| |
| |
| |
|
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35
Comments:
<0> Pisterman: then use flash, which can auto install <0> Pisterman: the restriction is there for very valid and serious security reasons. many times "easy" means "please rape me" <1> when working with imagejpeg, is there a default maxsize for images being used? <2> when im creating an register form, is better to use another .php file with the creation process or is better to put all in the same .php file using { action="<?php echo $_SERVER['PHP_SELF'];?> } ? <3> ||cw: so there is no chance i can load that dll to use on the client side? <0> Pisterman: no. you need something that is signed, so it can extend beyond the sandbox and access the file systsem <0> as far as I know, you can't sign javascript <3> ||cw: thanks <4> Javascript is too easy to alter on the way to the client <5> Well, you can, but nobody does. <5> And I think it's just a Mozilla thing, anyway. <5> Useful in extensions, not so much in websites. <6> how can i check if variable is numeric? <5> Did you try searching the manual for 'numeric' ? <7> MalMen: ctype_digit()?
<1> nobody knows the maxsize allowed when using imagejpeg ? <6> im know now the error <7> sidey: That'd depend on the memory <6> i put $is_numeric <6> :S <7> *blink* <8> i'm upgrading from 4.4.0 to 5.1.* is there anything i need to change in my php.ini? <7> not really <8> ok good <1> Stormchaser: can it be getimagesize() that doesnt allow too large images ? <7> sidey: That shoudn't be important... <6> if (is_numeric($quota) = FALSE) <6> Fatal error: Can't use function return value in write context in /var/www/painel/modulos/adduser.php on line 15 <6> :S <9> sidey: what size image are you opening? <8> when i went to apache2.0.55 from 2.0.52 there was like a huge dir change and config's changed... so thats why i ask <10> MalMen: RTFM :) <7> *sigh* <10> MalMen: = is for ***ignment. == is for comparison. === is for strict comparison. <1> 1,26MB is okey, with the resolution 1000x1333 <10> Not too hard, plenty of examples per function. <6> im p*** long time far far away of php <9> sidey: that should work just fine if your php memory limit allows it. <8> and all i wanted was the pdflib... ****ing gentoo <7> gentoo \o/ <1> ahh, i think its the resolution-size that matterst <1> for example, 1000x1333 works <11> hola <1> but 1944x2592 doesnt work <8> its like an audi, it works great when its working, but when there is a problem. you have change a ton of stuff <11> pplication Error - Database misconfigured to use an unsupported driver: ADODB ? <1> can i set the maxsize of an image somehow ? <12> Hello. I'm trying to list all the letters of the alphabet using the range and foreach functions. Can someone help me out here? <13> magox: #mysql <14> is it possible to specify the path for a session cookie? <14> without having access to the ini configuration? <13> foreach (range('a', 'z') as $letter) echo $letter; <5> http://php.net/setcookie <5> Oh, a session cookie. <5> http://php.net/session-set-cookie-params <14> mattmcc: thanks a bunch. <15> Hi. I'm using mod_auth_mysql apache module to handle the login procedure from the Apache to MySQL side. Now the p***words are stored encrypted (mysql encrypt()). I want to no longer use mod_auth_mysql and just use a PHP cl*** I've written to handle everthing. How can I take a p***word and compare it to an encryted p***word? <12> thank u, depretion <15> mod_auth_mysql does this some how, but I have no idea where to begin. <16> TheWarden: Figure out which encryption method it used, and use that method and compare the outputs. <5> Do the comparison in a query. <5> Only way to access mysql's special short-bus hashing method. <7> !tell theGZA about u <15> richardlynch: it uses mysql encrypt() which is equivalent to C's, not sure if this matches crypt() in PHP. So grab the p***word from database and then take the submitted p***word crypt it and compare it? Whould these not match as it's never the same.. unless it creates some hash. <16> TheWarden: Errr. The encrypted version *IS* a hash, really. The question is which hashing function they used in mod_auth_mysql <15> oh encrypt() of MySQL uses the Unix crypt().. which should be the same as crypt() in PHP. <15> richardlynch: right... damn ahh that wlll be tough <3> ||cw: can you give me some advice from where to start to do it with flash? <3> ||cw: or with java? <16> TheWarden: Or just use: SELECT p***word = encrypt('$p***word') FROM whatever where username = '$username' <17> enjoy ! <7> *urp* <13> Stormchaser : Do you chill in here all day whilst you are at work? :P <15> richardlynch: oh I didn't think that would work as I thought it changed each time the hash... so if I take a p***word that has been crypt() and then take another p***word and crypt() that they should always match? <15> richardlynch: well if the p***words are the same that is I mean.
