| |
| |
| |
|
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Comments:
<0> i have the patch against 4.4.1 source <1> what the hell <1> too hard <1> complicating it way too much <2> a little advice about security issue <2> when i get from a query string the section of the site to load <2> for example ?module=register <2> is dangerous to load that module with require_once('$module') <2> strip ' :P <1> bye <3> kioto: YES <3> do not do that <2> $module is $module = $_GET['module']; and later with a switch i load the module <4> $modules = array('nife' => true, 'kioto' => true ...); <4> if (isset($modules[$_GET['module']])) ... <2> ah right, i define an array of the real module that exist
<5> Eek. Didn't realize I was still in here :P <2> and can you explain a possible way of an attack if i use the only $_GET['module'] <6> I'm out - later all <4> ?module=/etc/p***wd <2> ?module get a file with a function not only markup <2> for example ?module=news load a file called news and into news exist a function getNews() that print markup <7> kioto: You can always define all modules in an array and check it before loading it. <8> i have a form with several input fields, one of them is disabled but contains a value that should be POSTed to the handling script, my question is if this (disabled) field will be POSTed with the rest of the values of the form?, thx 4 the help... <2> sure this a good advice <3> or the other option is to stip all /'s and \'s and leading .'s <3> though the predefined array is more secure <7> iframe: Erm ... <input ... read-only> ? <8> yup <input disabled = true ... value = some_value>... <9> isn't it disabled="disabled" <8> tws, sorry... <0> did we go through a channel warp? <7> iframe: When a form control is disabled, it cannot be successful. Set it to read-only so it can be successful and you can get the value of that form control. <0> i wouldn't *trust* disabled fields <8> tws, this is exactly what i have: <input disabled="true" type="text" name="register_admin_name" value="admin" maxlength="13" style="font-weight: bold;"> <7> iframe: Talk in #web. <8> tws, why not here?... <9> you can set a hidden input value however <8> ok wait... <10> lets say you have google style result and you want to put a check box in front of it <10> how do you remember which ones is checked <10> checkboxes in front of results <0> iframe: the issue is how html is handled on these disabled forms and how they behave accross browsers <11> how do I read a line from keyboard input in PHP? <0> Bear_DK: in a CLI environment? <11> zircu: yu <11> yes <0> Bear_DK: php.net/readline would be a start <9> some browsers will parse disabled input/textarea <9> tws is right, use readonly="readonly" <12> hello everyoen <13> morning... <14> hi <14> im just about to go to ved RvGaTe .. <14> :P <13> bed you mean :P <15> a question folk, where do pecl froods hang out? i have an extension question. <14> no im from germany <14> its my accent. <14> im jk :P ya thats why i need to go to 'ved' :P <14> where do pecl froods hang out? << english please? <14> its 4am common man :P <0> ditesh|c***ini: the pecl mailing list is very helpful <14> hi CalcMan <15> zircu, okies. but i think the ml is fscked as subscribing requests don't seem to work. <0> ditesh|c***ini: you can always subscribe manually by sending an email to php-pecl-subscribe@lists.php.net <0> hmmm or or is it pecl-devel <0> ditesh|c***ini: http://pecl.php.net/support.php <15> surffy, pecl => php extension community library, frood=>really amazingly together guy <15> zircu, many thanks. <15> zircu, incidentally, is your pecl foo good? <14> me => practically considered dead. <14> lol <0> the subscribe thing? i dont think so <16> include_once(../test/something.php); <16> does this go up a directory? <0> or down.. depending on how you are looking at it
<16> ok does it move up the tree and then down to another directory in the same level? <17> Yes. <16> i am not sure because it returns some not found error <17> Then you probably have the wrong path. <16> oh crap <16> its a permission denied <16> :S i already chmod my public_html ! <18> is there a mirror for php.net? it seems to be down... <0> zOap_wrk: us2.php.net <15> zircu, picked up extension writing last weekend, its quite fun! <18> zircu, thanks :) <10> lets say you have google style result and you want to put a check box in front of it <10> checkboxes in front of results <10> how do you remember which ones is checked <10> in a session? <15> PTR___, how are the checkboxes named? <19> hi all.. i have to port some app to php5 and im getting "Fatal error: Using $this when not in object context" .. unfortunately php.net