Re: [PHP] keeping credit card info in session

2007-04-09 Thread Jochem Maas
[EMAIL PROTECTED] wrote: > Thanks a lot every one. These are great replies. > > I guess I should have explained a bit more about what I'm doing. > > first of all, this is not my site, it's for a client of mine. probably irrelevant from a legal pooint of view. > > second, I did suggest using a p

Re: [PHP] Design Dilemma - Database Data Abstraction

2007-04-09 Thread Lester Caine
Martin Alterisio wrote: I have a dilemma on a design where I humbly ask your help. I'm working on the model part of a web application (not to be understood in the "web2.0" way, but in a more general way, where anything mounted on HTTP is a web application) done in PHP5 following the MVC design pa

[PHP] DOM and XSLTProcessor

2007-04-09 Thread Buesching, Logan J
Greetings, I apologize if this is a little long, but I am trying to put as much information as I have done in this first post. I am running PHP 5 and attempting to use DOM to create data to show on a webpage and using XSLTProcessor with an XSLT sheet to output it into XHTML. Everything is pre

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Tijnema !
On 4/9/07, tedd <[EMAIL PROTECTED]> wrote: At 4:38 AM -0700 4/8/07, benifactor wrote: >hmm, why don't you md5 more then once.. I read somewhere that MD5'ing anything more than once, does not increase security. Cheers, tedd Not in this case, as it doesn't goes about decrypting the key here, t

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Micky Hulse
Tijnema ! wrote: You can't stop me :) http://86.86.80.41/dev/debug/tedd.php It's cracked again :) Maybe use flash for this... harder to crack? (Of course, Flash will open door to other problems.) Sorry, coming in on this late. Good work Tedd! Very interesting. M -- Wishlists:

Re: [PHP] DOM and XSLTProcessor

2007-04-09 Thread Tijnema !
On 4/9/07, Buesching, Logan J <[EMAIL PROTECTED]> wrote: Greetings, I apologize if this is a little long, but I am trying to put as much information as I have done in this first post. I am running PHP 5 and attempting to use DOM to create data to show on a webpage and using XSLTProcessor with

RE: [PHP] DOM and XSLTProcessor

2007-04-09 Thread Buesching, Logan J
This could offer a possible workaround. Let me first state that I cannot simply do: echo htmlspecialchars_decode($proc->transformToXML($doc)); If I were to do that, then it would assume that all of these encodings need to be decoded; which definitely is not the case. I only want to do this fo

Re: [PHP] keeping credit card info in session

2007-04-09 Thread Davi
Em Segunda 09 Abril 2007 01:12, [EMAIL PROTECTED] escreveu: > Thanks a lot every one. These are great replies. You're welcome! ^^ > > I guess I should have explained a bit more about what I'm doing. > > first of all, this is not my site, it's for a client of mine. Things going to be better... =]

[PHP] Session Authentication

2007-04-09 Thread Ólafur Waage
Lets say i have a login system. This system authenticates the user via mysql, when the user is authenticated, i set a session variable to let the system know the user is authenticated. ie. $_SESSION["authenticated"] = true; Lets also say i know that's how the system works, that a session variable

[PHP] redirect http to https

2007-04-09 Thread Ben Liu
What's the prescribed method for redirecting a user forcibly to from the non-SSL secured version of a page to the SSL-secured version? Is this handled at the web server level or at the script level. I found this by googling: {header("Location: https://".$_SERVER['SERVER_NAME'].$_SERVER ['S

Re: [PHP] MD5 & bot Question

2007-04-09 Thread tedd
At 1:21 AM -0700 4/9/07, Micky Hulse wrote: Maybe use flash for this... harder to crack? (Of course, Flash will open door to other problems.) Sorry, coming in on this late. Good work Tedd! Very interesting. M: Tijnema showed how MD5 could be used to identify an image file and crack my arro

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Robert Cummings
On Mon, 2007-04-09 at 08:46 -0400, tedd wrote: > At 1:21 AM -0700 4/9/07, Micky Hulse wrote: > >Maybe use flash for this... harder to crack? (Of course, Flash will > >open door to other problems.) > > > >Sorry, coming in on this late. Good work Tedd! Very interesting. > > > M: > > Tijnema showe

[PHP] Re: Simple question on simplexml

2007-04-09 Thread Timothy Murphy
Haydar TUNA wrote: > You can use following example:) > >$xml = simplexml_load_file("test.xml"); > $xml->body[0]->addChild("book", "Atat�rk The Rebirth Of A Nation"); > ?> This doesn't work. It allows to add a child with some text, as in your example. But it doesn't allow you to ad

