Re: [PHP] Latin letter problem!

2007-02-21 Thread Dotan Cohen
rs you need the meta tag, as pages stored on disk do not contain the http header. So if the user is using scrapbook, or simply storing the pages on his hard drive, he will need the meta tag. Dotan Cohen http://essentialinux.com/tips.php http://faq-google.com -- PHP General Mailing List (http://www.p

Re: [PHP] GET doesn't work as POST

2007-02-24 Thread Dotan Cohen
On 24/02/07, Otto Wyss <[EMAIL PROTECTED]> wrote: With method="post" just $kind works fine (register_global) yet I've also tried any combination of $_GET['kind'] and $_POST['kind']. With method="get" it doesn't work. O. Wyss Try

Re: [PHP] GET doesn't work as POST

2007-02-24 Thread Dotan Cohen
Also, if you're using the variable in a print string, then you'll need to exit the string, like so: $print "Hello, $kind!"; would become: $print "Hello, ".$_GET["kind"]."!"; Dotan Cohen http://easyanswers.info http://nirot.com -- PHP General

Re: [PHP] GET doesn't work as POST

2007-02-24 Thread Dotan Cohen
On 24/02/07, Dave Goodchild <[EMAIL PROTECTED]> wrote: Or just interpolate it like so: print "Hello, {$_GET['kind']}!"; Nice, I didn't know that. Dotan Cohen http://lyricslist.com/ http://what-is-what.com/ -- PHP General Mailing List (http://www.php.ne

Re: [PHP] GET doesn't work as POST

2007-02-24 Thread Dotan Cohen
On 24/02/07, Pintér Tibor <[EMAIL PROTECTED]> wrote: echo ""; print_r($_REQUEST); echo "; and think... t Maybe you meant: "; print_r($_REQUEST); echo "; ?> Dotan Cohen http://lyricslist.com/lyrics/lyrics/137/12/aaliyah/age_ain_t_nothing_but_a_number.ht

Re: [PHP] GET doesn't work as POST

2007-02-24 Thread Dotan Cohen
t sending the data. What is the entire html of the form (inciuding javascript)? Of course, this is not a php problem. Dotan Cohen http://what-is-what.com/what_is/yahoo.html http://faq-google.com

[PHP] Populating array with function

2007-02-27 Thread Dotan Cohen
, so I know that I've gotten _that_ far. How should I return the contents of $files to $thumbnailFiles? Dotan Cohen http://lyricslist.com/lyrics/artist_albums/612/zion_i.html http://what-is-what.com/what_is/php.html -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Populating array with function

2007-02-27 Thread Dotan Cohen
n, and each will populate a different array. Dotan Cohen http://what-is-what.com/what_is/digg.html http://english-lyrics.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Populating array with function

2007-02-27 Thread Dotan Cohen
On 27/02/07, Arpad Ray <[EMAIL PROTECTED]> wrote: The code is fine, spot the typo. Ah! Found it! $thumbnailFiles=listFiles($thumbnailsDirector Should have been: $thumbnailsFiles=listFiles($thumbnailsDirector Thanks. Dotan Cohen http://lyricslist.com/lyrics/artist_albums/181/erasur

Re: [PHP] Populating array with function

2007-02-27 Thread Dotan Cohen
On 27/02/07, Jochem Maas <[EMAIL PROTECTED]> wrote: Dotan Cohen wrote: > On 27/02/07, Brad Bonkoski <[EMAIL PROTECTED]> wrote: >> perhaps look into the array_push() function http://www.php.net/array_push >> > > Thanks, but I cannot use array_push() as I don&#x

Re: [PHP] Populating array with function

2007-02-27 Thread Dotan Cohen
irl. Thanks. Dotan Cohen http://lyricslist.com/lyrics/artist_albums/443/seger_bob.html http://what-is-what.com/what_is/touch.html -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Populating array with function

2007-02-27 Thread Dotan Cohen
been unable to google the meaning. It seems to always be the same error message, no matter what the cause: "diaper buffer overflow", "system resources (milk) running low", over- or under- heating, they all throw the same error. Anybody else experience this? Any suggestions

Re: [PHP] Populating array with function

2007-02-27 Thread Dotan Cohen
On 28/02/07, Richard Lynch <[EMAIL PROTECTED]> wrote: On Tue, February 27, 2007 3:47 pm, Dotan Cohen wrote: > On 27/02/07, Robert Cummings <[EMAIL PROTECTED]> wrote: >> On Tue, 2007-02-27 at 09:05 -0500, Al wrote: >> > A good php editor, with code completion, w

