From yournway at gmail.com  Wed Feb  1 04:19:52 2006
From: yournway at gmail.com (Alberto dos Santos)
Date: Wed, 1 Feb 2006 09:19:52 +0000
Subject: [nycphp-talk] LARGE mysql database performance
In-Reply-To: <43E03DE9.2040305@omnistep.com>
References: <4e1a9bc0601311257t8717772j165847c94a02a648@mail.gmail.com>
	<43E03DE9.2040305@omnistep.com>
Message-ID: <edce57650602010119m4074113ai@mail.gmail.com>

>Keep the images on the filesystem - out of a BLOB record.

Why?

>Map the filesystem, meta data and other stuff into the database.

Isn't there a limit to the number of files that can reside in one
directory? If so, then how do you handle managing what is mapped
where?

tedd




> Keith Richardson wrote:
> You should organize the files into some sort of
> nested directory tree. For ideas, examine the structure of the Postfix
> (mail server) queue.
>
>
If I was going to organise a camera watch like the one we are discussing I
would certainly go for the filesystem storage of the pictures, keeping the
pointers on a database.
To circumvent filesystem limitations, if any because we are surely talking
about 640x480x72dpi pics taken every 10 seconds or so, and also to allow me
to do quick filesystem searches for an event, in case of a never expected
but always possible application failure, I would organize my folders in a
cascade like /year/month/day/hour/ kind of thingh, so it would always be
intuitive for both me and my successors, and easy to tar the folders and
send them to the PD, if ever necessary, hehe.

HTH

--
Alberto dos Santos
Consultor em TI
IT Consultant

http://www.yournway.com
A internet ? sua maneira.
The Internet your own way.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060201/442a726d/attachment.html>

From keith at keithjr.net  Wed Feb  1 08:13:55 2006
From: keith at keithjr.net (Keith Richardson)
Date: Wed, 1 Feb 2006 08:13:55 -0500
Subject: [nycphp-talk] LARGE mysql database performance
In-Reply-To: <edce57650602010119m4074113ai@mail.gmail.com>
References: <4e1a9bc0601311257t8717772j165847c94a02a648@mail.gmail.com>
	<43E03DE9.2040305@omnistep.com>
	<edce57650602010119m4074113ai@mail.gmail.com>
Message-ID: <4e1a9bc0602010513n4f3a0245n634266667dfcc345@mail.gmail.com>

The camera snapshots are 352x240 @ 96 dpi, averaging about 12,288 bytes on
disk. (This server is a <gasp> windows file system)

So after reading and doing some thinking, and taking into account everyones
thoughts, I think I will go with a file system solution. My cameras table
will have a "ftp folder" and a "storage folder" so that you can traverse the
ftp folder for images, if found, index them and move them to the storage
folder, with a little bit more. I que up file videopos20060130101253.jpg and
know the date and time by the filename, so thats how I will get my
timestamp. When I move it, i will move it into the
$ftpfolder/$year/$month/$day/ folder. I have had this recording files for
about 2 weeks, and have already seen 25-30k images, and had to manually
start splitting them up before I had this front-end app up and running :P

The cameras take their snapshots after motion detection on zones that I set,
and after they are triggered they snapshot every second until it detects no
motion on those zones. -So Far- there are 13 cameras, and we would need
another 30 or so to cover all of our Dorm building enterances (I work at a
college).

The thing for viewing is that you have to authenticate vs windows active
directory (through a ldap script I wrote), and be a member of a certain
usergroup. I will have a showimage.php or something like that authenticate,
and if authenticated, read the file from the filesystem and push out the
image, and if not, I guess I have to make a "You are not authorized to view
this mage" picture to view :)

I will also have to figure out some sort of data removal scheme, as the file
storage is limited, so I have to flush out the old as needed, but thats more
of what the security people want me to do, as some cameras can be purged
more often than others.. Though so far we have 214,778 snapshots recorded
(2,797,568,000 bytes on disk), which is 12 days for 13 cameras, so thats
average 17-18 megs a day per camera, which is a lot better for full motion
video :P

Well I have some work ahead of me, but this stuff is great, since PHP has
been my hobby/"on the side" work, and I one again get to use it towards my
job :)

And in central new york, we finally have snow again, enough with this rain
:p

-Keith Richardson

On 2/1/06, Alberto dos Santos <yournway at gmail.com> wrote:
>
>
> >Keep the images on the filesystem - out of a BLOB record.
>
> Why?
>
> >Map the filesystem, meta data and other stuff into the database.
>
> Isn't there a limit to the number of files that can reside in one
> directory? If so, then how do you handle managing what is mapped
> where?
>
> tedd
>
>
>
>
> > Keith Richardson wrote:
> > You should organize the files into some sort of
> > nested directory tree. For ideas, examine the structure of the Postfix
> > (mail server) queue.
> >
> >
> If I was going to organise a camera watch like the one we are discussing I
> would certainly go for the filesystem storage of the pictures, keeping the
> pointers on a database.
> To circumvent filesystem limitations, if any because we are surely talking
> about 640x480x72dpi pics taken every 10 seconds or so, and also to allow me
> to do quick filesystem searches for an event, in case of a never expected
> but always possible application failure, I would organize my folders in a
> cascade like /year/month/day/hour/ kind of thingh, so it would always be
> intuitive for both me and my successors, and easy to tar the folders and
> send them to the PD, if ever necessary, hehe.
>
> HTH
>
> --
> Alberto dos Santos
> Consultor em TI
> IT Consultant
>
> http://www.yournway.com
> A internet ? sua maneira.
> The Internet your own way.
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>


--
Keith Richardson
keithjr at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060201/1011a66f/attachment.html>

From rahmin at insite-out.com  Wed Feb  1 15:16:44 2006
From: rahmin at insite-out.com (Rahmin Pavlovic)
Date: Wed, 01 Feb 2006 15:16:44 -0500
Subject: [nycphp-talk] every other record
Message-ID: <C006815C.11575%rahmin@insite-out.com>

To the more knowledgeable SQL heads in the house:

Do you think it's reliable to mod() the record id to pull every other
record, like:

select * from table where mod(id,2)=0 #or
select * from table where mod(id,2)=1

Or do you think it would be more reliable to manually pull 'em, like:

select * from table limit 1,1
select * from table limit 3,1
etc.

MySQL 5.0.2

mod() appears to work, but it also seems to behave a lil wonky.




From chris at theyellowbox.com  Wed Feb  1 15:19:47 2006
From: chris at theyellowbox.com (Chris Merlo)
Date: Wed, 1 Feb 2006 15:19:47 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <C006815C.11575%rahmin@insite-out.com>
References: <C006815C.11575%rahmin@insite-out.com>
Message-ID: <946586480602011219p45ec3e08k996b23c050f97b21@mail.gmail.com>

On 2/1/06, Rahmin Pavlovic <rahmin at insite-out.com> wrote:
>
> To the more knowledgeable SQL heads in the house:
>
> Do you think it's reliable to mod() the record id to pull every other
> record, like:
>
> select * from table where mod(id,2)=0 #or
> select * from table where mod(id,2)=1


Off the top of my head, I can think of a scenario where this will not work.
If you have a table with an auto-generated ID, where you have ever deleted a
record, in my experience with MySQL, the deleted ID won't get reused, and so
your ID values will be 1, 2, 3, 5, 6, 7, etc...  Therefore, that first line
will grab records with IDs 1, 3, 6, 8, etc...  I would probably write
something in PHP to grab *all* the records, and then play with every other
one.
-c

--
chris at theyellowbox.com
http://www.theyellowbox.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060201/0680e202/attachment.html>

From dcech at phpwerx.net  Wed Feb  1 15:33:40 2006
From: dcech at phpwerx.net (Dan Cech)
Date: Wed, 01 Feb 2006 15:33:40 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <946586480602011219p45ec3e08k996b23c050f97b21@mail.gmail.com>
References: <C006815C.11575%rahmin@insite-out.com>
	<946586480602011219p45ec3e08k996b23c050f97b21@mail.gmail.com>
Message-ID: <43E11B24.7050407@phpwerx.net>

Chris Merlo wrote:
> On 2/1/06, Rahmin Pavlovic <rahmin at insite-out.com> wrote:
>> To the more knowledgeable SQL heads in the house:
>>
>> Do you think it's reliable to mod() the record id to pull every other
>> record, like:
>>
>> select * from table where mod(id,2)=0 #or
>> select * from table where mod(id,2)=1
> 
> 
> Off the top of my head, I can think of a scenario where this will not work.
> If you have a table with an auto-generated ID, where you have ever deleted a
> record, in my experience with MySQL, the deleted ID won't get reused, and so
> your ID values will be 1, 2, 3, 5, 6, 7, etc...  Therefore, that first line
> will grab records with IDs 1, 3, 6, 8, etc...  I would probably write
> something in PHP to grab *all* the records, and then play with every other
> one.

I was thinking the same thing, pulling the entire result and dicarding 
every other row will probably be a lot faster than pulling every other 
row individually.

If you're using the native mysql functions you may be able to traverse 
the record set using mysql_data_seek function to make it a little more 
efficient.

Dan


From enolists at gmail.com  Wed Feb  1 15:49:08 2006
From: enolists at gmail.com (Mark Armendariz)
Date: Wed, 1 Feb 2006 12:49:08 -0800
Subject: [nycphp-talk] every other record
In-Reply-To: <C006815C.11575%rahmin@insite-out.com>
Message-ID: <053201c62770$f39c6050$6500a8c0@enobrev>

> Do you think it's reliable to mod() the record id to pull 
> every other record, like:
> 
> select * from table where mod(id,2)=0 #or select * from table 
> where mod(id,2)=1

It seems to me that it would be more efficient and 'correct' to query all
rows and output every other record in your php.  Considering that if a row
is removed, the break in your id's will make for an incorrect alternate
output and the mass list of selects seems rather inefficient.  Also ,that
would allow you to modify your query for other needs (orders, grouping, etc)
while still maintaining the alternate output.

(My apologies as I realize this doesn't answer your question, specifically)

Mark



From rahmin at insite-out.com  Wed Feb  1 16:02:59 2006
From: rahmin at insite-out.com (Rahmin Pavlovic)
Date: Wed, 01 Feb 2006 16:02:59 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <946586480602011219p45ec3e08k996b23c050f97b21@mail.gmail.com>
Message-ID: <C0068C33.11586%rahmin@insite-out.com>


On 2/1/06 3:19 PM, "Chris Merlo" <chris at theyellowbox.com> wrote:

> If you have a table with an auto-generated ID, where you have ever deleted a
> record, in my experience with MySQL, the deleted ID won't get reused, and so
> your ID values will be 1, 2, 3, 5, 6, 7, etc...  Therefore, that first line
> will grab records with IDs 1, 3, 6, 8, etc...

Is that not still every other record?  (I don't particularly need every even
or odd record id, just every other entry.)

I don't particularly mind performing logic on the recordset after the fact,
but I would rather put the processing weight on the SQL side (more out of
principle than anything else).




From craig at juxtadigital.com  Wed Feb  1 16:08:55 2006
From: craig at juxtadigital.com (Craig Thomas)
Date: Wed, 01 Feb 2006 16:08:55 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <C0068C33.11586%rahmin@insite-out.com>
References: <C0068C33.11586%rahmin@insite-out.com>
Message-ID: <43E12367.9030505@juxtadigital.com>

Rahmin Pavlovic wrote:
> On 2/1/06 3:19 PM, "Chris Merlo" <chris at theyellowbox.com> wrote:
> 
> 
>>If you have a table with an auto-generated ID, where you have ever deleted a
>>record, in my experience with MySQL, the deleted ID won't get reused, and so
>>your ID values will be 1, 2, 3, 5, 6, 7, etc...  Therefore, that first line
>>will grab records with IDs 1, 3, 6, 8, etc...
> 
> 
> Is that not still every other record?  (I don't particularly need every even
> or odd record id, just every other entry.)


Neither one of those *really* selects every other record...they select 
even or odds IDs.  Subtle difference, but a significant difference.

In response to some others: just because ID 4 is missing [for example] 
doesn't mean ID 5 will have a remainder of 0 when divided by 2...he'll 
still get only even IDs with this:

select * from table where mod(id,2)=0

And odd IDs with this:

select * from table where mod(id,2)=1


-- 
Craig



From rahmin at insite-out.com  Wed Feb  1 16:30:46 2006
From: rahmin at insite-out.com (Rahmin Pavlovic)
Date: Wed, 01 Feb 2006 16:30:46 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <43E12367.9030505@juxtadigital.com>
Message-ID: <C00692B6.11596%rahmin@insite-out.com>


On 2/1/06 4:08 PM, "Craig Thomas" <craig at juxtadigital.com> wrote:

>> Is that not still every other record?  (I don't particularly need every even
>> or odd record id, just every other entry.)
> 
> 
> Neither one of those *really* selects every other record...they select
> even or odds IDs.  Subtle difference, but a significant difference.
> 

Gotcha, that does make a diff. and helps evaluate the app.  Thanks!




From cahoyos at us.ibm.com  Wed Feb  1 16:33:58 2006
From: cahoyos at us.ibm.com (Carlos A Hoyos)
Date: Wed, 1 Feb 2006 16:33:58 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <053201c62770$f39c6050$6500a8c0@enobrev>
Message-ID: <OF5C60B53A.358400C2-ON85257108.007386A3-85257108.00767789@us.ibm.com>

If some ids have been removed, you can use a subquery to get the row
number.

For example, if you have a table "your_table" with primary key
"your_table_id", this query will list they key and the row # for this
entry.

select (select SUM(1) from your_table where your_table_id
<=tableAlias.your_table_id) as RowNumber,  your_table_id from your_table_id
tableAlias;

add a "having mod(RowNumber,2) =0" to list every other row.

Carlos




From chris at theyellowbox.com  Wed Feb  1 17:12:33 2006
From: chris at theyellowbox.com (Chris Merlo)
Date: Wed, 1 Feb 2006 17:12:33 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <43E12367.9030505@juxtadigital.com>
References: <C0068C33.11586%rahmin@insite-out.com>
	<43E12367.9030505@juxtadigital.com>
Message-ID: <946586480602011412s159ed3b9h20a258ed0109152f@mail.gmail.com>

On 2/1/06, Craig Thomas <craig at juxtadigital.com> wrote:

> In response to some others: just because ID 4 is missing [for example]
> doesn't mean ID 5 will have a remainder of 0 when divided by 2...he'll
> still get only even IDs with this:
>
> select * from table where mod(id,2)=0


You're right, my bad.  But it will still return the records with IDs 2, 6,
8, 10, etc., which is not every other record.  (That would be 2, 5, 7, 9,
etc.)

I'm not trying to suggest that solving this problem by getting every record
and letting PHP select every other one is more efficient; I'm merely
suggesting that it's more correct.  :)

--
chris at theyellowbox.com
http://www.theyellowbox.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060201/1d03ec63/attachment.html>

From adam at trachtenberg.com  Wed Feb  1 17:36:01 2006
From: adam at trachtenberg.com (Adam Maccabee Trachtenberg)
Date: Wed, 1 Feb 2006 17:36:01 -0500 (EST)
Subject: [nycphp-talk] every other record
In-Reply-To: <C006815C.11575%rahmin@insite-out.com>
References: <C006815C.11575%rahmin@insite-out.com>
Message-ID: <Pine.LNX.4.58.0602011730550.22395@miranda.org>

On Wed, 1 Feb 2006, Rahmin Pavlovic wrote:

> To the more knowledgeable SQL heads in the house:
>
> Do you think it's reliable to mod() the record id to pull every other
> record, like:
>
> select * from table where mod(id,2)=0 #or
> select * from table where mod(id,2)=1
>
> Or do you think it would be more reliable to manually pull 'em, like:
>
> select * from table limit 1,1
> select * from table limit 3,1
> etc.
>
> MySQL 5.0.2
>
> mod() appears to work, but it also seems to behave a lil wonky.

I see many people have provided a number good of answers, so let me
step back and ask: "What problem are you trying to solve?"

Why do you need every other row? Is this data likely to change? How
often is it updated? Can you pre-compute an ENUM that you insert upon
writing the table that lets you do:

SELECT * FROM TABLE WHERE filter = 'even';
SELECT * FROM TABLE WHERE filter = 'odd';

That avoids the computation on each call and avoids the issue with
holes in your id sequences.

Or can you shove things in different tables and when you need both
join them up?

-adam

-- 
adam at trachtenberg.com | http://www.trachtenberg.com
author of o'reilly's "upgrading to php 5" and "php cookbook"
avoid the holiday rush, buy your copies today!


From krook at us.ibm.com  Wed Feb  1 17:29:27 2006
From: krook at us.ibm.com (Daniel Krook)
Date: Wed, 1 Feb 2006 14:29:27 -0800
Subject: [nycphp-talk] every other record
In-Reply-To: <C0068C33.11586%rahmin@insite-out.com>
Message-ID: <OFF0A54DA7.35904DF2-ON85257108.007B473E-88257108.007B8B28@us.ibm.com>

Rahmin,

> I don't particularly mind performing logic on the 
> recordset after the fact,
> but I would rather put the processing weight on the SQL 
> side (more out of
> principle than anything else).

I agree with you here, something seems clunky about getting a large result 
set out of the database, then filtering afterwards in the code.   It would 
seem to waste a lot of bandwidth particularly if the database is on a 
different machine.




Daniel Krook, Content Tools Developer
Global Production Services - Tools, ibm.com

http://bluepages.redirect.webahead.ibm.com/
http://blogpages.redirect.webahead.ibm.com/
http://bookmarks.redirect.webahead.ibm.com/





From codebowl at gmail.com  Wed Feb  1 19:14:20 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Wed, 1 Feb 2006 19:14:20 -0500
Subject: [nycphp-talk] Parsing SOAP Response
Message-ID: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>

Hello Guys,

I am trying to parse a soap response, but i am having no luck with simpleXML

the response is this

<?xml version='1.0' encoding='UTF-8'?><soap:Envelope xmlns:soap='
http://schemas.xmlsoap.org/soap/envelope/' xmlns:xsi='
http://www.w3.org/2001/XMLSchema-instance' xmlns:xsd='
http://www.w3.org/2001/XMLSchema'><soap:Body><n:getTokenResponse xmlns:n='
http://www.arcwebservices.com/v2006'><n:Result xsi:type='xsd:string'>
bGlja2V0eXNoaXA6MTg5ODA3MWQ=</n:Result></n:getTokenResponse></soap:Body>
</soap:Envelope>

altered a bit ofcourse however when i use SimpleXML like so

$xml = simplexml_load_string($this->response);

i get

 SimpleXMLElement Object
(
    [Body] => SimpleXMLElement Object
        (
            [getTokenResponse] => SimpleXMLElement Object
                (
                    [Result] => bGlja2V0eXNoaXA6MTg5ODA3MWQ=
                )

        )

)

But i cannot seem to get the value for Result no matter what i try
i have tried print_r($xml->children()) nothing is output
i have tried $xml->Body->getTokenResponse->Result nada
i have tried $xml->Body[0]->getTokenResponse->Result
etc.. all the way down to where all 3 are [0]

If anyone has any idea how i can retrieve that value i would appreciate it.

Thanks,

--
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060201/b91ed114/attachment.html>

From adam at trachtenberg.com  Wed Feb  1 19:27:54 2006
From: adam at trachtenberg.com (Adam Maccabee Trachtenberg)
Date: Wed, 1 Feb 2006 19:27:54 -0500 (EST)
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
Message-ID: <Pine.LNX.4.58.0602011925240.22395@miranda.org>

On Wed, 1 Feb 2006, Joseph Crawford wrote:

> But i cannot seem to get the value for Result no matter what i try
> i have tried print_r($xml->children()) nothing is output
> i have tried $xml->Body->getTokenResponse->Result nada
> i have tried $xml->Body[0]->getTokenResponse->Result
> etc.. all the way down to where all 3 are [0]

Welcome to XML Namespaces. :)

$xml->children('http://schemas.xmlsoap.org/soap/envelope/')->Body
    ->children('http://www.arcwebservices.com/v2006')->getTokenResponse->Result;

This is why the ext/soap extension is good for parsing SOAP documents.

-adam

-- 
adam at trachtenberg.com | http://www.trachtenberg.com
author of o'reilly's "upgrading to php 5" and "php cookbook"
avoid the holiday rush, buy your copies today!


From codebowl at gmail.com  Wed Feb  1 19:31:02 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Wed, 1 Feb 2006 19:31:02 -0500
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <Pine.LNX.4.58.0602011925240.22395@miranda.org>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
	<Pine.LNX.4.58.0602011925240.22395@miranda.org>
Message-ID: <8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>

adam,

how would i parse the result using the soap ext?  i looked at the docs
online but dont see how

Thanks,--
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060201/d0e8bc53/attachment.html>

From adam at trachtenberg.com  Wed Feb  1 19:44:18 2006
From: adam at trachtenberg.com (Adam Maccabee Trachtenberg)
Date: Wed, 1 Feb 2006 19:44:18 -0500 (EST)
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
	<Pine.LNX.4.58.0602011925240.22395@miranda.org>
	<8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>
Message-ID: <Pine.LNX.4.58.0602011942000.22395@miranda.org>

On Wed, 1 Feb 2006, Joseph Crawford wrote:

> how would i parse the result using the soap ext?  i looked at the docs
> online but dont see how

I don't think you can take a random SOAP message lying around on the
file system or database and pass it to the extension.

However, you can use the extension to query the SOAP server and the
SOAP extension will then deserialize the response into a native-ish
PHP data structure.

That is the primary use-case for SOAP.

I don't think it would be hard to add support for reading input from
other places, but you would have to know how to code PHP extensions.

-adam

-- 
adam at trachtenberg.com | http://www.trachtenberg.com
author of o'reilly's "upgrading to php 5" and "php cookbook"
avoid the holiday rush, buy your copies today!
-------------- next part --------------
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

From codebowl at gmail.com  Wed Feb  1 19:47:27 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Wed, 1 Feb 2006 19:47:27 -0500
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <Pine.LNX.4.58.0602011942000.22395@miranda.org>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
	<Pine.LNX.4.58.0602011925240.22395@miranda.org>
	<8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>
	<Pine.LNX.4.58.0602011942000.22395@miranda.org>
Message-ID: <8d9a42800602011647m3621c8a0q47d15a2adc089d4e@mail.gmail.com>

Adam,

i am using soap to get that xml response, but i was not sure the soap ext
could parse it so i used $sclient->__getLastResponse() in SimpleXML, can you
advise (or direct me to reading) how i would get the data from ext/soap,
without using simpleXML?

Thanks,
--
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060201/aa9f03b8/attachment.html>

From george at omniti.com  Wed Feb  1 20:06:01 2006
From: george at omniti.com (George Schlossnagle)
Date: Wed, 01 Feb 2006 20:06:01 -0500
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <Pine.LNX.4.58.0602011942000.22395@miranda.org>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>	<Pine.LNX.4.58.0602011925240.22395@miranda.org>	<8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>
	<Pine.LNX.4.58.0602011942000.22395@miranda.org>
Message-ID: <43E15AF9.7070900@omniti.com>

Adam Maccabee Trachtenberg wrote:

>On Wed, 1 Feb 2006, Joseph Crawford wrote:
>
>  
>
>>how would i parse the result using the soap ext?  i looked at the docs
>>online but dont see how
>>    
>>
>
>I don't think you can take a random SOAP message lying around on the
>file system or database and pass it to the extension.
>

Actually, if you look at the ext/soap unit tests in the php source 
distribution, you can see how to do this (in userspace).

George


From adam at trachtenberg.com  Wed Feb  1 20:10:18 2006
From: adam at trachtenberg.com (Adam Maccabee Trachtenberg)
Date: Wed, 1 Feb 2006 20:10:18 -0500 (EST)
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <8d9a42800602011647m3621c8a0q47d15a2adc089d4e@mail.gmail.com>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
	<Pine.LNX.4.58.0602011925240.22395@miranda.org>
	<8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>
	<Pine.LNX.4.58.0602011942000.22395@miranda.org>
	<8d9a42800602011647m3621c8a0q47d15a2adc089d4e@mail.gmail.com>
Message-ID: <Pine.LNX.4.58.0602012006002.22395@miranda.org>

On Wed, 1 Feb 2006, Joseph Crawford wrote:

> i am using soap to get that xml response, but i was not sure the soap ext
> could parse it so i used $sclient->__getLastResponse() in SimpleXML, can you
> advise (or direct me to reading) how i would get the data from ext/soap,
> without using simpleXML?

$client = new SOAPClient('my.wsdl');
$response = $client->query('param');
$result = $response->Result;

-adam

-- 
adam at trachtenberg.com | http://www.trachtenberg.com
author of o'reilly's "upgrading to php 5" and "php cookbook"
avoid the holiday rush, buy your copies today!


From adam at trachtenberg.com  Wed Feb  1 20:15:03 2006
From: adam at trachtenberg.com (Adam Maccabee Trachtenberg)
Date: Wed, 1 Feb 2006 20:15:03 -0500 (EST)
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <43E15AF9.7070900@omniti.com>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
	<Pine.LNX.4.58.0602011925240.22395@miranda.org>
	<8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>
	<Pine.LNX.4.58.0602011942000.22395@miranda.org>
	<43E15AF9.7070900@omniti.com>
Message-ID: <Pine.LNX.4.58.0602012010320.22395@miranda.org>

On Wed, 1 Feb 2006, George Schlossnagle wrote:

> >I don't think you can take a random SOAP message lying around on the
> >file system or database and pass it to the extension.
>
> Actually, if you look at the ext/soap unit tests in the php source
> distribution, you can see how to do this (in userspace).

Cool. I will check that out.

-adam

-- 
adam at trachtenberg.com | http://www.trachtenberg.com
author of o'reilly's "upgrading to php 5" and "php cookbook"
avoid the holiday rush, buy your copies today!


From andrew at plexpod.com  Wed Feb  1 20:19:04 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Wed, 1 Feb 2006 20:19:04 -0500
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <43E15AF9.7070900@omniti.com>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
	<Pine.LNX.4.58.0602011925240.22395@miranda.org>
	<8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>
	<Pine.LNX.4.58.0602011942000.22395@miranda.org>
	<43E15AF9.7070900@omniti.com>
Message-ID: <20060202011903.GC5682@desario.homelinux.net>

On Wed, Feb 01, 2006 at 08:06:01PM -0500, George Schlossnagle wrote:
> Adam Maccabee Trachtenberg wrote:
> >I don't think you can take a random SOAP message lying around on the
> >file system or database and pass it to the extension.
> >
> 
> Actually, if you look at the ext/soap unit tests in the php source 
> distribution, you can see how to do this (in userspace).

You made me look out of curiosity.  Its nice that it can be "tricked"
but it does seem silly to have binded it to the POST data.  SOAP's
primary transport may be HTTP, but it is intended to be agnostic of
transport.  HTTP, SMTP, message queues, sneaker, fax, pigeon, etc are
valid SOAP transports.  Too bad the extension is specific to HTTP POST.

Just my $0.02, FWIW.

Andrew

-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From edwardpotter at gmail.com  Wed Feb  1 21:41:55 2006
From: edwardpotter at gmail.com (edward potter)
Date: Wed, 1 Feb 2006 21:41:55 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <OFF0A54DA7.35904DF2-ON85257108.007B473E-88257108.007B8B28@us.ibm.com>
References: <C0068C33.11586%rahmin@insite-out.com>
	<OFF0A54DA7.35904DF2-ON85257108.007B473E-88257108.007B8B28@us.ibm.com>
Message-ID: <c5949a380602011841t2131d5dch82067e28ed355de0@mail.gmail.com>

c'mon all!  We can do it!  A perl programmer is going to make
mince&meat out of us php coders. They'll say "we can do it in one
line".