[PHP] Re: Simple question on simplexml

2007-04-09 Thread Timothy Murphy
Jochem Maas wrote: > there is this: > > http://php.net/manual/en/function.simplexml-element-addChild.php > > which will allow adding of string data (so you won't be needing to > create the new SimpleXMLElement object as per your example below). > > obviously you will have to first load tghe com

Re: [PHP] Session Authentication

2007-04-09 Thread Stut
Ólafur Waage wrote: Lets say i have a login system. This system authenticates the user via mysql, when the user is authenticated, i set a session variable to let the system know the user is authenticated. ie. $_SESSION["authenticated"] = true; Lets also say i know that's how the system works, th

Re: [PHP] Session Authentication

2007-04-09 Thread Ólafur Waage
Thanks, yes my knowledge of sessions was a little vague. 2007/4/9, Stut <[EMAIL PROTECTED]>: Ólafur Waage wrote: > Lets say i have a login system. This system authenticates the user via > mysql, when the user is authenticated, i set a session variable to let the > system know the user is authe

Re: [PHP] redirect http to https

2007-04-09 Thread edwardspl
Ben Liu wrote: > What's the prescribed method for redirecting a user forcibly to from > the non-SSL secured version of a page to the SSL-secured version? Is > this handled at the web server level or at the script level. I found > this by googling: > > if($_SERVER['SERVER_PORT'] !== $encport || $_

[PHP] "Sense" last record

2007-04-09 Thread Mário Gamito
Hi, I'm doing this site that has three news in the homepage. You can see the static version here: http://www.telbit.pt As you can see, the two first news have "blocoTexto" class and the third, "blocoTextoLast" Now, i'm developing a dinamyc structure where the news are stored in a MySQL databa

Re: [PHP] Session Authentication

2007-04-09 Thread Martin Marques
Ólafur Waage escribió: Lets say i have a login system. This system authenticates the user via mysql, when the user is authenticated, i set a session variable to let the system know the user is authenticated. ie. $_SESSION["authenticated"] = true; Lets also say i know that's how the system works,

Re: [PHP] redirect http to https

2007-04-09 Thread Martin Marques
Ben Liu escribió: What's the prescribed method for redirecting a user forcibly to from the non-SSL secured version of a page to the SSL-secured version? Is this handled at the web server level or at the script level. I found this by googling: This should be done with the rewrite instruction o

Re: [PHP] MD5 & bot Question

2007-04-09 Thread tedd
At 8:49 AM -0400 4/9/07, Robert Cummings wrote: On Mon, 2007-04-09 at 08:46 -0400, tedd wrote: At 1:21 AM -0700 4/9/07, Micky Hulse wrote: >Maybe use flash for this... harder to crack? (Of course, Flash will >open door to other problems.) > >Sorry, coming in on this late. Good work Tedd! Ve

Re: [PHP] redirect http to https

2007-04-09 Thread Ben Liu
On 4/9/07, Martin Marques wrote: This should be done with the rewrite instruction of apache, or what ever instructionyour web server has. Um...guess I will have to check with our hosting company about this. Thanks. - Ben -- PHP General Mailing List (http://www.php.net/) To unsubscribe, vis

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Robert Cummings
On Mon, 2007-04-09 at 09:45 -0400, tedd wrote: > At 8:49 AM -0400 4/9/07, Robert Cummings wrote: > >On Mon, 2007-04-09 at 08:46 -0400, tedd wrote: > >> At 1:21 AM -0700 4/9/07, Micky Hulse wrote: > >> >Maybe use flash for this... harder to crack? (Of course, Flash will > >> >open door to other p

Re: [PHP] redirect http to https

2007-04-09 Thread edwardspl
Ben Liu wrote: > On 4/9/07, Martin Marques wrote: > >> >> This should be done with the rewrite instruction of apache, or what ever >> instructionyour web server has. > > > Um...guess I will have to check with our hosting company about this. > Thanks. > > - Ben > Hello, FYI : https://www.yourdom

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Tijnema !
On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote: On Mon, 2007-04-09 at 09:45 -0400, tedd wrote: > At 8:49 AM -0400 4/9/07, Robert Cummings wrote: > >On Mon, 2007-04-09 at 08:46 -0400, tedd wrote: > >> At 1:21 AM -0700 4/9/07, Micky Hulse wrote: > >> >Maybe use flash for this... harder to c