[PHP] Enclosing fields in MySQL queries with `" or '

2007-03-04 Thread Dotan Cohen
Are there any advantages/disadvantages to using and of the ` " or ' punctuation symbols in MySQL queries? I usually only put them around variables (after being sanitized, of course): INSERT INTO places (country, city) VALUES ('$country', '$city') Any thoughts on t

Re: [PHP] Enclosing fields in MySQL queries with `" or '

2007-03-07 Thread Dotan Cohen
On 05/03/07, Chris <[EMAIL PROTECTED]> wrote: Dotan Cohen wrote: > Are there any advantages/disadvantages to using and of the ` " or ' > punctuation symbols in MySQL queries? I usually only put them around > variables (after being sanitized, of course): > > IN

Re: [PHP] Enclosing fields in MySQL queries with `" or '

2007-03-13 Thread Dotan Cohen
On 13/03/07, Richard Lynch <[EMAIL PROTECTED]> wrote: On Wed, March 7, 2007 1:22 pm, Dotan Cohen wrote: >> A backtick (`) on the other hand is a mysql-ism. It allows you to >> use >> keywords as field names (eg `index`) amongst other things (including >> quoting str

Re: [PHP] Re: My own "captcha" from 2 years ago......

2007-03-25 Thread Dotan Cohen
On 25/03/07, tedd <[EMAIL PROTECTED]> wrote: What about an audio Captcha? Your thoughts? tedd I do a lot of my browsing at the university library. I can't have any sound being made there each time I must enter a capcha. Don't use audio, or provide an alternative. D

Re: [PHP] שנה טובה!

2009-09-19 Thread Dotan Cohen
ניצן, תזהר לא לכלול את תפוצות הדואר כשאתה שולח דברים אלו. תודה. שנה טובה! -- Dotan Cohen http://what-is-what.com http://gibberish.co.il

Re: [PHP] שנה טובה!

2009-09-19 Thread Dotan Cohen
> I think this is an English language list. > The OP was just wishing everyone a happy new year. I then replied back asking him not to CC the list with such matters, but in a flash of brilliance CCed the list (bad, gmail, bad!) myself. I apologize. -- Dotan Cohen http://what-is-what.co

Re: [PHP] שנה טובה!

2009-09-20 Thread Dotan Cohen
c and can handle these messages! So isn't it about > time we had a version of PHP that does not require 'jiggery pokery' to cope > with any text? > Unfortunately I am not one of those responsible for such matters, but I do believe that Zeev and Andi have a good ide

[PHP] Variable name as a variable?

2009-10-05 Thread Dotan Cohen
ill be a very general-purpose tool, a switch statement on the hidden field's value would not be appropriate here. Naturally, the situation will be much more complex and this is a non-obfuscated generalization of the HTML side of things which should describe the problem that I need to solve

Re: [PHP] Variable name as a variable?

2009-10-05 Thread Dotan Cohen
Thanks, all! I will experiment with the three different solutions presented and see what best fits this application. As to the security aspect, yes, I am aware that this is a simplification and that the values must be sanitized. Have a great week. -- Dotan Cohen http://what-is-what.com http

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
was hoping that there would be a shared language for constructs such as -> and the like. Thanks. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
> open parenthesis > $item getServiceId > question symbol > $item getServiceId > colon > $item getId > close parenthesis > > How would you mention the -> constructs? Certainly they are not assumed? -- Dotan Cohen http://what-is-what.com http://gibberish.co.il

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
here one had to talk over the phone when a computer or other internet-enabled device was not accessible. Therefore, we would prefer to formulate a shared language now for use in such situations. Surely when coding, people "say" what they are typing in their heads. I do, but not in Englis

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
s would be > fairly simple. > Yes, the other end of the phone is an experienced PHP developer. > In any case, Ashley's nailed the foolproof technique for sure :) But I am the fool to prove it! No internet access! -- Dotan Cohen http://what-is-what.com http://gibberish.c

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
mand >        Using object variable "item" call object member method "get service id" > > if condition results are false issue following command >        Using object variable "item" call object member method "get id" > > Thanks, that is probably