Lets get clever?  hmmmmmm  :-)

On 2/1/06, Daniel Krook <krook at us.ibm.com> wrote:
> Rahmin,
>
> > I don't particularly mind performing logic on the
> > recordset after the fact,
> > but I would rather put the processing weight on the SQL
> > side (more out of
> > principle than anything else).
>
> I agree with you here, something seems clunky about getting a large result
> set out of the database, then filtering afterwards in the code.   It would
> seem to waste a lot of bandwidth particularly if the database is on a
> different machine.
>
>
>
>
> Daniel Krook, Content Tools Developer
> Global Production Services - Tools, ibm.com
>
> http://bluepages.redirect.webahead.ibm.com/
> http://blogpages.redirect.webahead.ibm.com/
> http://bookmarks.redirect.webahead.ibm.com/
>
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>


From andrew at plexpod.com  Wed Feb  1 22:03:58 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Wed, 1 Feb 2006 22:03:58 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <OF5C60B53A.358400C2-ON85257108.007386A3-85257108.00767789@us.ibm.com>
References: <053201c62770$f39c6050$6500a8c0@enobrev>
	<OF5C60B53A.358400C2-ON85257108.007386A3-85257108.00767789@us.ibm.com>
Message-ID: <20060202030358.GG5682@desario.homelinux.net>

On Wed, Feb 01, 2006 at 04:33:58PM -0500, Carlos A Hoyos wrote:
> If some ids have been removed, you can use a subquery to get the row
> number.
> 
> For example, if you have a table "your_table" with primary key
> "your_table_id", this query will list they key and the row # for this
> entry.
> 
> select (select SUM(1) from your_table where your_table_id
> <=tableAlias.your_table_id) as RowNumber,  your_table_id from your_table_id
> tableAlias;
> 
> add a "having mod(RowNumber,2) =0" to list every other row.

Clever.  Here's a similar and possibly more efficient solution:

    SET @I = 0;
    SELECT ID FROM SomeTable having mod(@I:=@I+1,2) = 0;

Be sure to reset @I after each use or you'll get funky results.

HTH,
Andrew

-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From max.goldberg at gmail.com  Wed Feb  1 22:19:11 2006
From: max.goldberg at gmail.com (max goldberg)
Date: Wed, 1 Feb 2006 22:19:11 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <C0068C33.11586%rahmin@insite-out.com>
References: <946586480602011219p45ec3e08k996b23c050f97b21@mail.gmail.com>
	<C0068C33.11586%rahmin@insite-out.com>
Message-ID: <87e6ded30602011919v38785ce6k66a98cf1ff8dd45c@mail.gmail.com>

If post processing is a large concern and you'd rather figure it out on the
database side, you could try making a stored procedure. Using a cursor would
allow you to loop through every row and use a counter to get every other
row, effectively solving both the problem of holes in your ID numbers and
wanting to do this server side. I guess the most puzzling piece for me is
why you actually need to do this.

Now I haven't actually tested this so it comes with no warranty and probably
doesn't work but here's a quick pseudo stored procedure that might clear it
up for you:

 CREATE PROCEDURE getEveryOther(IN starting_id INT)
     BEGIN
       DECLARE complete      INT DEFAULT 0;
       DECLARE rank       INT DEFAULT 0;
       DECLARE current_id INT;
       DECLARE cur1 CURSOR FOR SELECT foo_id FROM foos WHERE foo_id >=
starting_id LIMIT 10;
       DECLARE CONTINUE HANDLER FOR SQLSTATE '02000' SET complete = 1;

       OPEN cur1;
       WHILE complete = 0 DO
         FETCH cur1 INTO current_id;
           SET rank = rank+1;
           IF MOD(rank, 2) = 1 THEN
          SELECT current_id;
           END IF;
       END WHILE;

       CLOSE cur1;
     END;

Cheers and good luck!

On 2/1/06, Rahmin Pavlovic <rahmin at insite-out.com> wrote:
>
>
> On 2/1/06 3:19 PM, "Chris Merlo" <chris at theyellowbox.com> wrote:
>
> > If you have a table with an auto-generated ID, where you have ever
> deleted a
> > record, in my experience with MySQL, the deleted ID won't get reused,
> and so
> > your ID values will be 1, 2, 3, 5, 6, 7, etc...  Therefore, that first
> line
> > will grab records with IDs 1, 3, 6, 8, etc...
>
> Is that not still every other record?  (I don't particularly need every
> even
> or odd record id, just every other entry.)
>
> I don't particularly mind performing logic on the recordset after the
> fact,
> but I would rather put the processing weight on the SQL side (more out of
> principle than anything else).
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060201/7dfd3450/attachment.html>

From codebowl at gmail.com  Thu Feb  2 06:43:11 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Thu, 2 Feb 2006 06:43:11 -0500
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <20060202011903.GC5682@desario.homelinux.net>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
	<Pine.LNX.4.58.0602011925240.22395@miranda.org>
	<8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>
	<Pine.LNX.4.58.0602011942000.22395@miranda.org>
	<43E15AF9.7070900@omniti.com>
	<20060202011903.GC5682@desario.homelinux.net>
Message-ID: <8d9a42800602020343w5cf8aa1aybf3c527f90869056@mail.gmail.com>

Adam,

Thanks ;)

Actually i figured this out last night just before i headed to bed.

I appreciate all the posts that have directed me the the result ;)

--
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060202/768baea2/attachment.html>

From cliff at pinestream.com  Thu Feb  2 06:56:28 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Thu, 2 Feb 2006 06:56:28 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <Pine.LNX.4.58.0602011730550.22395@miranda.org>
Message-ID: <007901c627ef$b366e5d0$0aa8a8c0@cliff>

>>I see many people have provided a number good of answers, so let me
step back and >>ask: "What problem are you trying to solve?"

Ah, a wise man.. The problem isn't, what is the answer. As is so often
true, the real problem is what is the question.



From prusak at gmail.com  Thu Feb  2 07:33:19 2006
From: prusak at gmail.com (Ophir Prusak)
Date: Thu, 2 Feb 2006 07:33:19 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <Pine.LNX.4.58.0602011730550.22395@miranda.org>
References: <C006815C.11575%rahmin@insite-out.com>
	<Pine.LNX.4.58.0602011730550.22395@miranda.org>
Message-ID: <f1dc81bb0602020433o4f5dd7al65610a598b19607b@mail.gmail.com>

hi rahmin,

while you probably got the answer you were looking for somewhere in
this thread, you still haven't answered Adams question, which is
probably the best comment here:

On 2/1/06, Adam Maccabee Trachtenberg <adam at trachtenberg.com> wrote:
>
> I see many people have provided a number good of answers, so let me
> step back and ask: "What problem are you trying to solve?"
>


From chsnyder at gmail.com  Thu Feb  2 12:01:49 2006
From: chsnyder at gmail.com (csnyder)
Date: Thu, 2 Feb 2006 12:01:49 -0500
Subject: [nycphp-talk] LARGE mysql database performance
In-Reply-To: <4e1a9bc0601311257t8717772j165847c94a02a648@mail.gmail.com>
References: <4e1a9bc0601311257t8717772j165847c94a02a648@mail.gmail.com>
Message-ID: <b76252690602020901i464eb59ek7647134caf362e2e@mail.gmail.com>

On 1/31/06, Keith Richardson <keith at keithjr.net> wrote:
> So I am writing a "security camera" app at work, and using mysql/php. I have
> the cameras uploading snapshots via ftp to the server.
>
>  Now for dealing with the images, and indexing them for easy searching, I
> want to throw the info into a mysql database. I wouldnt mind also sticking
> the image data in the table too, so that you HAD to go through the app to
> view the images instead of direct url linking, but was wondering, how does
> mysql react with a 20-30gb database? would this be very bad? I have run a
> forum that used vbulletin with about a 500mb database, but that did not have
> any issues at all.... but 20-30gb is quite the large database :p
>
>  Any thoughts or experiences?
>
> --
> Keith Richardson
>

As usual I'm late on the thread, but I was going to ask this very
question myself, so thanks for leading the way, Keith.

A number of the answers here echo this sentiment: "I wouldn't do it
myself, use the filesystem, but MySQL should be able to handle it."

Well WTF? There are *some* advantages to storing the data in the DB:

1) All application data in one place for backup and recovery
2) Easily scalable via replication, (somewhat less easily via) clustering
3) No need to build additional infrastructure like directory trees
4) Data readable by mysql user only

Plenty of advantages to storing on the filesystem, of course, and
number 2 above can be countered with some sort of NFS or a local cache
of a private webstore. But I like the ease of backup and the privacy
afforded by the BLOB.

That said, I've run into a limit in the amount of data that can be
read in a single query by PHP. I haven't had time to investigate (it
was somewhere in the 16-32MB range) but that's a consideration if
you're planning to store videos or print-quality photos.


--
Chris Snyder
http://chxo.com/

From chsnyder at gmail.com  Thu Feb  2 12:29:38 2006
From: chsnyder at gmail.com (csnyder)
Date: Thu, 2 Feb 2006 12:29:38 -0500
Subject: [nycphp-talk] LARGE mysql database performance
In-Reply-To: <b76252690602020901i464eb59ek7647134caf362e2e@mail.gmail.com>
References: <4e1a9bc0601311257t8717772j165847c94a02a648@mail.gmail.com>
	<b76252690602020901i464eb59ek7647134caf362e2e@mail.gmail.com>
Message-ID: <b76252690602020929qf98ee0mce90ba08a59c85e2@mail.gmail.com>

On 2/2/06, csnyder <chsnyder at gmail.com> wrote:
>
> That said, I've run into a limit in the amount of data that can be
> read in a single query by PHP. I haven't had time to investigate (it
> was somewhere in the 16-32MB range) but that's a consideration if
> you're planning to store videos or print-quality photos.

Sorry, a little Googling and MAX-ALLOWED-PACKET is now burned into my brain.

--
Chris Snyder
http://chxo.com/

From adam at trachtenberg.com  Thu Feb  2 13:00:26 2006
From: adam at trachtenberg.com (Adam Maccabee Trachtenberg)
Date: Thu, 2 Feb 2006 13:00:26 -0500 (EST)
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <8d9a42800602020343w5cf8aa1aybf3c527f90869056@mail.gmail.com>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
	<Pine.LNX.4.58.0602011925240.22395@miranda.org>
	<8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>
	<Pine.LNX.4.58.0602011942000.22395@miranda.org>
	<43E15AF9.7070900@omniti.com>
	<20060202011903.GC5682@desario.homelinux.net>
	<8d9a42800602020343w5cf8aa1aybf3c527f90869056@mail.gmail.com>
Message-ID: <Pine.LNX.4.58.0602021259380.22395@miranda.org>

On Thu, 2 Feb 2006, Joseph Crawford wrote:

> Actually i figured this out last night just before i headed to bed.
>
> I appreciate all the posts that have directed me the the result ;)

Great. The SOAP documentation could use some work. I keep on meaning
to write something up based on all the little tricks I have learned
using it, but I haven't found the time.

-adam

-- 
adam at trachtenberg.com | http://www.trachtenberg.com
author of o'reilly's "upgrading to php 5" and "php cookbook"
avoid the holiday rush, buy your copies today!
-------------- next part --------------
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

From codebowl at gmail.com  Thu Feb  2 13:16:20 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Thu, 2 Feb 2006 13:16:20 -0500
Subject: [nycphp-talk] Parsing SOAP Response
In-Reply-To: <Pine.LNX.4.58.0602021259380.22395@miranda.org>
References: <8d9a42800602011614n4e7ce380q5d779586362aac7e@mail.gmail.com>
	<Pine.LNX.4.58.0602011925240.22395@miranda.org>
	<8d9a42800602011631k2dd9f675m2bc1f0dcfd046f20@mail.gmail.com>
	<Pine.LNX.4.58.0602011942000.22395@miranda.org>
	<43E15AF9.7070900@omniti.com>
	<20060202011903.GC5682@desario.homelinux.net>
	<8d9a42800602020343w5cf8aa1aybf3c527f90869056@mail.gmail.com>
	<Pine.LNX.4.58.0602021259380.22395@miranda.org>
Message-ID: <8d9a42800602021016t50da1c1ej4de88b616b68ecff@mail.gmail.com>

Honestly SOAP wasnt the toughest part, the hard part was that
arcwebservices.com doesnt provide any PHP examples all Java C#, VB, etc.  I
had to figure it out from looking at other code and i am not that good with
any of them.

However i persivered through it and am doing quite well now that i know how
to do it ;)

Thanks again everyone for all the help.

--
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060202/01dc47b4/attachment.html>

From cliff at pinestream.com  Fri Feb  3 13:03:07 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Fri, 3 Feb 2006 13:03:07 -0500
Subject: [nycphp-talk] State table implementation ideas
Message-ID: <005801c628ec$16459690$0aa8a8c0@cliff>

I need to generate an "options list" that is based on several status
fields. Sort of like, "if you can rub your belly, scratch your head and
stand on one foot, you can proceed past the breathalyzer test, join the
circus or run for governor of Massachusetts.
 
What started as a simple if statement has grown into multiple switch
statements with some if statements thrown in just to make things
completely confusing. While this "compresses"  a state diagram, its
getting unwieldy.
 
So now I'm thinking of throwing the whole thing into a lookup table.
 
Field A   Field B ... Field N        Options
 
While this will result in a large array and many duplicate rows (since
many of the possibilities are actually the same), it should be really
easy to maintain and a great visual aid for those unlucky souls that
inherit my code.
 
Any other  ideas? Or is a lookup table the best solution?
 
Cliff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060203/a848cf4f/attachment.html>

From hendler at simmons.edu  Fri Feb  3 23:36:03 2006
From: hendler at simmons.edu (Jonathan Hendler)
Date: Fri, 03 Feb 2006 23:36:03 -0500
Subject: [nycphp-talk] State table implementation ideas
In-Reply-To: <005801c628ec$16459690$0aa8a8c0@cliff>
References: <005801c628ec$16459690$0aa8a8c0@cliff>
Message-ID: <43E42F33.4080605@simmons.edu>

I was thinking of governer.

The problem with a basic lookup table isn't really that there are 
duplicates, it's that there are a finite number of fields. So if you 
ever want to expand your options list, a lot of things have to change 
(code/schema, etc)

I don't understand the problem you are trying to solve very well. Could 
you explain further?

One way is something called a Directed Graph. The directed graph data 
structure can be used to create complex dependencies and priorities. 
Then your run something called a Topological sort on the data. So now 
you say, "I'd rather not". But there is a PEAR package that implements 
this. RDF/OWL Sementic web tools can also be used for this.
Funny thing is, a directed graph and/or "network" can also be 
represented as a matrix, and you can run algorithms against that that 
are less generalized.

More simply though, Entity Relationship diagrams can also be useful for 
"normalizing" your data and fitting them to relational databases. If you 
can abstract these concepts you have a good chance.



Cliff Hirsch wrote:

> I need to generate an "options list" that is based on several status 
> fields. Sort of like, "if you can rub your belly, scratch your head 
> and stand on one foot, you can proceed past the breathalyzer test, 
> join the circus or run for governor of Massachusetts.
>  
> What started as a simple if statement has grown into multiple switch 
> statements with some if statements thrown in just to make things 
> completely confusing. While this "compresses"  a state diagram, its 
> getting unwieldy.
>  
> So now I'm thinking of throwing the whole thing into a lookup table.
>  
> Field A   Field B ... Field N        Options
>  
> While this will result in a large array and many duplicate rows (since 
> many of the possibilities are actually the same), it should be really 
> easy to maintain and a great visual aid for those unlucky souls that 
> inherit my code.
>  
> Any other  ideas? Or is a lookup table the best solution?
>  
> Cliff
>
>------------------------------------------------------------------------
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>



From damovand at yahoo.com  Sat Feb  4 11:44:12 2006
From: damovand at yahoo.com (Leila Lappin)
Date: Sat, 4 Feb 2006 08:44:12 -0800 (PST)
Subject: [nycphp-talk] State table implementation ideas
In-Reply-To: <005801c628ec$16459690$0aa8a8c0@cliff>
Message-ID: <20060204164412.95553.qmail@web34508.mail.mud.yahoo.com>

Hi Cliff,

You basically have a right idea, except that you may
want to split the information into two tables.  Place
the options in a separate table where each group of
options can be cross-referenced with the information
in another table with a unique ID, something like the
following:

Table one:
     Field A   Field B ... Field N   Options_Group_ID
Table two:
     Options_Group_ID   Option_ID    option

As you may not this design will allow you to create
multiple options, in table two, pertaining to the same
row in table one.

Leila

--- Cliff Hirsch <cliff at pinestream.com> wrote:

> I need to generate an "options list" that is based
> on several status
> fields. Sort of like, "if you can rub your belly,
> scratch your head and
> stand on one foot, you can proceed past the
> breathalyzer test, join the
> circus or run for governor of Massachusetts.
>  
> What started as a simple if statement has grown into
> multiple switch
> statements with some if statements thrown in just to
> make things
> completely confusing. While this "compresses"  a
> state diagram, its
> getting unwieldy.
>  
> So now I'm thinking of throwing the whole thing into
> a lookup table.
>  
> Field A   Field B ... Field N        Options
>  
> While this will result in a large array and many
> duplicate rows (since
> many of the possibilities are actually the same), it
> should be really
> easy to maintain and a great visual aid for those
> unlucky souls that
> inherit my code.
>  
> Any other  ideas? Or is a lookup table the best
> solution?
>  
> Cliff
> > _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


From danielc at analysisandsolutions.com  Sat Feb  4 14:56:22 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Sat, 04 Feb 2006 14:56:22 -0500
Subject: [nycphp-talk] PHP in SecurityFocus #335
Message-ID: <20060204195618.13E1DEDAEE0@mailspool2.panix.com>

These summaries are available online
RSS:  http://phpsec.org/projects/vulnerabilities/securityfocus.xml
HTML: http://phpsec.org/projects/vulnerabilities/securityfocus.html

Alerts from SecurityFocus Newsletter #335

Please take a careful look at this issue. There are several serious
vulnerabilities in the PHP and many important open source
applications including Firefox, OpenSSL, OpenSSH, mod_ssl, MySQL,
bzip2, Drupal, the TCP protocol and several Adobe products.
PHP
---
PHP Parse_Str Register_Globals Activation Weakness
http://www.securityfocus.com/bid/15249
This is very troubling. Attackers can turn on register_globals by
overwriting memory. If the site running via mod_php, register_globals
will then stay on until Apache is restarted. PHP 5.1 and 4.4.1 contain
the necessary fixes.

PHP File Upload GLOBAL Variable Overwrite Vulnerability
http://www.securityfocus.com/bid/15250
This dangerous issue allows the GLOBAL super-global to be overwritten
via POST (and I assume GET) data. It has been resolved by changes in
5.1 and 4.4.1.

PHP PHPInfo Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/15248
This isn't a big deal since nobody exposes the output of phpinfo() to
the public, right? :)


APPLICATIONS USING PHP
----------------------
Ashwebstudio Ashnews Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/16426

Nuked-klaN Index.PHP Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/16424

CRE Loaded Files.PHP Access Validation Vulnerability
http://www.securityfocus.com/bid/16415

sPaiz-Nuke Modules.PHP Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/16412

Drupal Image Upload HTML Injection Vulnerability
http://www.securityfocus.com/bid/15663
This is old news, having been addressed in prior releases: 4.6.4 and
4.5.6.

Drupal View User Profile Authorization Bypass Vulnerability
http://www.securityfocus.com/bid/15674
This too is old news, addressed in prior releases: 4.6.4 and 4.5.6.

Drupal Submitted Content HTML Injection Vulnerability
http://www.securityfocus.com/bid/15677
Yet another problem fixed in prior releases: 4.6.4 and 4.5.6.

Invision Power Board Portal Plugin Index.PHP SQL Injection Vulnerability
http://www.securityfocus.com/bid/16447

Calendarix Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/16456

SZUserMgnt Username Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/16454

FarsiNews Loginout.PHP Remote File Include Vulnerability
http://www.securityfocus.com/bid/16440

EasyCMS Multiple Cross-Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/16430

phpBB Rlink Module Rlink.PHP Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/16448

PunctWeb MyCO Name Field HTML Injection Vulnerability
http://www.securityfocus.com/bid/16444

MyBB Index.PHP Referrer Cookie SQL Injection Vulnerability
http://www.securityfocus.com/bid/16443

Cerberus Helpdesk Clients.PHP Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/16439

AshWebStudio AshNews Remote File Include Vulnerability
http://www.securityfocus.com/bid/16436

BrowserCRM Results.PHP Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/16435

Edgewall Software Trac HTML WikiProcessor Wiki Content HTML Injection Vulnerability
http://www.securityfocus.com/bid/16198

Edgewall Software Trac Search Module SQL Injection Vulnerability
http://www.securityfocus.com/bid/15720

PmWiki Multiple Input Validation Vulnerabilities
http://www.securityfocus.com/bid/16421

Phpclanwebsite Multiple Input Validation Vulnerabilities
http://www.securityfocus.com/bid/16391

Phpclanwebsite Multiple Input Validation Vulnerabilities
http://www.securityfocus.com/bid/16391

AZ Bulletin Board Post.PHP HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/16351


RELATED STUFF
-------------
Apache Mod_SSL Custom Error Document Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/16152
This only impacts Apache 2.x and has been fixed in version 2.0.55

OpenSSH SCP Shell Command Execution Vulnerability
http://www.securityfocus.com/bid/16369
Changes to version 4.3 resolve this issue.

OpenSSH GSSAPI Credential Disclosure Vulnerability
http://www.securityfocus.com/bid/14729
This was addressed back in version 4.2.

OpenSSH DynamicForward Inadvertent GatewayPorts Activation Vulnerability
http://www.securityfocus.com/bid/14727
This was addressed back in version 4.2.

OpenSSL Insecure Protocol Negotiation Weakness
http://www.securityfocus.com/bid/15071
Upgrade to versions 0.9.8a or 0.9.7h.

Multiple Vendor TCP Timestamp PAWS Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/13676

Mozilla Firefox XBL -MOZ-BINDING Property Cross-Domain Scripting Vulnerability
http://www.securityfocus.com/bid/16427

BZip2 CHMod File Permission Modification Race Condition Weakness
http://www.securityfocus.com/bid/12954

MySQL mysql_install_db Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/13660
This isn't that big a deal because proper server management restricts
the permissions necessary to successfully run the mysql_install_db
script.

ImageMagick File Name Handling Remote Format String Vulnerability
http://www.securityfocus.com/bid/12717

Adobe Multiple Unspecified Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/16451

Microsoft Internet Explorer Dialog Manipulation Vulnerability
http://www.securityfocus.com/bid/15823





From evdo.hsdpa at gmail.com  Sat Feb  4 16:43:51 2006
From: evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor)
Date: Sat, 4 Feb 2006 13:43:51 -0800
Subject: [nycphp-talk] PHP in SecurityFocus #335
In-Reply-To: <20060204195618.13E1DEDAEE0@mailspool2.panix.com>
References: <20060204195618.13E1DEDAEE0@mailspool2.panix.com>
Message-ID: <1ec620e90602041343h42c423fbp6a7ba9aa121c9ccd@mail.gmail.com>

Team, I've got a pretty high traffic IT website - I'd love to feature
some security based content on the site and do a rev share with the
author.. any ideas?\
\
bob
--
Robert Q Kim, Wireless Internet Advisor
http://hsdpa-coverage.com
http://www.antennacoverage.com/cell-repeater.html
https://www.antennacoverage.com/cell-phone-antenna-booster.html

2611 S. Pacific Coast Highway 101
Suite 102
Cardiff by the Sea, CA 92007
206 984 0880


From glenn310b at mac.com  Sat Feb  4 16:46:04 2006
From: glenn310b at mac.com (Glenn)
Date: Sat, 4 Feb 2006 16:46:04 -0500
Subject: [nycphp-talk] State table implementation ideas
In-Reply-To: <005801c628ec$16459690$0aa8a8c0@cliff>
References: <005801c628ec$16459690$0aa8a8c0@cliff>
Message-ID: <bca3425d138c3addb35d584fd9536dcd@mac.com>


On Feb 3, 2006, at 1:03 PM, Cliff Hirsch wrote:

> I need to generate an "options list" that is based on several status 
> fields. Sort of like, "if you can rub your belly, scratch your head 
> and stand on one foot, you can proceed past the breathalyzer test, 
> join the circus or run for governor of Massachusetts.
> ?
> What started as a simple if statement has grown into multiple switch 
> statements with some if statements thrown in just to make things 
> completely confusing. While this "compresses"? a state diagram, its 
> getting unwieldy.
> ?
> So now I'm thinking of throwing the whole thing into a lookup table.
> ?
> Field A?? Field B ... Field N??????? Options
> ?
> While this will result in a large array and many duplicate rows (since 
> many of the possibilities are actually the same), it should be really 
> easy to maintain and a great visual aid for those unlucky souls that 
> inherit my code.
> ?
> Any other? ideas? Or is a lookup table the best solution?
> ?
>

Fun problem Cliff...

I wrote this program to explore the possibilities...

Depending on the complexity of your situation, something like this 
might work.

We're setting up parameters and turning the options on and off till 
we've got a list of valid options.

This example is not very complex, but the concept could be expanded.

The trigger arrays could get more complex, and you could map actual 
field values to a 'y' or 'n' condition.

Two additional trigger arrays could be added, for cases when fields 
return false values

Glenn Powell

<html>

<?php

// example values for testing
$field_vals['field_a'] = 'y';
$field_vals['field_b'] = 'n';
$field_vals['field_c'] = 'y';
$field_vals['field_d'] = 'y';

// a list of all the fieldnames

$field_list = array('field_a','field_b','field_c','field_d');

// a list of all the options

$options = array('option_a','option_b','option_c');

////////////////////////////////////////////////////////////////////
// begin options maintenence area
// control options use here
//
// $trigger_include_option: if any of these fields are true,
// INclude the option on the options list
//
// $trigger_exclude_option: if any of these fields are true,
// EXclude the option from the options list
//
//

$trigger_include_option['option_a'] = 
array('field_a','field_b','field_c');
$trigger_exclude_option['option_a'] = array('field_d');

$trigger_include_option['option_b'] = array('field_a','field_c');
$trigger_exclude_option['option_b'] = array('field_b');

$trigger_include_option['option_c'] = array('field_d');
$trigger_exclude_option['option_c'] = array('field_c');

// end of options maintenence area
///////////////////////////////////////////////////////////////////

// loop on the multidimensional array and load up two more arrays
// to tell us what to include and exclude


foreach ($trigger_include_option as $option=>$field_list) {

    $use_option[$option] = 'n';

    foreach ($field_list as $field) {
       if ($field_vals[$field] == 'y') {
          $use_option[$option] = 'y';
       }
    }

}

foreach ($trigger_exclude_option as $option=>$field_list) {

    foreach ($field_list as $field) {
       if ($field_vals[$field] == 'y') {
          $use_option[$option] = 'n';
       }
    }

}

// now show the available options

print "<ul>";

foreach($options as $option) {

    if ($use_option[$option] == 'y') {
       print "<li>$option</li>\n";
    }

}

print "</ul>";

/**
// cut and paste for debugging
*/

?>

<p>Program Execution Completed</p>
</html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/enriched
Size: 3971 bytes
Desc: not available
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060204/f01e56f9/attachment.bin>

From shiflett at php.net  Sat Feb  4 17:07:46 2006
From: shiflett at php.net (Chris Shiflett)
Date: Sat, 04 Feb 2006 17:07:46 -0500
Subject: [nycphp-talk] PHP in SecurityFocus #335
In-Reply-To: <20060204195618.13E1DEDAEE0@mailspool2.panix.com>
References: <20060204195618.13E1DEDAEE0@mailspool2.panix.com>
Message-ID: <43E525B2.7070306@php.net>

Daniel Convissor wrote:
> PHP Parse_Str Register_Globals Activation Weakness
> http://www.securityfocus.com/bid/15249
> PHP File Upload GLOBAL Variable Overwrite Vulnerability
> http://www.securityfocus.com/bid/15250
> PHP PHPInfo Cross-Site Scripting Vulnerability
> http://www.securityfocus.com/bid/15248

Before anyone gets really worried, these issues were fixed months ago. 
Dan is asking the SF folks to see what's up.

