Re: [PHP] MySql Injection advice

2009-07-11 Thread Zareef Ahmed
2009/7/12 Haig Dedeyan > On July 11, 2009 08:21:34 pm Haig Dedeyan wrote: > > On Sun, Jul 12, 2009 at 4:09 AM, Haig Dedeyan > wrote: > > > On July 11, 2009 10:57:14 am Haig Dedeyan wrote: > > > > At 10:12 PM -0400 7/10/09, Haig Dedeyan wrote: > > > > > > > > [1] > > > > > > > > >$fname = mysql_r

Re: [PHP] A prepared statements question

2009-07-11 Thread Daniel Brown
[Redirected to PHP-DB: php...@lists.php.net] On Sun, Jul 12, 2009 at 00:31, Jason Carson wrote: > Hello everyone, > > I am having a problem getting my prepared statements working. Here is my > setup... > >    index.php -> authenticate.php -> admin.php > > 1)index.php has a login form on it so

[PHP] A prepared statements question

2009-07-11 Thread Jason Carson
Hello everyone, I am having a problem getting my prepared statements working. Here is my setup... index.php -> authenticate.php -> admin.php 1)index.php has a login form on it so when someone enters their username the form redirects to another page I call authenticate.php. 2)In the authenti

Re: [PHP] Re: RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-11 Thread Adam Shannon
Hello, I've been a developer for a little over a year now (I started when I just turned 16), frankly I love coding and helping out others. I joined the list as my second mailing list (WHATWG is first), mailing lists just provide a different atmosphere than forums, blogs or message boards. I found

[PHP] Re: RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-11 Thread D.M.Jackson
Howdy Daniel and Group, I'm new here, in fact, my first post was just a few days ago. I'm a computer hobbiest hoping to transition myself into the IT world at some point in the near future, having spent most of my life working in building construction. (Guess, I'm just getting too old

Re: [PHP] MySql Injection advice

2009-07-11 Thread Haig Dedeyan
On July 11, 2009 08:21:34 pm Haig Dedeyan wrote: > On Sun, Jul 12, 2009 at 4:09 AM, Haig Dedeyan wrote: > > On July 11, 2009 10:57:14 am Haig Dedeyan wrote: > > > At 10:12 PM -0400 7/10/09, Haig Dedeyan wrote: > > > > > > [1] > > > > > > >$fname = mysql_real_escape_string($fname); > > > >$lname =

Re: [PHP] MySql Injection advice

2009-07-11 Thread Zareef Ahmed
On Sun, Jul 12, 2009 at 4:09 AM, Haig Dedeyan wrote: > On July 11, 2009 10:57:14 am Haig Dedeyan wrote: > > At 10:12 PM -0400 7/10/09, Haig Dedeyan wrote: > > > > [1] > > > > >$fname = mysql_real_escape_string($fname); > > >$lname = mysql_real_escape_string($lname); > > > > > >$sql = "UPDATE phon

Re: [PHP] PHP/mysql equivalent of PEAR's tableInfo()??

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 19:57, Govinda wrote: > I have been using PEAR's tableInfo() to remind myself about the columns in > the table..  but now I want to see as much data as possible about the table > and its contents *without* using PEAR.   (I.e. just using built in stuff for > mysqli.) Thi

[PHP] RFC/Survey for Our Newer Folks (Including Lurkers)

2009-07-11 Thread Daniel P. Brown
Ladies and Gentlemen: First of all, if you're new to the list, welcome. At the risk of bragging about our collective talents, you are now a member of a community that is home to what may be some of the best talent in web development you'll find on the Internet. I'm not speaking of myself

[PHP] PHP/mysql equivalent of PEAR's tableInfo()??