is down so i dont have a good info resource for the error.. anybody has a hint, what i can do about it ? <20> cklaus: pastebin your code... <20> the $this variable can only be used within a cl*** <19> awormus, cant really paste.. its way too much.. but the line the error occurs is indeed outside of any cl*** definition (afaics) .. its "$this->cl***_obj = new db_kl***e;" ... <19> awormus, is there some scheme i can follow to convert this type of statements to make em php5-conform ? <20> cklaus: are you just using $this as a variable name? if so then change the name of the variable <20> if you're inside a cl***, that will work just fine <20> but outside a cl*** will throw that error <19> awormus, prob is.. i didnt write the app originally and its written in a bit confusing way ,) ill just try to rename it.. thanks for help in any case <10> ditesh|c***ini dont know yet, its just if its possible <20> cklaus: have fun, if the original author used $this as a variable name, that probably wasn't the only screwy thing they did <15> PTR___, should be. <15> PTR___, you just have to map the page variables to the sessions variables <19> awormus, think so too :( i guess this will become a nice day (week, month.. gaaaah) <20> :) <15> awormus, well, he/she probably didn't know that this would be reserved in the future <21> Using GD, I want to round the corners of a GIF image by putting semitransparent PNG corners on it. This works fine for a JPG image with code like this one, but with a GIF image, the PNG image is just shown as an opaque white square. Anyone know how to fix this? Example: http://henrik.nyh.se/test/testcase.php Code: http://rafb.net/paste/results/hwqQUI48.html How it should look (using a JPG; though <21> the GIF code only does one corner for test case reasons):http://henrik.nyh.se/test/round.php <22> errr: yeah i noticed :) <21> Nevermind, solved it. GIFs are paletted, so I had to ImageCreateTrueColor and then copy stuff unto that. <23> Hey <23> Is there a way to check if a cl*** is avaliable before I do $varname = new cl***name(); ? <19> umm... in php5, shouldnt all vars that are submitted by a form be available by their name in the called php-script (if register_globals is set On) ? so if theres "input type=hidden name=login value=1" ... --> $login in the called script instead of $_POST['login'] ? <2> to start with php5 and mvc what is a good framework a beginning <2> like me with this type of oop design, and mature project to use <23> Dumb question, would this work? $this->modCl***[] = new mod.$mod_key['name'](); <24> anyone here good with udp sockets? need some help reading one: http://nopaste.php-q.net/214163 <25> uhmm, is it ok to use this: printf('<p>'); printf(mysql_result($result, 0,'message')); printf('</p>'); << i get the idea that it should be different.... <25> i mean, i remember something about html being parsed by php, but its too vague in my mind... :) <26> what are you trying to do? <26> you can use print 'html'; <25> well, how would i -> printf('<span id=blaat?>'); <25> www.php.net << is still down so :'( <26> use print instead of printf <25> ok, but '<span id='blaat'>' is not allowed... <25> should i use double quotes, and is this the right way to parse html from my db? <26> you dont need the brackets <2> if i need to determine the last access of a user that is logged on my site <25> then you should keep track of them.. use a sql db kioto <2> how to trigger that the user is out of my site to execute an update on the db <2> i need to use a logout link and later close the session and update the db <2> right ? <27> is there a way to reload the php code without restarting the script ? ^^ <28> is there a function that allows php to get a filesize of something before its uploaded? <27> I have to continue programming on a php irc bot, and it "****s" to restart it all the time to get new functions working <25> [EaK]Konky^dvd maybe you should use cl***es? <25> im just guessing.. <27> what would that help ? <27> what i search is a way to update parts of the php code in runtime <29> morning all <25> 'what i search is a way to update parts of the php code in runtime' < i never seen something like this :') <27> ilke an eggdrop that can reload the tcl scripts <27> yea, sounds crazy ^^ <24> [EaK]Konky^dvd try www.phpbots.org, premade bot with the functionality you're looking for <28> where there a php.net mirror? <27> sounds cool <27> damn, amybe i shoudl port the code into that bot
Return to
#php or Go to some related
logs:
sexysamira #lisp #linux unmask gaim gentoo
#css HTTP-GetImages example mounting /root/dev on dev/.static eth0 does not exist /etc/init.d/net.eth0 #ai #linux
|
|