| |
| |
| |
|
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13
Comments:
<0> wha? <1> Chameleon22: explain <2> wykis_ ->?? <3> webustany: the backend of the code is a template file (html) <4> EvilGuru: Then I think simplexml is the best solution. <3> webustany: with '%s' in there to build up the code using sprintf <3> isn't that php5 onlu? <4> EvilGuru: I don't think so... I only use php5 anyway <1> DespNekus: im drakas <1> ./ns info wykis_ <3> I am normally php5 only as well, but this project will probably end up on a php4 system <5> wykis_, ok ***ume globals are On right. in file A you set an auth flag (auth=1) in file B you check it. Attacker can then reset auth=1 while directly accessing file B and writing something like http://..../B.php?auth=1. All can be solved if globals are off and explicit $_POST/GET/SESSION/etc. are used <4> Enur: I don't understand your problem <2> wykis_ ->Oh, ok, well, don't you have a zip/gzip of the project? <1> Chameleon22: i mean code injection.. is that? <4> EvilGuru: You should check simplexml's comaptibility
<1> Chameleon22: or is it just the register globals thing <4> *compatibility <1> Chameleon22: im very familiar with it... ****s <5> well its border line i guess since you are altering code execution. <6> !+globals <7> [GLOBALS] There is $GLOBALS --> http://php.net/manual/en/reserved.variables.php#reserved.variables.globals or you might have meant Register Globals --> http://php.net/manual/en/security.globals.php <1> DespNekus: not really, the project is jsut in the first stage <2> mmmm <1> http://drakas.sytes.net/pc/source.php is the source viewer <5> say instead of auth=1 someone types in some code or what ever. Be creative here :) <8> webustany: did you look at the source code? those two variables there are not declared <4> Enur: Yes, but what's the point ? Where does this code come from ? <1> you got any URL`s ? <2> Im checking it, Im just wondering if it will work with my project... it has 4 "levels" of templates <2> By this I mean divs that I need to load one inside of another <8> i am converting a database component for cms, i dont understand why those two variables aint declared anywher <1> DespNekus: if you use my engine for your project, i am not giving any guarantees for any bugs.. <2> heheh <1> i am only the dev <1> so, if you want to help - please do <1> what is your website for? <1> you could build a poll section or whatever ;} <5> okies sya all sleep time, 5am sunday morning here <5> *waves <2> Im building up a "shop" system, it's to small vendors, controling buy, sell, clients, what have to sell (forgot the word) and a balance of the month <1> right!:) <1> shopping cart..:] <9> inventory... <2> yes! Inventory! <1> ok <2> thx! <1> what you simply do is create different functions for accessing the database. they shouldn't be dependent on anything else than themselves and id validation functions. <10> hey. any php-shell (aka interactive php) like one that python or ruby (irb) has? <1> when you write a module for stage3/stage4, you will need to use those functions in an orderly way for them to combine the power. <1> arturaz: php -a <1> -a Run interactively <1> DespNekus: so have a look for example in modules.cl***.php and look at how it is all done. <2> My question is how to "***emble" the page, for example, the index.tpl has a div where all content stay. The content includes a menu, a top banner and another content area... <6> "combine the power"? What the hell is this "Mighty Morphin' Power Rangers" ?! <1> yes ;] <6> bah, take it #childhood <1> DespNekus: this is not finished yet. I am still working on how to connect it all. <2> I need to improve my OOP <1> DespNekus: there are few current problems: 1) Template handling systeem 2) Setting Custom templates <2> what's the problem with it? <1> well i think i've wrtten about in docs.php <1> currently, the template system is just built for testing the stage 2 and 3 <2> Mmm... the docs Im reading stop in 2.3 <2> 2.4 would be templates <1> not finished yet ;/ <2> Well, about the template, you can easilly create ~6 main patterns for it (With or witout a top banner, 2 columns, 3 columns, right/left/both menu) <2> asking for a parameter to define wich one to use <2> aother customization, well, Im a bit lazy :p <1> hm, not to that stage yet (for the front-end) customisation <2> well, your project is very interesting, I'll work on here and I'll forward to you what I did <1> DespNekus: do you mind joining #AnoCMS ? <11> I'm generating a CSV file on the fly with PHP, with FF under linux works great, with IE I get IE cannot open this page, the page isn't available or cannot be found, please try again <2> Is it the project name? <11> I do:header("Content-Type: text/csv"); <11> header("Content-Disposition: attachment; filename=listadoFacturas".date("YmdHis").".csv");