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Robert Cummings
On Mon, 2007-04-09 at 16:27 +0200, Tijnema ! wrote: > > I think that we can conclude that a non-crackable CAPTCHA doesn't > exist, but also that there doesn't exist a real "hard to crack" > CAPTCHA. All current CAPTCHAs can be broken quite easy. MD5 can help > in some cases, but only if the CAPTCHA

Re: [PHP] redirect http to https

2007-04-09 Thread Tijnema !
On 4/9/07, Ben Liu <[EMAIL PROTECTED]> wrote: What's the prescribed method for redirecting a user forcibly to from the non-SSL secured version of a page to the SSL-secured version? Is this handled at the web server level or at the script level. I found this by googling: https://".$_SERVER['SERVE

RE: [PHP] "Sense" last record

2007-04-09 Thread Peter Lauri
Assuming you know it will be three records: $i = 1; while(...) { if($i==3) { //Do the stuff for the last one } else { //Do the rest of the stuff here } $i++; } Assuming you don't know: $count = mysql_num_rows($Result); //or equivale

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Tijnema !
On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote: On Mon, 2007-04-09 at 16:27 +0200, Tijnema ! wrote: > > I think that we can conclude that a non-crackable CAPTCHA doesn't > exist, but also that there doesn't exist a real "hard to crack" > CAPTCHA. All current CAPTCHAs can be broken quite eas

Re: [PHP] Session Authentication

2007-04-09 Thread Tijnema !
On 4/9/07, Martin Marques wrote: Ólafur Waage escribió: > Lets say i have a login system. This system authenticates the user via > mysql, when the user is authenticated, i set a session variable to let the > system know the user is authenticated. ie. $_SESSION["authenticated"] = > true; > > Lets

RE: [PHP] redirect http to https

2007-04-09 Thread Peter Lauri
> -Original Message- > From: Ben Liu [mailto:[EMAIL PROTECTED] > Sent: Monday, April 09, 2007 3:52 PM > To: Martin Marques; PHP > Subject: Re: [PHP] redirect http to https > > On 4/9/07, Martin Marques wrote: > > > > > This should be done with the rewrite instruction of apache, or what e

Re: [PHP] Session Authentication

2007-04-09 Thread Davi
Em Segunda 09 Abril 2007 10:04, Stut escreveu: > Ólafur Waage wrote: > > Lets say i have a login system. This system authenticates the user via > > mysql, when the user is authenticated, i set a session variable to let > > the system know the user is authenticated. ie. $_SESSION["authenticated"] >

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Robert Cummings
On Mon, 2007-04-09 at 16:39 +0200, Tijnema ! wrote: > On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote: > > On Mon, 2007-04-09 at 16:27 +0200, Tijnema ! wrote: > > > > > > I think that we can conclude that a non-crackable CAPTCHA doesn't > > > exist, but also that there doesn't exist a real "ha

Re: [PHP] redirect http to https

2007-04-09 Thread Ben Liu
On 4/9/07, Peter Lauri <[EMAIL PROTECTED]> wrote: You might be able to do this by putting an .htaccess file in your webroot of non-ssl: -- RewriteEngine On RewriteRule ^/(.*)$ https://www.yourdomain.com/$1 [L] -- This appears to work: RewriteEngine On RewriteCond %{SERVER_PORT} !^44

Re: [PHP] "Sense" last record

2007-04-09 Thread Satyam
I would use some JavaScript on the client side to go through the table and change the classes once the whole page is loaded. Otherwise, for a pure PHP solution, I might either load the whole table on an array, which is wasteful in memory, or defer the actual output of each record until the nex

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Tijnema !
On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote: On Mon, 2007-04-09 at 16:39 +0200, Tijnema ! wrote: > On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote: > > On Mon, 2007-04-09 at 16:27 +0200, Tijnema ! wrote: > > > > > > I think that we can conclude that a non-crackable CAPTCHA doesn't >

Re: [PHP] "Sense" last record

2007-04-09 Thread tg-php
Sorry, I only saw the one response to this question so not sure if what I'm going to propose was already mentioned and wouldn't work. Two things come to mind.. first, it looks like "blocoTextoLast" just has different margin settings, I assume because it's located on the right side of the page

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Stut
Tijnema ! wrote: On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote: On Mon, 2007-04-09 at 16:39 +0200, Tijnema ! wrote: > On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote: > > On Mon, 2007-04-09 at 16:27 +0200, Tijnema ! wrote: > > > > > > I think that we can conclude that a non-crackable

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Tijnema !
On 4/9/07, Stut <[EMAIL PROTECTED]> wrote: Tijnema ! wrote: > On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote: >> On Mon, 2007-04-09 at 16:39 +0200, Tijnema ! wrote: >> > On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote: >> > > On Mon, 2007-04-09 at 16:27 +0200, Tijnema ! wrote: >> > > >