Chris

-- 
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/


From michael.southwell at nyphp.org  Sat Feb  4 17:21:09 2006
From: michael.southwell at nyphp.org (Michael Southwell)
Date: Sat, 04 Feb 2006 17:21:09 -0500
Subject: [nycphp-talk] PHP in SecurityFocus #335
In-Reply-To: <1ec620e90602041343h42c423fbp6a7ba9aa121c9ccd@mail.gmail.co m>
References: <20060204195618.13E1DEDAEE0@mailspool2.panix.com>
	<1ec620e90602041343h42c423fbp6a7ba9aa121c9ccd@mail.gmail.com>
Message-ID: <6.2.3.4.2.20060204172049.02527690@mail.optonline.net>

idea #1:  provide contact info

At 04:43 PM 2/4/2006, you wrote:
>Team, I've got a pretty high traffic IT website - I'd love to feature
>some security based content on the site and do a rev share with the
>author.. any ideas?\
>\
>bob
>--
>Robert Q Kim, Wireless Internet Advisor
>http://hsdpa-coverage.com
>http://www.antennacoverage.com/cell-repeater.html
>https://www.antennacoverage.com/cell-phone-antenna-booster.html
>
>2611 S. Pacific Coast Highway 101
>Suite 102
>Cardiff by the Sea, CA 92007
>206 984 0880
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php

Michael Southwell, Vice President for Education
New York PHP
http://www.nyphp.com/training - In-depth PHP Training Courses 



From tedd at sperling.com  Sat Feb  4 18:11:39 2006
From: tedd at sperling.com (tedd)
Date: Sat, 4 Feb 2006 18:11:39 -0500
Subject: [nycphp-talk] State table implementation ideas
In-Reply-To: <bca3425d138c3addb35d584fd9536dcd@mac.com>
References: <005801c628ec$16459690$0aa8a8c0@cliff>
	<bca3425d138c3addb35d584fd9536dcd@mac.com>
Message-ID: <p06230900c00ae3fccc88@[192.168.0.100]>

>On Feb 3, 2006, at 1:03 PM, Cliff Hirsch wrote:
>
>>I need to generate an "options list" that is based on several 
>>status fields. Sort of like, "if you can rub your belly, scratch 
>>your head and stand on one foot, you can proceed past the 
>>breathalyzer test, join the circus or run for governor of 
>>Massachusetts.
>>
>>What started as a simple if statement has grown into multiple 
>>switch statements with some if statements thrown in just to make 
>>things completely confusing. While this "compresses"  a state 
>>diagram, its getting unwieldy.
>>
>>So now I'm thinking of throwing the whole thing into a lookup table.
>>
>>Field A   Field B ... Field N        Options
>>
>>While this will result in a large array and many duplicate rows 
>>(since many of the possibilities are actually the same), it should 
>>be really easy to maintain and a great visual aid for those unlucky 
>>souls that inherit my code.
>>
>>Any other  ideas? Or is a lookup table the best solution?
>>
>>
>
>Fun problem Cliff...
>
>I wrote this program to explore the possibilities...


Cliff & Glenn:

What, pray tell, are you guys doing?

Glen, I ran your code and received an "option_b" -- what does that 
mean? Is it fatal?

Thanks.

tedd
-- 
--------------------------------------------------------------------------------
http://sperling.com/


From glenn310b at mac.com  Sat Feb  4 19:33:12 2006
From: glenn310b at mac.com (Glenn)
Date: Sat, 4 Feb 2006 19:33:12 -0500
Subject: [nycphp-talk] State table implementation ideas
In-Reply-To: <p06230900c00ae3fccc88@[192.168.0.100]>
References: <005801c628ec$16459690$0aa8a8c0@cliff>
	<bca3425d138c3addb35d584fd9536dcd@mac.com>
	<p06230900c00ae3fccc88@[192.168.0.100]>
Message-ID: <9f38ddd9aadb2597347e1f0c8424abb1@mac.com>


On Feb 4, 2006, at 6:11 PM, tedd wrote:

>
> Cliff & Glenn:
>
> What, pray tell, are you guys doing?

Tedd,

Uh.. well.. uh..

I don't know exactly what Cliff is doing, but it seemed like he wanted 
to replace
a lot of conditional logic with something easier to maintain.
I'm having fun exploring possible solutions...

> Glen, I ran your code and received an "option_b" -- what does that
> mean? Is it fatal?
>

Probably to my reputation...

Cliff,

Here's the next revision of the logic...

I think it would be better to just define a list of fields that must 
ALL be true if an option
is to be displayed.

Then, if there are any fields that, if true, would cause the option NOT 
to be displayed
check for those.

Anyway, here's the code.

<html>

<?php

// If the status fields contain simple true or false values this might 
work

// example values for testing
$field_vals['field_a'] = 'y';
$field_vals['field_b'] = 'y';
$field_vals['field_c'] = 'y';
$field_vals['field_d'] = 'n';

// a list of all the fieldnames

$field_list = array('field_a','field_b','field_c','field_d');

// a list of all the options

$options = array('option_a','option_b','option_c');

////////////////////////////////////////////////////////////////////
// begin options maintenence area
// control options use here
//
// $trigger_include_option: if ALL of these fields are true,
// INclude the option on the options list
//
// $trigger_exclude_option: if ANY of these fields are true,
// EXclude the option from the options list
//

$trigger_include_option['option_a'] = 
array('field_a','field_b','field_c');
$trigger_exclude_option['option_a'] = array('field_d');

$trigger_include_option['option_b'] = array('field_a','field_c');
$trigger_exclude_option['option_b'] = array('field_d');

$trigger_include_option['option_c'] = array('field_d');
$trigger_exclude_option['option_c'] = array('field_c');

// end of options maintenence area
///////////////////////////////////////////////////////////////////

// loop on the multidimensional array and set $use_option[$option]
// to either 'y' or 'n' for each conditional.
// when we're finished, if $use_option[$option] is set to 'y'
// we can use it.

foreach ($trigger_include_option as $option=>$field_list) {

    $use_option[$option] = 'n';

    foreach ($field_list as $field) {
       if ($field_vals[$field] == 'y') {
          $use_option[$option] = 'y';
       }
       else {
          $use_option[$option] = 'n';
       }
    }

}

// check for any true fields that could exclude an option
// from the list

foreach ($trigger_exclude_option as $option=>$field_list) {

    foreach ($field_list as $field) {
       if ($field_vals[$field] == 'y') {
          $use_option[$option] = 'n';
       }
    }

}

// now show the available options

print "<ul>";

foreach($options as $option) {

    if ($use_option[$option] == 'y') {
       print "<li>$option</li>\n";
    }

}

print "</ul>";

/**
// cut and paste for debugging
*/

?>

<p>Program Execution Completed</p>
</html>



From cliff at pinestream.com  Sun Feb  5 09:52:26 2006
From: cliff at pinestream.com (cliff)
Date: Sun, 5 Feb 2006 09:52:26 -0500
Subject: [nycphp-talk] State table implementation ideas
In-Reply-To: <9f38ddd9aadb2597347e1f0c8424abb1@mac.com>
References: <005801c628ec$16459690$0aa8a8c0@cliff>
	<bca3425d138c3addb35d584fd9536dcd@mac.com>
	<p06230900c00ae3fccc88@[192.168.0.100]>
	<9f38ddd9aadb2597347e1f0c8424abb1@mac.com>
Message-ID: <20060205145226.M91385@pinestream.com>

Glenn:

Very cool solution.

I tried writing a couple of simple cases. Here's what I came up with:

This one is very clean, but it breaks up the search key and options into two 
tables. This provides a lot of flexibility, but is a bit hard on the eyes -- 
easy to make a mistake in the options table.

$lookup = array(
	array('pending','pending','pending'),
	array('pending','pending','inprocess'),
	array('pending','pending','completed'),
	array('pending','inprocess','inprocess'),
	array('pending','completed','inprocess'));

$options = array('dothis',
		'dothat',
		'dotheotherthing',
		'dothis',
		'anotheroption');

$currentstate = array('pending','pending','completed');

$key = array_search($state, $lookup);

if ($key === false)
	echo 'not in lookup table';
else
        echo $options[$key];

This one combines the "needle" with the resultant process . Very easy to 
follow and maintain, but the computational load for the implodes concerns 
me. I guess some sort of precompile could be implemented.

$lookup2 = array(
	implode(array('pending','pending','pending')) => 'do this',
	implode(array('pending','pending','inprocess')) => 'do that',
	implode(array('pending','pending','completed')) => 'do something',
	implode(array('pending','inprocess','inprocess')) => 'do another',
	implode(array('pending','completed','inprocess')) => 'do whatever');

$state2 = implode(array('pending','pending','completed'));

if (array_key_exists($state2, $lookup2))
      echo $lookup2[$state2];
else
	echo 'not in lookup table';




From evdo.hsdpa at gmail.com  Sun Feb  5 09:57:32 2006
From: evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor)
Date: Sun, 5 Feb 2006 06:57:32 -0800
Subject: [nycphp-talk] Rookie Question re hacks dot wireless internet
	coverage.com
Message-ID: <1ec620e90602050657h29fb622el72c8c3ecf484f5c8@mail.gmail.com>

Gentlemen, where do i go to modify the
page that shows up at
http://hacks.wirelessinternetcoverage.com
?
i went to index.php and well.. get NOTHING that shows up above.. HELP?!?!

--
Robert Q Kim, Wireless Internet Advisor
http://hsdpa-coverage.com
http://www.antennacoverage.com/cell-repeater.html
https://www.antennacoverage.com/cell-phone-antenna-booster.html

2611 S. Pacific Coast Highway 101
Suite 102
Cardiff by the Sea, CA 92007
206 984 0880


From kgibbons04 at gmail.com  Sun Feb  5 12:12:10 2006
From: kgibbons04 at gmail.com (Kevin Gibbons)
Date: Sun, 5 Feb 2006 12:12:10 -0500
Subject: [nycphp-talk] Rookie Question re hacks dot wireless internet
	coverage.com
In-Reply-To: <1ec620e90602050657h29fb622el72c8c3ecf484f5c8@mail.gmail.com>
References: <1ec620e90602050657h29fb622el72c8c3ecf484f5c8@mail.gmail.com>
Message-ID: <fc2b383c0602050912m1c507cd4xbf2b50faaae742ce@mail.gmail.com>

Hello Robert,

Your forum is using phpBB, which is a free and very good PHP/MySQL message
forum script.  What exactly are you trying to modify - the page layout, or
the actual forums themselves (such as adding new forums, or renaming
existing forums)?

If you're talking about modifying the page layout, you do not touch the
index.php page - but rather you modify the template page that is used to
build the index page.  If you're looking to modify the forums, you need to
login to the phpBB admin area to do this.  It's been awhile since I've used
phpBB, but I do believe you can reach your admin area by appending
/admin/index.php to your forum URL.  Then of course you will need the admin
username/password.

If you can be a bit more specific with what you actually need to do, I'm
sure one of the good folks here on the list can give you the exact fix
you're looking for.

good luck!
Kevin Gibbons


On 2/5/06, Robert Kim Wireless Internet Advisor <evdo.hsdpa at gmail.com>
wrote:
>
> Gentlemen, where do i go to modify the
> page that shows up at
> http://hacks.wirelessinternetcoverage.com
> ?
> i went to index.php and well.. get NOTHING that shows up above.. HELP?!?!
>
> --
> Robert Q Kim, Wireless Internet Advisor
> http://hsdpa-coverage.com
> http://www.antennacoverage.com/cell-repeater.html
> https://www.antennacoverage.com/cell-phone-antenna-booster.html
>
> 2611 S. Pacific Coast Highway 101
> Suite 102
> Cardiff by the Sea, CA 92007
> 206 984 0880
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060205/75c092fd/attachment.html>

From ps at pswebcode.com  Sun Feb  5 12:35:06 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Sun, 5 Feb 2006 12:35:06 -0500
Subject: [nycphp-talk] Postage Is Due for Companies Sending E-Mail
Message-ID: <000501c62a7a$8194b0e0$68e4a144@Rubicon>

http://www.nytimes.com/2006/02/05/technology/05AOL.html?incamp=article_popul
ar

Warmest regards,

Peter Sawczynec,
Technology Director
PSWebcode
_Design & Interface
_Ecommerce
_Database Management
ps at pswebcode.com
718.796.1951
www.pswebcode.com



From rahmin at insite-out.com  Sun Feb  5 13:28:57 2006
From: rahmin at insite-out.com (Rahmin Pavlovic)
Date: Sun, 05 Feb 2006 13:28:57 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <Pine.LNX.4.58.0602011730550.22395@miranda.org>
Message-ID: <C00BAE19.118D4%rahmin@insite-out.com>

Hi,
First of, thanks to everyone for the responses -- especially to Carlos for
the clever SQL.  (Sorry if I've missed new posts, been away for a few days.)


On 2/1/06 5:36 PM, "Adam Maccabee Trachtenberg" <adam at trachtenberg.com>
wrote:

> I see many people have provided a number good of answers, so let me
> step back and ask: "What problem are you trying to solve?"


Alrighty.  Basically, we're redesigning a site that ultimately contains over
100k records (table a) that belong to over 300 sections (table b).  (Each
week, the editors will upload 50+ new records, which may or may not contain
new sections.)

The redesign is an all-CSS layout.  For the section landing page, we're
showing the 5 most recent records, followed by a two-column layout
displaying the next 30 or so.

Each 'column' is essentially a <div> block, so I want to show all even
records in the left block;  all odd records in the right.  (Editors can
choose sort-order, turn records on and off or simply display all in
reverse-cron, so accuracy is important.)  I've been playing around with SQL
to do this as I'd rather not put the weight on PHP.

(This is all working, BTW.)


> Why do you need every other row? Is this data likely to change? How
> often is it updated? Can you pre-compute an ENUM that you insert upon
> writing the table that lets you do:
> 
> SELECT * FROM TABLE WHERE filter = 'even';
> SELECT * FROM TABLE WHERE filter = 'odd';


See above for sorting rules, but I just want to say that a pet peeve of mine
is text-entries in the db for boolean logic.  Why not something like odd=0
|| odd=1?

The legacy site we're redesigning here actually had doNotShow='yes' ||
doNotShow='no' in the db.  I banged my head on the desk when I saw this.  It
not only takes more memory to retrieve & test the results, but the logic in
this case is in reverse.  Every time I'd look at a record, I'd have to ask
myself, "Do I not want to show the record?  No, I do not want to not show
it."

These are now display=1 || display=0.  It is far more easier to test:

if($record['display']) {}

Than it is:

if($record['doNotShow']=='no') {}


(Just had to get that off my chest..)




From tedd at sperling.com  Sun Feb  5 14:13:58 2006
From: tedd at sperling.com (tedd)
Date: Sun, 5 Feb 2006 14:13:58 -0500
Subject: [nycphp-talk] every other record
In-Reply-To: <C00BAE19.118D4%rahmin@insite-out.com>
References: <C00BAE19.118D4%rahmin@insite-out.com>
Message-ID: <p06230901c00bfdafc6c5@[192.168.0.100]>

>See above for sorting rules, but I just want to say that a pet peeve of mine
>is text-entries in the db for boolean logic.  Why not something like odd=0
>|| odd=1?

Oh, why didn't you ask?

Try this:

<?php
for ($i = 1; $i <= 10; $i++)
	{
	echo($i & 1);
	echo("<br/>");
	}
?>

If you count the records, then just run that count (i.e., $i) through 
the above to determine odd = 1 for odd and odd = 0 for even.

HTH's.

tedd
-- 
--------------------------------------------------------------------------------
http://sperling.com/


From ps at pswebcode.com  Mon Feb  6 15:35:20 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Mon, 6 Feb 2006 15:35:20 -0500
Subject: [nycphp-talk] PHP Security: The Proper Choice Is to Do It Now
Message-ID: <000901c62b5c$d97e8190$68e4a144@Rubicon>

The content of Chris Shiflett's Essential PHP Security from O'Reilly is
poised right now to be put online as a Wiki. 
 
It should accept about 90 days of moderated updates and then be openly
promoted as the accepted, standardized "Using PHP Securely" guide for all
PHP programmers.
 
Then Rasmus and Zeev (and Hans) have to step up and openly support this type
of essential security awareness.
 
All PHP user groups (like NYPHP) should openly, actively promote secure
programming awareness right in the membership documentation and on every
home page. 
 
Php.net should have Security as a menu item in the main horizontal menu
right there with Downloads and Documentation.
 
All PHP tutorials online that are old with insecure practices should have a
simple one line link right under the tutorial title:
"This tutorial may contain insecure techniques. See: [standardized,
industry-supported secure PHP programming article] here before you begin."
 
Can't wait for PHP 6 and Sandbox environments.
 
Additionally, I have promoted in this venue before that the default php.ini
from php.net should be a hardened .ini with shell and fopen functions
disabled by default. Open_basedir should expect a mandatory value. 
 
Save errors to a log should be the default, with the alternative option to
show on the screen. Error_log should expect mandatory value.
 
Until further refinement safe_mode=on.
 
We have to start somewhere. We have to start now. We can't wait for some
incredible overarching solution or framework that is just going to appear
because that is not the way most progress happens.
 
Most progress, even in technology, occurs when a person adds another tweak,
another enhancement, another update. 
 
PHP security needs to be further demystified. Security has to be a basic
building block comparable to learning datatypes.
 
Chris's guide is quite sufficient to help engender a positive change in the
nature of how we all program PHP.
 
Someday I really, really want to have a safe online, PHP-driven, Google-like
personal searchable database that catalogs my entire
financial/personal/health/educational/job history and automatically pulls in
the XML-based attributes of all my belongings so that I can
reference/manage/schedule/transfer/purchase/send anything from anywhere in
the world on my biometrically protected cellular/pda/player. 
 
Only intense trusted security is going to make that possible.
 
Start now yourself. Employ and propagate essential PHP security everywhere.

Warmest regards,

Peter Sawczynec,
Technology Director
PSWebcode
_Design & Interface
_Ecommerce
_Database Management
ps at pswebcode.com
718.796.1951
www.pswebcode.com



From mikko.rantalainen at peda.net  Tue Feb  7 05:20:56 2006
From: mikko.rantalainen at peda.net (Mikko Rantalainen)
Date: Tue, 07 Feb 2006 12:20:56 +0200
Subject: [nycphp-talk] every other record
In-Reply-To: <C00BAE19.118D4%rahmin@insite-out.com>
References: <C00BAE19.118D4%rahmin@insite-out.com>
Message-ID: <43E87488.4010802@peda.net>

Rahmin Pavlovic wrote:
> On 2/1/06 5:36 PM, "Adam Maccabee Trachtenberg" <adam at trachtenberg.com>
> wrote:
> 
>>I see many people have provided a number good of answers, so let me
>>step back and ask: "What problem are you trying to solve?"
> [...]
> The redesign is an all-CSS layout.  For the section landing page, we're
> showing the 5 most recent records, followed by a two-column layout
> displaying the next 30 or so.
> 
> Each 'column' is essentially a <div> block, so I want to show all even
> records in the left block;  all odd records in the right.

I'll rephrase the above so we can be sure that we're on the same 
page. Logically you have a result set of records 1-35 sorted by 
whatever sorting algorithm the editor has selected. And you now aim 
for following structure (ASCII presentation, use fixed width font to 
view):

+------------------------------+
| DIV          1               |
|              2               |
|              3               |
|              4               |
|              5               |
+------------------------------+
+-------------+ +--------------+
|DIV   6      | |DIV    7      |
|      8      | |       9      |
|     10      | |      11      |
|     12      | |      13      |
|    ...      | |     ...      |
|     34      | |      35      |
+-------------+ +--------------+

So the source order is

<div>1 2 3 4 5</div>
<div>6 8 10 ... 34</div>
<div>7 9 11 ... 35</div>

??

If this is the case, I'd suggest you to use table layout instead.

In my opinion, the biggest reason to use pure CSS layout is to 
*correctly* markup the semantics of the document. If the ordering of 
the records is meaningful, then the *source* order is the *most* 
important thing. The source *must* contain report 7 between reports 
6 and 8, unlike above. Using a table and putting each report to its 
own cell will accomplish this. However, if you think the collection 
of reports you're displaying isn't really a piece of tabular data 
(which I think it isn't), then you shouldn't (semantically) use 
<table> to display it. On the other hand, using <table> and correct 
source order is less wrong than using no <table> but incorrect 
source order.

Saying that, I'm aware that it's *really* hard to achieve the 
correct table-like rendering in MSIE with the correct source order. 
All I'm saying is that if the table-like rendering in MSIE is more 
important than correct source order, then I think you should *NOT* 
change to true CSS layout. It's not worth it! Only use true CSS 
layout if using it *allows* you to use correct source order.

-- 
Mikko


From mitch.pirtle at gmail.com  Tue Feb  7 16:52:33 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Tue, 7 Feb 2006 16:52:33 -0500
Subject: [nycphp-talk] Drupal junkie needed
Message-ID: <330532b60602071352u6bd3ad60yaffa45ed9638881@mail.gmail.com>

The New York City Homeschool Education Alliance (NYCHEA.org) is
looking for a volunteer Drupal developer to help them with an
application that may be migrated to their website (address management
for mailings etc).

Is there anyone that would be interested in picking this up? I'd do
it, but it ain't Joomla ;-)

--
Mitch Pirtle
Joomla! Core Developer
Open Source Matters


From mike.johnson at wagner.edu  Tue Feb  7 16:59:40 2006
From: mike.johnson at wagner.edu (Michael Johnson)
Date: Tue, 07 Feb 2006 16:59:40 -0500
Subject: [nycphp-talk] Drupal junkie needed
In-Reply-To: <330532b60602071352u6bd3ad60yaffa45ed9638881@mail.gmail.com>
References: <330532b60602071352u6bd3ad60yaffa45ed9638881@mail.gmail.com>
Message-ID: <43E9184C.1090601@wagner.edu>

Mitch,

Let me know some more of the details.... I just migrated www.wagner.edu
to be 100% drupal (from a coldfusion/IIS server to two LAMPs!) Took
quite a while. But if they need some integration help, maybe I could be
of service. No promises, but I'll help if I can.

-- 
Michael Johnson
Web: Systems Administrator/Programmer
Wagner College
mike.johnson at wagner.edu
718-420-4425


Mitch Pirtle wrote:

>The New York City Homeschool Education Alliance (NYCHEA.org) is
>looking for a volunteer Drupal developer to help them with an
>application that may be migrated to their website (address management
>for mailings etc).
>
>Is there anyone that would be interested in picking this up? I'd do
>it, but it ain't Joomla ;-)
>
>--
>Mitch Pirtle
>Joomla! Core Developer
>Open Source Matters
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>




From aaron at aarond.com  Wed Feb  8 16:58:02 2006
From: aaron at aarond.com (aaron)
Date: Wed, 08 Feb 2006 16:58:02 -0500
Subject: [nycphp-talk] upload error
Message-ID: <43EA696A.3090900@aarond.com>

I'm having some trouble running an upload form on Mac OS X, IE 5.2

My servers are windows IIS, running php 4.3.   The form works fine for 
Mac Safari, and IE/Mozilla on windows 2000, so I'm not sure what the 
difference is. I just check for the ',jpg' extension, and _FILE error 
code =0  then use move_uploaded_file.  On the Mac/Safari test, it 
doesn't return an error, but shows 0 for file size.

(I used the same image for Mac/PC tests so I know it goes through on the pc)

Any ideas?

thanks,
Aaron D.


From edwardpotter at gmail.com  Wed Feb  8 17:01:09 2006
From: edwardpotter at gmail.com (edward potter)
Date: Wed, 8 Feb 2006 17:01:09 -0500
Subject: [nycphp-talk] upload error
In-Reply-To: <43EA696A.3090900@aarond.com>
References: <43EA696A.3090900@aarond.com>
Message-ID: <c5949a380602081401i68d6e829lccf7cf3dc581abbb@mail.gmail.com>

hmmm, have not used IE on a Mac for ages, however what I usually do is
to check the log files on the server, usually something helpful
there..

-ed :-)


On 2/8/06, aaron <aaron at aarond.com> wrote:
> I'm having some trouble running an upload form on Mac OS X, IE 5.2
>
> My servers are windows IIS, running php 4.3.   The form works fine for
> Mac Safari, and IE/Mozilla on windows 2000, so I'm not sure what the
> difference is. I just check for the ',jpg' extension, and _FILE error
> code =0  then use move_uploaded_file.  On the Mac/Safari test, it
> doesn't return an error, but shows 0 for file size.
>
> (I used the same image for Mac/PC tests so I know it goes through on the pc)
>
> Any ideas?
>
> thanks,
> Aaron D.
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>


From aaron at aarond.com  Wed Feb  8 17:13:56 2006
From: aaron at aarond.com (aaron)
Date: Wed, 08 Feb 2006 17:13:56 -0500
Subject: [nycphp-talk] upload error
In-Reply-To: <c5949a380602081401i68d6e829lccf7cf3dc581abbb@mail.gmail.com>
References: <43EA696A.3090900@aarond.com>
	<c5949a380602081401i68d6e829lccf7cf3dc581abbb@mail.gmail.com>
Message-ID: <43EA6D24.30608@aarond.com>

I just noticed that some jpg files will get uploaded, but others won't. 
Strange.
I'm not sure what the difference is yet.


edward potter wrote:

>hmmm, have not used IE on a Mac for ages, however what I usually do is
>to check the log files on the server, usually something helpful
>there..
>
>-ed :-)
>
>
>On 2/8/06, aaron <aaron at aarond.com> wrote:
>  
>
>>I'm having some trouble running an upload form on Mac OS X, IE 5.2
>>
>>My servers are windows IIS, running php 4.3.   The form works fine for
>>Mac Safari, and IE/Mozilla on windows 2000, so I'm not sure what the
>>difference is. I just check for the ',jpg' extension, and _FILE error
>>code =0  then use move_uploaded_file.  On the Mac/Safari test, it
>>doesn't return an error, but shows 0 for file size.
>>
>>(I used the same image for Mac/PC tests so I know it goes through on the pc)
>>
>>Any ideas?
>>
>>thanks,
>>Aaron D.
>>_______________________________________________
>>New York PHP Community Talk Mailing List
>>http://lists.nyphp.org/mailman/listinfo/talk
>>New York PHP Conference and Expo 2006
>>http://www.nyphpcon.com
>>Show Your Participation in New York PHP
>>http://www.nyphp.org/show_participation.php
>>
>>    
>>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060208/dca1a04d/attachment.html>

From craig at juxtadigital.com  Wed Feb  8 17:19:19 2006
From: craig at juxtadigital.com (Craig Thomas)
Date: Wed, 08 Feb 2006 17:19:19 -0500
Subject: [nycphp-talk] upload error
In-Reply-To: <43EA6D24.30608@aarond.com>
References: <43EA696A.3090900@aarond.com>
	<c5949a380602081401i68d6e829lccf7cf3dc581abbb@mail.gmail.com>
	<43EA6D24.30608@aarond.com>
Message-ID: <43EA6E67.8020700@juxtadigital.com>

aaron wrote:
> I just noticed that some jpg files will get uploaded, but others won't. 
> Strange.
> I'm not sure what the difference is yet.