2009-07-11 Thread Govinda
I have been using PEAR's tableInfo() to remind myself about the columns in the table.. but now I want to see as much data as possible about the table and its contents *without* using PEAR. (I.e. just using built in stuff for mysqli.) I have been looking through the manuals, even tried th

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 19:46, Zareef Ahmed wrote: > I always said :  Being good and Being FORCED to be good  are two different > things... and PHP normally don't force us to be good that why PHP is the > most popular programming language with a large code base which WORKS but > not as per the stan

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Zareef Ahmed
I always said : Being good and Being FORCED to be good are two different things... and PHP normally don't force us to be good that why PHP is the most popular programming language with a large code base which WORKS but not as per the standard or recommended way ; so keep you old code as long as i

Re: [PHP] MySql Injection advice

2009-07-11 Thread Stuart
2009/7/12 Eddie Drapkin : > No offense or anything, but all of this work you've done is > immediately mode obsolete the second you switch to prepared > statements.  They're easier to use and more secure, as well as making > code more readable.  I don't understand why it's so hard for them to > catc

Re: [PHP] MySql Injection advice

2009-07-11 Thread Eddie Drapkin
On Sat, Jul 11, 2009 at 6:39 PM, Haig Dedeyan wrote: > On July 11, 2009 10:57:14 am Haig Dedeyan wrote: >> At 10:12 PM -0400 7/10/09, Haig Dedeyan wrote: >> >> [1] >> >> >$fname = mysql_real_escape_string($fname); >> >$lname = mysql_real_escape_string($lname); >> > >> >$sql = "UPDATE phonedir SET f

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Eddie Drapkin
On Sat, Jul 11, 2009 at 5:37 PM, tedd wrote: > At 3:34 AM +0700 7/12/09, Lenin wrote: >> >> On Sun, Jul 12, 2009 at 2:56 AM, Eddie Drapkin wrote: >> >>>  On Sat, Jul 11, 2009 at 3:53 PM, Govinda >> >>  > wrote: >>  > > what does "EOT" stand for? >>> >>>  > (I realize that string can be anything..

Re: [PHP] MySql Injection advice

2009-07-11 Thread Haig Dedeyan
On July 11, 2009 10:57:14 am Haig Dedeyan wrote: > At 10:12 PM -0400 7/10/09, Haig Dedeyan wrote: > > [1] > > >$fname = mysql_real_escape_string($fname); > >$lname = mysql_real_escape_string($lname); > > > >$sql = "UPDATE phonedir SET fname = '$fname',lname = '$lname' WHERE > > id=$id"; $result =

Re: [PHP] mysql_real_escape_string wants a string or a "resource"?

2009-07-11 Thread Govinda
For the longest time, we were having a problem in the docs where some mirrors were erroneously redirecting references to mysqli_real_escape_string() to mysql_real_escape_string(). Should all be fixed now (and certainly is on the US2 mirror). In my case, I had somehow got the idea that the do

Re: [PHP] mysql_real_escape_string wants a string or a "resource"?

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 17:51, Govinda wrote: > > as in a db connection That's essentially a resource in reference to an object. -- daniel.br...@parasane.net || danbr...@php.net http://www.parasane.net/ || http://www.pilotpig.net/ Check out our great hosting and dedicated server deals at ht

Re: [PHP] mysql_real_escape_string wants a string or a "resource"?

2009-07-11 Thread Stuart
2009/7/11 Govinda : >> You're looking at the documentation for mysqli_real_escape_string but >> using mysql_real_escape_string - notice the i in mysqli in the first >> function name. > > right.  Thanks. > >>> p.s. what is a "resource" compared to a string? >> >> A resource is a variable type. See h

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 17:37, tedd wrote: > > I'm sure some clever person could come up with something better. Probably not. Now, on to NOWDOC -- daniel.br...@parasane.net || danbr...@php.net http://www.parasane.net/ || http://www.pilotpig.net/ Check out our great hosting and dedi

Re: [PHP] mysql_real_escape_string wants a string or a "resource"?

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 17:46, Stuart wrote: > > You're looking at the documentation for mysqli_real_escape_string but > using mysql_real_escape_string - notice the i in mysqli in the first > function name. For the longest time, we were having a problem in the docs where some mirrors were erro

Re: [PHP] mysql_real_escape_string wants a string or a "resource"?

2009-07-11 Thread Govinda
You're looking at the documentation for mysqli_real_escape_string but using mysql_real_escape_string - notice the i in mysqli in the first function name. right. Thanks. p.s. what is a "resource" compared to a string? A resource is a variable type. See http://php.net/language.types.resource

Re: [PHP] mysql_real_escape_string wants a string or a "resource"?