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
n experienced PHP developer. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
eses don't match ... but that's a different story I guess. > That actually sounds like a subplot of a good movie. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
> If they can reach you by phone you are not on vacation. You are still > attached to their leash. > And they still throw me bones :) It's worth it! -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscrib

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
> I haven't the slightest idea what you are talking about. Vacation? Away > from the net? We must be from different planets... > Very likely, as us Saturnians inhabit the moons, not the planet. Only rocky planet-dwellers talk like that! -- Dotan Cohen http://what-is

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
om the net? We must be from different planets... > > How to do you vacation from something implanted into your brain? > http://www.imdb.com/title/tt0100802/ -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
is definitely not "experienced".  ;) > I do not need to explain it, I need to say it. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Sanitizing potential MySQL strings with no database connection

2009-10-16 Thread Dotan Cohen
es, I need the function to work independently of the database connection. In other words, the include file cannot connect to the database but it still must perform the mysql_real_escape_string() function on UTF-8 data. Thanks in advance for any ideas. -- Dotan Cohen http://what-is-what.com

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-16 Thread Dotan Cohen
> This is a lot of posts to say either read it off character by > character If there is a jargon for operators such as -> I'd like to know them. > or just email the damn line. > Not possible for whatever reason, otherwise I wouldn't be bothering the list! -- Do

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-17 Thread Dotan Cohen
> As for following a convention, just > get the PHP terminology right, That is what I was hoping to learn! > or at least agree on your on > bastardized terminology. > Because this may cause problems in the future. -- Dotan Cohen http://what-is-what.com http://gibberish

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-17 Thread Dotan Cohen
functions.inc file as that will interfere with the database connections going on in the scripts including that file. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-18 Thread Dotan Cohen
mples. > Thanks. Going through those pages, I see that it is not what I need. It is good to know, though. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-18 Thread Dotan Cohen
ion sanitize_input() based > on ereg_* and/or str_replace and the likes. > All the connections are to MySQL databases, but to _different_ MySQL databases on the same host. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To u

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-19 Thread Dotan Cohen
2009/10/19 Kim Madsen : > Dotan Cohen wrote on 2009-10-18 21:21: > >> I thought that one could not test if a database connection is >> established or not, this is the most relevant thing that I found while >> googling that: >> http://bugs.php.net/bug.php?id=29645 >

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-20 Thread Dotan Cohen
, '\r', '', '\\\'', '\\"',  '\\\x1a'); >  return str_replace($patterns, $replace, $input); > } > > ?> > I think that I would rather trust the built-in functions. I don't need to do anything "smart" and get attacked. Anybody else have an opinion on this? -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-20 Thread Dotan Cohen
one always open for the > purpose of validation? Potentially wasteful, but the architecture in this > idea is a little different from the norm. > Very wasteful indeed, I cannot be so irresponsible with this server. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-20 Thread Dotan Cohen
$difference) function obfuscate_email_address ($address) Not all of the functions are used in all scripts, however, this file of reusable functions is included in all of them. Only the clean_mysql function gives me trouble because it calls mysql_real_escape_string(). -- Dotan Cohen http://what-is-wh

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-20 Thread Dotan Cohen
s to do on this server. But it fact this seems to be the key that I was missing, and even though I cannot make use of it at least I know in general what needs to be done. Thanks. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-20 Thread Dotan Cohen
orting($error_reporting); > unset($error_reporting); > Thanks, I will try that this evening. I may not have permissions for that, but we'll see. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-20 Thread Dotan Cohen
f it is all internal users. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-20 Thread Dotan Cohen
> if(@mysql_real_escape_string($variable) === false) > Perfect! The @ symbol suppresses the error and I can structure the code according to whether or not there is a connection. Thank you! -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-21 Thread Dotan Cohen
> Maybe this will help... > > Jim > So far as I understand mysql_real_escape_string() was invented because addslashes() is not adequate. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-21 Thread Dotan Cohen
om/214652 > > For more real-time collaboration and sharing of code fragments. > Widely used, but sometimes unavailable due to technological limitations. > Daevid. Is your name related to "David"? I have never seen this spelling, and my interest in etymology is overwhelming. Wh

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-21 Thread Dotan Cohen
> If you look a little closer, you will see that I am not using addslashes(). >  Rather, I am using addcslashes().  This allows to specify the characters > that I want escaped, instead of the default assumed characters from > addslashes(). > I do not know which characters to esc

Re: [PHP] Sanitizing potential MySQL strings with no database connection

2009-10-21 Thread Dotan Cohen
> It _should_ all be UTF-8 but I suppose that it is possible for someone to spoof a non-UTF-8 POST request. I do not want to take the development of a secure function into my own hands. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-23 Thread Dotan Cohen
duder. When I say 'arrow-thingy' you make hyphen and a > greater-than sign. Capiche?"  Problem solved. ;-) > That is what was done, but I wanted to know if there was already some agreed-upon language. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP G

Re: [PHP] How to pronounce PHP code over the phone?