Post the code.

$_FILES['upload']['type'] doesn't _always_ return the same thing with 
different browsers...so, if you are relying on that...don't.


 From the docs:

http://us3.php.net/features.file-upload

"The mime type of the file, if the browser provided this information. An 
example would be "image/gif". This mime type is however not checked on 
the PHP side and therefore don't take its value for granted."

--
Craig




From tedd at sperling.com  Wed Feb  8 17:56:17 2006
From: tedd at sperling.com (tedd)
Date: Wed, 8 Feb 2006 17:56:17 -0500
Subject: [nycphp-talk] upload error
In-Reply-To: <43EA6D24.30608@aarond.com>
References: <43EA696A.3090900@aarond.com>
	<c5949a380602081401i68d6e829lccf7cf3dc581abbb@mail.gmail.com>
	<43EA6D24.30608@aarond.com>
Message-ID: <p06230901c01026f0ce8d@[192.168.0.100]>

>I just noticed that some jpg files will get uploaded, but others 
>won't. Strange.
>I'm not sure what the difference is yet.


Could be a couple of things: a) size -- check the size. I've had 
jpg's load only a portion because of size limits; 2) some jpgs have 
jpeg suffix -- check suffix and the defaults with your server.

HTH's

tedd

-- 
--------------------------------------------------------------------------------
http://sperling.com/


From mitch.pirtle at gmail.com  Wed Feb  8 20:39:28 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Wed, 8 Feb 2006 20:39:28 -0500
Subject: [nycphp-talk] Drupal junkie needed
In-Reply-To: <43E9184C.1090601@wagner.edu>
References: <330532b60602071352u6bd3ad60yaffa45ed9638881@mail.gmail.com>
	<43E9184C.1090601@wagner.edu>
Message-ID: <330532b60602081739p169983a3ie77b747398bc376d@mail.gmail.com>

On 2/7/06, Michael Johnson <mike.johnson at wagner.edu> wrote:
> Mitch,
>
> Let me know some more of the details.... I just migrated www.wagner.edu
> to be 100% drupal (from a coldfusion/IIS server to two LAMPs!) Took
> quite a while. But if they need some integration help, maybe I could be
> of service. No promises, but I'll help if I can.

Looks like it isn't a weblication, but more of a client application
problem. Ultimately they keep a database of mailing addresses and need
to find a way of centralizing that data, and also allowing for a "Mail
Merge"-like feature to integrate with Word.

Maybe there is something for Drupal that could manage the address
book, and then provide a handy export to a Word-compatible format?

--
Mitch Pirtle
Joomla! Core Developer
Open Source Matters


From aaron at aarond.com  Thu Feb  9 11:15:36 2006
From: aaron at aarond.com (aaron)
Date: Thu, 09 Feb 2006 11:15:36 -0500
Subject: [nycphp-talk] upload error
In-Reply-To: <p06230901c01026f0ce8d@[192.168.0.100]>
References: <43EA696A.3090900@aarond.com>	<c5949a380602081401i68d6e829lccf7cf3dc581abbb@mail.gmail.com>	<43EA6D24.30608@aarond.com>
	<p06230901c01026f0ce8d@[192.168.0.100]>
Message-ID: <43EB6AA8.8090603@aarond.com>

Here is an example

*My simple code*

<form name="imgform" action="test.php" method="POST" 
enctype="multipart/form-data">
Image File
<input type="hidden" name="MAX_FILE_SIZE" value="2100000">
<input type="file" name="imgfile">
<input type="submit">
</form>

<?php
if($_FILES['imgfile'])
{
 move_uploaded_file( $_FILES['imgfile']['tmp_name'], 
'testimg/'.$_FILES['imgfile']['name'] ); 
} // end post
?>


For test images I just google image searched 'birds' and picked the swan 
image (2nd one)
http://lynx.uio.no/jon/gif/animals/birds/swans.jpg

This works on Mac safari, PC IE/Mozilla/Firefox but not Mac IE.  When I 
try to open the file on my pc it says 'Can't determine type'

Any thoughts?  Is this sample image faulty?



tedd wrote:

>>I just noticed that some jpg files will get uploaded, but others 
>>won't. Strange.
>>I'm not sure what the difference is yet.
>>    
>>
>
>
>Could be a couple of things: a) size -- check the size. I've had 
>jpg's load only a portion because of size limits; 2) some jpgs have 
>jpeg suffix -- check suffix and the defaults with your server.
>
>HTH's
>
>tedd
>
>  
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060209/a4780c81/attachment.html>

From prusak at gmail.com  Thu Feb  9 16:05:53 2006
From: prusak at gmail.com (Ophir Prusak)
Date: Thu, 9 Feb 2006 16:05:53 -0500
Subject: [nycphp-talk] =?windows-1252?q?Are_you_promoting_someone_else=92s_?=
	=?windows-1252?q?site_without_even_knowing_it=3F?=
Message-ID: <f1dc81bb0602091305w78713b94xc12a6b6bef5da5ad@mail.gmail.com>

hi all,

If you're running a search engine friendly URL mod for your bulletin
board system, you should read this.

If you're using FURL with IPB, you MUST read this.

Basically, I just found out that the URL mod I've been running on our
company forums is google spamming.

Here's the whole blog entry, but you might want to see it with
pictures at http://www.prusak.com

-----------------------------------------------------------------------

Are you promoting someone else's site without even knowing it?
My tale of being victim to a below-the-belt SEO tactic.

Recently, we added user forums to our company web site, in order to
give our customers and potential customers a place to voice their
questions and opinions. We settled on using Invision Power Board (IPB)
which runs using PHP and MySQL.

A couple of weeks ago I installed a modification to our forums which
makes the URL of the pages appear to be static html pages and it also
inserts the topic title into the URL. The modification package (also
called a "mod") is called FURL, which is short for "Friendly URL".
Friendly meaning the URLs are more search engine friendly.

After installing the FURL modification, instead of using this URL:
http://forum.resperate.com/index.php?showtopic=19
it uses this URL:
http://forum.resperate.com/My-doctor-said-pills-for-the-rest-of-your-life-t19.html

Both of the above URLs take you to the same page, but the second one
both looks nicer, and is supposed to improve search engine placement.

Last night, I wanted to check if Google was picking up the URLs with
the static or dynamic URLs, so I searched for a pretty unique phrase
from one of the pages: "It sounds like RESPeRATE is working well for
you" and surely enough, the page had been picked up, but the URL it
was showing was the dynamic one, not the static one.

I was curious to see how Google was seeing the page so I clicked on
the cached button:



That's when my jaw dropped

There was some additional stuff I had never seen before at the top of
the page which looked like this:



Instead of the normal forum section header which looks like this:



The modification I installed didn't just modify the URLs. It also
added, unknowingly to me, some extra text at the top of the page as
well as some links to other pages - but the added text was only being
shown to the Google spider, and was not visible to a normal human
viewing the site. This alone can get you banned from Google.

The fact that FURL adds this content is not mentioned anywhere in the
documentation or installation instructions.

It really saddens me that the author of FURL added a very underhanded
tactic improve their search engine rankings.
If they would have added a small footer to the bottom the page that
was shown to everyone, I would have been perfectly OK with that and
would have left it.

It seems that quite a few sites have FURL installed and are affected
by this SEO hack. If you do a search for "SEO Powered by FURL" in
Google, it says over 2 million results.

* sigh *


From matt at jiffycomp.com  Thu Feb  9 18:00:24 2006
From: matt at jiffycomp.com (Matt Morgan)
Date: Thu, 09 Feb 2006 18:00:24 -0500
Subject: [nycphp-talk] Drupal junkie needed
In-Reply-To: <330532b60602081739p169983a3ie77b747398bc376d@mail.gmail.com>
References: <330532b60602071352u6bd3ad60yaffa45ed9638881@mail.gmail.com>	<43E9184C.1090601@wagner.edu>
	<330532b60602081739p169983a3ie77b747398bc376d@mail.gmail.com>
Message-ID: <43EBC988.6080905@jiffycomp.com>

Mitch Pirtle wrote:

>On 2/7/06, Michael Johnson <mike.johnson at wagner.edu> wrote:
>  
>
>>Mitch,
>>
>>Let me know some more of the details.... I just migrated www.wagner.edu
>>to be 100% drupal (from a coldfusion/IIS server to two LAMPs!) Took
>>quite a while. But if they need some integration help, maybe I could be
>>of service. No promises, but I'll help if I can.
>>    
>>
>
>Looks like it isn't a weblication, but more of a client application
>problem. Ultimately they keep a database of mailing addresses and need
>to find a way of centralizing that data, and also allowing for a "Mail
>Merge"-like feature to integrate with Word.
>
>Maybe there is something for Drupal that could manage the address
>book, and then provide a handy export to a Word-compatible format?
>
>  
>
What about CiviCRM, which is meant for non-profits & runs on Drupal (and 
Joomla!). See http://openngo.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060209/514be9a3/attachment.html>

From hendler at simmons.edu  Thu Feb  9 18:11:19 2006
From: hendler at simmons.edu (Jonathan Hendler)
Date: Thu, 09 Feb 2006 18:11:19 -0500
Subject: [nycphp-talk] Drupal junkie needed
In-Reply-To: <43EBC988.6080905@jiffycomp.com>
References: <330532b60602071352u6bd3ad60yaffa45ed9638881@mail.gmail.com>	<43E9184C.1090601@wagner.edu>	<330532b60602081739p169983a3ie77b747398bc376d@mail.gmail.com>
	<43EBC988.6080905@jiffycomp.com>
Message-ID: <43EBCC17.80907@simmons.edu>

I'm with Matt on civicCRM.
Maybe this will inspire Drupal and Joomla to merge. :)

Matt Morgan wrote:

> Mitch Pirtle wrote:
>
>>On 2/7/06, Michael Johnson <mike.johnson at wagner.edu> wrote:
>>  
>>
>>>Mitch,
>>>
>>>Let me know some more of the details.... I just migrated www.wagner.edu
>>>to be 100% drupal (from a coldfusion/IIS server to two LAMPs!) Took
>>>quite a while. But if they need some integration help, maybe I could be
>>>of service. No promises, but I'll help if I can.
>>>    
>>>
>>
>>Looks like it isn't a weblication, but more of a client application
>>problem. Ultimately they keep a database of mailing addresses and need
>>to find a way of centralizing that data, and also allowing for a "Mail
>>Merge"-like feature to integrate with Word.
>>
>>Maybe there is something for Drupal that could manage the address
>>book, and then provide a handy export to a Word-compatible format?
>>
>>  
>>
> What about CiviCRM, which is meant for non-profits & runs on Drupal 
> (and Joomla!). See http://openngo.org.
>
>------------------------------------------------------------------------
>
>  
>



From rajlist at rajshekhar.net  Fri Feb 10 00:18:14 2006
From: rajlist at rajshekhar.net (Raj shekhar)
Date: Fri, 10 Feb 2006 10:48:14 +0530
Subject: =?windows-1252?Q?Re=3A_=5Bnyphp-talk=5D_Are_you_promotin?=
	=?windows-1252?Q?g_someone_else=92s_site_without_even_knowin?=
	=?windows-1252?Q?g_it=3F?=
In-Reply-To: <f1dc81bb0602091305w78713b94xc12a6b6bef5da5ad@mail.gmail.com>
References: <f1dc81bb0602091305w78713b94xc12a6b6bef5da5ad@mail.gmail.com>
Message-ID: <43EC2216.50009@rajshekhar.net>

in infinite wisdom Ophir Prusak spoke thus on 02/10/06 02:35:
> hi all,
> 
> If you're running a search engine friendly URL mod for your bulletin
> board system, you should read this.
> 
> If you're using FURL with IPB, you MUST read this.
> 
> Basically, I just found out that the URL mod I've been running on our
> company forums is google spamming.
> 
> Here's the whole blog entry, but you might want to see it with
> pictures at http://www.prusak.com

If FURL is free software (free as in free speech), take the source and 
create a fork of it which does not add the junk that you mentioned.  If 
it is not free, create your own and change the world for good :-)

PS: I don't use any bulletin board systems, so I have never come across 
the problem you mentioned.


-- 
          _.-,               raj shekhar
     .--'  '-._           http://rajshekhar.net
  _/`-  _      '.       http://rajshekhar.net/blog
'----'._`.----. \
           `     \;  WE APOLOGIZE FOR THE INCONVENIENCE
                 ;_\    -- God's Last Message to his Creation


From george at omniti.com  Fri Feb 10 10:49:19 2006
From: george at omniti.com (George Schlossnagle)
Date: Fri, 10 Feb 2006 10:49:19 -0500
Subject: [nycphp-talk] OSCON Submission Deadline Reminder
Message-ID: <43ECB5FF.2000504@omniti.com>

Just as a reminder to all interested parties: the submission deadline 
for 2006 O'Reilly Open Source Convention is coming to a close.  All 
submissions must be in by Monday, February 13th 23:59 PST to be 
considered.  Proposals can be submitted online at 
http://conferences.oreillynet.com/cs/os2006/create/e_sess/

OSCON is probably my favorite conference of the year; gathering together 
innovators not only from the PHP community, but all the other major 
open-source languages as well.  This cross-pollination is really 
exciting and helps advance the state of the art for all projects.

If anyone has any questions or problems with the submission process, 
please feel free to contact me offline.

Best,

George


From codebowl at gmail.com  Fri Feb 10 13:16:43 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Fri, 10 Feb 2006 13:16:43 -0500
Subject: [nycphp-talk] A Bit of Array Trouble
Message-ID: <8d9a42800602101016j445d346o85f9d6b07472407a@mail.gmail.com>

Hey Guys,

I would appreciate any help i can get with this problem.

Based on a customers zip code when they come to the site we generate a list
of vendors and vendor locations and they are loaded into an array like this

www,codebowl.com/array.txt

what i need to do is loop over the vendor locations and sort them based on
the distance.  Currently it looks sorted but that is only because 2 records
are showing.

so in this case it is correct.  the end goal is to get the 2 closest
locations then get the closest based on total street miles.

is there current code out there that could do this?

Thanks,
--
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060210/6e088bc1/attachment.html>

From cahoyos at us.ibm.com  Fri Feb 10 13:30:08 2006
From: cahoyos at us.ibm.com (Carlos A Hoyos)
Date: Fri, 10 Feb 2006 13:30:08 -0500
Subject: [nycphp-talk] A Bit of Array Trouble
In-Reply-To: <8d9a42800602101016j445d346o85f9d6b07472407a@mail.gmail.com>
Message-ID: <OF3D0FC9A0.768FD3E1-ON85257111.006585EF-85257111.0065A2C1@us.ibm.com>


> what i need to do is loop over the vendor locations and sort them
> based on the distance.  Currently it looks sorted but that is only
> because 2 records are showing.

You can use usort with a function that compares the distance key.

See example 2:  http://us2.php.net/manual/en/function.usort.php

Carlos




From cliff at pinestream.com  Fri Feb 10 14:49:52 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Fri, 10 Feb 2006 14:49:52 -0500
Subject: [nycphp-talk] type casting function arguments
Message-ID: <000201c62e7b$28de7300$0aa8a8c0@cliff>

Is there any way to typecast a function argument like:
 
public function Partytime(int $argument)         // this actually
expects an object of class int
 
or 
 
public function Partytime( (int)$argument)      // this barfs
 
sure would be nice when my next line is:
 
if ($argument ===...    which I really like over == for some stange
reason -- keeps me honest.
 
You get the idea.
 
Cliff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060210/56b8ac5d/attachment.html>

From tedd at sperling.com  Fri Feb 10 15:00:49 2006
From: tedd at sperling.com (tedd)
Date: Fri, 10 Feb 2006 15:00:49 -0500
Subject: [nycphp-talk] A Bit of Array Trouble
In-Reply-To: <8d9a42800602101016j445d346o85f9d6b07472407a@mail.gmail.com>
References: <8d9a42800602101016j445d346o85f9d6b07472407a@mail.gmail.com>
Message-ID: <p06230908c012a10054f4@[192.168.0.100]>

>Hey Guys,
>
>I would appreciate any help i can get with this problem.
>
>Based on a customers zip code when they come to the site we generate 
>a list of vendors and vendor locations and they are loaded into an 
>array like this
>
>www,<http://codebowl.com/array.txt>codebowl.com/array.txt
>
>what i need to do is loop over the vendor locations and sort them 
>based on the distance.  Currently it looks sorted but that is only 
>because 2 records are showing.
>
>so in this case it is correct.  the end goal is to get the 2 closest 
>locations then get the closest based on total street miles.
>
>is there current code out there that could do this?
>
>Thanks,
>--
>Joseph Crawford Jr.
>Zend Certified Engineer
>Codebowl Solutions, Inc.
>1-802-671-2021

I haven't done this, but you might use Google's map services.

tedd
-- 
--------------------------------------------------------------------------------
http://sperling.com/


From scott at crisscott.com  Fri Feb 10 15:02:48 2006
From: scott at crisscott.com (Scott Mattocks)
Date: Fri, 10 Feb 2006 15:02:48 -0500
Subject: [nycphp-talk] type casting function arguments
In-Reply-To: <000201c62e7b$28de7300$0aa8a8c0@cliff>
References: <000201c62e7b$28de7300$0aa8a8c0@cliff>
Message-ID: <43ECF168.2080009@crisscott.com>

Cliff Hirsch wrote:
> Is there any way to typecast a function argument like:
>  
> public function Partytime(int $argument)         // this actually
> expects an object of class int
>  
> or 
>  
> public function Partytime( (int)$argument)      // this barfs

Nope. Type hints (your first version) don't work on primitives and you 
can't execute commands (your second version) in a function/method 
signature (except setting defaults).

-- 
Scott Mattocks
http://www.crisscott.com


From andrew at plexpod.com  Fri Feb 10 15:03:12 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Fri, 10 Feb 2006 15:03:12 -0500
Subject: [nycphp-talk] type casting function arguments
In-Reply-To: <000201c62e7b$28de7300$0aa8a8c0@cliff>
References: <000201c62e7b$28de7300$0aa8a8c0@cliff>
Message-ID: <20060210200308.GE31026@desario.homelinux.net>

On Fri, Feb 10, 2006 at 02:49:52PM -0500, Cliff Hirsch wrote:
> Is there any way to typecast a function argument like:
>  
> public function Partytime(int $argument)         // this actually
> expects an object of class int
>  
> or 
>  
> public function Partytime( (int)$argument)      // this barfs

No.  What you're trying to do is type hinting, which only works for the
compound types: classes (as of 5) and arrays (as of 5.1). See:
    http://us3.php.net/manual/en/language.oop5.typehinting.php

Maybe someday the other (scalar) primitives will make it in there.

Andrew
-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From cliff at pinestream.com  Fri Feb 10 15:09:06 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Fri, 10 Feb 2006 15:09:06 -0500
Subject: [nycphp-talk] type casting function arguments
In-Reply-To: <20060210200308.GE31026@desario.homelinux.net>
Message-ID: <000c01c62e7d$d8a883f0$0aa8a8c0@cliff>

So is it best to abandon ifs with === and !==? I think they are great
for validation and flag checking (like setting a variable to a result
set or Boolean false). But I might have gotten ahead of myself using
them too liberally, which is now a bit worrisome and creating a few
problems...and overtime.

---
No.  What you're trying to do is type hinting, which only works for the
compound types: classes (as of 5) and arrays (as of 5.1). See:
    http://us3.php.net/manual/en/language.oop5.typehinting.php



From michael.southwell at nyphp.org  Fri Feb 10 15:25:18 2006
From: michael.southwell at nyphp.org (Michael Southwell)
Date: Fri, 10 Feb 2006 15:25:18 -0500
Subject: [nycphp-talk] type casting function arguments
In-Reply-To: <000c01c62e7d$d8a883f0$0aa8a8c0@cliff>
References: <20060210200308.GE31026@desario.homelinux.net>
	<000c01c62e7d$d8a883f0$0aa8a8c0@cliff>
Message-ID: <6.2.3.4.2.20060210152422.02517e80@mail.optonline.net>

At 03:09 PM 2/10/2006, you wrote:
>So is it best to abandon ifs with === and !==?

No, this is in many/most cases the best way; see 
http://www.nyphp.org/phundamentals/variableevaluation.php


Michael Southwell, Vice President for Education
New York PHP
http://www.nyphp.com/training - In-depth PHP Training Courses 



From evdo.hsdpa at gmail.com  Sat Feb 11 09:58:56 2006
From: evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor)
Date: Sat, 11 Feb 2006 06:58:56 -0800
Subject: [nycphp-talk] Modifying Forum PHPBB Template
Message-ID: <1ec620e90602110658u490fd41bg12e2d315f0338898@mail.gmail.com>

Guys... i dont know the first thing about php.
Good.. got that outta the way :o)

how do i add a HTML LINK to the home page of
http://hacks.wirelessinternetcoverage.com
?

bob
http://hsdpa-coverage.com


From Consult at CovenantEDesign.com  Sat Feb 11 10:38:05 2006
From: Consult at CovenantEDesign.com (CED)
Date: Sat, 11 Feb 2006 10:38:05 -0500
Subject: [nycphp-talk] Modifying Forum PHPBB Template
References: <1ec620e90602110658u490fd41bg12e2d315f0338898@mail.gmail.com>
Message-ID: <004701c62f21$27215540$6601a8c0@ced>

hey bob,

You need to locate your current Themes index_body.tpl. 
Usually located under Templates -> "Name of your current Theme" -> index_body.tpl

In there you'll see familiar HTML. Somewhere between the end of the U_Search Table code block and the beginning of the next Table (the category layout table) insert another UNCLOSED table and utilize it to place your link in.

Example:

  <a href="{U_SEARCH_UNANSWERED}" class="gensmall">{L_SEARCH_UNANSWERED}</a></td>
  </tr>
</table>

<-- end of table -->
<-- beginning of my new 'link table' -->

<table font size="-4" width="100%" border="0"><tr><td font size="-4" valign="top"> 
<a href="http://www.albanycrpc.org/" target="_self"><b font size="-4">Home</b></a><br>
<a href="http://reformedpresbytery.org/ss_order.html" target="_self"><b font size="-4">Doctrine</b><br>
<a href="http://reformedpresbytery.org/about.html"><b font size="-4">About</b><br>
<a href="mailto:Webmaster at AlbanyCRPC.org" target="_self"><b font size="-4">Contact</b><br> 
</td>
<td width="100%" valign="top"> 

<--Notice The link table is not closed, do that at the bottom of the page -->

<table width="100%" cellpadding="2" cellspacing="1" border="0" class="forumline">

Result:

http://www.AlbanyCRPC.org/phpBB2/


HTH.

Edward J Prevost II
Senior Applications Specialist
SIS Project, Data Migration Lead
Albany Medical College
Albany Medical Center
Edward.Prevost at amc.edu
desk |  518.262.2743
cell |  518.331.5061





----- Original Message ----- 
From: "Robert Kim Wireless Internet Advisor" <evdo.hsdpa at gmail.com>
To: "NYPHP Talk" <talk at lists.nyphp.org>
Sent: Saturday, February 11, 2006 9:58 AM
Subject: [nycphp-talk] Modifying Forum PHPBB Template


Guys... i dont know the first thing about php.
Good.. got that outta the way :o)

how do i add a HTML LINK to the home page of
http://hacks.wirelessinternetcoverage.com
?

bob
http://hsdpa-coverage.com
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060211/a403ffdb/attachment.html>

From Consult at CovenantEDesign.com  Sat Feb 11 10:45:41 2006
From: Consult at CovenantEDesign.com (CED)
Date: Sat, 11 Feb 2006 10:45:41 -0500
Subject: [nycphp-talk] Modifying Forum PHPBB Template
References: <1ec620e90602110658u490fd41bg12e2d315f0338898@mail.gmail.com>
Message-ID: <007f01c62f22$36632aa0$6601a8c0@ced>

P.S. Bob,

By the looks of your mmemberlist, I';d turn on the visual image anti-spam
option in the administrator panel.


----- Original Message -----
From: "Robert Kim Wireless Internet Advisor" <evdo.hsdpa at gmail.com>
To: "NYPHP Talk" <talk at lists.nyphp.org>
Sent: Saturday, February 11, 2006 9:58 AM
Subject: [nycphp-talk] Modifying Forum PHPBB Template


Guys... i dont know the first thing about php.
Good.. got that outta the way :o)

how do i add a HTML LINK to the home page of
http://hacks.wirelessinternetcoverage.com
?

bob
http://hsdpa-coverage.com
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php





From evdo.hsdpa at gmail.com  Sat Feb 11 11:20:28 2006
From: evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor)
Date: Sat, 11 Feb 2006 08:20:28 -0800
Subject: [nycphp-talk] Modifying Forum PHPBB Template
In-Reply-To: <004701c62f21$27215540$6601a8c0@ced>
References: <1ec620e90602110658u490fd41bg12e2d315f0338898@mail.gmail.com>
	<004701c62f21$27215540$6601a8c0@ced>
Message-ID: <1ec620e90602110820j63faab14ledc25613b77a6bee@mail.gmail.com>

CED- HTH, Thank You Verrrry Much!... yes.. i'm just starting the forum
so it's got some work that needs to be done.

On 2/11/06, CED <Consult at covenantedesign.com> wrote:
> hey bob,
>
> You need to locate your current Themes index_body.tpl.
> Usually located under Templates -> "Name of your current Theme" ->
> index_body.tpl
>
> In there you'll see familiar HTML. Somewhere between the end of the U_Search
> Table code block and the beginning of the next Table (the category layout
> table) insert another UNCLOSED table and utilize it to place your link in.
>
> Example:
>
>   <a href="{U_SEARCH_UNANSWERED}"
> class="gensmall">{L_SEARCH_UNANSWERED}</a></td>
>   </tr>
> </table>
>
> <-- end of table -->
> <-- beginning of my new 'link table' -->
>
> <table font size="-4" width="100%" border="0"><tr><td font size="-4"
> valign="top">
> <a href="http://www.albanycrpc.org/" target="_self"><b font
> size="-4">Home</b></a><br>
> <a href="http://reformedpresbytery.org/ss_order.html"
> target="_self"><b font size="-4">Doctrine</b><br>
> <a href="http://reformedpresbytery.org/about.html"><b font
> size="-4">About</b><br>
> <a href="mailto:Webmaster at AlbanyCRPC.org" target="_self"><b font
> size="-4">Contact</b><br>
> </td>
> <td width="100%" valign="top">
>
> <--Notice The link table is not closed, do that at the bottom of the page
> -->
>
> <table width="100%" cellpadding="2" cellspacing="1" border="0"
> class="forumline">
>
> Result:
>
> http://www.AlbanyCRPC.org/phpBB2/
>
>
> HTH.
>
> Edward J Prevost II
> Senior Applications Specialist
> SIS Project, Data Migration Lead
> Albany Medical College
> Albany Medical Center
> Edward.Prevost at amc.edu
> desk |  518.262.2743
> cell |  518.331.5061
>
>
>
>
>
> ----- Original Message -----
> From: "Robert Kim Wireless Internet Advisor" <evdo.hsdpa at gmail.com>
> To: "NYPHP Talk" <talk at lists.nyphp.org>
> Sent: Saturday, February 11, 2006 9:58 AM
> Subject: [nycphp-talk] Modifying Forum PHPBB Template
>
> Guys... i dont know the first thing about php.
> Good.. got that outta the way :o)
>
> how do i add a HTML LINK to the home page of
> http://hacks.wirelessinternetcoverage.com
> ?
>
> bob
> http://hsdpa-coverage.com
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>


--
Robert Q Kim, Wireless Internet Advisor
http://hsdpa-coverage.com
http://www.antennacoverage.com/cell-repeater.html
https://www.antennacoverage.com/cell-phone-antenna-booster.html

2611 S. Pacific Coast Highway 101
Suite 102
Cardiff by the Sea, CA 92007
206 984 0880


From shiflett at php.net  Sat Feb 11 11:49:53 2006
From: shiflett at php.net (Chris Shiflett)
Date: Sat, 11 Feb 2006 11:49:53 -0500
Subject: [nycphp-talk] PHP Security: The Proper Choice Is to Do It Now
In-Reply-To: <000901c62b5c$d97e8190$68e4a144@Rubicon>
References: <000901c62b5c$d97e8190$68e4a144@Rubicon>
Message-ID: <43EE15B1.10404@php.net>

Hi Peter,

> The content of Chris Shiflett's Essential PHP Security from
> O'Reilly is poised right now to be put online as a Wiki.