2009-07-11 Thread Stuart
2009/7/11 Govinda : > This code: > $maybeDeleteClient=($_GET["maybeDeleteClient"]); > $maybeDeleteClient=mysql_real_escape_string($db_billing, > $maybeDeleteClient); // this is line 53 > > gives this error: > "Warning: mysql_real_escape_string() expects parameter 2 to be resource, > string given in

[PHP] mysql_real_escape_string wants a string or a "resource"?

2009-07-11 Thread Govinda
This code: $maybeDeleteClient=($_GET["maybeDeleteClient"]); $maybeDeleteClient=mysql_real_escape_string($db_billing, $maybeDeleteClient); // this is line 53 gives this error: "Warning: mysql_real_escape_string() expects parameter 2 to be resource, string given in /home/metheuser/public_html/

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread tedd
At 3:34 AM +0700 7/12/09, Lenin wrote: On Sun, Jul 12, 2009 at 2:56 AM, Eddie Drapkin wrote: On Sat, Jul 11, 2009 at 3:53 PM, Govinda > wrote: > > what does "EOT" stand for? > (I realize that string can be anything.. but I am just asking what EOT > > means to everyone? > > I just us

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Lenin
On Sun, Jul 12, 2009 at 2:56 AM, Eddie Drapkin wrote: > On Sat, Jul 11, 2009 at 3:53 PM, Govinda > wrote: > > On Jul 11, 2009, at 11:26 AM, Eddie Drapkin wrote: > > > >> $foo = << >> $bar[hello] > >> EOT; > > > > what does "EOT" stand for? > > (I realize that string can be anything.. but I am ju

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Eddie Drapkin
On Sat, Jul 11, 2009 at 3:53 PM, Govinda wrote: > On Jul 11, 2009, at 11:26 AM, Eddie Drapkin wrote: > >> $foo = <<> $bar[hello] >> EOT; > > what does "EOT" stand for? > (I realize that string can be anything..  but I am just asking what EOT > means to everyone? I just use it as "End of Term" bec

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Govinda
On Jul 11, 2009, at 11:26 AM, Eddie Drapkin wrote: $foo = << what does "EOT" stand for? (I realize that string can be anything.. but I am just asking what EOT means to everyone? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 14:15, Eddie Drapkin wrote: > [snip!] > which would be cast to a string (as an undefined constant) and then [snip!] That's exactly the point I was waiting for someone to make. I wanted someone to question why it was a Bad Idea[TM] to leave the key unquoted and typecast

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Eddie Drapkin
On Sat, Jul 11, 2009 at 2:01 PM, Daniel Brown wrote: > On Sat, Jul 11, 2009 at 13:45, Eddie Drapkin wrote: >> >> If that's true, then we've found an error reporting bug! I've never >> seen an error/warning raised, even with my usual >> "error_reporting(E_ALL | E_STRICT | E_DEPRACATED)"!  The warnin

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 13:45, Eddie Drapkin wrote: > > If that's true, then we've found an error reporting bug! I've never > seen an error/warning raised, even with my usual > "error_reporting(E_ALL | E_STRICT | E_DEPRACATED)"!  The warning is > raised here, though: > $foo = $bar[hello]; > > but n

Re: [PHP] XAMMP-Mysql Crashing

2009-07-11 Thread Gary
Oy vey... Reminds me, did you hear that the president of iran called Rush Limbaugh.. Told rush that he had a dream about the United State, that all of the houses in America had banners on them, claiming "The United State of Iran", Rush replied, "you know thats funny, but I had a dream about Ira

Re: [PHP] XAMMP-Mysql Crashing

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 13:30, Gary wrote: > It is a bit freindlier here, those folks over at dreamweaver have a lot in > common with pipe-smokers, fly fisherman and sail boat captains... > > I dont really recall where I got the XAMMP from, so I dont really understand > the german reference.  I did

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Eddie Drapkin
On Sat, Jul 11, 2009 at 1:41 PM, Daniel Brown wrote: > On Sat, Jul 11, 2009 at 13:35, Daniel Brown wrote: >> >>    It works fine because you're forcing PHP to cast 'hello' in your >> array from a simple boolean TRUE to the string equivalent. > >    sed "s/string equivalent/literal 'hello' string/g"