2009-10-24 Thread Dotan Cohen
communicate verbally, even when one could simply fax a photo of a grape and a glass of wine. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Using base64 encode and decode to store user data in database

2010-02-19 Thread Dotan Cohen
other drawbacks or things to be aware of? Thanks. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il Please CC me if you want to be sure that I read your message. I do not read all list mail. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http

Re: [PHP] Using base64 encode and decode to store user data in database

2010-02-19 Thread Dotan Cohen
On 19 February 2010 16:27, tedd wrote: > At 3:18 PM +0200 2/19/10, Dotan Cohen wrote: >> >> In order to prevent SQL injection, can one simply base64 encode the >> data and store that? Then it can be decoded when I need to display it >> on a website. I understand that th

Re: [PHP] Using base64 encode and decode to store user data in database

2010-02-19 Thread Dotan Cohen
27;user_id']; > > $comment = base64_encode($_POST['comment']); > > > $sql = "INSERT INTO `comments` (user_id, comment) VALUES ($user_id, > '$comment')"; > > ?> I see what you mean. In fact, userIDs are stored, and indeed I ensure that they are inte

Re: [PHP] Using base64 encode and decode to store user data in database

2010-02-19 Thread Dotan Cohen
> What about eBook ($23.99)? > > http://oreilly.com/catalog/9780596006563 > > If you can get this, you can get that. > That may be a good idea. Certainly better than the pirate bay. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il Please CC me if you want to b

Re: [PHP] $_POST vs $_REQUEST

2010-02-22 Thread Dotan Cohen
't forget, there might even be a cookie with the name "foo". -- Dotan Cohen http://bido.com http://what-is-what.com Please CC me if you want to be sure that I read your message. I do not read all list mail. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, v

Re: [PHP] Math Question....

2010-04-23 Thread Dotan Cohen
gt; Thanks... > What is wrong with 626,299 groups of 2 items each (done in my head, so I might be off a little)? -- Dotan Cohen http://bido.com http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] php quiz script/tutorial

2010-04-27 Thread Dotan Cohen
t; javascript but have concerns about accessibility for both of these. > > Does anyone have any experience of writing quizzes with php and if so, > can you recommend any resources to get me started? > > TIA > > Paul HTML has a element with radio buttons, text fields, and more. U

Re: [PHP] protecting email addresses on a web site

2010-06-14 Thread Dotan Cohen
On 14 June 2010 15:36, HallMarc Websites wrote: > Another is a CSS solution where you type the email address backwards and > then use the CSS style declaration: > style="direction: rtl; unicode-bidi: bidi-override;" > How does that work with screen readers? How about copy-p

[PHP] What are the curly brackets around variables in SQL statements for?

2010-07-21 Thread Dotan Cohen
Take for example: INSERT INTO table ( field ) VALUES ('{$variable}' ) Why the curly brackets? Where in the fine manual is this addressed? I started from [1] but did not find the relevant info. [1] http://il2.php.net/manual/en/book.mysql.php -- Dotan Cohen http://gibberish.co.il http

Re: [PHP] What are the curly brackets around variables in SQL statements for?

2010-07-21 Thread Dotan Cohen
e quote character is not a valid character in a variable name. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] What are the curly brackets around variables in SQL statements for?

2010-07-21 Thread Dotan Cohen
han, I _just_finished_ reading that page! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Standalone WebServer for PHP

2010-09-13 Thread Dotan Cohen
ng totally closed to the outside world other than to their > internal employees? Or is this something that can only be provided by a LAN > with no Internet connection? > Filter on IP address. Not foolproof, but mostly there. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

Re: [PHP] Standalone WebServer for PHP

2010-09-13 Thread Dotan Cohen
ld run web-languages such > that users in the office could access their server and run scripts using > browsers? > Just connect them to a router and don't connect the router to the WAN. Each machine will get it's own IP address (assuming that the router is running a DHCP server).