Re: [PHP] "Sense" last record

2007-04-09 Thread Mário Gamito
Hi, Thank you all for your answers. I solved the problem with: debug=1; $conn = &ADONewConnection('mysql'); $conn->PConnect($host,$user,$password,$database); // insert subscription values $recordSet = &$conn->Execute("SELECT id_news, date, now, title, lead, body FROM news ORDER BY n

Re: [PHP] Session Authentication

2007-04-09 Thread Martin Marques
Tijnema ! escribió: On 4/9/07, Martin Marques wrote: Yes: Don't use transparent session id, or even better, save the authentication in a cookie on the client (seperated from the session array). And then the user would crack the cookie I know they are encrypted, but trust me, cookies c

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Robert Cummings
On Mon, 2007-04-09 at 17:28 +0200, Tijnema ! wrote: > On 4/9/07, Stut <[EMAIL PROTECTED]> wrote: > > Tijnema ! wrote: > > > On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote: > > >> On Mon, 2007-04-09 at 16:39 +0200, Tijnema ! wrote: > > >> > On 4/9/07, Robert Cummings <[EMAIL PROTECTED]> wrote:

Re: [PHP] Session Authentication

2007-04-09 Thread Tijnema !
On 4/9/07, Martin Marques wrote: Tijnema ! escribió: > On 4/9/07, Martin Marques wrote: >> >> Yes: >> >> Don't use transparent session id, or even better, save the >> authentication in a cookie on the client (seperated from the session >> array). > > And then the user would crack the cookie ...

Re: [PHP] Session Authentication

2007-04-09 Thread Davi
Em Segunda 09 Abril 2007 12:37, Tijnema ! escreveu: > On 4/9/07, Martin Marques wrote: > > Tijnema ! escribió: > > > On 4/9/07, Martin Marques wrote: > > >> Yes: > > >> > > >> Don't use transparent session id, or even better, save the > > >> authentication in a cookie on the client (seperated fro

RE: [PHP] Session Authentication

2007-04-09 Thread Peter Lauri
> -Original Message- > From: Tijnema ! [mailto:[EMAIL PROTECTED] > Sent: Monday, April 09, 2007 5:38 PM > To: Martin Marques > Cc: Ólafur Waage; php-general@lists.php.net > Subject: Re: [PHP] Session Authentication > > On 4/9/07, Martin Marques wrote: > > Tijnema ! escribió: > > > On 4/

Re: [PHP] Session Authentication

2007-04-09 Thread Tijnema !
On 4/9/07, Peter Lauri <[EMAIL PROTECTED]> wrote: > -Original Message- > From: Tijnema ! [mailto:[EMAIL PROTECTED] > Sent: Monday, April 09, 2007 5:38 PM > To: Martin Marques > Cc: Ólafur Waage; php-general@lists.php.net > Subject: Re: [PHP] Session Authentication > > On 4/9/07, Martin

RE: [PHP] Session Authentication

2007-04-09 Thread Peter Lauri
> > Cookies are old, so in the time they were introduced, today it is > possible to create and modify cookies with some good tools. These > tools are illegal, but every cracker is 99% illegal right? But that > means i can't give you these tools to proof it, but it is possible. > > Tijnema [Pete

Re: [PHP] Session Authentication

2007-04-09 Thread Stut
Peter Lauri wrote: -Original Message- From: Tijnema ! [mailto:[EMAIL PROTECTED] Sent: Monday, April 09, 2007 5:38 PM To: Martin Marques Cc: Ólafur Waage; php-general@lists.php.net Subject: Re: [PHP] Session Authentication On 4/9/07, Martin Marques wrote: Tijnema ! escribió: On 4/9/0

Re: [PHP] Design Dilemma - Database Data Abstraction

2007-04-09 Thread Martin Alterisio
2007/4/9, Lester Caine <[EMAIL PROTECTED]>: Martin Alterisio wrote: > I have a dilemma on a design where I humbly ask your help. I'm working on > the model part of a web application (not to be understood in the "web2.0 " > way, but in a more general way, where anything mounted on HTTP is a web >

RE: [PHP] Session Authentication

2007-04-09 Thread Robert Cummings
On Mon, 2007-04-09 at 18:57 +0200, Peter Lauri wrote: > > > > Cookies are old, so in the time they were introduced, today it is > > possible to create and modify cookies with some good tools. These > > tools are illegal, but every cracker is 99% illegal right? But that > > means i can't give you