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 13:26, Eddie Drapkin wrote: > > Uhm you don't need braces around arrays unless you're using more > than one dimension in the array. > > This works perfectly fine for me: > > $bar = array('hello' => "goodbye"); > > $foo = << $bar[hello] > EOT; > > echo $foo;  //echos out

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 13:35, Daniel Brown wrote: > >    It works fine because you're forcing PHP to cast 'hello' in your > array from a simple boolean TRUE to the string equivalent. sed "s/string equivalent/literal 'hello' string/g" (The way I'd worded it before seemed to me, upon re-re

Re: [PHP] XAMMP-Mysql Crashing

2009-07-11 Thread Gary
It is a bit freindlier here, those folks over at dreamweaver have a lot in common with pipe-smokers, fly fisherman and sail boat captains... I dont really recall where I got the XAMMP from, so I dont really understand the german reference. I did just start getting a message from a newgroup pos

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Eddie Drapkin
On Sat, Jul 11, 2009 at 11:03 AM, Daniel Brown wrote: > On Sat, Jul 11, 2009 at 10:42, Ashley Sheridan > wrote: >> >> The braces ensure that PHP doesn't stop parsing the variable name once it >> reaches the [. By default, it will only match a variable name up to the [ >> sign, so you couldn't acce

Re: [PHP] XAMMP-Mysql Crashing

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 13:07, Gary wrote: > Ahh the list of responses is endless > > 1. Its just you My wife keeps telling me the same thing, so you're in good company, Gary. > 2. Please, if you want to see people bite, go over the the adobe/dreamweaver > group, there are some people ove

Re: [PHP] XAMMP-Mysql Crashing

2009-07-11 Thread Gary
Ahh the list of responses is endless 1. Its just you 2. Please, if you want to see people bite, go over the the adobe/dreamweaver group, there are some people over there that are very proud of their ability to type numbers letters and charactors in the correct order. 3. Let me rephrase, as i

Re: [PHP] XAMMP-Mysql Crashing

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 11:47, Gary wrote: > I have an issue that Mysql will not start on my local machine. I noticed a > few days ago on a restart that I got an error saying that Mysqld had > encountered a problem and had to close. I did not pay any attention to it > because I was not working in i

[PHP] Re: [PHP-DB] Checking Special Characters

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 02:41, Manu Gupta wrote: > Dear All, > I have to design a databse where I need to check for date > using date as datatype in mysql I am having problems while inserting it > > Can you help me with it?? Google. > Also I am having problems with eregi(), erege(); This

[PHP] XAMMP-Mysql Crashing

2009-07-11 Thread Gary
tivated in the php.ini) Anyone have an idea to where I should start to look? Thanks Gary __ Information from ESET NOD32 Antivirus, version of virus signature database 4234 (20090711) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com -- PHP General Ma

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread tedd
At 11:23 AM -0400 7/11/09, Daniel Brown wrote: and as many know, almost everything I do is from the command line I stopped using the command-line when I moved from my old Apple ][ to the Mac. I know I should get back into it, but there is so much there it's overwhelming. Using the terminal c

Re: Re: [PHP] Re: How to authnticate and use contents from ${HOME}

2009-07-11 Thread schneider . chantale
Hi back, - original Nachricht Betreff: Re: [PHP] Re: How to authnticate and use contents from ${HOME} Gesendet: Sa 11 Jul 2009 17:55:24 CEST Von: "Ashley Sheridan" > Have you looked at other online solutions for this? For someone who is just > > learning PHP, you could potentially b

Re: [PHP] Re: How to authnticate and use contents from ${HOME}

2009-07-11 Thread Ashley Sheridan
On Saturday 11 July 2009 16:41:21 schneider.chant...@freenet.de wrote: > Hello Ashley, > > > This really seems like you would be best off doing this with a simple SSH > > connection. I see you use Linux, so that makes things easier. > > Ehm, no, I use and the Webinterface. > > > You can > > manipu

Re: Re: [PHP] Re: How to authnticate and use contents from ${HOME}

2009-07-11 Thread schneider . chantale
Hello Ashley, > This really seems like you would be best off doing this with a simple SSH > connection. I see you use Linux, so that makes things easier. Ehm, no, I use and the Webinterface. > You can > manipulate files as if they were in your local file system with KDE IO > slaves > (assumi