[PHP] Zip files: generate text file in archive on the fly

2010-10-17 Thread Dotan Cohen
of this in the fine manual, and even googling has led me nowhere. Ideas? Am I missing something obvious? Thanks! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: Zip files: generate text file in archive on the fly

2010-10-21 Thread Dotan Cohen
I found this terrific tool for creating dynamic zip files: http://pablotron.org/software/zipstream-php/ -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
course, if I trim() also when the user is setting his password then he will never know that his password is really 1 digit shorter, but do I really want to do that? Thoughts? Thanks! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net

Re: [PHP] Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
find counting the password character in a > field difficult because the characters are all the same and the eyes can't > follow easily) > I will add such a footnote in the event of a failed password attempt (right there with the capslock warning) but I do not think that a coun

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
the new bank's website would not let me use an exclamation point in my password. I might be an extreme example, but it is behaviour that I do not agree with. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
ssword that takes advantage of both these features might be " John123Lennon&lang=en" which is easy to type, easy to remember, very long and contains a wide variety of characters. Trimming spaces would _not_ be what a user of this password would want. And yes, I'm the OCD geek with su

[PHP] Re: Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
. This way, each login is done with a different hash of the password so an attacker cannot simply capture and reuse the hashed password. But before all that goes on, I have to decide what to do about leading and trailing spaces. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
on the client, testing for this, then logging it to a separate database with no correlation to the users. Interesting it will be, at least. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
flow uphill, or reversing aging? I can do a lot of things, but don't even ask me to bring back the dead! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
gt; But before all that goes on, I have to decide what to do about leading >> and trailing spaces. > > As has been noted a couple of times: trim usernames. Never trim passwords. > I think that is right. I needed that push. Thanks. -- Dotan Cohen http://gibberish.co.il http://what-is-

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
rd && $enteredPassword!=$realPassword){ print "Warmer!"; } I'm kidding. I'll not trim. But if $trimmedUsername != $enteredUsername I'll mention that fact to the user and remind him to be careful to copy exactly what he means to copy. Username only, not password.

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
he public key >> of the cert. > > I just realize that this would also completely solve your trim() problem! > "Hello, Dotan? Hi, we haven't spoken in a full week now that we don't have the trim problem. But I reinstalled Windows and wiped the drive, now I c

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
possible! While we're at it, how about adding just one little feature... -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
On Tue, Dec 28, 2010 at 22:43, Nathan Rixham wrote: > that's what pkcs12 was invented for, just issue another certificate / key > pair. > I could probably automate and script it, I would just give the users a name/password combo to their own control panel... -- Dot

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-28 Thread Dotan Cohen
on cold, the last of the Mohicans, the look on your face, > the way we were, the DeLorean, the secret of nirvana, and all of my > exabytes of pr0n collections. > Did you know that when you type 'brown1' we see it as **? Your system does that automatically. -- Dotan Cohen

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-29 Thread Dotan Cohen
or trailing spaces in the the username only: "Your username [begins||ends] with an errant space. Please reenter your credentials more carefully." I hope that they figure out to check their passwords as well. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com --

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-29 Thread Dotan Cohen
are assigned passwords. > Under the circumstances I described, I have yet to hear in what way > copying and pasting passwords compromises security of anything by > itself. Please enlighten me. > I think this is the underwear rule: never leave passwords/underwear out in the open where

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-29 Thread Dotan Cohen
t logged if you typed it in as well, on the site, or that > someone could lift the password if given the authority on your system, > correct? > There is little us as serverside programmers can do when the user's system is already compromised. However, securing the password down the wir

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-29 Thread Dotan Cohen
mation on > the server. > > How do you thwart these possible and other  intrusion nodes? > A different password on each potentially-weak site? Lasspass is great for this. You can then export and print your Lastpass data, put it on a removable media, or access it via web access. --

Re: [PHP] Re: Do you trim() usernames and passwords?