Re: [PHP] Session Authentication

2007-04-09 Thread Stut
Peter Lauri wrote: Cookies are old, so in the time they were introduced, today it is possible to create and modify cookies with some good tools. These tools are illegal, but every cracker is 99% illegal right? But that means i can't give you these tools to proof it, but it is possible. Tijnema

Re: [PHP] Session Authentication

2007-04-09 Thread Tijnema !
On 4/9/07, Stut <[EMAIL PROTECTED]> wrote: Peter Lauri wrote: >> Cookies are old, so in the time they were introduced, today it is >> possible to create and modify cookies with some good tools. These >> tools are illegal, but every cracker is 99% illegal right? But that >> means i can't give you

Re: [PHP] Session Authentication

2007-04-09 Thread Tijnema !
On 4/9/07, Tijnema ! <[EMAIL PROTECTED]> wrote: On 4/9/07, Stut <[EMAIL PROTECTED]> wrote: > Peter Lauri wrote: > >> Cookies are old, so in the time they were introduced, today it is > >> possible to create and modify cookies with some good tools. These > >> tools are illegal, but every cracker

Re: [PHP] Session Authentication

2007-04-09 Thread Davi
Em Segunda 09 Abril 2007 13:05, Robert Cummings escreveu: > (...) Hasn't anyone here had a boring > day (yeears ago) when they created an auto vote bot for some stupid > poll? >:B I never do this!!! =P But I changed a cookie of an browser game XD -- Davi Vidal [EMAIL PROTECTED] [EMAIL

Re: [PHP] Session Authentication

2007-04-09 Thread Martin Marques
Tijnema ! escribió: On 4/9/07, Martin Marques wrote: So what? The user authenticated himself, so what is he gonna crack? Yes, but i guess you're not only storing if the user has authenticated, also storing a username? And if that's not the case, then you could authenticate by creating a cook

Re: [PHP] Session Authentication

2007-04-09 Thread Martin Marques
Davi escribió: Sessions are stored in the temporary's server folder... So... If I known my session ID and where it's stored, I can do something... Have you tried it? I mean, as a non-root, non-apache user. :-P -- select 'mmarques' || '@' || 'unl.edu.ar' AS email; -

Re: [PHP] Session Authentication

2007-04-09 Thread Davi
Em Segunda 09 Abril 2007 13:47, Martin Marques escreveu: > Davi escribió: > > Sessions are stored in the temporary's server folder... So... If I known > > my session ID and where it's stored, I can do something... > > Have you tried it? I mean, as a non-root, non-apache user. :-P > No. And I known

Re: [PHP] MD5 & bot Question

2007-04-09 Thread tedd
At 9:58 AM -0400 4/9/07, Robert Cummings wrote: On Mon, 2007-04-09 at 09:45 -0400, tedd wrote: > >> However, this did make me wonder about the images that M$ and others >> are using for captchas -- like find the kitty in a set of pictures. >> The MD5 application could be used to identify a

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Robert Cummings
On Mon, 2007-04-09 at 12:51 -0400, tedd wrote: > At 9:58 AM -0400 4/9/07, Robert Cummings wrote: > > >Hi Tedd, > > > >Put down the crack pipe please... captcha images are usually generated > >on the fly. Their image repository is 0. Their image universe is all of > >the permutations of an image con

Re: [PHP] Session Authentication

2007-04-09 Thread tedd
At 5:55 PM +0200 4/9/07, Tijnema ! wrote: Cookies are old, so in the time they were introduced, today it is possible to create and modify cookies with some good tools. These tools are illegal, I don't believe that. FireFox probably has most, if not all. Cheers, tedd -- --- http://sperlin

Re: [PHP] Session Authentication

2007-04-09 Thread Tijnema !
On 4/9/07, tedd <[EMAIL PROTECTED]> wrote: At 5:55 PM +0200 4/9/07, Tijnema ! wrote: >Cookies are old, so in the time they were introduced, today it is >possible to create and modify cookies with some good tools. These >tools are illegal, I don't believe that. FireFox probably has most, if not

Re: [PHP] Session Authentication

2007-04-09 Thread Martin Marques
Tijnema ! escribió: Who said firefox is legal? :P I believe that what firefox can do is limited, some things that are illegal are not possible. I don't know exactly what's illegal, i searched for it a few years ago, and that's what i found then. Explain how it would be illegal to modify cooki