Can you elaborate? There are no plans to do this, although I've 
considered enhancing the PHP Security Guide to be a condensed version of 
the book. This would require some negotiation with O'Reilly. :-)

There are a few free resources available online, including two free 
chapters and most of the code:

http://phpsecurity.org/

> It should accept about 90 days of moderated updates and then be
> openly promoted as the accepted, standardized "Using PHP
> Securely" guide for all PHP programmers.

Web application security is a young and evolving discipline, so any 
useful documentation should evolve as well.

> All PHP tutorials online that are old with insecure practices
> should have a simple one line link right under the tutorial
> title: "This tutorial may contain insecure techniques. See:
> [standardized, industry-supported secure PHP programming article]
> here before you begin."

I know what you mean. Ideally, online resources that teach bad practices 
would be corrected, but the sheer magnitude of this problem makes any 
progress difficult.

> Additionally, I have promoted in this venue before that the
> default php.ini from php.net should be a hardened .ini with shell
> and fopen functions disabled by default.

I definitely agree that allow_url_fopen should be disabled by default, 
at least in php.ini-recommended.

> PHP security needs to be further demystified.

Agreed. Given the right background, it's a pretty simple topic.

> Chris's guide is quite sufficient to help engender a positive
> change in the nature of how we all program PHP.

I sure hope so. :-)

Chris

--
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/


From vugranam at us.ibm.com  Sat Feb 11 12:43:23 2006
From: vugranam at us.ibm.com (Vugranam Sreedhar)
Date: Sat, 11 Feb 2006 12:43:23 -0500
Subject: [nycphp-talk] PHP Security: The Proper Choice Is to Do It Now
In-Reply-To: <43EE15B1.10404@php.net>
Message-ID: <OFB7E9C99F.8020246A-ON85257112.00610E4E-85257112.00615B80@us.ibm.com>

BTW, are there any code analysis or static analysis tools for automatically
detecting security problems that you describe in your book?
Zend IDE seem to do some shallow code analysis (at least that is the
impression I get when I read their IDE product description...)


With regards,

Sreedhar

-------------------------------------------------------------------------------------------------------------------

Research Staff Member
TJ Watson Research Center
T/L 863-7325
Ext: 914-784-7325



                                                                           
             Chris Shiflett                                                
             <shiflett at php.net                                             
             >                                                          To 
             Sent by:                  NYPHP Talk <talk at lists.nyphp.org>   
             talk-bounces at list                                          cc 
             s.nyphp.org                                                   
                                                                   Subject 
                                       Re: [nycphp-talk] PHP Security: The  
             02/11/2006 11:49          Proper Choice Is to Do It Now       
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
                NYPHP Talk                                                 
             <talk at lists.nyphp                                             
                   .org>                                                   
                                                                           
                                                                           




Hi Peter,

> The content of Chris Shiflett's Essential PHP Security from
> O'Reilly is poised right now to be put online as a Wiki.

Can you elaborate? There are no plans to do this, although I've
considered enhancing the PHP Security Guide to be a condensed version of
the book. This would require some negotiation with O'Reilly. :-)

There are a few free resources available online, including two free
chapters and most of the code:

http://phpsecurity.org/

> It should accept about 90 days of moderated updates and then be
> openly promoted as the accepted, standardized "Using PHP
> Securely" guide for all PHP programmers.

Web application security is a young and evolving discipline, so any
useful documentation should evolve as well.

> All PHP tutorials online that are old with insecure practices
> should have a simple one line link right under the tutorial
> title: "This tutorial may contain insecure techniques. See:
> [standardized, industry-supported secure PHP programming article]
> here before you begin."

I know what you mean. Ideally, online resources that teach bad practices
would be corrected, but the sheer magnitude of this problem makes any
progress difficult.

> Additionally, I have promoted in this venue before that the
> default php.ini from php.net should be a hardened .ini with shell
> and fopen functions disabled by default.

I definitely agree that allow_url_fopen should be disabled by default,
at least in php.ini-recommended.

> PHP security needs to be further demystified.

Agreed. Given the right background, it's a pretty simple topic.

> Chris's guide is quite sufficient to help engender a positive
> change in the nature of how we all program PHP.

I sure hope so. :-)

Chris

--
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php




From shiflett at php.net  Sat Feb 11 13:07:02 2006
From: shiflett at php.net (Chris Shiflett)
Date: Sat, 11 Feb 2006 13:07:02 -0500
Subject: [nycphp-talk] PHP Security: The Proper Choice Is to Do It Now
In-Reply-To: <OFB7E9C99F.8020246A-ON85257112.00610E4E-85257112.00615B80@us.ibm.com>
References: <OFB7E9C99F.8020246A-ON85257112.00610E4E-85257112.00615B80@us.ibm.com>
Message-ID: <43EE27C6.3090403@php.net>

Vugranam Sreedhar wrote:
> BTW, are there any code analysis or static analysis tools for
> automatically detecting security problems that you describe in
> your book?

There are penetration testing tools, and these are pretty easy to write 
yourself.

Analyzing code is more challenging than it sounds, because your task 
winds up being a substantial subset of what a code parser does - you 
have to be able to reliably interpret code and what it does, tracking 
data the entire time, and making educated guesses about potential 
safeguards. There are some recent PHP extensions written by Sara Golemon 
that can help, but it's still a very non-trivial task.

I do a fair number of PHP security audits, and most of my process still 
revolves around a manual inspection of the code.

Chris

--
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/


From vugranam at us.ibm.com  Sat Feb 11 13:16:14 2006
From: vugranam at us.ibm.com (Vugranam Sreedhar)
Date: Sat, 11 Feb 2006 13:16:14 -0500
Subject: [nycphp-talk] PHP Security: The Proper Choice Is to Do It Now
In-Reply-To: <43EE27C6.3090403@php.net>
Message-ID: <OF620B6576.BB60BDC1-ON85257112.00642053-85257112.00645D6A@us.ibm.com>

Interesting... I am also just starting to  look at the possibility of
annotating PHP code to improve analyzability of PHP code...Do you have
pointers to Sara's extentions?

With regards,

Sreedhar

-------------------------------------------------------------------------------------------------------------------

Research Staff Member
TJ Watson Research Center
T/L 863-7325
Ext: 914-784-7325



                                                                           
             Chris Shiflett                                                
             <shiflett at php.net                                             
             >                                                          To 
             Sent by:                  NYPHP Talk <talk at lists.nyphp.org>   
             talk-bounces at list                                          cc 
             s.nyphp.org                                                   
                                                                   Subject 
                                       Re: [nycphp-talk] PHP Security: The  
             02/11/2006 01:07          Proper Choice Is to Do It Now       
             PM                                                            
                                                                           
                                                                           
             Please respond to                                             
                NYPHP Talk                                                 
             <talk at lists.nyphp                                             
                   .org>                                                   
                                                                           
                                                                           




Vugranam Sreedhar wrote:
> BTW, are there any code analysis or static analysis tools for
> automatically detecting security problems that you describe in
> your book?

There are penetration testing tools, and these are pretty easy to write
yourself.

Analyzing code is more challenging than it sounds, because your task
winds up being a substantial subset of what a code parser does - you
have to be able to reliably interpret code and what it does, tracking
data the entire time, and making educated guesses about potential
safeguards. There are some recent PHP extensions written by Sara Golemon
that can help, but it's still a very non-trivial task.

I do a fair number of PHP security audits, and most of my process still
revolves around a manual inspection of the code.

Chris

--
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php




From shiflett at php.net  Sat Feb 11 13:21:13 2006
From: shiflett at php.net (Chris Shiflett)
Date: Sat, 11 Feb 2006 13:21:13 -0500
Subject: [nycphp-talk] PHP Security: The Proper Choice Is to Do It Now
In-Reply-To: <OF620B6576.BB60BDC1-ON85257112.00642053-85257112.00645D6A@us.ibm.com>
References: <OF620B6576.BB60BDC1-ON85257112.00642053-85257112.00645D6A@us.ibm.com>
Message-ID: <43EE2B19.7020808@php.net>

Vugranam Sreedhar wrote:
> Do you have pointers to Sara's extentions?

In order of relevance to this particular task:

http://php.net/parsekit
http://php.net/runkit

Chris

--
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/


From glenn310b at mac.com  Sat Feb 11 16:51:03 2006
From: glenn310b at mac.com (Glenn)
Date: Sat, 11 Feb 2006 16:51:03 -0500
Subject: [nycphp-talk] OT ? Insurance Question
Message-ID: <61ed8cf29791d562cc5969c7a2174213@mac.com>

Hi all,

I'm in the NYC, USA area.

I have a potential contracting job and I'm thinking
that I need to have some good errors and omissions
insurance, and other insurance as well.

This would be programming work in a mission-critical environment, and
in an industry with high liability.

I'm hoping some of the folks on this list can recommend
insurance companies that have a positive reputation.

Any other comments on the subject are also most welcome.

Best Regards,

Glenn



From mitch.pirtle at gmail.com  Sat Feb 11 18:57:32 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Sat, 11 Feb 2006 18:57:32 -0500
Subject: [nycphp-talk] Drupal junkie needed
In-Reply-To: <43EBCC17.80907@simmons.edu>
References: <330532b60602071352u6bd3ad60yaffa45ed9638881@mail.gmail.com>
	<43E9184C.1090601@wagner.edu>
	<330532b60602081739p169983a3ie77b747398bc376d@mail.gmail.com>
	<43EBC988.6080905@jiffycomp.com> <43EBCC17.80907@simmons.edu>
Message-ID: <330532b60602111557m213da9e0u872cfa5bc7d80076@mail.gmail.com>

On 2/9/06, Jonathan Hendler <hendler at simmons.edu> wrote:
> I'm with Matt on civicCRM.
> Maybe this will inspire Drupal and Joomla to merge. :)

Ok, so we did swap t-shirts in London, but this is getting out of hand ;-)

--
Mitch Pirtle
Joomla! Core Developer
Open Source Matters


From jonbaer at jonbaer.com  Sat Feb 11 20:26:23 2006
From: jonbaer at jonbaer.com (Jon Baer)
Date: Sat, 11 Feb 2006 20:26:23 -0500
Subject: [nycphp-talk] OT ? Insurance Question
In-Reply-To: <61ed8cf29791d562cc5969c7a2174213@mac.com>
References: <61ed8cf29791d562cc5969c7a2174213@mac.com>
Message-ID: <13AD1143-55A9-44DE-B279-5D1F9557AFC9@jonbaer.com>

It worries me that this even needs to be thought about these days ...  
Im interested in why the company that hires you for this would not  
provide such insurance ... I have read at least a dozen items this  
year alone which shows developers getting *sued* for just bad  
mouthing or giving a good opinion on why not to buy a product in  
their blogs.  While its not the same as a mission-critical situation  
I find it troublesome that you would need "online insurance" these  
days if you are programming via contract work :-\

- Jon

On Feb 11, 2006, at 4:51 PM, Glenn wrote:

> Hi all,
>
> I'm in the NYC, USA area.
>
> I have a potential contracting job and I'm thinking
> that I need to have some good errors and omissions
> insurance, and other insurance as well.
>
> This would be programming work in a mission-critical environment, and
> in an industry with high liability.
>
> I'm hoping some of the folks on this list can recommend
> insurance companies that have a positive reputation.
>
> Any other comments on the subject are also most welcome.
>
> Best Regards,
>
> Glenn
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



From george at omniti.com  Sat Feb 11 22:24:33 2006
From: george at omniti.com (George Schlossnagle)
Date: Sat, 11 Feb 2006 22:24:33 -0500
Subject: [nycphp-talk] OT ? Insurance Question
In-Reply-To: <13AD1143-55A9-44DE-B279-5D1F9557AFC9@jonbaer.com>
References: <61ed8cf29791d562cc5969c7a2174213@mac.com>
	<13AD1143-55A9-44DE-B279-5D1F9557AFC9@jonbaer.com>
Message-ID: <43EEAA71.4090307@omniti.com>

Jon Baer wrote:

>It worries me that this even needs to be thought about these days ...  
>Im interested in why the company that hires you for this would not  
>provide such insurance ... I have read at least a dozen items this  
>year alone which shows developers getting *sued* for just bad  
>mouthing or giving a good opinion on why not to buy a product in  
>their blogs.  While its not the same as a mission-critical situation  
>I find it troublesome that you would need "online insurance" these  
>days if you are programming via contract work :-\
>
All contracters should have errors and ommissions coverage.  It's been 
that way for as long as I've been contracting.

George


From adam at ecamp.net  Sun Feb 12 19:16:52 2006
From: adam at ecamp.net (Adam Helfgott)
Date: Sun, 12 Feb 2006 19:16:52 -0500
Subject: [nycphp-talk] Need a Full Time PHP Person
In-Reply-To: <43EEAA71.4090307@omniti.com>
References: <61ed8cf29791d562cc5969c7a2174213@mac.com>	<13AD1143-55A9-44DE-B279-5D1F9557AFC9@jonbaer.com>
	<43EEAA71.4090307@omniti.com>
Message-ID: <43EFCFF4.4090802@ecamp.net>

However, the job is in Seattle.  Anyone know anyone that is looking for 
a good long term job?  PHP/MySQL etc..
Great salary, full benefits, great company, great product.

Thanks,
Adam



From lists at zaunere.com  Sun Feb 12 19:27:25 2006
From: lists at zaunere.com (Hans Zaunere)
Date: Sun, 12 Feb 2006 19:27:25 -0500
Subject: [nycphp-talk] Need a Full Time PHP Person
In-Reply-To: <43EFCFF4.4090802@ecamp.net>
Message-ID: <007d01c63034$478b9340$6401a8c0@MZ>



Adam Helfgott wrote on Sunday, February 12, 2006 7:17 PM:
> However, the job is in Seattle.  Anyone know anyone that is looking for
> a good long term job?  PHP/MySQL etc..
> Great salary, full benefits, great company, great product.

Hi Adam,

Please post job related messages to the NYPHP-Jobs list,
http://www.nyphp.org/lists

Regards,



---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com




From cliff at pinestream.com  Sun Feb 12 21:12:31 2006
From: cliff at pinestream.com (cliff)
Date: Sun, 12 Feb 2006 21:12:31 -0500
Subject: [nycphp-talk] PHP Security: The Proper Choice Is to Do It Now
In-Reply-To: <OF620B6576.BB60BDC1-ON85257112.00642053-85257112.00645D6A@us.ibm.com>
References: <43EE27C6.3090403@php.net>
	<OF620B6576.BB60BDC1-ON85257112.00642053-85257112.00645D6A@us.ibm.com>
Message-ID: <20060213021231.M76410@pinestream.com>

Not for PHP, but see: http://www.ouncelabs.com/

On Sat, 11 Feb 2006 13:16:14 -0500, Vugranam Sreedhar wrote
> Interesting... I am also just starting to  look at the possibility of
> annotating PHP code to improve analyzability of PHP code...Do you 
> have pointers to Sara's extentions?
> 
> There are penetration testing tools, and these are pretty easy to write
> yourself.


From 1j0lkq002 at sneakemail.com  Mon Feb 13 03:12:55 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Mon, 13 Feb 2006 00:12:55 -0800
Subject: =?windows-1252?Q?Re=3A_=5Bnyphp-talk=5D_Are_you_promotin?=
	=?windows-1252?Q?g_someone_else=92s_site_without_even_knowin?=
	=?windows-1252?Q?g_it=3F?=
In-Reply-To: <f1dc81bb0602091305w78713b94xc12a6b6bef5da5ad@mail.gmail.com>
References: <f1dc81bb0602091305w78713b94xc12a6b6bef5da5ad@mail.gmail.com>
Message-ID: <20021-72584@sneakemail.com>

Ophir Prusak prusak-at-gmail.com |nyphp dev/internal group use| wrote:

>hi all,
>
>If you're running a search engine friendly URL mod for your bulletin
>board system, you should read this.
>
>If you're using FURL with IPB, you MUST read this.
>
>Basically, I just found out that the URL mod I've been running on our
>company forums is google spamming.
>
This is a more serious matter than Ohpir initially suggested, and I dug 
a bit deeper into it and wrote about it on ThreadWatch.org.

The code was distributed as a free mod for the forum software, and was 
advertised/promoted as a means of making a site more "search engine 
friendly". In actuality, not only did it spam google by embedding 
backlinks onto your website, but it did so by cloaking the site by 
user-agent, so that search engine spiders were fed a different version 
of your website than regular visitors. Since cloaking is a blatant 
violation of the Google terms of service,  this mod that was advertised 
as a way to make your site more search engine friendly could actually 
get your site banned.

*** I repeat: it inserted cloaking by user-agent, which would get your 
site banned by Google if discovered.

Of course code that ads/modifies mod-rewrite rules is never trivial 
code, so it is likely that many PHP coders would accept the rewrite 
rules and associated code without line-by-line review. Had they looked 
very closey at the code, they would have found not only the backlinks 
and the cloaking by user-agent, but a disclosure statement from the 
author in the comments. He appended this code to the top of your pages 
(note the randomization of the anchor text.. nice touch!):

foreach( explode( "\n", $this->ipsclass->vars['search_engine_bots'] ) as 
$bot )
{
list($ua, $n) = explode( "=", $bot );
    if ( $ua and $n ){
        $this->bot_map[ strtolower($ua) ] = $n;
        $this->bot_safe[] = preg_quote( $ua, "/" );
    }
}
if ( preg_match( '/('.implode( '|', $this->bot_safe ) .')/i', 
$_SERVER['HTTP_USER_AGENT'], $match ) )
{
    print "SEO Powered By FURL 3.1 By KiM (<a 
href='http://www.alt-man.co.uk'>Alternative Manchester</a>)<br/><br/>";
    $url1 = 
array("http://www.authors-website.tld","http://www.authors-website.tld");
    $keywords1 = array("","Alternative 
Manchester","Manchester","Events","Local","Punk Rock","Music","Punk"...);

    for($x;$x<=2;$x++){
        $randurl = rand(0,1);
        $rand1 = rand(0, 30);
        $rand2 = rand(0, 30);
        $rand3 = rand(0, 30);
        $rand4 = rand(0, 30);
        $url = 
"{$keywords1[$rand1]}-{$keywords1[$rand2]}-{$keywords1[$rand3]}-se.html";
        $this->ipsclass->skin['_wrapper'].= " - {$keywords1[$rand4]} - 
<a href='{$url1[$randurl]
}
/
{$url}'>{$keywords1[$rand1]} {$keywords1[$rand2]} {$keywords1[$rand3]}</a>";
}
}

This is a very good reminder of the dangers of adopting scripts. My 
original article on this is at http://www.threadwatch.org/node/5589

-=john andrews
http://www.seo-fun.com






From fields at hedge.net  Mon Feb 13 10:33:20 2006
From: fields at hedge.net (Adam Fields)
Date: Mon, 13 Feb 2006 10:33:20 -0500
Subject: [nycphp-talk] Are you promoting someone else?s site without even
	knowing it?
In-Reply-To: <20021-72584@sneakemail.com>
References: <f1dc81bb0602091305w78713b94xc12a6b6bef5da5ad@mail.gmail.com>
	<20021-72584@sneakemail.com>
Message-ID: <20060213153320.GE20391@lola.aquick.org>

On Mon, Feb 13, 2006 at 12:12:55AM -0800, inforequest wrote:
[...]
> This is a very good reminder of the dangers of adopting scripts. My 
> original article on this is at http://www.threadwatch.org/node/5589

Interesting that the last comment is Kim claiming that this was an
accident and he's removed the offending code from the latest version.



-- 
				- Adam

** Expert Technical Project and Business Management
**** System Performance Analysis and Architecture
****** [ http://www.everylastounce.com ]

[ http://www.aquick.org/blog ] ............ Blog
[ http://www.adamfields.com/resume.html ].. Experience
[ http://www.flickr.com/photos/fields ] ... Photos
[ http://www.aquicki.com/wiki ].............Wiki
[ http://del.icio.us/fields ] ............. Links





From aaron at aarond.com  Mon Feb 13 12:59:46 2006
From: aaron at aarond.com (aaron)
Date: Mon, 13 Feb 2006 12:59:46 -0500
Subject: [nycphp-talk] date variables
Message-ID: <43F0C912.2010509@aarond.com>

I'm working on an accounting text file parser, and they have a date 
variable that represents the number of days since 01/01/1968

I have to take that number and convert it mm/dd/yyyy

*Example*
Date variable:..: 3919
Summary...........: UniData's Internal Date & Time
Description.......: Date: 4/4/2005

Any suggestions on what php functions to use? I know some don't go 
further back than 1970.

thanks,
Aaron D.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060213/715f1145/attachment.html>

From aaron at aarond.com  Mon Feb 13 13:30:10 2006
From: aaron at aarond.com (aaron)
Date: Mon, 13 Feb 2006 13:30:10 -0500
Subject: [nycphp-talk] date variables
In-Reply-To: <43F0C912.2010509@aarond.com>
References: <43F0C912.2010509@aarond.com>
Message-ID: <43F0D032.70205@aarond.com>

Ok I figured it out. They had a constant I had to change.



aaron wrote:

> I'm working on an accounting text file parser, and they have a date 
> variable that represents the number of days since 01/01/1968
>
> I have to take that number and convert it mm/dd/yyyy
>
> *Example*
> Date variable:..: 3919
> Summary...........: UniData's Internal Date & Time
> Description.......: Date: 4/4/2005
>
> Any suggestions on what php functions to use? I know some don't go 
> further back than 1970.
>
> thanks,
> Aaron D.
>
>------------------------------------------------------------------------
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060213/a7856a1f/attachment.html>

From reto.kiefer at gmail.com  Mon Feb 13 14:46:14 2006
From: reto.kiefer at gmail.com (Reto M. Kiefer)
Date: Mon, 13 Feb 2006 20:46:14 +0100
Subject: [nycphp-talk] UTF8 Windows vs. Linux differences with PHP
Message-ID: <41c21c5d0602131146i4bc14566l@mail.gmail.com>

Dear all,

I have a question regarding the utf8 function in php. We have an
application that gets some UTF encoded data and stores it in a UTF
encoded Oracle 9 database. We are managing the encoding with
utf8-encode and utf8-decode.

But depending on wihcih platform we are running the application we
have different results.

PHP under Windows and Oracle under Windows everything works like a
charm. We can read and write from Oracle and receive from and send to 
UTF Frontend (Macromedia Flex btw.)

But on the staging system nothing works any more. PHP runs there under
Linux and Oracle under Solaris.

I am pretty sure it is not an Oracle problem but I do not know for
what to search in the php configuration in order to provide utf
encoding and decoding functionality under Linux...

Any suggestions are highly appreciated...

Thanks in advance and

best regards

Reto


From 1j0lkq002 at sneakemail.com  Mon Feb 13 16:05:08 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Mon, 13 Feb 2006 13:05:08 -0800
Subject: [nycphp-talk] Are you promoting someone else?s site without even
 knowing it?
In-Reply-To: <20060213153320.GE20391@lola.aquick.org>
References: <f1dc81bb0602091305w78713b94xc12a6b6bef5da5ad@mail.gmail.com>	<20021-72584@sneakemail.com>
	<20060213153320.GE20391@lola.aquick.org>
Message-ID: <12584-05334@sneakemail.com>

Adam Fields fields-at-hedge.net |nyphp dev/internal group use| wrote:

>On Mon, Feb 13, 2006 at 12:12:55AM -0800, inforequest wrote:
>[...]
>  
>
>>This is a very good reminder of the dangers of adopting scripts. My 
>>original article on this is at http://www.threadwatch.org/node/5589
>>    
>>
>
>Interesting that the last comment is Kim claiming that this was an
>accident and he's removed the offending code from the latest version.
>  
>
I don't know of any reason to suspect it was intentional. The backlinks 
are commonly understood to be valuable, hence the insertion in exchange 
for the free mod. And everybody knows that if you plastered 13 backlinks 
at the top of people's sites they would not like that... and probably 
not use the mod. Since IPB already maintains a bot class definition (for 
stats and the like) and Kim was already re-writing (internally 
redirecting)  the site at the header level....it might have made sense 
at the time to only serve the ugly links to search engine bots.

As much as "SEO" has become a household word for coders and script 
kiddies in the past year, it should really be left to the professionals. 
By its very nature, competitive webmastering seeks to define an existing 
practice standard (through observation) and then exploit loopholes left 
by the standard practice ("exploit market inefficiencies"). In other 
words, once everybody is talking about how backlinks help you rank, 
professional SEOs are on to the next thing and it isn't long before 
backlinks are penalized by the SEs as a means of eliminating spam (as 
happened in the fall of 2005).
I agree a problem is the tremendous amount of bad advice out there, but 
from what I can see it is also true for PHP coding, security, etc. 
Caveat emptor and all that.

-=john andrews
http://www.seo-fun.com



From 1j0lkq002 at sneakemail.com  Mon Feb 13 16:29:22 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Mon, 13 Feb 2006 13:29:22 -0800
Subject: [nycphp-talk] Are you promoting someone else?s site without even
 knowing it?
In-Reply-To: <12584-05334@sneakemail.com>
References: <f1dc81bb0602091305w78713b94xc12a6b6bef5da5ad@mail.gmail.com>	<20021-72584@sneakemail.com>	<20060213153320.GE20391@lola.aquick.org>
	<12584-05334@sneakemail.com>
Message-ID: <27579-74926@sneakemail.com>

By the way, the mod author has responded on ThreadWatch that he was 
unaware of the risks of the cloaking tactic  deployed, and has removed 
it from the latest version available for download. I took a look and the 
backlinks are gone, the cloaking is gone, and any mention of them is 
gone. I don't use IPB so I can't say it works or works well, but it 
appears to have been cleaned up. http://www.threadwatch.org/node/5589

Of course any mod that inserts code into the view controller and/or 
server level redirecting (re-writing) has to be watched very carefully. 
Lesson learned?

-=john andrews
http://www.seo-fun.com



From cahoyos at us.ibm.com  Mon Feb 13 20:31:44 2006
From: cahoyos at us.ibm.com (Carlos A Hoyos)
Date: Mon, 13 Feb 2006 20:31:44 -0500
Subject: [nycphp-talk] UTF8 Windows vs. Linux differences with PHP
In-Reply-To: <41c21c5d0602131146i4bc14566l@mail.gmail.com>
Message-ID: <OF2AEB1ABF.9A4FB16C-ON85257115.0006D007-85257115.00086614@us.ibm.com>


>
> PHP under Windows and Oracle under Windows everything works like a
> charm. We can read and write from Oracle and receive from and send to
> UTF Frontend (Macromedia Flex btw.)
>
> But on the staging system nothing works any more. PHP runs there under
> Linux and Oracle under Solaris.
>

Check the "default_charset" variable in php.ini (you can see it through
phpinfo()). If you're not setting the encoding type, the server might be
passing the default one in the header.