2010-12-30 Thread Dotan Cohen
he skirted personal attacks and borderline trolling. Seriously, it is as entertaining as it is informative. Who needs slashdot with action like this? If this stuff ever comes up again, will the participants be so kind as to CC me so I don't miss it? Thanks! -- Dotan Cohen http://gibberish.co.il h

Re: [PHP] Re: No error reporting on

2012-04-23 Thread Dotan Cohen
On Mon, Apr 23, 2012 at 14:18, Jim Giner wrote: > Just my $.02, but don't you need: > > ini_set('display_errors', '1'); > > as well? > Possibly, thanks. I actually don't have access to that! -- Dotan Cohen http://gibberish.co.il http://what

Re: [PHP] Re: No error reporting on

2012-04-23 Thread Dotan Cohen
x27;m not supposed to touch the main script without a very good reason. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Multithreading for OOP PHP

2012-10-31 Thread Dotan Cohen
solution I was glad that I did. PHP is not memory efficient and we really don't need it hogging up the CPU when a real C program can do the intensive work. And if you need threading, then you are very likely looking at exactly the type of workload that PHP is designed not to do! -- Dotan Cohen

Re: [PHP] Re: Multithreading for OOP PHP

2012-11-03 Thread Dotan Cohen
nt and beneficial. When we have that, and > programmers learn massively parallel design, maybe then we will have a need > for parallel php (pphp?) for now, there is no need, only poor design. What? i don't know what you mean by "massively parallel architecture" but it certainly ha

Re: [PHP] Organisational question: surely someone has implemented many Boolean values (tags) and a solution exist

2011-01-20 Thread Dotan Cohen
27;d recommend using a nested set approach for the tags > (http://dev.mysql.com/tech-resources/articles/hierarchical-data.html > gives a good explanation on the issues and methodology of nested > sets). > That is terrific, at least the first half. The second half, with the Venn diag

Re: [PHP] Organisational question: surely someone has implemented many Boolean values (tags) and a solution exist

2011-01-20 Thread Dotan Cohen
On Thu, Jan 20, 2011 at 18:20, Dotan Cohen wrote: > On Thu, Jan 20, 2011 at 17:00, Richard Quadling wrote: >> I'd have my items table, my tags table and a join table for the two. >> My join table is really simple. UniqueID, ItemID, TagID. >> > > Yes, that is the

[PHP] Re: Organisational question: surely someone has implemented many Boolean values (tags) and a solution exist

2011-01-20 Thread Dotan Cohen
e that is to > work like libraries do: 10 is "fiction", 10.05 is "crime novels", 10.05.07 is > "British authors", and so forth. Your `tags` table then looks like > Thanks. I prefer the "parent tag" field, though, I feel that it is more flexible.

Re: [PHP] Organisational question: surely someone has implemented many Boolean values (tags) and a solution exist

2011-01-20 Thread Dotan Cohen
if you have multiple tag hierarchies. > Is that strategy widely deployed, then? It seems so unruly having to change on average half the database records for every new leaf. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Organisational question: surely someone has implemented many Boolean values (tags) and a solution exist

2011-01-20 Thread Dotan Cohen
ed > within the equation. > > However, I digress, momentarily. > > But Einstein gave freely, for humanity, not for gain, other than > personal freedom. > > An equation that benefited all, and yet gain is a personal product. > > Also, if you can answer it, is gravit

Re: [PHP] Organisational question: surely someone has implemented many Boolean values (tags) and a solution exist

2011-01-20 Thread Dotan Cohen
ng that a customer exists, that implies compensation, and therefore fair bait. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] RE: Organisational question: surely someone has implemented many Boolean values (tags) and a solution exist

2011-01-20 Thread Dotan Cohen
at for tomorrow) I'll see it differently. Thanks. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Organisational question: surely someone has implemented many Boolean values (tags) and a solution exist

2011-01-20 Thread Dotan Cohen
> Adding categories to the hierarchical model is definitely faster > so it comes down to your insert-to-select ratio. Moving a subtree is also > much easier with the hierarchical model. Which do you call the hierarchical model? That term is not used in the linked article. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Organisational question: surely someone has implemented many Boolean values (tags) and a solution exist

2011-01-21 Thread Dotan Cohen
the length of the sig far outweighs the length of your typically concise and to-the-point post. Constructive advice: trim the sig! Thanks! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Organisational question: surely someone has implemented many Boolean values (tags) and a solution exist

2011-01-21 Thread Dotan Cohen
ories of category X requires searching > first for all children, then all grandchildren, and so on, resulting in a > recursive query. > Using the nested sets model requires a single non-recursive query to get the > same data. > I do agree that the non-recursive method at retrieval ti

<    1   2   3   4   5   6   >