RE: [PHP] Need a working SOAP example using SOAP -- PHP is blocking the calls

2007-04-09 Thread Daevid Vincent
> >> c, could you be having a problem related to the > >> allow_url_fopen ini setting? > > > > Now we're talkin! > > > > Okay, I made sure that allow_url_fopen and > > allow_url_include are both "on". > > Verified via phpinfo(); > > > > Still no luck. :-\ > > > > However, this sparked an idea

RE: [PHP] Need a working SOAP example using SOAP -- PHP is blocking the calls (scripts)

2007-04-09 Thread Daevid Vincent
Here is the code I'm using: client1.php http://machine.locutus.com/StockQuote/stockquote.wsdl";, # $client = new SoapClient("https://admin:[EMAIL PROTECTED]/stockquote.wsdl", array( # "login" => "admin", #

[PHP] Where to insert a phrase in the right place

2007-04-09 Thread Mário Gamito
Hi, I'm making this site that was static and now has some dynamic features, so it's a little bit patched :) If you care to visit http://www.telbit.pt/2/login.php you'll notice that the word "Welcome" is already present, and only should be after the download. Also, the error "You didn't fill all

Re: [PHP] Need a working SOAP example using SOAP -- PHP is blocking the calls

2007-04-09 Thread Lori Lay
Daevid Vincent wrote: c, could you be having a problem related to the allow_url_fopen ini setting? Now we're talkin! Okay, I made sure that allow_url_fopen and allow_url_include are both "on". Verified via phpinfo(); Still no luck. :-\ However, this sparked an idea... I have been

RE: [PHP] Where to insert a phrase in the right place

2007-04-09 Thread Jay Blanchard
[snip] How can i make the word "Welcome" appear only after the login ? [/snip] If you set a cookie upon login you can then check for the existence of the cookie. If the cookie exists do not display 'Welcome'. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Travis Doherty
Robert Cummings wrote: >On Mon, 2007-04-09 at 12:51 -0400, tedd wrote: > > >>At 9:58 AM -0400 4/9/07, Robert Cummings wrote: >> >> >> >>>Hi Tedd, >>> >>>Put down the crack pipe please... captcha images are usually generated >>>on the fly. Their image repository is 0. Their image universe is

Re: [PHP] Session Authentication

2007-04-09 Thread Stut
Martin Marques wrote: Tijnema ! escribió: Who said firefox is legal? :P I believe that what firefox can do is limited, some things that are illegal are not possible. I don't know exactly what's illegal, i searched for it a few years ago, and that's what i found then. Explain how it would be

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Tijnema !
On 4/9/07, Travis Doherty <[EMAIL PROTECTED]> wrote: Robert Cummings wrote: >On Mon, 2007-04-09 at 12:51 -0400, tedd wrote: > > >>At 9:58 AM -0400 4/9/07, Robert Cummings wrote: >> >> >> >>>Hi Tedd, >>> >>>Put down the crack pipe please... captcha images are usually generated >>>on the fly. Thei

Re: [PHP] MD5 & bot Question

2007-04-09 Thread tedd
At 1:04 PM -0400 4/9/07, Robert Cummings wrote: On Mon, 2007-04-09 at 12:51 -0400, tedd wrote: >We were talking > about M$'s "picture" captcha where they show pictures and ask a question like "Pick the picture that shows a kitty" and NOT an "on the fly" graphic captcha. There are different t

Re: [PHP] MD5 & bot Question

2007-04-09 Thread tedd
At 4:19 PM -0400 4/9/07, Travis Doherty wrote: Steganography has been able to "hide" text in images for quite some time now. Basically you cram whatever info you want into the 'unused' or 'less used' bytes of the image. With this in mind I imagine even if you did have an image repository of on

Re: [PHP] Session Authentication

2007-04-09 Thread Martin Marques
Stut escribió: As with most things these days it probably breaches the DMCA. But frankly speaking, if doing that works then the developers of the application, and by extension the company, deserve everything they get. DMCA is a real piece of crap. -- select 'mmarques' || '@' || 'unl.edu.ar' A

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Robert Cummings
On Mon, 2007-04-09 at 22:27 +0200, Tijnema ! wrote: > On 4/9/07, Travis Doherty <[EMAIL PROTECTED]> wrote: > > Robert Cummings wrote: > > > > >On Mon, 2007-04-09 at 12:51 -0400, tedd wrote: > > > > > > > > >>At 9:58 AM -0400 4/9/07, Robert Cummings wrote: > > >> > > >> > > >> > > >>>Hi Tedd, > > >>