Carlos




From reto.kiefer at gmail.com  Tue Feb 14 04:11:19 2006
From: reto.kiefer at gmail.com (Reto M. Kiefer)
Date: Tue, 14 Feb 2006 10:11:19 +0100
Subject: [nycphp-talk] UTF8 Windows vs. Linux differences with PHP
In-Reply-To: <OF2AEB1ABF.9A4FB16C-ON85257115.0006D007-85257115.00086614@us.ibm.com>
References: <41c21c5d0602131146i4bc14566l@mail.gmail.com>
	<OF2AEB1ABF.9A4FB16C-ON85257115.0006D007-85257115.00086614@us.ibm.com>
Message-ID: <41c21c5d0602140111w20c6813u@mail.gmail.com>

Hello Carlos,

thank you for your answer, but it didn't solve the problem. I still
have a wrong behaviour in UTF8 Encoding and Decoding with PHP under
LInux and Windows.

Another suggestions are highly appreciated...

Thanks in advance

Reto

2006/2/14, Carlos A Hoyos <cahoyos at us.ibm.com>:
>
> >
> > PHP under Windows and Oracle under Windows everything works like a
> > charm. We can read and write from Oracle and receive from and send to
> > UTF Frontend (Macromedia Flex btw.)
> >
> > But on the staging system nothing works any more. PHP runs there under
> > Linux and Oracle under Solaris.
> >
>
> Check the "default_charset" variable in php.ini (you can see it through
> phpinfo()). If you're not setting the encoding type, the server might be
> passing the default one in the header.
>
> Carlos
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>


From artzi at avaya.com  Tue Feb 14 04:46:12 2006
From: artzi at avaya.com (Artzi, Yoav (Yoav))
Date: Tue, 14 Feb 2006 11:46:12 +0200
Subject: [nycphp-talk] PhP5.1.1 Multi threaded cross platform compilation
	issues
Message-ID: <AAB4B3D3CF0F454F98272CBE187FDE2F0A057EE5@is0004avexu1.global.avaya.com>

I have a problem that the PHP configure seems to automatically disable
pthreads when I compile on cross platfrom.
Host: i686-pentium-linux
Target: ppc-powerquicc-linux
 
More details about the target machine:
PowerQuicc II MPC8248
 
My configure file is as follows:
'./configure' \
'--cache-file=config.cache' \
'--disable-debug' \
'--enable-memory-limit' \
'--enable-pic' \
'--enable-safe-mode' \
'--enable-sockets' \
'--enable-track-vars' \
'--enable-trans-sid' \
'--enable-wddx' \
'--sysconfdir=/home/yoav/export/etc/appWeb' \
'--with-exec-dir=/home/yoav/export/etc/appWeb/exec' \
'--with-regex=system' \
'--with-pear' \
'--with-xml' \
'--with-xmlrpc' \
'--enable-bcmath' \
'--enable-calendar' \
'--enable-force-cgi-redirect' \
'--enable-ftp' \
'--enable-inline-optimization' \
'--enable-magic-quotes' \
'--disable-rpath' \
'--with-zlib' \
'--with-db' \
'--enable-embed=shared' \
'--with-gnu-ld' \
'--prefix=/home/yoav/export/etc/php5' \
'--target=ppc-powerquicc-linux' \
'--enable-maintainer-zts' \
'--with-tsrm-pthreads' 
 
Using ZTS as an application I would like to use (AppWeb) required it and
I must have a multi threaded version of PHP.
Looking at the configure file it seems that PHP automatically chooses to
disable pthreads once it detects it's a cross platform compilation.
 
Thanks,
 
Yoav.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060214/23422288/attachment.html>

From andrew at plexpod.com  Tue Feb 14 10:09:52 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Tue, 14 Feb 2006 10:09:52 -0500
Subject: [nycphp-talk] PhP5.1.1 Multi threaded cross platform compilation
	issues
In-Reply-To: <AAB4B3D3CF0F454F98272CBE187FDE2F0A057EE5@is0004avexu1.global.avaya.com>
References: <AAB4B3D3CF0F454F98272CBE187FDE2F0A057EE5@is0004avexu1.global.avaya.com>
Message-ID: <20060214150951.GZ3536@desario.homelinux.net>

On Tue, Feb 14, 2006 at 11:46:12AM +0200, Artzi, Yoav (Yoav) wrote:
> I have a problem that the PHP configure seems to automatically disable
> pthreads when I compile on cross platfrom.
> <snip>
> Looking at the configure file it seems that PHP automatically chooses to
> disable pthreads once it detects it's a cross platform compilation.

Thats curious.  I see the code in the configure script that you
describe.  It also makes an exception for netware.

I'd suggest asking the core developers as they'd know why pthreads is
handled that way in the case of cross compiling.

Any reason you *must* cross compile?  No chance of building on the
target?

HTH,
Andrew
-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From artzi at avaya.com  Tue Feb 14 10:14:02 2006
From: artzi at avaya.com (Artzi, Yoav (Yoav))
Date: Tue, 14 Feb 2006 17:14:02 +0200
Subject: [nycphp-talk] PhP5.1.1 Multi threaded cross platform
	compilationissues
Message-ID: <AAB4B3D3CF0F454F98272CBE187FDE2F0A09035F@is0004avexu1.global.avaya.com>

The target is this really weak box, an embedded system. I contacted
Zand, and they were a bit baffled, but they will look into it more and
we will see. I am not very optimistic right now, but there must be a
solution.

Yoav.

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Andrew Yochum
Sent: Tuesday, February 14, 2006 5:10 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] PhP5.1.1 Multi threaded cross platform
compilationissues

On Tue, Feb 14, 2006 at 11:46:12AM +0200, Artzi, Yoav (Yoav) wrote:
> I have a problem that the PHP configure seems to automatically disable

> pthreads when I compile on cross platfrom.
> <snip>
> Looking at the configure file it seems that PHP automatically chooses 
> to disable pthreads once it detects it's a cross platform compilation.

Thats curious.  I see the code in the configure script that you
describe.  It also makes an exception for netware.

I'd suggest asking the core developers as they'd know why pthreads is
handled that way in the case of cross compiling.

Any reason you *must* cross compile?  No chance of building on the
target?

HTH,
Andrew
--
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From andrew at plexpod.com  Tue Feb 14 10:22:20 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Tue, 14 Feb 2006 10:22:20 -0500
Subject: [nycphp-talk] PhP5.1.1 Multi threaded cross platform
	compilationissues
In-Reply-To: <AAB4B3D3CF0F454F98272CBE187FDE2F0A09035F@is0004avexu1.global.avaya.com>
References: <AAB4B3D3CF0F454F98272CBE187FDE2F0A09035F@is0004avexu1.global.avaya.com>
Message-ID: <20060214152219.GA3536@desario.homelinux.net>

On Tue, Feb 14, 2006 at 05:14:02PM +0200, Artzi, Yoav (Yoav) wrote:
> The target is this really weak box, an embedded system.

Thats a good reason.

> I contacted Zand, and they were a bit baffled, but they will look into
> it more and we will see. I am not very optimistic right now, but there
> must be a solution.

Have you tried modifying the configure script to add an exception for
your case and seeing what happens?  Its probably best to understand
*why* it does what it does, but its worth a shot.

You might try asking about this on the php internals list.

Andrew
-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From artzi at avaya.com  Tue Feb 14 10:24:16 2006
From: artzi at avaya.com (Artzi, Yoav (Yoav))
Date: Tue, 14 Feb 2006 17:24:16 +0200
Subject: [nycphp-talk] PhP5.1.1 Multi threaded cross
	platformcompilationissues
Message-ID: <AAB4B3D3CF0F454F98272CBE187FDE2F0A090375@is0004avexu1.global.avaya.com>

Tried that, the compliation doesn't pass, as expected. Where can I find
the internals list?
Thanks. 

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Andrew Yochum
Sent: Tuesday, February 14, 2006 5:22 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] PhP5.1.1 Multi threaded cross
platformcompilationissues

On Tue, Feb 14, 2006 at 05:14:02PM +0200, Artzi, Yoav (Yoav) wrote:
> The target is this really weak box, an embedded system.

Thats a good reason.

> I contacted Zand, and they were a bit baffled, but they will look into

> it more and we will see. I am not very optimistic right now, but there

> must be a solution.

Have you tried modifying the configure script to add an exception for
your case and seeing what happens?  Its probably best to understand
*why* it does what it does, but its worth a shot.

You might try asking about this on the php internals list.

Andrew
--
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From andrew at plexpod.com  Tue Feb 14 10:26:05 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Tue, 14 Feb 2006 10:26:05 -0500
Subject: [nycphp-talk] PhP5.1.1 Multi threaded cross
	platformcompilationissues
In-Reply-To: <AAB4B3D3CF0F454F98272CBE187FDE2F0A090375@is0004avexu1.global.avaya.com>
References: <AAB4B3D3CF0F454F98272CBE187FDE2F0A090375@is0004avexu1.global.avaya.com>
Message-ID: <20060214152605.GB3536@desario.homelinux.net>

On Tue, Feb 14, 2006 at 05:24:16PM +0200, Artzi, Yoav (Yoav) wrote:
> Tried that, the compliation doesn't pass, as expected. Where can I find
> the internals list?

http://www.php.net/mailing-lists.php#internals

Andrew
-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From prusak at gmail.com  Tue Feb 14 14:27:26 2006
From: prusak at gmail.com (Ophir Prusak)
Date: Tue, 14 Feb 2006 14:27:26 -0500
Subject: [nycphp-talk] oracle to buy zend ???
Message-ID: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>

I'm surprised on one has mentioned this yet:

http://www.informationweek.com/software/showArticle.jhtml?articleID=180200853&subSection=Open+Source

or just do a google news search for oracle and zend

ophir


From codebowl at gmail.com  Tue Feb 14 14:53:22 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Tue, 14 Feb 2006 14:53:22 -0500
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
Message-ID: <8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>

why does anyone have to buy out zend, isnt the company doing well enough on
it's own 2 feet?

I would hate to see the prices of Zend products jump if they were bought out
by oracle.  What would this mean for the products, would they continue
development or are they buying them out just to get the product they want to
continue?  I do not know much about this except that one paragraph but i
would hate to see zend sold, maybe a funding partnership or something but
zend has a great product line now and i see it continuously growing.

Thanks,

--
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060214/736e2df8/attachment.html>

From ken at secdat.com  Tue Feb 14 15:44:31 2006
From: ken at secdat.com (Kenneth Downs)
Date: Tue, 14 Feb 2006 15:44:31 -0500
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
	<8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>
Message-ID: <43F2412F.90802@secdat.com>

Joseph Crawford wrote:

> why does anyone have to buy out zend, isnt the company doing well 
> enough on it's own 2 feet?
>
To make both parties wealthier, that is always why it is done.  The 
owners of Zend cash out, and Oracle gets to steer the product where they 
will.

But of course right now it is only rumor.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 186 bytes
Desc: not available
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060214/111c22e6/attachment.vcf>

From cliff at pinestream.com  Tue Feb 14 15:51:06 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 14 Feb 2006 15:51:06 -0500
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <43F2412F.90802@secdat.com>
Message-ID: <003301c631a8$609397f0$0aa8a8c0@cliff>

And VCs require a "liquidity event," whether profitable or not, to
return capital to their partners.

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Kenneth Downs
Sent: Tuesday, February 14, 2006 3:45 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] oracle to buy zend ???


Joseph Crawford wrote:

> why does anyone have to buy out zend, isnt the company doing well
> enough on it's own 2 feet?
>
To make both parties wealthier, that is always why it is done.  The 
owners of Zend cash out, and Oracle gets to steer the product where they

will.

But of course right now it is only rumor.



From chsnyder at gmail.com  Tue Feb 14 15:57:06 2006
From: chsnyder at gmail.com (csnyder)
Date: Tue, 14 Feb 2006 15:57:06 -0500
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
	<8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>
Message-ID: <b76252690602141257w66c88fer17b826f51d6722f2@mail.gmail.com>

On 2/14/06, Joseph Crawford <codebowl at gmail.com> wrote:
> why does anyone have to buy out zend, isnt the company doing well enough on
> it's own 2 feet?
>
>  I would hate to see the prices of Zend products jump if they were bought
> out by oracle.  What would this mean for the products, would they continue
> development or are they buying them out just to get the product they want to
> continue?  I do not know much about this except that one paragraph but i
> would hate to see zend sold, maybe a funding partnership or something but
> zend has a great product line now and i see it continuously growing.
>

From the article:

> Andi Gutmans, CTO and a founder of Zend, said his firm "works well with
> Oracle and lots of other companies. We want to keep it that way. We see
> a whole lot of potential ahead of us" as an independent firm.

But let's say Oracle wants to buy Zend... does IBM put in their own
bid? Does Yahoo? And who is the publicist that started these "rumors"
anyway... ?

--
Chris Snyder
http://chxo.com/

From scott at crisscott.com  Tue Feb 14 16:00:20 2006
From: scott at crisscott.com (Scott Mattocks)
Date: Tue, 14 Feb 2006 16:00:20 -0500
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
	<8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>
Message-ID: <43F244E4.7070605@crisscott.com>

Joseph Crawford wrote:
> why does anyone have to buy out zend, isnt the company doing well enough on
> it's own 2 feet?

It isn't about saving Zend from financial ruin. Its about grabbing a 
hold of their market share and profits. If they buy Zend, they own all 
of the Zend products. Then they get the money from selling them and they 
can control the development. They can make Zend products really easy to 
integrate with Oracle. That means people will be more likely to buy 
Oracle products.

-- 
Scott Mattocks
http://www.crisscott.com


From matt at jiffycomp.com  Tue Feb 14 17:13:04 2006
From: matt at jiffycomp.com (Matt Morgan)
Date: Tue, 14 Feb 2006 17:13:04 -0500
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <43F244E4.7070605@crisscott.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>	<8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>
	<43F244E4.7070605@crisscott.com>
Message-ID: <43F255F0.4000301@jiffycomp.com>

Scott Mattocks wrote:

>Joseph Crawford wrote:
>  
>
>>why does anyone have to buy out zend, isnt the company doing well enough on
>>it's own 2 feet?
>>    
>>
>
>It isn't about saving Zend from financial ruin. Its about grabbing a 
>hold of their market share and profits. If they buy Zend, they own all 
>of the Zend products. Then they get the money from selling them and they 
>can control the development. They can make Zend products really easy to 
>integrate with Oracle. That means people will be more likely to buy 
>Oracle products.
>  
>
Honestly, it's another big-business vote for PHP, and (hopefully) for 
open-source. Despite some success, Oracle's never been quite as 
successful as they'd have liked on the applications front (did they ever 
succeed in buying PeopleSoft? I can't even remember). Not that I'm 
saying it's a good or bad thing overall, but if you were Oracle, 
wouldn't you like to have zillions of PHP programmers (and a few good 
ones :-)) able to write useful applications quickly for your platform?

I realize it's just a rumor, but Oracle sees the wind blowing away from 
java, toward PHP, like the rest of us. That's why it's a believable rumor.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060214/70fde47b/attachment.html>

From hendler at simmons.edu  Tue Feb 14 17:48:27 2006
From: hendler at simmons.edu (Jonathan Hendler)
Date: Tue, 14 Feb 2006 17:48:27 -0500
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <43F255F0.4000301@jiffycomp.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>	<8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>	<43F244E4.7070605@crisscott.com>
	<43F255F0.4000301@jiffycomp.com>
Message-ID: <43F25E3B.5080602@simmons.edu>

I hope they do better than Macromedia with Coldfusion who made 
Dreamweaver so easy to integrate. (not that I ever used Coldfusion)

Generally, I think it's a bad idea. I would like to see Oracle be 
friends with Zend, not BE Zend.
Maybe it is what Zend wants. Who wouldn't want a money so the rest of 
your life you can do "whatever you want" with your time? Maybe even 
something more important than PHP.... :/

I'm ignorant of the Zend Platform for Oracle.  But in principle, Oracle 
could save a lot of money if they just made easier-to-use tools.
They might as well donate tools that simplify everyones life to an open 
source platform. They should do it for Ruby, Python, IDEs. etc.
And they should build easy to use interfaces.
Maybe they should think about buying MySQL instead. :)


Matt Morgan wrote:

> Scott Mattocks wrote:
>
>>Joseph Crawford wrote:
>>  
>>
>>>why does anyone have to buy out zend, isnt the company doing well enough on
>>>it's own 2 feet?
>>>    
>>>
>>
>>It isn't about saving Zend from financial ruin. Its about grabbing a 
>>hold of their market share and profits. If they buy Zend, they own all 
>>of the Zend products. Then they get the money from selling them and they 
>>can control the development. They can make Zend products really easy to 
>>integrate with Oracle. That means people will be more likely to buy 
>>Oracle products.
>>  
>>
> Honestly, it's another big-business vote for PHP, and (hopefully) for 
> open-source. Despite some success, Oracle's never been quite as 
> successful as they'd have liked on the applications front (did they 
> ever succeed in buying PeopleSoft? I can't even remember). Not that 
> I'm saying it's a good or bad thing overall, but if you were Oracle, 
> wouldn't you like to have zillions of PHP programmers (and a few good 
> ones :-)) able to write useful applications quickly for your platform?
>
> I realize it's just a rumor, but Oracle sees the wind blowing away 
> from java, toward PHP, like the rest of us. That's why it's a 
> believable rumor.
>
>------------------------------------------------------------------------
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>



From mike.n at zend.com  Tue Feb 14 18:22:17 2006
From: mike.n at zend.com (Mike Naberezny)
Date: Tue, 14 Feb 2006 15:22:17 -0800
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <43F25E3B.5080602@simmons.edu>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>	<8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>	<43F244E4.7070605@crisscott.com>	<43F255F0.4000301@jiffycomp.com>
	<43F25E3B.5080602@simmons.edu>
Message-ID: <43F26629.3070603@zend.com>

Jonathan Hendler wrote:
> I'm ignorant of the Zend Platform for Oracle.  But in principle, Oracle 
> could save a lot of money if they just made easier-to-use tools.
> They might as well donate tools that simplify everyones life to an open 
> source platform. They should do it for Ruby, Python, IDEs. etc.
> And they should build easy to use interfaces.

You might want to check out Zend Core for Oracle.  It probably has a lot of 
what you'd like as far as easy installation with PHP and a web-based admin 
GUI.  Core is separate from Zend Platform and can be downloaded for free 
online.  There is also a paid support option via Zend Network.

http://www.zend.com/core/oracle

You can see the installation guide on that page to get an idea of what it's 
like.  Also, a Windows version was just released for developers on that platform.

Mike


From andrew at plexpod.com  Tue Feb 14 19:11:08 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Tue, 14 Feb 2006 19:11:08 -0500
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <43F26629.3070603@zend.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
	<8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>
	<43F244E4.7070605@crisscott.com>
	<43F255F0.4000301@jiffycomp.com> <43F25E3B.5080602@simmons.edu>
	<43F26629.3070603@zend.com>
Message-ID: <20060215001108.GJ25979@desario.homelinux.net>

On Tue, Feb 14, 2006 at 03:22:17PM -0800, Mike Naberezny wrote:
> Jonathan Hendler wrote:
> > I'm ignorant of the Zend Platform for Oracle.  But in principle, Oracle 
> > could save a lot of money if they just made easier-to-use tools.
> > They might as well donate tools that simplify everyones life to an open 
> > source platform. They should do it for Ruby, Python, IDEs. etc.
> > And they should build easy to use interfaces.
> 
> You might want to check out Zend Core for Oracle.  It probably has a lot of 
> what you'd like as far as easy installation with PHP and a web-based admin 
> GUI.  Core is separate from Zend Platform and can be downloaded for free 
> online.  There is also a paid support option via Zend Network.
> 
> http://www.zend.com/core/oracle

If I'm not mistaken, Zend Core for Oracle does not include Oracle
itself, only the extension & client libs....

So, there is also Oracle 10g Express Edition ... "free to develop,
deploy, and distribute ... for Developers working on PHP ...":
    http://www.oracle.com/technology/products/database/xe/index.html

Andrew
-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From krook at us.ibm.com  Tue Feb 14 19:27:01 2006
From: krook at us.ibm.com (Daniel Krook)
Date: Tue, 14 Feb 2006 16:27:01 -0800
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <20060215001108.GJ25979@desario.homelinux.net>
Message-ID: <OF60D4B3E6.405FBB77-ON88257116.000170A6-88257116.000277B7@us.ibm.com>

> > You might want to check out Zend Core for Oracle.  It 
> probably has a lot of 
> > what you'd like as far as easy installation with PHP and
> a web-based admin 
> > GUI.  Core is separate from Zend Platform and can be 
> downloaded for free 
> > online.  There is also a paid support option via Zend Network.
> > 
> > http://www.zend.com/core/oracle
> 
> If I'm not mistaken, Zend Core for Oracle does not include Oracle
> itself, only the extension & client libs....


I guess I should chime in here too... The Zend Core for IBM comes with the 
DB2 client which can be used to connect to the included Cloudscape (Derby) 
embedded database or any version of DB2. 

It can then be used with the newly released DB2 Express-C which is free 
(as in a free keg):
http://www.ibm.com/developerworks/db2/library/techarticle/dm-0602hutchison/



Daniel Krook, Content Tools Developer
Global Production Services - Tools, ibm.com

http://bluepages.redirect.webahead.ibm.com/
http://blogpages.redirect.webahead.ibm.com/
http://bookmarks.redirect.webahead.ibm.com/




From mike.n at zend.com  Tue Feb 14 20:23:21 2006
From: mike.n at zend.com (Mike Naberezny)
Date: Tue, 14 Feb 2006 17:23:21 -0800
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <20060215001108.GJ25979@desario.homelinux.net>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>	<8d9a42800602141153t73607022l2db967c83ab52fee@mail.gmail.com>	<43F244E4.7070605@crisscott.com>	<43F255F0.4000301@jiffycomp.com>
	<43F25E3B.5080602@simmons.edu>	<43F26629.3070603@zend.com>
	<20060215001108.GJ25979@desario.homelinux.net>
Message-ID: <43F28289.7060403@zend.com>

Andrew Yochum wrote:
> If I'm not mistaken, Zend Core for Oracle does not include Oracle
> itself, only the extension & client libs....

It's important to understand that Zend Core is actually more than just 
libraries.  Core is actually a PHP distribution from Zend, analogous to how 
Red Hat Enterprise Linux is a Linux distribution from Red Hat.

You wouldn't download PHP from php.net and then install Core on top of it. 
You'd just install Zend Core and that would give you PHP with Oracle or DB2 
support.  You have a database, then install Core, and you end up with a 
complete system.

The difference here is that Core follows a different release cycle than 
mainstream PHP.  It is actually built separately by Zend and is always tested 
against the bundled database libraries.

Similar to how the major Linux distributions work, Core doesn't contain all 
the bleeding-edge features of PHP 5.1.2.  However, the newer features are 
merged in as part of the release cycle after they are QA'ed against the rest 
of the Core distribution.  The aim of Zend Core is to provide a version of PHP 
for use with Oracle or DB2 that is stable and supported.

Mike


From danielc at analysisandsolutions.com  Tue Feb 14 21:15:48 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Tue, 14 Feb 2006 21:15:48 -0500
Subject: [nycphp-talk] UTF8 Windows vs. Linux differences with PHP
In-Reply-To: <41c21c5d0602131146i4bc14566l@mail.gmail.com>
References: <41c21c5d0602131146i4bc14566l@mail.gmail.com>
Message-ID: <20060215021547.GA1458@panix.com>

On Mon, Feb 13, 2006 at 08:46:14PM +0100, Reto M. Kiefer wrote:

> I am pretty sure it is not an Oracle problem but I do not know for
> what to search in the php configuration in order to provide utf
> encoding and decoding functionality under Linux...

Need to do tests to figure out where the issue is.

Is PHP messing it up before sending it to the database?
Is the databse messing it up?
Is PHP warping the data when it sends it to user output?

You need to make tests to check each scenario.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From reto.kiefer at gmail.com  Wed Feb 15 04:02:42 2006
From: reto.kiefer at gmail.com (Reto M. Kiefer)
Date: Wed, 15 Feb 2006 10:02:42 +0100
Subject: [nycphp-talk] UTF8 Windows vs. Linux differences with PHP
In-Reply-To: <20060215021547.GA1458@panix.com>
References: <41c21c5d0602131146i4bc14566l@mail.gmail.com>
	<20060215021547.GA1458@panix.com>
Message-ID: <41c21c5d0602150102v3c344a7dr@mail.gmail.com>

Hi,

thank you for your suggestions!

> Need to do tests to figure out where the issue is.
>
> Is PHP messing it up before sending it to the database?
> Is the databse messing it up?
> Is PHP warping the data when it sends it to user output?

I made some tests and discovered that the data is corrupted before
encoding i.e. the data si coming from Oracle in a bad encoding.
Further tests revealed that I am pretty sure a environment variable
for Oracle is missing.

So I will search in this direction or ask Oracle Support.

Thanks again

Reto


From lists at zaunere.com  Wed Feb 15 07:14:49 2006
From: lists at zaunere.com (Hans Zaunere)
Date: Wed, 15 Feb 2006 07:14:49 -0500
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <43F28289.7060403@zend.com>
Message-ID: <005801c63229$6cdf76b0$2603a8c0@MZ>



Mike Naberezny wrote on Tuesday, February 14, 2006 8:23 PM:
> Andrew Yochum wrote:
> > If I'm not mistaken, Zend Core for Oracle does not include Oracle
> > itself, only the extension & client libs....
> 
> It's important to understand that Zend Core is actually more than just
> libraries.  Core is actually a PHP distribution from Zend, analogous to
> how Red Hat Enterprise Linux is a Linux distribution from Red Hat.
> 
> You wouldn't download PHP from php.net and then install Core on top of it.
> You'd just install Zend Core and that would give you PHP with Oracle or
> DB2 support.  You have a database, then install Core, and you end up with
> a complete system.
> 
> The difference here is that Core follows a different release cycle than
> mainstream PHP.  It is actually built separately by Zend and is always
> tested against the bundled database libraries.
> 
> Similar to how the major Linux distributions work, Core doesn't contain
> all the bleeding-edge features of PHP 5.1.2.  However, the newer features
> are merged in as part of the release cycle after they are QA'ed against
> the rest of the Core distribution.  The aim of Zend Core is to provide a
> version of PHP for use with Oracle or DB2 that is stable and supported.

Would be nice to have a presentation on this, either at a meeting or at
NYPHPCon 2006, since I don't think this is very well known.  It'd be
interesting to hear about the specific advantages core provides, outside of
a web control panel and XYZ database libraries.


---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com




From danielc at analysisandsolutions.com  Wed Feb 15 08:18:45 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Wed, 15 Feb 2006 08:18:45 -0500
Subject: [nycphp-talk] oracle buys sleepy cat (berkeley db)
In-Reply-To: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
Message-ID: <20060215131845.GA5045@panix.com>

Howdy:

Well, Oracle's buying spree continues, with the acquisition of SleepyCat, 
the folks who make Berkeley DB.  BDB is also used by MySQL.  As mentioned 
earlier, Oracle also purchased Innobase, the makers of the InnoDB engine 
used by MySQL.

http://www.oracle.com/corporate/press/2006_feb/sleepycat.html
http://www.oracle.com/innodb/index.html

Wheeee!!!

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From 1j0lkq002 at sneakemail.com  Wed Feb 15 13:02:09 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Wed, 15 Feb 2006 10:02:09 -0800
Subject: [nycphp-talk] oracle buys InnoDB
In-Reply-To: <20060215131845.GA5045@panix.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
	<20060215131845.GA5045@panix.com>
Message-ID: <22518-02947@sneakemail.com>

"InnoDB is not a standalone database product: it is distributed as a 
part of the MySQL database. InnoDB's contractual relationship with MySQL 
comes up for renewal next year.  Oracle fully expects to negotiate an 
extension of that relationship."