Re: [PHP] Re: How to authnticate and use contents from ${HOME}

2009-07-11 Thread Ashley Sheridan
On Saturday 11 July 2009 15:57:30 schneider.chant...@freenet.de wrote: > Hello Carl, > > > PHP may not be the thing to do this.. because it sounds like you want > > the users to chroot to ${HOME} which php especially on a vhost does not > > do. > > It is not a VHost. It is a full blown machine. >

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Ashley Sheridan
On Saturday 11 July 2009 16:23:11 Daniel Brown wrote: > On Sat, Jul 11, 2009 at 11:05, tedd wrote: > > Side note: Paul Novitski showed me using an underscore for heredocs: > > > > $html =<<<_ > > whatever > > _; > > > > That I thought was kind of neat. To me it makes heredocs stand out and > > are

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Ashley Sheridan
On Saturday 11 July 2009 16:05:55 tedd wrote: > At 3:42 PM +0100 7/11/09, Ashley Sheridan wrote: > >On Saturday 11 July 2009 15:23:55 tedd wrote: > > > At 8:34 PM -0400 7/10/09, Daniel Brown wrote: > > > >-snip- > > > > > >$html =<< >> > > >> >File Name: {$filedata['name']} > >> >File Size: {$

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 11:05, tedd wrote: > > Side note: Paul Novitski showed me using an underscore for heredocs: > > $html =<<<_ > whatever > _; > > That I thought was kind of neat. To me it makes heredocs stand out and are > more uniform. I used $html =<< daniel.br...@parasane.net || danbr

RE: [PHP] Re: How to authnticate and use contents from ${HOME}

2009-07-11 Thread Marc Christopher Hall
First time I've ever seen LAMP described as a language... __ Information from ESET Smart Security, version of virus signature database 4234 (20090711) __ The message was checked by ESET Smart Security. http://www.eset.com -- PHP General Mailing List (http://www.ph

[PHP] phpscriptor.com

2009-07-11 Thread PHPScriptor
Ok this may look like spam but what the hell... I'm the owner of phpscriptor.com, I had bigg plans with this domainname but... well yes, no time. So I'm selling it. I don't want to make profit out of it. So for, lets say 200 dollar, you can have to domainname. And if you want, you get the website

Re: [PHP] Re: How to authnticate and use contents from ${HOME}

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 10:52, wrote: > Hi Isaac, > >> Installing LAMP is not a good idea for productive servers. Always stick >> with >> the Packages of your distribution to get all upgrades. No offense toward the poster of this information, but this is probably the most ludicrous advice I'v

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread tedd
At 3:42 PM +0100 7/11/09, Ashley Sheridan wrote: On Saturday 11 July 2009 15:23:55 tedd wrote: > At 8:34 PM -0400 7/10/09, Daniel Brown wrote: -snip- > >$html =<< >File Name: {$filedata['name']} >File Size: {$filedata['size']} > > >\$somevar: {$somevar} > > >HTML; > >echo $html; >?

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Daniel Brown
On Sat, Jul 11, 2009 at 10:42, Ashley Sheridan wrote: > > The braces ensure that PHP doesn't stop parsing the variable name once it > reaches the [. By default, it will only match a variable name up to the [ > sign, so you couldn't access arrays without the braces. Couldn't have said it better

[PHP] Re: How to authnticate and use contents from ${HOME}

2009-07-11 Thread schneider . chantale
Sorry for the second mail, but my first one was rejected and the rest from the list was gone diirectly into the Spamfolder from Freenet... Chantale #adBox3 {display:none;} -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: How to authnticate and use contents from ${HOME}

2009-07-11 Thread schneider . chantale
Hello Carl, > PHP may not be the thing to do this.. because it sounds like you want > the users to chroot to ${HOME} which php especially on a vhost does not > do. It is not a VHost. It is a full blown machine. with apache2, php5, libapache2-mod-suphp, courier-imap/mta > If you want users to