Re: [PHP] Where to insert a phrase in the right place

2007-04-09 Thread Mário Gamito
Hi, Jay Blanchard wrote: > [snip] > How can i make the word "Welcome" appear only after the login ? > [/snip] > > If you set a cookie upon login you can then check for the existence of the > cookie. If the cookie exists do not display 'Welcome'. I have: session_start(); session_register("email"

Re: [PHP] MD5 & bot Question

2007-04-09 Thread tedd
At 4:39 PM -0400 4/9/07, Robert Cummings wrote: On Mon, 2007-04-09 at 22:27 +0200, Tijnema ! wrote: > This is exactly what tedd did in his last arrow example. He edited the header of the GIF image, and so that would result in different MD5. Finding this part and skipping it in the MD5 check

[PHP] mysql if empty

2007-04-09 Thread chris
If I search for something in mysql that returns an empty result I cant get it to return "No result found" always returns "Found" even though the recoed does not exist... $sql = "SELECT Client FROM booked WHERE Name = 'larry'"; $result = mysql_query($sql); if ($result == "") { echo "No result

Re: [PHP] mysql if empty

2007-04-09 Thread afan
> If I search for something in mysql that returns an empty result I cant get > it to return > "No result found" always returns "Found" even though the recoed does not > exist... > > > $sql = "SELECT Client FROM booked WHERE Name = 'larry'"; > > $result = mysql_query($sql); > > if ($result == "") >

Re: [PHP] mysql if empty

2007-04-09 Thread Lori Lay
[EMAIL PROTECTED] wrote: If I search for something in mysql that returns an empty result I cant get it to return "No result found" always returns "Found" even though the recoed does not exist... $sql = "SELECT Client FROM booked WHERE Name = 'larry'"; $result = mysql_query($sql); if ($resul

Re: [PHP] mysql if empty

2007-04-09 Thread Davi
Em Segunda 09 Abril 2007 18:27, Lori Lay escreveu: > [EMAIL PROTECTED] wrote: > > If I search for something in mysql that returns an empty result I cant > > get it to return > > "No result found" always returns "Found" even though the recoed does > > not exist... > > > > > > $sql = "SELECT Client F

[PHP] Re: Design Dilemma - Database Data Abstraction

2007-04-09 Thread Tony Marston
""Martin Alterisio"" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] >I have a dilemma on a design where I humbly ask your help. I'm working on > the model part of a web application (not to be understood in the "web2.0" > way, but in a more general way, where anything mounted on HTTP

Re: [PHP] Where to insert a phrase in the right place

2007-04-09 Thread Mário Gamito
Hi, André Medeiros wrote: > session_start(); > if(!isset($_SESSION['greeted'])) { >echo "Welcome"; >$_SESSION['greeted'] = 1; > } > ?> It doesn't work :( if ($_SESSION['greeted'] == 1) print('Welcome ' . $name); $_SESSION['greeted'] is always equal to 1 as set in the beginning of the

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Tijnema !
On 4/9/07, tedd <[EMAIL PROTECTED]> wrote: At 4:39 PM -0400 4/9/07, Robert Cummings wrote: >On Mon, 2007-04-09 at 22:27 +0200, Tijnema ! wrote: > > > This is exactly what tedd did in his last arrow example. He edited the >> header of the GIF image, and so that would result in different MD5. >>

Re: [PHP] mysql if empty

2007-04-09 Thread Paul Novitski
At 4/9/2007 02:18 PM, [EMAIL PROTECTED] wrote: If I search for something in mysql that returns an empty result I cant get it to return "No result found" always returns "Found" even though the recoed does not exist... $sql = "SELECT Client FROM booked WHERE Name = 'larry'"; $result = mysql_que

Re: [PHP] DOM and XSLTProcessor

2007-04-09 Thread Tony Marston
If there are parts of an XML document where you do not want '<' and '>' changed in '<' and '>' during the transformation then you need to use the disable-output-escaping option, as in the following example. You also need to insert such text into the XML document using the

Re: [PHP] mysql if empty

2007-04-09 Thread Satyam
An empty result is still a valid result. As long as the SQL statement is valid, you will get a result set. This doesn't meant that the variable holding the reference to the result set is itself empty, but that you will fail to fetch any results from it. Satyam - Original Message - F

[PHP] Question about OO design

2007-04-09 Thread Chris W. Parker
Hello, I'm working on a project now and I'd like to get some feedback on how to implement a proper class (or two). This is an application that records an employee's used vacation time. There are two tables: (1) events, (2) users. Users: id (int) name (varchar) email (varchar) balance (mediumin