From fields at hedge.net  Wed Feb 15 13:12:41 2006
From: fields at hedge.net (Adam Fields)
Date: Wed, 15 Feb 2006 13:12:41 -0500
Subject: [nycphp-talk] oracle buys InnoDB
In-Reply-To: <22518-02947@sneakemail.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
	<20060215131845.GA5045@panix.com> <22518-02947@sneakemail.com>
Message-ID: <20060215181240.GN25667@lola.aquick.org>

On Wed, Feb 15, 2006 at 10:02:09AM -0800, inforequest wrote:
> "InnoDB is not a standalone database product: it is distributed as a 
> part of the MySQL database. InnoDB's contractual relationship with MySQL 
> comes up for renewal next year.  Oracle fully expects to negotiate an 
> extension of that relationship."

"Nice database backend you've got here. Be a shame if anything bad
happened to it."

-- 
				- Adam

** Expert Technical Project and Business Management
**** System Performance Analysis and Architecture
****** [ http://www.everylastounce.com ]

[ http://www.aquick.org/blog ] ............ Blog
[ http://www.adamfields.com/resume.html ].. Experience
[ http://www.flickr.com/photos/fields ] ... Photos
[ http://www.aquicki.com/wiki ].............Wiki
[ http://del.icio.us/fields ] ............. Links





From mike.n at zend.com  Wed Feb 15 13:29:48 2006
From: mike.n at zend.com (Mike Naberezny)
Date: Wed, 15 Feb 2006 10:29:48 -0800
Subject: [nycphp-talk] oracle to buy zend ???
In-Reply-To: <005801c63229$6cdf76b0$2603a8c0@MZ>
References: <005801c63229$6cdf76b0$2603a8c0@MZ>
Message-ID: <43F3731C.3080607@zend.com>

Hans Zaunere wrote:
> Would be nice to have a presentation on this, either at a meeting or at
> NYPHPCon 2006, since I don't think this is very well known.  It'd be
> interesting to hear about the specific advantages core provides, outside of
> a web control panel and XYZ database libraries.

I'll talk to some people here and we'll be sure to get back to you on it.

Mike


From cliff at pinestream.com  Wed Feb 15 13:42:46 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Wed, 15 Feb 2006 13:42:46 -0500
Subject: [nycphp-talk] Query result state strategy
Message-ID: <00a501c6325f$9cf56e50$0aa8a8c0@cliff>

Lately, it seems like I need to execute queries twice -- the first time
to gather data and set actions for the presentation layer. That's fine.
 
What disturbs me is that I need to do this all over again when receiving
actionable input, going along with the theory that all input from the
client is evil unless proved otherwise. Thank you Chris...
 
So now I need to run a query again, check to see if the particular
action is allowed based on the data gathered and than act upon it if the
action is valid. The joy of an open client-server system.
 
Do I just accept this and get on with it? Do I maintain the query
results and state info with sessions, which I have avoided to date
because I believe sessions have their own scalability baggage? Comments?
 
Cliff Hirsch
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060215/3d0136bd/attachment.html>

From shiflett at php.net  Wed Feb 15 13:47:01 2006
From: shiflett at php.net (Chris Shiflett)
Date: Wed, 15 Feb 2006 13:47:01 -0500
Subject: [nycphp-talk] Query result state strategy
In-Reply-To: <00a501c6325f$9cf56e50$0aa8a8c0@cliff>
References: <00a501c6325f$9cf56e50$0aa8a8c0@cliff>
Message-ID: <43F37725.1090704@php.net>

Hi Cliff,

Cliff Hirsch wrote:
> Lately, it seems like I need to execute queries twice -- the first
> time to gather data and set actions for the presentation layer.
> That's fine.
>  
> What disturbs me is that I need to do this all over again when
> receiving actionable input, going along with the theory that all
> input from the client is evil unless proved otherwise. Thank you
> Chris.

You're welcome? :-)

Can you give us a more concrete example? It seems likely that you can 
avoid having to query the database multiple times just to be able to 
maintain a healthy level of suspicion.

Chris

-- 
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/


From cliff at pinestream.com  Wed Feb 15 14:19:14 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Wed, 15 Feb 2006 14:19:14 -0500
Subject: [nycphp-talk] Query result state strategy
In-Reply-To: <43F37725.1090704@php.net>
Message-ID: <00b901c63264$b51fb3f0$0aa8a8c0@cliff>

Thanks for the reply Chris -- see, I've become a believer...

Ok, so here's one case:

I display a bunch of rows. Each row has several fields, including a few
status fields (some displayed, some not).

Various actions (buttons) are allowed based on combinations of the
status fields. (As a side-note, this relates to the state table thread I
started last week). I disable buttons that are not allowed, so only
valid actions can be submitted, but it would be trivial to submit a
button that has been disabled.

When I receive a button submission for a particular row, I query the row
from the db, and check to see if this action is allowed based upon the
status fields.

If it were as simple as checking for a userid, I could do a single step
update on the row using something like WHERE row = submittedrowid and
userid = guyloggedin. In fact, I will probably double check the logic
flow to see if the validation and DB update can be compressed into a
single query. Like "UPDATE SET price = price + submission WHERE fields
meet conditions" Failed update == failed validation, or something like
that. But the button actions are based on a complex set of status codes
and launch a flurry of processes. So this scenario might not work.

Stream of consciousness going here... As I think about this, it seems
like I can still only compress a DB read and write to a single update --
with a lot of work.

What about some sort of encrypted key stored in a hidden field on the
client side? I could encrypt all the possible options and then cross
check the submission against the encrypted value. I guess that's just
shifting state info to the client -- is that safe if its encrypted?

Thoughts?

Hi Cliff,

Cliff Hirsch wrote:
> Lately, it seems like I need to execute queries twice -- the first 
> time to gather data and set actions for the presentation layer. That's

> fine.
>  
> What disturbs me is that I need to do this all over again when 
> receiving actionable input, going along with the theory that all input

> from the client is evil unless proved otherwise. Thank you Chris.

You're welcome? :-)

Can you give us a more concrete example? It seems likely that you can 
avoid having to query the database multiple times just to be able to 
maintain a healthy level of suspicion.

Chris



From 1j0lkq002 at sneakemail.com  Wed Feb 15 17:34:26 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Wed, 15 Feb 2006 14:34:26 -0800
Subject: [nycphp-talk] PHP Security or Windows Security or just Security?
In-Reply-To: <6.2.3.4.2.20060204172049.02527690@mail.optonline.net>
References: <20060204195618.13E1DEDAEE0@mailspool2.panix.com>	<1ec620e90602041343h42c423fbp6a7ba9aa121c9ccd@mail.gmail.com>
	<6.2.3.4.2.20060204172049.02527690@mail.optonline.net>
Message-ID: <31538-13555@sneakemail.com>

Sometimes it is interesting to contrast reporting "styles" (sometimes 
called spin).

PHP is the problem:
http://news.netcraft.com/archives/2006/01/31/php_apps_a_growing_target_for_hackers.html

Windows is the problem:
http://news.com.com/AMD+forums+laid+low+by+Windows+exploit/2100-7349_3-6033068.html

most of us know that BUDGETS and MANAGERS are the real problem ;-)  but 
still, when a PHP app is loosly coded, or a script kiddie adopts a PHP 
app and fails to patch it, or a business operates non-securely such that 
phishing approach works really, really well, why blame "technology" ? 
Because it is so easy... a victimless crime :-)

-=john andrews
http://www.seo-fun.com








From jonbaer at jonbaer.com  Wed Feb 15 17:54:10 2006
From: jonbaer at jonbaer.com (Jon Baer)
Date: Wed, 15 Feb 2006 17:54:10 -0500
Subject: [nycphp-talk] Todays quote of the day (MySQL)
Message-ID: <E4B2CFD4-6ACD-44A3-B091-9DB70A1C88A5@jonbaer.com>

Direct from the dolphin's mouth ...

http://www.forbes.com/home/technology/2006/02/15/oracle-yahoo-google- 
cz_vmb_0215Mysql.html

How do Oracle?s recent open source acquisitions affect MySQL?
"These acquisitions give us credibility. People are wondering why  
Oracle has to buy all of this technology."

BTW, 5.1.6 is now available for testing/tryout ... http:// 
dev.mysql.com/downloads/mysql/5.1.html

- Jon 

From cahoyos at us.ibm.com  Wed Feb 15 17:58:46 2006
From: cahoyos at us.ibm.com (Carlos A Hoyos)
Date: Wed, 15 Feb 2006 17:58:46 -0500
Subject: [nycphp-talk] Query result state strategy
In-Reply-To: <00b901c63264$b51fb3f0$0aa8a8c0@cliff>
Message-ID: <OF58C114B9.3088F485-ON85257116.007C20B2-85257116.007E3AF8@us.ibm.com>

> What about some sort of encrypted key stored in a hidden field on the
> client side? I could encrypt all the possible options and then cross
> check the submission against the encrypted value. I guess that's just
> shifting state info to the client -- is that safe if its encrypted?

You can pass a bunch of hidden variables and a hash of these variables with
a secret key to validate if they were tampered with. And if you do it
correctly, you can achieve some security with it.
This, btw, is used in simple integration schemas by some merchant gateways
to validate submitted information: You send your data (cc, amount, etc...)
and an md5 hash of the concatenation of all these variables and a secret
key. On their side, they calculate the hash again (only you and them can
know the key), and if it doesn't match, parameters were tampered.

Keep in mind most applications should be ok handling the query to the
database. Since you already need the database connection for the update,
and with a query cache, the overhead of the second query might be
negligible and your code might be much simpler.

Carlos



From cliff at pinestream.com  Wed Feb 15 18:07:50 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Wed, 15 Feb 2006 18:07:50 -0500
Subject: [nycphp-talk] Query result state strategy
In-Reply-To: <OF58C114B9.3088F485-ON85257116.007C20B2-85257116.007E3AF8@us.ibm.com>
Message-ID: <000f01c63284$a4bfc160$0aa8a8c0@cliff>

Carlos:

Sounds like an interesting approach. I like it for scaling out.

But you make an interesting point regarding the second query -- caching
could reduce the load significantly. And regarding simplicity, I've been
leaning more and more towards just getting the application finished and
worrying about performance later. I hate to admit that, but planning for
a hundred million users seems senseless if the application is never
finished.

> What about some sort of encrypted key stored in a hidden field on the 
> client side? I could encrypt all the possible options and then cross 
> check the submission against the encrypted value. I guess that's just 
> shifting state info to the client -- is that safe if its encrypted?

You can pass a bunch of hidden variables and a hash of these variables
with a secret key to validate if they were tampered with. And if you do
it correctly, you can achieve some security with it. This, btw, is used
in simple integration schemas by some merchant gateways to validate
submitted information: You send your data (cc, amount, etc...) and an
md5 hash of the concatenation of all these variables and a secret key.
On their side, they calculate the hash again (only you and them can know
the key), and if it doesn't match, parameters were tampered.

Keep in mind most applications should be ok handling the query to the
database. Since you already need the database connection for the update,
and with a query cache, the overhead of the second query might be
negligible and your code might be much simpler.

Carlos



From krook at us.ibm.com  Wed Feb 15 18:09:48 2006
From: krook at us.ibm.com (Daniel Krook)
Date: Wed, 15 Feb 2006 15:09:48 -0800
Subject: [nycphp-talk] Todays quote of the day (MySQL)
In-Reply-To: <E4B2CFD4-6ACD-44A3-B091-9DB70A1C88A5@jonbaer.com>
Message-ID: <OFD9EB0FED.80E4A2D8-ON88257116.007EF1C3-88257116.007F3D40@us.ibm.com>

> Direct from the dolphin's mouth ...
> 
[snip]
> 
> - Jon 

This earlier quote from Mickos made me smile: 

"MySQL freely admits that its database is totally different from the 
high-end offerings of IBM and Oracle. It's trying to be the Ikea of the 
database world: cheap, needs some assembly, but has a sleek, modern design 
and does the job. "If you are equipping some very fine room for your old 
relatives, maybe you buy antique furniture. But everyone else uses Ikea," 
Mickos says."

http://www.businessweek.com/technology/content/feb2006/tc20060206_918648.htm




Daniel Krook, Content Tools Developer
Global Production Services - Tools, ibm.com

http://bluepages.redirect.webahead.ibm.com/
http://blogpages.redirect.webahead.ibm.com/
http://bookmarks.redirect.webahead.ibm.com/



From chsnyder at gmail.com  Thu Feb 16 08:57:23 2006
From: chsnyder at gmail.com (csnyder)
Date: Thu, 16 Feb 2006 08:57:23 -0500
Subject: [nycphp-talk] PHP Security or Windows Security or just Security?
In-Reply-To: <31538-13555@sneakemail.com>
References: <20060204195618.13E1DEDAEE0@mailspool2.panix.com>
	<1ec620e90602041343h42c423fbp6a7ba9aa121c9ccd@mail.gmail.com>
	<6.2.3.4.2.20060204172049.02527690@mail.optonline.net>
	<31538-13555@sneakemail.com>
Message-ID: <b76252690602160557w5fdb3c94paed32eb965b5fbf@mail.gmail.com>

On 2/15/06, inforequest <1j0lkq002 at sneakemail.com> wrote:
> Sometimes it is interesting to contrast reporting "styles" (sometimes
> called spin).
>
> PHP is the problem:
> http://news.netcraft.com/archives/2006/01/31/php_apps_a_growing_target_for_hackers.html
>
> Windows is the problem:
> http://news.com.com/AMD+forums+laid+low+by+Windows+exploit/2100-7349_3-6033068.html
>
> most of us know that BUDGETS and MANAGERS are the real problem ;-)  but
> still, when a PHP app is loosly coded, or a script kiddie adopts a PHP
> app and fails to patch it, or a business operates non-securely such that
> phishing approach works really, really well, why blame "technology" ?
> Because it is so easy... a victimless crime :-)
>
> -=john andrews
> http://www.seo-fun.com

Eh, networked computers are the problem. We would all be perfectly
safe if we could just learn to get by without the internet. When was
the last time your fax machine got a virus, hmmm?


--
Chris Snyder
http://chxo.com/

From 1j0lkq002 at sneakemail.com  Thu Feb 16 12:52:50 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Thu, 16 Feb 2006 09:52:50 -0800
Subject: [nycphp-talk] PHP Security or Windows Security or just Security?
In-Reply-To: <b76252690602160557w5fdb3c94paed32eb965b5fbf@mail.gmail.com>
References: <20060204195618.13E1DEDAEE0@mailspool2.panix.com>	<1ec620e90602041343h42c423fbp6a7ba9aa121c9ccd@mail.gmail.com>	<6.2.3.4.2.20060204172049.02527690@mail.optonline.net>	<31538-13555@sneakemail.com>
	<b76252690602160557w5fdb3c94paed32eb965b5fbf@mail.gmail.com>
Message-ID: <24195-06971@sneakemail.com>

csnyder chsnyder-at-gmail.com |nyphp dev/internal group use| wrote:

>On 2/15/06, inforequest <1j0lkq002 at sneakemail.com> wrote:
>  
>
>>Sometimes it is interesting to contrast reporting "styles" (sometimes
>>called spin).
>>
>>PHP is the problem:
>>http://news.netcraft.com/archives/2006/01/31/php_apps_a_growing_target_for_hackers.html
>>
>>Windows is the problem:
>>http://news.com.com/AMD+forums+laid+low+by+Windows+exploit/2100-7349_3-6033068.html
>>
>>Eh, networked computers are the problem. We would all be perfectly
>>safe if we could just learn to get by without the internet. When was
>>the last time your fax machine got a virus, hmmm?
>>
>>
>>--
>>Chris Snyder
>>http://chxo.com/
>>    
>>
Fax machine?


From tedd at sperling.com  Thu Feb 16 13:01:18 2006
From: tedd at sperling.com (tedd)
Date: Thu, 16 Feb 2006 13:01:18 -0500
Subject: [nycphp-talk] PHP Security or Windows Security or just Security?
In-Reply-To: <24195-06971@sneakemail.com>
References: <20060204195618.13E1DEDAEE0@mailspool2.panix.com>
	<1ec620e90602041343h42c423fbp6a7ba9aa121c9ccd@mail.gmail.com>
	<6.2.3.4.2.20060204172049.02527690@mail.optonline.net>
	<31538-13555@sneakemail.com>
	<b76252690602160557w5fdb3c94paed32eb965b5fbf@mail.gmail.com>
	<24195-06971@sneakemail.com>
Message-ID: <p06230907c01a6e281f78@[192.168.0.100]>

>When was the last time your fax machine got a virus, hmmm?

It coughed a couple times -- you think that was it?

tedd
-- 
--------------------------------------------------------------------------------
http://sperling.com/


From prusak at gmail.com  Thu Feb 16 22:56:24 2006
From: prusak at gmail.com (Ophir Prusak)
Date: Thu, 16 Feb 2006 22:56:24 -0500
Subject: [nycphp-talk] Query result state strategy
In-Reply-To: <00a501c6325f$9cf56e50$0aa8a8c0@cliff>
References: <00a501c6325f$9cf56e50$0aa8a8c0@cliff>
Message-ID: <f1dc81bb0602161956k65709f2dsac44a155d1124a5c@mail.gmail.com>

to quote chris -
"security isn't black and white - it's shades of gray"

but to the point - I'd have to add, it really depends on how big of a
deal is it if someone does something they're not supposed to do.

If this is an ecommerce site - then obviously security is a very big deal.
if it's a bulletin board on an intranet ...

well, you get the point.

On 2/15/06, Cliff Hirsch <cliff at pinestream.com> wrote:
>
> Lately, it seems like I need to execute queries twice -- the first time to
> gather data and set actions for the presentation layer. That's fine.
>
> What disturbs me is that I need to do this all over again when receiving
> actionable input, going along with the theory that all input from the client
> is evil unless proved otherwise. Thank you Chris...
>
> So now I need to run a query again, check to see if the particular action is
> allowed based on the data gathered and than act upon it if the action is
> valid. The joy of an open client-server system.
>
> Do I just accept this and get on with it? Do I maintain the query results
> and state info with sessions, which I have avoided to date because I believe
> sessions have their own scalability baggage? Comments?
>
> Cliff Hirsch
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>


From shiflett at php.net  Fri Feb 17 09:21:57 2006
From: shiflett at php.net (Chris Shiflett)
Date: Fri, 17 Feb 2006 09:21:57 -0500
Subject: [nycphp-talk] Query result state strategy
In-Reply-To: <00b901c63264$b51fb3f0$0aa8a8c0@cliff>
References: <00b901c63264$b51fb3f0$0aa8a8c0@cliff>
Message-ID: <43F5DC05.2080204@php.net>

Hi Cliff,

> I've become a believer.

Wonderful. :-)

> I disable buttons that are not allowed, so only valid actions can
> be submitted, but it would be trivial to submit a button that has
> been disabled.
> 
> When I receive a button submission for a particular row, I query
> the row from the db, and check to see if this action is allowed
> based upon the status fields.

Stated differently, you're trying to be sure that the status fields you 
included in the form haven't been tampered with, right?

Carlos's suggestion is good for helping to verify integrity. It would 
also be pretty easy to modify your approach to do this instead of query 
the database. I have no idea what your SQL query looks like (which is a 
good thing), but it's a good candidate for hashing, because it 
presumably contains all of the data you're checking, you already take 
the time to construct the string, and it's something you can reliably 
reproduce.

Hope that helps.

Chris

--
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/


From cliff at pinestream.com  Fri Feb 17 15:43:27 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Fri, 17 Feb 2006 15:43:27 -0500
Subject: [nycphp-talk] index.php ignored on new Mac Mini server setup
Message-ID: <002801c63402$ce364580$0aa8a8c0@cliff>

I am bringing up a MAC mini as a web server. Thought it would be an easy
and interesting way to learn Unix. And a good way to piss off my kids --
"sorry kids, no garageshop or imovie, this is strictly a web server, go
play with your Pentium II. Silly me, I don't know ls from cd. I'll never
badmouth Bill again. 
 
Tried Xampp; got fairly far, but scrapped it. Now I just have the latest
installs of MySQL and PHP5.
 
Apache is running (the native version with OSX Tiger).
MySQL 5 is running.
PHP 5.x is running.
 
PHPMyAdmin gave birth and works just fine.
 
http://localhost/blahblah/test.php works just fine and just only
phpinfo()
 
So here's the wierd part:
 
http://localhost/blahblah/index.php simply comes up empty even thought
it is identical to test.php -- just phpinfo(). No error message, no
nothing. Just blank.
 
test, test2, idx, index2, etc. .php work just fine and output phpinfo()
as expected. It is only index.php that does nothing.
 
Ideas?
 
Cliff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060217/192238dd/attachment.html>

From cliff at pinestream.com  Fri Feb 17 15:48:38 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Fri, 17 Feb 2006 15:48:38 -0500
Subject: [nycphp-talk] Query result state strategy
In-Reply-To: <43F5DC05.2080204@php.net>
Message-ID: <003201c63403$87421900$0aa8a8c0@cliff>

Thanks to all. Hashing is giving me all kinds of ideas. It seems like a
great way to store limited state info on the client side. There goes
another weekend.
Cliff

Carlos's suggestion is good for helping to verify integrity. It would 
also be pretty easy to modify your approach to do this instead of query 
the database. I have no idea what your SQL query looks like (which is a 
good thing), but it's a good candidate for hashing, because it 
presumably contains all of the data you're checking, you already take 
the time to construct the string, and it's something you can reliably 
reproduce.

Hope that helps.
Chris



From hendler at simmons.edu  Fri Feb 17 16:04:08 2006
From: hendler at simmons.edu (Jonathan Hendler)
Date: Fri, 17 Feb 2006 16:04:08 -0500
Subject: [nycphp-talk] index.php ignored on new Mac Mini server setup
In-Reply-To: <002801c63402$ce364580$0aa8a8c0@cliff>
References: <002801c63402$ce364580$0aa8a8c0@cliff>
Message-ID: <43F63A48.8090900@simmons.edu>

First guess - permissions.
Next, either there is .htaccess , mod_rewrite, doing something.
Lastly it could be the order of the indexes available in the httpd.conf 
- so if you have a index.html it will chose that first unless you access 
index.php directly.



Cliff Hirsch wrote:

>  
> http://localhost/blahblah/test.php works just fine and just only phpinfo()
>  
> So here's the wierd part:
>  
> http://localhost/blahblah/index.php simply comes up empty even thought 
> it is identical to test.php -- just phpinfo(). No error message, no 
> nothing. Just blank.
>  
> test, test2, idx, index2, etc. .php work just fine and output 
> phpinfo() as expected. It is only index.php that does nothing.
>  
> Ideas?
>  
> Cliff
>
>------------------------------------------------------------------------
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>



From alex at pilgrimstudio.com  Fri Feb 17 16:13:42 2006
From: alex at pilgrimstudio.com (Alexander)
Date: Fri, 17 Feb 2006 14:13:42 -0700
Subject: [nycphp-talk] Redirect
Message-ID: <2146.216.223.218.202.1140210822.squirrel@pilgrimstudio.com>

Hello,

I was wondering if anybody know how to redirect client or show him nice
html-page, after download complete?

Download is forced through headers:

------

header("Content-disposition: attachment; filename=$fname");
header("Content-Type: application/force-download");
header("Content-Transfer-Encoding: binary");
header("Content-Length: ".filesize($fname));
header("Pragma: no-cache");
header("Expires: 0");

...
-------

if it matters...



-- 
Best regards,
Alexander





From cliff at pinestream.com  Fri Feb 17 16:16:25 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Fri, 17 Feb 2006 16:16:25 -0500
Subject: [nycphp-talk] index.php ignored on new Mac Mini server setup
In-Reply-To: <43F63A48.8090900@simmons.edu>
Message-ID: <003301c63407$68f48ab0$0aa8a8c0@cliff>

Permissions did the trick. Many thanks. One of these days, I owe
everyone on this list a beer...

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Jonathan Hendler
Sent: Friday, February 17, 2006 4:04 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] index.php ignored on new Mac Mini server setup


First guess - permissions.
Next, either there is .htaccess , mod_rewrite, doing something. Lastly
it could be the order of the indexes available in the httpd.conf 
- so if you have a index.html it will chose that first unless you access

index.php directly.



From 1j0lkq002 at sneakemail.com  Fri Feb 17 16:31:10 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Fri, 17 Feb 2006 13:31:10 -0800
Subject: [nycphp-talk] index.php ignored on new Mac Mini server setup
In-Reply-To: <003301c63407$68f48ab0$0aa8a8c0@cliff>
References: <003301c63407$68f48ab0$0aa8a8c0@cliff>
Message-ID: <4501-57930@sneakemail.com>

Cliff Hirsch cliff-at-pinestream.com |nyphp dev/internal group use| wrote:

>Permissions did the trick. Many thanks. One of these days, I owe
>everyone on this list a beer...
>
>-----Original Message-----
>From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
>On Behalf Of Jonathan Hendler
>Sent: Friday, February 17, 2006 4:04 PM
>To: NYPHP Talk
>Subject: Re: [nycphp-talk] index.php ignored on new Mac Mini server setup
>
>
>First guess - permissions.
>Next, either there is .htaccess , mod_rewrite, doing something. Lastly
>it could be the order of the indexes available in the httpd.conf 
>- so if you have a index.html it will chose that first unless you access
>
>index.php directly.
>
>  
>
wow...buy stock in the brewery before he bys everyone on the list a 
beer. That's a lot of beer.


From mitch.pirtle at gmail.com  Fri Feb 17 20:01:25 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Fri, 17 Feb 2006 20:01:25 -0500
Subject: [nycphp-talk] oracle buys InnoDB
In-Reply-To: <22518-02947@sneakemail.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
	<20060215131845.GA5045@panix.com> <22518-02947@sneakemail.com>
Message-ID: <330532b60602171701h24dcb172tbc8c9fd050045999@mail.gmail.com>

On 2/15/06, inforequest <1j0lkq002 at sneakemail.com> wrote:
> "InnoDB is not a standalone database product: it is distributed as a
> part of the MySQL database. InnoDB's contractual relationship with MySQL
> comes up for renewal next year.  Oracle fully expects to negotiate an
> extension of that relationship."

