, multiple pages, and
> whatnot scares the bejesus out of me...
> 
> Especially that you seem to be passing people's credit card numbers
> around in this manner. [shudder]
 

-- 
NEU: Telefon-Flatrate fürs dt. Festnetz! GMX Phone_Flat: 9,99 Euro/Mon.*
Für DSL-Nutzer. Ohne Providerwechsel! http://www.gmx.net/de/go/telefonie

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] How do I POST data with headers & make the browser follow?

2005-10-08 Thread Ragnar
Hi Mark, 

basically what I am working on is integrating a step inbetween the checkout
and the payment gateway processing.

The cardholder information is checked for enrolment in the first step, if
the cardholder is enrolled he will need to authenticate himself by password
(this is where the 2nd page comes in) if the authentication is successfull
he is forwarded to the 3rd page where the payment gateway processing takes
place.

It's like any other online payment integration i have done before but this
time there is this extra step required due to Visa's and Mastercards new
security feature.

I didn't see an issue with passing this information along since it's already
used in the verification of the cardholder which also requires
the card number.

I do require the payment info again on page 3 to pass it along to the 
payment gateway, but didn't want to store it on my end for that.

What I gather from Richards answer earlier that the difference between
$_POST, $_GET or $_COOKIE, $_SESSION is almost irrelevant, I might
as well store the detail in a session to be able to use them on page
3 it seems.





> Is this what happens:
>
> 1. User enters payment data
> 2. XML check that payment data is OK
> 3. redirection to a page (on another site?), where for some reason the
> payment data is required again (why?).
>
> This sounds like a mixture of two ways of implementing online payments.
> Forgive me if I'm telling you what you already know, but in general I
> believe things work as follows:
> 
> 1 The whole process from payment to verification takes place on the 
> payment
> provider's server
> or
> 2.  the whole thing takes place on your server, with some inline (XML in
> this case) communication with your payment provider to verify the card
> details.
>
> You seem to be doing a bit of both, or have I misunderstood?
> Why do you need the payment details on the third page? If you don't 
> actually
> need them, then the security problem goes away, and you can use the 
> session
> object or whatever to persist the customer data.

> Does this help?

-- 
NEU: Telefon-Flatrate fürs dt. Festnetz! GMX Phone_Flat: 9,99 Euro/Mon.*
Für DSL-Nutzer. Ohne Providerwechsel! http://www.gmx.net/de/go/telefonie

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php