Re: [PHP] Need a working SOAP example using SOAP -- PHP is blocking the calls

2007-04-09 Thread Jochem Maas
Daevid Vincent wrote: c, could you be having a problem related to the allow_url_fopen ini setting? >>> Now we're talkin! >>> >>> Okay, I made sure that allow_url_fopen and >>> allow_url_include are both "on". >>> Verified via phpinfo(); >>> >>> Still no luck. :-\ >>> >>> However, this s

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Micky Hulse
tedd wrote: .. that's the reason for the alt attribute. Thanks for clarification! :) You are doing some great work with captchas... I also really like your audio captcha experiments. Keep up the great work! Cheers, Micky -- Wishlists: Switch:

[PHP] MySQL exceptions

2007-04-09 Thread Davi
Hi all! I'm developing an OOP app using PHP 5. I want to use try-catch with mysql functions. So, the question is: what are the exceptions classes of MySQL? Where can I found it? TIA -- Davi Vidal [EMAIL PROTECTED] [EMAIL PROTECTED] -- Agora com fortune: "BOFH Excuse #426: internet is neede

Re: [PHP] Re: Design Dilemma - Database Data Abstraction

2007-04-09 Thread Martin Alterisio
2007/4/9, Tony Marston <[EMAIL PROTECTED]>: ""Martin Alterisio"" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] >I have a dilemma on a design where I humbly ask your help. I'm working on > the model part of a web application (not to be understood in the "web2.0 " > way, but in a mo

Re: [PHP] Session Authentication

2007-04-09 Thread Ólafur Waage
Thanks for the replies guys, became a pretty big thread. The actual code is just a select statement from the user table using sprintf and mysql_real_escape_string for the username and password. I count how many row's the select statement returns, if its not zero then i authenticate by setting a s

Re: [PHP] Question about OO design

2007-04-09 Thread Jochem Maas
Chris W. Parker wrote: > Hello, > > I'm working on a project now and I'd like to get some feedback on how to > implement a proper class (or two). > > This is an application that records an employee's used vacation time. > There are two tables: (1) events, (2) users. > > Users: > > id (int) > n

Re: [PHP] MySQL exceptions

2007-04-09 Thread Jochem Maas
Davi wrote: > Hi all! > > I'm developing an OOP app using PHP 5. > I want to use try-catch with mysql functions. > > So, the question is: what are the exceptions classes of MySQL? > Where can I found it? IIRC mysqli (certainly not mysql) extension does not throw exceptions, so write code that ch

RE: [PHP] Question about OO design

2007-04-09 Thread Chris W. Parker
On Monday, April 09, 2007 3:51 PM Jochem Maas said: Thanks for the response Jochem. > Chris W. Parker wrote: [snip] > you probably only want one DB call to > populate the User object with all the relevant > user data at the point where the object is created. [snip]

[PHP] Re: MySQL exceptions

2007-04-09 Thread itoctopus
Use the @ in front of the statement and then check the result if it's valid. -- itoctopus - http://www.itoctopus.com "Davi" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > > Hi all! > > I'm developing an OOP app using PHP 5. > I want to use try-catch with mysql functions. > > So, the

Re: [PHP] Question about OO design

2007-04-09 Thread Jochem Maas
Chris W. Parker wrote: > On Monday, April 09, 2007 3:51 PM Jochem Maas > said: > > Thanks for the response Jochem. > >> Chris W. Parker wrote: > > [snip] > >> you probably only want one DB call to >> populate the User object with all the relevant >> user data at the p

Re: [PHP] Re: MySQL exceptions

2007-04-09 Thread Davi
Em Segunda 09 Abril 2007 21:21, itoctopus escreveu: > Use the @ in front of the statement and then check the result if it's > valid. > > -- > itoctopus - http://www.itoctopus.com I already use it, but I believe that try-catch would be _more_ useful... With try-cath I can _get_ more errors instead

Re: [PHP] MD5 & bot Question

2007-04-09 Thread Robert Cummings
On Mon, 2007-04-09 at 17:14 -0400, tedd wrote: > At 4:39 PM -0400 4/9/07, Robert Cummings wrote: > >On Mon, 2007-04-09 at 22:27 +0200, Tijnema ! wrote: > > > > > This is exactly what tedd did in his last arrow example. He edited the > >> header of the GIF image, and so that would result in differ

[PHP] Curious Problem with $_POST

2007-04-09 Thread Stephen
I have a form for uploading files. It is intended to upload photos. I have it listed at the end. When I upload a jpg everything is fine. The $_POST variable is populated as expected. If I upload a zip file, it is empty! print_r ($_POST); gives Array ( ) If I upload a jpg Print_r gives: Ar

  1   2   >