Date: 06/16/06     Keywords: php

Background:  Smallish, private, and login protected site that serves files to users directly, and generic files delivered based on membership options. (some files contain personal content)

Question:  What method of serving the files to the user would you suggest?

Right now I bring up a dynamic form that lists the files, each with a button for downloading/viewing.

The form is probably stupid, and I’ve thought of sending information through the url to a php file for processing and posting.

Suggestions?  (narrow or broad, I welcome them all)

BTW—You folks make me smarter, and I appreciate all the past help.

Source: http://community.livejournal.com/php/460413.html

Date: 06/14/06     Keywords: php, security

For anyone intersted I just started up a CakePHP community (cakephp) as an alternate means to their IRC channel for getting community help

i've heard strong arguments for and against Cake (and for and against MVC frameworks), but i've definitely had a good experience with it so far, and it's really helping to bring my coding up out of the amateur level and i'm more confident in the security and stability of the apps I'm building with it

Source: http://community.livejournal.com/php/460109.html

Date: 06/14/06     Keywords: php

I'm somewhat of a novice with php. I have a script that simply writes a string to a file. But if the string contains " or ' it changes it to \" or \' onee stored in the file (I'm sure it does it to other special characters as well). How can I prevent this?

P.S. I'm using file_put_contents() [php 5 only]. Would it be better to use fopen(), fwrite(), and fclose()?

Source: http://community.livejournal.com/php/459910.html

Date: 06/12/06     Keywords: php

Bought a PHP script that I thought was going to save me time. Ugh. Even with correct configuration, no luck even connecting to db. But the worst part is that I have the code but it's base64 encoded. Anyone have suggestions for cracking or reverse engineering? I see in the source eval(base64_decode(...)) procedures that begin the script. The reaminder of that source is in that script but it's encoded out of PHP tags so I don't know what's going on. Is it even possible to decode?

I wouldn't be in such pursuit to crack it if the developer had any integrity to respond to these issues but at this point, cracking seems to be my only hope. Where does one go? Any suggestions?

Source: http://community.livejournal.com/php/459756.html

Date: 06/12/06     Keywords: no keywords

Hi, I have a complaex array returned from the API

   [0] => Array
        (
            [0] => 1
            [ID] => 1
            [1] => Dave
            [Name] => Dave
            [2] => US English (Male)
            [Language] => US English (Male)
        )

    [1] => Array
        (
            [0] => 2
            [ID] => 2
            [1] => Susan
            [Name] => Susan
            [2] => US English (Female)
            [Language] => US English (Female)
        )

foreach ($array as $key => $sub_array) 
	{
		if (array_search('Dave', $sub_array, true))
			{
			$voice_id = $key;
			}
    }
$id = $array[$voice_id]['ID'];

Source: http://community.livejournal.com/php/459223.html

Date: 06/09/06     Keywords: mysql, sql

I know it's an age-old question, but I just wanted your opinions on it: How should I be santizing my data before using it in my MySQL queries so as to prevent against nasties like SQL injection attacks?

At the moment I'm using the function below - is this sufficient?

Thanks in advance. :)


/*
safeVar Function
Rids variables of nasty characters


$var = safeVar ($var);

*/
function safeVar ($value) {
// stripslashes
if (get_magic_quotes_gpc ()) {
$value = stripslashes ($value);
}

// Quote if not integer
if (!is_numeric ($value)) {
$value = "'" . mysql_real_escape_string ($value) . "'";
}

return $value;
}

Source: http://community.livejournal.com/php/458935.html

Date: 06/08/06     Keywords: php, mysql, sql

In MySQL there is a way to do this:

SELECT something FROM tablename WHERE something IN (2,3,4,5,6);

Source: http://community.livejournal.com/php/458704.html

Date: 06/07/06     Keywords: php, programming, mysql, sql, linux, apache

Hello Friends

I am a programmer in a Linux/Apache/MySQL/PHP shop. I also do some Windows programming in Delphi and have done lots of other stuff academically.

I'm looking for a book on PHP that will help me with "bigger picture" and "higher level" design considerations. I'm looking for a book that contains complete solutions and ideas for solving medium to large problems. Object-oriented designs are a big plus.

I'm also looking for a great reference manual.

I've been poking around looking at reviews, but I would like to have the opinions of some serious PHP programmers first.

Thank you!

Source: http://community.livejournal.com/php/458470.html

Date: 06/06/06     Keywords: mysql, database, sql

this has been driving me mad for several hours now :(

how on earth do I convert cyrillic characters into something that can be safely stored and retrieved from a mysql database?

From playing around with wordpress etc, I know I need to do this:

привет -> привет

but I have no idea what function(s) to use. Thanks :)

Source: http://community.livejournal.com/php/458161.html

Date: 06/06/06     Keywords: php, xml

First time on this server, last night I tried

$doc = domxml_new_doc()

Got a function undefined error. Apparently domxml isn't installed by default on PHP 5? I thought it was.

I did phpinfo and I do lave libxml2 installed, it also says that XML is enabled. But what was really wierd is that no configure command came up on phpinfo. Is everything handled through php.ini on PHP 5??? Me confused. Nowhere could I find a file that has my install configuration.

Give me the tools and I can code, make me install this crap and I get the urge to go out and kill a penguin. Grrr.

Any ideas?

Source: http://community.livejournal.com/php/457852.html

Date: 06/03/06     Keywords: php

Can anyone suggest a good 'beginners' PHP Book? Preferably one that allows you to learn in stages.

Thanks in advance for your help and/or suggestions.


Cheers!

Source: http://community.livejournal.com/php/457131.html

Date: 06/02/06     Keywords: php

I know .htaccess can be used to protect contents of a directory from being publically viewed (images for instance). But how or can php be used to give a user temporary access to a single file to view through a script? I searched for .htaccess on php.net but couldn't find any decent info on the subject.

Anyone ever dealt with this before?

Source: http://community.livejournal.com/php/456622.html

Date: 06/02/06     Keywords: php, browser, java

I’m passing variables through the URL, to determine the content of a dynamic (php) page.

But I’d like to open this URL in a new browser window with specific height and width settings.

I know how to open a new window with those settings using javascript….

But I don’t know how to do both --  pass the variables AND use the javascript.

Can anyone point me in the right direction?

Source: http://community.livejournal.com/php/456256.html