<13> the hash is always the same yes <8> ah now my mysql-connect doen't work, why am i not surpized <7> DepretioN: I like to munch random people :) <18> where can I get mysql administrator <13> AfroTurf : You are not surprised because you know your level of knowledge :) <16> TheWarden: That's kinda how it works, yeah. Some hash functions bury a "salt" into the encrypted data -- E.G. the first 2 characters or everything between $1$ and $2$ in the middle or... You have to know the function, and how to get the salt back out, but it will always works out the same for the same inputs. <13> angela24 : jobs.com <7> angela24: probably in some store as well... <5> A pet store, perhaps. <7> yep :) <5> PHP parrots, mysql monkeys, linux llamas... <16> angela24: It should have been installed as mysql_admin right next to mysql binary, unless you installed only mysql-client, perhaps? <5> Wait, they don't sell llamas in pet stores. <19> Your pet store doesn't sell llamas? Do they carry alpacas? <5> Only on the TVs by the registers. <15> richardlynch: so to test this theory I should be able to do this then, SELECT * FROM WebAccounts WHERE P***word=encrypt('p***wordhere');. Test it against an account I know for a fact the p***word is. So far not working.. and I know I'm not using salt. <18> um richardlynch I was using my sql control center <5> Apparently they can make you rich. <18> but is deprecated <13> angela24 : #mysql <19> A male alpaca just sold recently for $600,000 <8> where is /tmp usually at? <16> TheWarden: How do you know mod_auth_mysql did not use a random salt? You don't know that. <13> Yes TheWarden , if that failes the hash is different <19> AfroTurf: ... <8> nvm <10> :D <18> DepretioN ? <15> richardlynch: oh no I mean mysql encrypt() is being used without salt. <8> i've just upgraded and now a bunch of **** doesn't work, same **** different day with gentoo <20> pdo+forking==borked <15> damn it anyone how doesn't work...argh. Now what.. mmm <19> AfroTurf: No upgrade has ever moved /tmp. <16> TheWarden: Show us a sample p***word (encrypted) from your db. <13> AfroTurf : thats why Gentoo is so fun ... you get to fix things all the time and you learn so much :) <19> If you're asking where /tmp is, there's a problem here that is not Gentoo. <8> lateralus: i'm getting mysql_connect errors: Can't connect to local MySQL server through socket '/tmp/mysql.sock' <19> AfroTurf: So start mysql. <8> Lateralus: it is :) <13> put a cron job to emerge system && emerge world and get all the testing packages aswell.... now thats fun :) <13> AfroTurf : check your my.cnf where it sets the .sock file <19> AfroTurf: http://dev.mysql.com/doc/refman/5.0/en/can-not-connect-to-server.html <16> AfroTurf_: Probably not started correctly... Or did they move the directory for mysql.sock in the distro? <13> then either symlink it to /tmp/mysql.sock , or recompile php with correct sock location <8> ya i'm checking whee the dir i sfor the mysql.sock <8> knowing gentoo they move it with every upgrade of something somewhere <13> they would have patched the php ebuild then aswell <15> richardlynch: okay sec... <8> i'll create a sym link and see if that will work <13> should, but it will probably break everytime you restart mysql <0> AfroTurf: sounds more like you've hacked in a non-standard location, I'd expect it to be somewhere more like /var/lib/mysql/mysql.sock <15> richardlynch: okay this is the stored p***word value inside quotes, "oZgARWaiOyqT6". The p***word actual value is "foobar". <16> ||cw: Yeah, well the MySQL guys default it to /tmp, so that's where *I* expect it to be. <8> this is why i'm scared to upgrade all the time with gentoo <5> Debian packages change the default, because it's stupid. <5> Runfiles have no business being in /tmp. <13> TheWarden ... is that in your mysql.user or something? <15> richardlynch: I'm doing this to test it, SELECT * FROM Web_Accounts WHERE P***word=encrypt('foobar'); <0> AfroTurf: the official mysql source tarball does this? <16> TheWarden: It's the old old 2-char salt at the beginning algorithm whose name I forgot. <15> DepretioN: no this is stored in a table the stores all my users on the web site. this is for a web site not for mysql access. <8> ||cw: everything in gentoo does this lol <13> SELECT * FROM Web_Accounts WHERE P***word = OLD_P***WORD('foobar'); <13> try that <16> TheWarden: p***word = encrypt(p***word, substring(p***word, 1, 2)) <15> richardlynch: oh great... ahh mmm <16> TheWarden: It's also not a particularly good algorithm anymore, as I recall... <8> ||cw: been using gentoo for over 2 years and i've not had one easy simple emerge -uN world <21> im having a script that uses gd functions fail silently (i have E_NOTICE on), and i cant figure out why. php5, apache2 <19> AfroTurf: Then there is a problem here that is not Gentoo, as most people have no trouble. Perhaps you aren't cut out for Gentoo. Try debian. <22> is anybody in here used to getting php en mysql to work under windows with apache? <7> AfroTurf: As said: gentoo \o/ <5> AfroTurf: Not being cut out to run gentoo isn't necessarily a character flaw. <16> mattmcc: If you wanna argue with the MySQL guys where they ought to put their files, then argue with them. I don't care where they are, so long as the distro doesn't move them for only half my software..
Return to
#php or Go to some related
logs:
php5-domxml debian cant multiply sequence to non-int in python bypass_banned_checks_acl #freedesktop #php portage list index out of range cedega ubntu #sql python replyrate iptables cmd-owner smp
|
|