Posted by starman7 on 03/19/07 03:55

On Mar 18, 8:42 pm, "Vince Morgan" <vin...@REMOVEoptusnet.com.au>
wrote:
> "Vince Morgan" <vin...@REMOVEoptusnet.com.au> wrote in message
>
> news:45fde317$0$4753$afc38c87@news.optusnet.com.au...
>
>
>
> > >if ( strpos($config_content, 'dbuser') && (substr($config_content, 0,
> > >5) != '<?php' || substr($config_content, -2) != '?>') )
> > {
>
> > I should have paid more attention to the above.
> > The firt test is for the string 'dbuser' within the "config.php" file.
> > If that is missing it will also generate the message below, and that could
> > be very confusing.
>
> I should have stayed in bed a little longer this morning I think.
> If, 'dbuser' is found, AND then if the first 5 chars are not '<?php', OR
> the last 2 chars are not '?>', the error mesage is output.
>
>
>
> > Especialy considering that it states "Remember <u>it
> > >is not mistake</u>" when in fact it may well not be what the error
> message
> > indicates, which would in fact be a "mistake"
> > Badly formed error testing and reporting I think.
>
> Applogies,
> Vince Morgan

Thanks for the insight. The application works without that code block
- so I'm guessing the config file gets loaded despite the reported
problem.

Here's my actual config file:

<?php

//
// phpBB 2.x auto-generated config file
// Do not change anything in this file!
//

$dbms = 'mysql4';

$dbhost = '127.0.0.1';
$dbname = '1234567';
$dbuser = '12345678';
$dbpasswd = '123456789';

$table_prefix = 'phpbb_';

define('PHPBB_INSTALLED', true);

?>

any ideas why the code complains about it?

i've tried even moving everything to one line, but always seem to get
the error (unless i remove that block) - might this code be evaluated
for some reason unintended by the author's warning? might removing
this code decrease the app's security? i should mention the
environment is selinux - which requires specific/enhanced
permissions ... not sure if that's relevant given the above info ...

thanks again,
s7

[Back to original message]