<11> echo $csvstring; <11> exit; <1> probably <2> O.o <6> !+pastebin <7> Submit your code to http://hashphp.org/pastebin or http://cpp.sourceforge.net or http://php.pastebin.com then tell us the URL and a summary of the problem. Don't flood by pasting in the channel. <12> Yango_: Do other pages load correctly in MSIE? Has MSIE auto-picked a proxy server which doesn't recognise the name of your dev server? <11> MarkR2, yes, everything else (even on the same app) load correctly <11> I'm generating a CSV file on the fly with PHP, with FF under linux works great, with IE I get IE cannot open this page, the page isn't available or cannot be found, please try again => http://cpp.sourceforge.net/?show=14056 <11> :P <12> Yango_: Are there any error messages on the PHP error log? You do have E_ALL enabled, right? <12> Perhaps MSIE has triggered some error behaviour earlier in the page <11> MarkR2, nope, it's a header issue <11> if I change text/csv for text/plain it doesn't heed the Content-Disposition header but shows the content in the window <12> You are ****uming* that, yet it's not at all obvious to me. Try installing something that allows you to view the headers during the download; there maybe a MSIE extension which does it, alternatively try Ethereal (google for it) to watch the HTTP sessions <12> One possibility is that MSIE requests the page twice when doing a download, and your script deletes the file so that the second request fails, even though the first was fine <11> MarkR2, yes, that last line is probably the case... <11> I'm not ***uming that, I've seen it with fiddler <11> it's not a php coding issue it's a problem with IE behaviour with respect to headers and way of downloading stuff <11> especially since on other browsers it works fine <12> Unfortunately MSIE is very nonspecific about errors when it doesn't like something. Try a simple example which doesn't have any page logic in it, simply generates a fixed file. <12> There are also certain filenames which M***cel really doesn't get on well with, which are curiously, the same names that MSIE sometimes uses when handling a download <13> hi.. im building my own interface to change my ipaddress.. what should be the best way to do that? give user www.data permission to run /etc/init.d/networking restart? well.. im running debian <13> and ofcause write permissions to /etc/network/interfaces <14> use perl <13> make a perl script called by php? <13> then i need suexec enabled? <14> hollo, why do you want to run this from a website? <13> Wilik: im need to build a interface which can do some basic things.. <14> what I would do is write a perl script that does what you want it to do and also does some basic sanity checks on the data <14> then add that script to sudo <14> and then call the script from the web <13> hmm.. that sound cool.. but adding a script to sudo? i have never done that.. can you help me a bi <13> bit even <14> user ALL = NOP***WD: /path/to/program <14> in /etc/sudoers <13> Wilik: ahh.. =) thanks a lot.. that help me a lot.. <14> yea np.. <11> how can I avoid PHP sending the cache control headers? <11> I commented out session.cache_limiter <11> but it still sends it <14> use headers <14> do you not want it to cache the data? <11> Wilik, I do want it to cache the data <14> for how long? <11> Wilik, but the session code seems to be sending Pragme: nocache and Expires in 1981 and etc... <15> Hi there <15> i am having some issues with my php server <11> Wilik, the ideal would be for PHP not to send any of those <15> when it has to deal with large file (>3 Mb) it seams to hand up <14> use meta tags to send the right progrma <14> loiic, you might have large files disabled in /etc/php.ini <11> so, there isn't a way to configure php to not send those? <14> Yango_, look on google for 'meta tags' <15> i had a look at my php.ini file <14> loiic, are you trying to upload the file or just open the file via php? <15> open via php <16> Yango_: technelly PHP dose not send the default headers, the HTTPD should be doing that (Though I might be wrong) <14> loiic, you should look at the set_time_limit() (I think...) function <15> ha <15> it seams it does the same thing even if the file is on local drive <11> Wilik, I don't want a META tag, I want what I said I want :P <15> When I use getimagesize to guess the size from a large swf file, php does pretty much the same thing <15> just hang up, stop the execution <17> QUESTION: Is it possible to make a imagettftext to NOT AntiAliase The Text Printed? <14> Yango_, http://us3.php.net/header <14> loiic, why are you using getimagesize on a swf? <15> yep <15> work perferctly <14> loiic, http://us3.php.net/manual/en/function.filesize.php <17> QUESTION: Is it possible to make a imagettftext to NOT AntiAliase The Text Printed? <18> Hi there <6> !+repeat
Return to
#php or Go to some related
logs:
noganex gay event.ButtonPress xlib python static route on Fedora #oe 2gb highmem gentoo Couldn't find package libstdc++-libc6.1-1.so.2 #perl skiidoo #math #css
|
|