Re: [PHP] MySql Injection advice

2009-07-11 Thread tedd
At 10:12 PM -0400 7/10/09, Haig Dedeyan wrote: [1] $fname = mysql_real_escape_string($fname); $lname = mysql_real_escape_string($lname); $sql = "UPDATE phonedir SET fname = '$fname',lname = '$lname' WHERE id=$id"; $result = mysql_query($sql); echo mysql_error() . "\n"; This will result in th

[PHP] Re: How to authnticate and use contents from ${HOME}

2009-07-11 Thread schneider . chantale
Hi Isaac, > Installing LAMP is not a good idea for productive servers. Always stick > with > the Packages of your distribution to get all upgrades. Ack! I use Debian/Lenny > Activating a module isn't hard at all, so... there's not really a need for > packages like "LAMP" on a unix-like OS. > Th

Re: Re: [PHP] How to authnticate and use contents from ${HOME}

2009-07-11 Thread Lenin
On Sat, Jul 11, 2009 at 9:41 PM, wrote: > What is xamp? XAMPP is a preconfigured package for using apache, mysql, php/perl/python on any platform like linux, mac OS or Windows. Look at www.apachefriends.de

Re: Re: [PHP] How to authnticate and use contents from ${HOME}

2009-07-11 Thread schneider . chantale
Hello Isaac, > http://en.wikipedia.org/wiki/List_of_LAMP_Packages I am not interested in LDAP and MySQL stuff. This is overkill for my Intranet Server. > What are you wanting to build in your interface? And as I have written, I am learning PHP-Coding. So ready-to-use-stuff where no one know how

Re: Re: [PHP] How to authnticate and use contents from ${HOME}

2009-07-11 Thread schneider . chantale
What is xamp? I have my own webinterface and need only to authenticate the loginuser to let him/her work on the ${HOME} Thanks Chantale - original Nachricht Betreff: Re: [PHP] How to authnticate and use contents from ${HOME} Gesendet: Mo 06 Jul 2009 15:14:16 CEST Von: "Bastien Koer

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Ashley Sheridan
On Saturday 11 July 2009 15:23:55 tedd wrote: > At 8:34 PM -0400 7/10/09, Daniel Brown wrote: > >On Fri, Jul 10, 2009 at 20:25, Govinda wrote: > >> How do I get > >> basename(__FILE__) > >> or > >> htmlentities($somevar) > >> to be evaluated in a heredoc? > > > > You don't. Instead, you

[PHP] How to authnticate and use contents from ${HOME}

2009-07-11 Thread schneider . chantale
Hello, My name ich Chantale, I am 15years old and in a german Lycee. I like to study Informatic in two years and now try to code my first applications. I am new to php and like to code my own Intranet Web-Interface which should run on my FileServer at home. I have installed "libapache2-mod-suphp"

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread tedd
At 8:34 PM -0400 7/10/09, Daniel Brown wrote: On Fri, Jul 10, 2009 at 20:25, Govinda wrote: How do I get basename(__FILE__) or htmlentities($somevar) to be evaluated in a heredoc? You don't. Instead, you have to store the output from those in a variable (or array), then place it in

Re: [PHP] MySql Injection advice

2009-07-11 Thread Phpster
On Jul 10, 2009, at 10:12 PM, Haig Dedeyan wrote: Hi everyone, I'm starting to experiment with an edit form and I am seeing the following behaviour: $fname = mysql_real_escape_string($fname); $lname = mysql_real_escape_string($lname); $sql = "UPDATE phonedir SET fname = '$fname',l

Re: [PHP] I am RTFM, but still stumbling on how to get built-in functions parsed in heredoc

2009-07-11 Thread Zareef Ahmed
On Sat, Jul 11, 2009 at 6:14 AM, Govinda wrote: > On Jul 10, 2009, at 6:34 PM, Zareef Ahmed wrote: > > heredoc was there to work with the strings... why you want to use >> functions into that? >> > > I'm lazy. Like to type less. ;-) It is well known fact that normally only lazy people end up

Re: [PHP] HELP SQL INJECTION

2009-07-11 Thread Ashley Sheridan
On Saturday 11 July 2009 01:17:28 Zareef Ahmed wrote: > Hi, > > First of all change your FTP password and stop storing your password in > your FTP client. > This type of attacks are very common with the people who use insecure FTP > client. > > My previous experience with your kind of problem tell