And now for the latest headlines:

* ORACLE CEO WETS PANTS LAUGHING OVER RECENT PURCHASE
* ORACLE CEO CONTINUES TO WET PANTS LAUGHING OVER ANOTHER ONE
* ORACLE CEO NOW REQUIRED TO WEAR DEPENDS TO THE OFFICE

--
Mitch Pirtle
Joomla! Core Developer
Open Source Matters


From hendler at simmons.edu  Fri Feb 17 20:58:32 2006
From: hendler at simmons.edu (Jonathan Hendler)
Date: Fri, 17 Feb 2006 20:58:32 -0500
Subject: [nycphp-talk] oracle buys InnoDB
In-Reply-To: <330532b60602171701h24dcb172tbc8c9fd050045999@mail.gmail.com>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>	<20060215131845.GA5045@panix.com>
	<22518-02947@sneakemail.com>
	<330532b60602171701h24dcb172tbc8c9fd050045999@mail.gmail.com>
Message-ID: <43F67F48.4010209@simmons.edu>

Does Postgresql depend on anything that Oracle can purchase? (if they 
haven't already)


Mitch Pirtle wrote:

>On 2/15/06, inforequest <1j0lkq002 at sneakemail.com> wrote:
>  
>
>>"InnoDB is not a standalone database product: it is distributed as a
>>part of the MySQL database. InnoDB's contractual relationship with MySQL
>>comes up for renewal next year.  Oracle fully expects to negotiate an
>>extension of that relationship."
>>    
>>
>
>And now for the latest headlines:
>
>* ORACLE CEO WETS PANTS LAUGHING OVER RECENT PURCHASE
>* ORACLE CEO CONTINUES TO WET PANTS LAUGHING OVER ANOTHER ONE
>* ORACLE CEO NOW REQUIRED TO WEAR DEPENDS TO THE OFFICE
>
>--
>Mitch Pirtle
>Joomla! Core Developer
>Open Source Matters
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>



From 1j0lkq002 at sneakemail.com  Fri Feb 17 22:29:01 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Fri, 17 Feb 2006 19:29:01 -0800
Subject: [nycphp-talk] oracle buys InnoDB
In-Reply-To: <43F67F48.4010209@simmons.edu>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>	<20060215131845.GA5045@panix.com>	<22518-02947@sneakemail.com>	<330532b60602171701h24dcb172tbc8c9fd050045999@mail.gmail.com>
	<43F67F48.4010209@simmons.edu>
Message-ID: <28589-15591@sneakemail.com>

Jonathan Hendler hendler-at-simmons.edu |nyphp dev/internal group use| 
wrote:

>Does Postgresql depend on anything that Oracle can purchase? (if they 
>haven't already)
>
>  
>

Postgres depends on something nobody can purchase.... Postgres 
developers (har har har)





From suzerain at suzerain.com  Sat Feb 18 13:40:02 2006
From: suzerain at suzerain.com (Marc Antony Vose)
Date: Sat, 18 Feb 2006 13:40:02 -0500
Subject: [nycphp-talk] variable variables in heredoc string
In-Reply-To: <43EA696A.3090900@aarond.com>
References: <43EA696A.3090900@aarond.com>
Message-ID: <p06230901c01d1988f9be@[192.168.1.44]>

hi there:

this question seems so elementary, yet i can't seems to figure out 
the right combination of curly braces and whatnot.

if i have a variable variable such as:

${$uc.'content_width'} = 170;


How can I use it inside a heredoc assignment?


// start the content
${$uc.'content'} = <<< ENDENDEND


ENDENDEND;


Thanks,

-- 
Marc Antony Vose
http://www.suzerain.com/

Life is a sexually transmitted disease with a 100% mortality rate.
-- David Shaw


From danielc at analysisandsolutions.com  Sat Feb 18 13:49:39 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Sat, 18 Feb 2006 13:49:39 -0500
Subject: [nycphp-talk] variable variables in heredoc string
In-Reply-To: <p06230901c01d1988f9be@[192.168.1.44]>
References: <43EA696A.3090900@aarond.com>
	<p06230901c01d1988f9be@[192.168.1.44]>
Message-ID: <20060218184939.GA8562@panix.com>

On Sat, Feb 18, 2006 at 01:40:02PM -0500, Marc Antony Vose wrote:

> this question seems so elementary, yet i can't seems to figure out 
> the right combination of curly braces and whatnot.
> 
> if i have a variable variable such as:
> 
> ${$uc.'content_width'} = 170;
...
> How can I use it inside a heredoc assignment?
...
> ${$uc.'content'} = <<< ENDENDEND
> ENDENDEND;

$uc = 'foo';
${$uc.'content_width'} = 170;
echo ${$uc.'content_width'};

${$uc.'content'} = <<< ENDENDEND
inside ${$uc.'content_width'} heredoc
ENDENDEND;

echo ${$uc.'content'};

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From cliff at pinestream.com  Sat Feb 18 14:28:15 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Sat, 18 Feb 2006 14:28:15 -0500
Subject: [nycphp-talk] Session problem with MAC/Unic/Apache
Message-ID: <F1BD2F78-A3A0-4C3F-83CD-E98BB479E77E@pinestream.com>

The jump from Windows to OSX/Unix is giving me more problems. Now  
sessions aren't working -- more permission issues.

Here's my sessions directory:

It's at /private/var/tmp

My error log has the appropriate permissions. I assume nobody is the  
PHP process.

But what's with the session files? -rw------ isn't very useful is it?
I assume www is the Apache process. How do I make it create readable  
session files?

cliff-hirschs-mac-mini:/var/tmp root# ls -al
total 48
drwxrwxrwt   10 root      wheel   340 Feb 18 13:53 .
drwxr-xr-x   23 root      wheel   782 Feb 16 08:33 ..
-rw-rw-rw-    1 root      wheel    48 Feb 15 23:51  
com.apple.speech.synthesis.globals
drwx------    3 cliffhir  wheel   102 Feb 16 17:45 folders.501
-rw-r--r--    1 nobody    wheel  2877 Feb 18 12:14 kerbeez_errors.log
drwxrwxrwt    4 root      wheel   136 Feb 16 08:34 mds
-rw-------    1 www       wheel    30 Feb 18 10:57 sess_4BAFfxHA........
-rw-------    1 www       wheel    30 Feb 17 16:07  
sess_7A93rjA..........

Cliff


From vugranam at us.ibm.com  Sat Feb 18 16:01:18 2006
From: vugranam at us.ibm.com (Vugranam Sreedhar)
Date: Sat, 18 Feb 2006 16:01:18 -0500
Subject: [nycphp-talk] Vugranam Sreedhar is out of the office.
Message-ID: <OF95B3C7BE.2E0CFA64-ON85257119.007379B7-85257119.007379B7@us.ibm.com>

I will be out of the office starting  02/18/2006 and will not return until
03/06/2006.

I will respond to your message when I return.  Please contact my manager
for all of my activities, including Summer Intern Coordination and PHP
Security.
For PLAS 2006 workshop, please contact Steve Zdancewic
(stevez at cis.upenn.edu).



From kenneth at ylayali.net  Sat Feb 18 16:17:04 2006
From: kenneth at ylayali.net (Kenneth Dombrowski)
Date: Sat, 18 Feb 2006 16:17:04 -0500
Subject: [nycphp-talk] Session problem with MAC/Unic/Apache
In-Reply-To: <F1BD2F78-A3A0-4C3F-83CD-E98BB479E77E@pinestream.com>
References: <F1BD2F78-A3A0-4C3F-83CD-E98BB479E77E@pinestream.com>
Message-ID: <20060218211704.GA25634@ylayali.net>

On 06-02-18 14:28 -0500, Cliff Hirsch wrote:
> My error log has the appropriate permissions. I assume nobody is the  
> PHP process.
> 
> But what's with the session files? -rw------ isn't very useful is it?
> I assume www is the Apache process. How do I make it create readable  
> session files?
> 
> cliff-hirschs-mac-mini:/var/tmp root# ls -al
> -rw-r--r--    1 nobody    wheel  2877 Feb 18 12:14 kerbeez_errors.log
> drwxrwxrwt    4 root      wheel   136 Feb 16 08:34 mds
> -rw-------    1 www       wheel    30 Feb 18 10:57 sess_4BAFfxHA........
> -rw-------    1 www       wheel    30 Feb 17 16:07  
> sess_7A93rjA..........
> 


0600 (-rw-------) is perfectly appropriate for session files; apache can
read them & write to them, and nobody else can.  

I would look into why your error log is owned by nobody & your session
files are owned by www, do you have two apaches running on that machine?  

hth,
Kenneth




From greg.rundlett at gmail.com  Sat Feb 18 19:46:30 2006
From: greg.rundlett at gmail.com (Greg Rundlett)
Date: Sat, 18 Feb 2006 19:46:30 -0500
Subject: [nycphp-talk] Session problem with MAC/Unic/Apache
In-Reply-To: <20060218211704.GA25634@ylayali.net>
References: <F1BD2F78-A3A0-4C3F-83CD-E98BB479E77E@pinestream.com>
	<20060218211704.GA25634@ylayali.net>
Message-ID: <5e2aaca40602181646r2765cae6o8e7f3b771ae11bef@mail.gmail.com>

On 2/18/06, Kenneth Dombrowski <kenneth at ylayali.net> wrote:
> On 06-02-18 14:28 -0500, Cliff Hirsch wrote:
> > My error log has the appropriate permissions. I assume nobody is the
> > PHP process.
> >
> > But what's with the session files? -rw------ isn't very useful is it?
> > I assume www is the Apache process. How do I make it create readable
> > session files?
> >
> > cliff-hirschs-mac-mini:/var/tmp root# ls -al
> > -rw-r--r--    1 nobody    wheel  2877 Feb 18 12:14 kerbeez_errors.log
> > drwxrwxrwt    4 root      wheel   136 Feb 16 08:34 mds
> > -rw-------    1 www       wheel    30 Feb 18 10:57 sess_4BAFfxHA........
> > -rw-------    1 www       wheel    30 Feb 17 16:07
> > sess_7A93rjA..........
> >
>
>
> 0600 (-rw-------) is perfectly appropriate for session files; apache can
> read them & write to them, and nobody else can.
>
> I would look into why your error log is owned by nobody & your session
> files are owned by www, do you have two apaches running on that machine?
>

or, if you manually chown'd the files, you mistakenly assumed that PHP
and Apache run as separate users.  PHP is just an extension of Apache,
so whatever is configured in Apache's conf for 'user' then  that is
what PHP's scripts need permission for.


From lamolist at cyberxdesigns.com  Sun Feb 19 07:41:05 2006
From: lamolist at cyberxdesigns.com (Hans Kaspersetz)
Date: Sun, 19 Feb 2006 07:41:05 -0500
Subject: [nycphp-talk] [ot] mysqldump cron problem
Message-ID: <43F86761.4000304@cyberxdesigns.com>

I created a bash script that is supposed to dump one of my databases.  
When I run the bash script from the cli it dumps no problem.  When I 
call the script from cron, I get an empty file in the destination 
directory.  Anyone have any ideas?

FreeBSD 5.3
MySQL 4.1

--------------------------------
#!/usr/local/bin/bash
path="/usr/local/backups/"

date=`date +"%y%m%d-%H%M%S"`
filename=$path$date"-oncellrx.sql"

mysqldump --opt -Q -uUSER -pPASS DATABASE > $filename
------------------------------------

I am calling the script as myself from cron.  Bash is set as my shell in 
passwd.  Seems sorta mysterious to me.

Hans


From andrew at plexpod.com  Sun Feb 19 08:19:58 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Sun, 19 Feb 2006 08:19:58 -0500
Subject: [nycphp-talk] [ot] mysqldump cron problem
In-Reply-To: <43F86761.4000304@cyberxdesigns.com>
References: <43F86761.4000304@cyberxdesigns.com>
Message-ID: <43F8707E.90800@plexpod.com>

Hans Kaspersetz wrote:
> I created a bash script that is supposed to dump one of my databases.  
> When I run the bash script from the cli it dumps no problem.  When I 
> call the script from cron, I get an empty file in the destination 
> directory.  Anyone have any ideas?
> 
> FreeBSD 5.3
> MySQL 4.1
> 
> --------------------------------
> #!/usr/local/bin/bash
> path="/usr/local/backups/"
> 
> date=`date +"%y%m%d-%H%M%S"`
> filename=$path$date"-oncellrx.sql"
> 
> mysqldump --opt -Q -uUSER -pPASS DATABASE > $filename
> ------------------------------------
> 
> I am calling the script as myself from cron.  Bash is set as my shell in 
> passwd.  Seems sorta mysterious to me.
> 
> Hans

Have you checked your user's mail spool for any output from the cron?

Andrew

-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From chris at theyellowbox.com  Sun Feb 19 09:00:25 2006
From: chris at theyellowbox.com (Chris Merlo)
Date: Sun, 19 Feb 2006 09:00:25 -0500
Subject: [nycphp-talk] [ot] mysqldump cron problem
In-Reply-To: <43F86761.4000304@cyberxdesigns.com>
References: <43F86761.4000304@cyberxdesigns.com>
Message-ID: <946586480602190600if892a5jd93abc5441553214@mail.gmail.com>

On 2/19/06, Hans Kaspersetz <lamolist at cyberxdesigns.com> wrote:
>
> I created a bash script that is supposed to dump one of my databases.
> When I run the bash script from the cli it dumps no problem.  When I
> call the script from cron, I get an empty file in the destination
> directory.  Anyone have any ideas?


Your personal user might not have the permissions to write to
/usr/local/backups.  Try running the cron job as root.
-c

--
chris at theyellowbox.com
http://www.theyellowbox.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060219/8f4b0f4e/attachment.html>

From lists at zaunere.com  Sun Feb 19 11:12:30 2006
From: lists at zaunere.com (Hans Zaunere)
Date: Sun, 19 Feb 2006 11:12:30 -0500
Subject: [nycphp-talk] [ot] mysqldump cron problem
In-Reply-To: <43F86761.4000304@cyberxdesigns.com>
Message-ID: <003001c6356f$4a2fdad0$7501a8c0@MZ>



Hans Kaspersetz wrote on Sunday, February 19, 2006 7:41 AM:
> I created a bash script that is supposed to dump one of my databases.
> When I run the bash script from the cli it dumps no problem.  When I
> call the script from cron, I get an empty file in the destination
> directory.  Anyone have any ideas?
> 
> FreeBSD 5.3
> MySQL 4.1
> 
> --------------------------------
> #!/usr/local/bin/bash
> path="/usr/local/backups/"
> 
> date=`date +"%y%m%d-%H%M%S"`
> filename=$path$date"-oncellrx.sql"
> 
> mysqldump --opt -Q -uUSER -pPASS DATABASE > $filename
> ------------------------------------
> 
> I am calling the script as myself from cron.  Bash is set as my shell in
> passwd.  Seems sorta mysterious to me.

Probably a permissions or path problem... first do:

which mysqldump

and then use the absolute path of mysqldump in the script.

H



From cweyl at alumni.drew.edu  Sun Feb 19 14:49:25 2006
From: cweyl at alumni.drew.edu (Chris Weyl)
Date: Sun, 19 Feb 2006 14:49:25 -0500
Subject: [nycphp-talk] [ot] mysqldump cron problem
In-Reply-To: <43F86761.4000304@cyberxdesigns.com>
References: <43F86761.4000304@cyberxdesigns.com>
Message-ID: <7dd7ab490602191149yaad408dqa439d2bdb71c6d92@mail.gmail.com>

On 2/19/06, Hans Kaspersetz <lamolist at cyberxdesigns.com> wrote:
> I created a bash script that is supposed to dump one of my databases.
> When I run the bash script from the cli it dumps no problem.  When I
> call the script from cron, I get an empty file in the destination
> directory.  Anyone have any ideas?

I did something like this myself.  If I remember correctly, I also ran
into this problem until I defined my $HOME dir, as scripts executed
via cron do not have the full user initialization that you get when
you actually log into a *nix box.

                  -Chris


From lamolist at cyberxdesigns.com  Sun Feb 19 15:55:52 2006
From: lamolist at cyberxdesigns.com (Hans Kaspersetz)
Date: Sun, 19 Feb 2006 15:55:52 -0500
Subject: [nycphp-talk] [ot] mysqldump cron problem
In-Reply-To: <7dd7ab490602191149yaad408dqa439d2bdb71c6d92@mail.gmail.com>
References: <43F86761.4000304@cyberxdesigns.com>
	<7dd7ab490602191149yaad408dqa439d2bdb71c6d92@mail.gmail.com>
Message-ID: <43F8DB58.1060203@cyberxdesigns.com>

It was a path problem.  Fully qualifying the path to mysqldump worked. 

#!/usr/local/bin/bash
path="/usr/local/backups/"

date=`date +"%y%m%d-%H%M%S"`
filename=$path$date"-foo.sql"

/usr/local/bin/mysqldump --opt -Q -uUSERNAME -pPASSWORD DATABASE > $filename

Thanks guys,
Hans


From mitch.pirtle at gmail.com  Sun Feb 19 19:01:13 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Sun, 19 Feb 2006 19:01:13 -0500
Subject: [nycphp-talk] oracle buys InnoDB
In-Reply-To: <43F67F48.4010209@simmons.edu>
References: <f1dc81bb0602141127v34f0f880o445b839d14780522@mail.gmail.com>
	<20060215131845.GA5045@panix.com> <22518-02947@sneakemail.com>
	<330532b60602171701h24dcb172tbc8c9fd050045999@mail.gmail.com>
	<43F67F48.4010209@simmons.edu>
Message-ID: <330532b60602191601m5f995438kff9e43a9a9666793@mail.gmail.com>

On 2/17/06, Jonathan Hendler <hendler at simmons.edu> wrote:
> Does Postgresql depend on anything that Oracle can purchase? (if they
> haven't already)

Nope. As well, PostgreSQL is backed by a federation of companies, so
it will be terribly difficult for a competitor to 'buy' all of the
different businesses behind PostgreSQL.

By MySQL taking a sort of "one true company" approach behind the
commercialization of their software, they made it easy for other
companies to target them, leaving them very vulnerable IMHO.

It is this kind of behavior that caused a project I am very familiar
with to embark on a new quest, where anyone and everyone was welcome
to the party...

--
Mitch Pirtle
Joomla! Core Developer
Open Source Matters


From prusak at gmail.com  Mon Feb 20 14:18:21 2006
From: prusak at gmail.com (Ophir Prusak)
Date: Mon, 20 Feb 2006 14:18:21 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
Message-ID: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>

hi all.

a while back I converted my personal web site into a blog (wordpress)
so I can easily start expressing my self through articles that I think
some people might find helpful. I'm a web developer with lots of
experience in php / databases so most of the articles have been about
web dev (programming / databases stuff).

this morning I was looking at the stats of my site - i get about 10
visitors a day.

so, I've decided that I should start writing on some other site that
gets more exposure where hopefully more people can benefit from my
writings.

The first place that comes to mind is sitepoint which seems to have a
broad coverage of topics and strong reader base.

I was wondering what other sites people would suggest for writing
articles about web dev stuff besides the obvious nyphp.org :) ?

tia,
ophir


From craig at juxtadigital.com  Mon Feb 20 14:25:42 2006
From: craig at juxtadigital.com (Craig Thomas)
Date: Mon, 20 Feb 2006 14:25:42 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
Message-ID: <43FA17B6.8030208@juxtadigital.com>

Ophir Prusak wrote:
> hi all.
> 
> a while back I converted my personal web site into a blog (wordpress)
> so I can easily start expressing my self through articles that I think
> some people might find helpful. I'm a web developer with lots of
> experience in php / databases so most of the articles have been about
> web dev (programming / databases stuff).
> 
> this morning I was looking at the stats of my site - i get about 10
> visitors a day.
> 
> so, I've decided that I should start writing on some other site that
> gets more exposure where hopefully more people can benefit from my
> writings.
> 
> The first place that comes to mind is sitepoint which seems to have a
> broad coverage of topics and strong reader base.
> 
> I was wondering what other sites people would suggest for writing
> articles about web dev stuff besides the obvious nyphp.org :) ?
> 
> tia,
> ophir

http://www.developerdotstar.com

Is not PHP specific, but very some very smart dev-bloggers.

--
Craig


From krook at us.ibm.com  Mon Feb 20 14:28:39 2006
From: krook at us.ibm.com (Daniel Krook)
Date: Mon, 20 Feb 2006 11:28:39 -0800
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
Message-ID: <OF4BF14708.3752D663-ON8825711B.006AD3E0-8825711B.006AFD43@us.ibm.com>

> I was wondering what other sites people would suggest for writing
> articles about web dev stuff besides the obvious nyphp.org :) ?

Ophir,

The PHP section of the developerWorks open source technology section is 
looking to ramp up its content.  They take articles or tutorials.
http://www.ibm.com/developerworks/opensource/top-projects/php.html

They have a "wish list" and a link to where to pitch your idea:
http://www.ibm.com/developerworks/wishlist/#opens

Then there's the Zend Developer Zone:
http://www.zend.com/developers.php





Daniel Krook, Content Tools Developer
Global Production Services - Tools, ibm.com

http://bluepages.redirect.webahead.ibm.com/
http://blogpages.redirect.webahead.ibm.com/
http://bookmarks.redirect.webahead.ibm.com/





From donnamarievincent at yahoo.com  Mon Feb 20 14:32:39 2006
From: donnamarievincent at yahoo.com (Donna Marie Vincent)
Date: Mon, 20 Feb 2006 11:32:39 -0800 (PST)
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
Message-ID: <20060220193239.670.qmail@web35612.mail.mud.yahoo.com>

www.webdeveloper.com and http://codingforums.com/

----- Original Message ----
From: Ophir Prusak <prusak at gmail.com>
To: NYPHP Talk <talk at lists.nyphp.org>
Sent: Monday, February 20, 2006 2:18:21 PM
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)


hi all.

a while back I converted my personal web site into a blog (wordpress)
so I can easily start expressing my self through articles that I think
some people might find helpful. I'm a web developer with lots of
experience in php / databases so most of the articles have been about
web dev (programming / databases stuff).

this morning I was looking at the stats of my site - i get about 10
visitors a day.

so, I've decided that I should start writing on some other site that
gets more exposure where hopefully more people can benefit from my
writings.

The first place that comes to mind is sitepoint which seems to have a
broad coverage of topics and strong reader base.

I was wondering what other sites people would suggest for writing
articles about web dev stuff besides the obvious nyphp.org :) ?

tia,
ophir
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060220/254a3d64/attachment.html>

From 1j0lkq002 at sneakemail.com  Mon Feb 20 15:02:42 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Mon, 20 Feb 2006 12:02:42 -0800
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
Message-ID: <12300-51049@sneakemail.com>

Ophir Prusak prusak-at-gmail.com |nyphp dev/internal group use| wrote:

>hi all.
>
>a while back I converted my personal web site into a blog (wordpress)
>so I can easily start expressing my self through articles that I think
>some people might find helpful. I'm a web developer with lots of
>experience in php / databases so most of the articles have been about
>web dev (programming / databases stuff).
>
>this morning I was looking at the stats of my site - i get about 10
>visitors a day.
>
>so, I've decided that I should start writing on some other site that
>gets more exposure where hopefully more people can benefit from my
>writings.
>
>The first place that comes to mind is sitepoint which seems to have a
>broad coverage of topics and strong reader base.
>
>I was wondering what other sites people would suggest for writing
>articles about web dev stuff besides the obvious nyphp.org :) ?
>
>tia,
>ophir
>

Well, there is certainly some good that can come from publishing your 
work on other sites. In many ways, writing for other sites is part of a 
strategy to build your own reputation etc.

However, if you like to write content and the only problem you are 
having with your own site is a lack of audience (perhaps a lack of 
audience motivating you to write) that can be solved. In my opinion, you 
have alot more to gain by writing on your own site than by writing for 
the majority of the sites that would publish your content today.

As a developer you are well positioned to self-publish and garner an 
audience. In fact, after you do that you may find yourself being invited 
to write for some of the big sites.

-=john andrews
http://www.seo-fun.com





From tedd at sperling.com  Mon Feb 20 15:33:35 2006
From: tedd at sperling.com (tedd)
Date: Mon, 20 Feb 2006 15:33:35 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
Message-ID: <p06230904c01fd6b84d73@[192.168.0.100]>

>hi all.
>
>a while back I converted my personal web site into a blog (wordpress)
>so I can easily start expressing my self through articles that I think
>some people might find helpful. I'm a web developer with lots of
>experience in php / databases so most of the articles have been about
>web dev (programming / databases stuff).
>
>this morning I was looking at the stats of my site - i get about 10
>visitors a day.

ophir:

You can beef-up your visits by producing "free-code". I just finished 
a binary-tree freeware program and pulled in over 1200 hits within 
this last month.

But, it is good for your site (link popularity) to publish at other 
sites as well.

You might consider:  http://www.weberdev.com/

Plus, they have contest -- it makes for an interesting experience.

tedd

-- 
--------------------------------------------------------------------------------
http://sperling.com               php code: http://www.weberdev.com/


From codebowl at gmail.com  Mon Feb 20 16:01:11 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Mon, 20 Feb 2006 16:01:11 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <p06230904c01fd6b84d73@192.168.0.100>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
	<p06230904c01fd6b84d73@192.168.0.100>
Message-ID: <8d9a42800602201301q57212f4fp65dc174e41cdc4d1@mail.gmail.com>

i would also suggest weberdev as i contribute there when i have the time.

i am surprised though that no one suggested www.devshed.com


--
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060220/34701dd4/attachment.html>

From 1j0lkq002 at sneakemail.com  Mon Feb 20 18:31:34 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Mon, 20 Feb 2006 15:31:34 -0800
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <8d9a42800602201301q57212f4fp65dc174e41cdc4d1@mail.gmail.com>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>	<p06230904c01fd6b84d73@192.168.0.100>
	<8d9a42800602201301q57212f4fp65dc174e41cdc4d1@mail.gmail.com>
Message-ID: <26865-82008@sneakemail.com>

Joseph Crawford codebowl-at-gmail.com |nyphp dev/internal group use| wrote:

> i would also suggest weberdev as i contribute there when i have the time.
>
> i am surprised though that no one suggested www.devshed.com 
> <http://www.devshed.com>
>
I guess I am tainted because I know how much money some of those sites 
have made of off  "free" user-submitted content :-)

-=john andrews
http://www.seo-fun.com



From arzala at gmail.com  Mon Feb 20 22:49:31 2006
From: arzala at gmail.com (Anirudhsinh Zala)
Date: Tue, 21 Feb 2006 09:19:31 +0530
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
Message-ID: <op.s5a0wtlve5m7mr@aum1.aum.com>

Maybe, you can sum up all your experience and form them into a good e-book, so that it can be directional in 1 way and it can hit specific audience who are interested in that area. You can then link that e-book from various places like your own web-site, nyphp.org etc.

Thanks

Anirudh Zala

On Tue, 21 Feb 2006 00:48:21 +0530, Ophir Prusak <prusak at gmail.com> wrote:

> hi all.
>
> a while back I converted my personal web site into a blog (wordpress)
> so I can easily start expressing my self through articles that I think
> some people might find helpful. I'm a web developer with lots of
> experience in php / databases so most of the articles have been about
> web dev (programming / databases stuff).
>
> this morning I was looking at the stats of my site - i get about 10
> visitors a day.
>
> so, I've decided that I should start writing on some other site that
> gets more exposure where hopefully more people can benefit from my
> writings.
>
> The first place that comes to mind is sitepoint which seems to have a
> broad coverage of topics and strong reader base.
>
> I was wondering what other sites people would suggest for writing
> articles about web dev stuff besides the obvious nyphp.org :) ?
>
> tia,
> ophir
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>

-----------------------------------------------------
Anirudh Zala (Production Manager)
ASPL, http://www.aspl.in
Ph: +91 281 245 1894
arzala at gmail.com
-----------------------------------------------------


From lamolist at cyberxdesigns.com  Tue Feb 21 13:01:04 2006
From: lamolist at cyberxdesigns.com (Hans Kaspersetz)
Date: Tue, 21 Feb 2006 13:01:04 -0500
Subject: [nycphp-talk] Debugging Remote Problem
Message-ID: <43FB5560.8000008@cyberxdesigns.com>

I am having trouble with users of a web site.  The site is based on 
Joomla.  When the user logs in, site uses the community builder 
component, he can browse a page or so, then he is redirected to the 
login screen.  The users are in South Africa.  The rest of my users, 
throughout Europe and US, seem to be using the site fine.  I have been 
unable to reproduce the problem locally here in the US.

How would you approach debugging this problem?  I have phone access to 
the user.  I am the administrator of the server so I can configure 
logging however I need to.  I have set up a development site for my 
guinea pig and I can make what ever changes I need to the site to test 
things.

Joomla + Community Builder
RHE + Apache 1.3
Cpanel

Ideas?

Hans


From chsnyder at gmail.com  Tue Feb 21 14:08:39 2006
From: chsnyder at gmail.com (csnyder)
Date: Tue, 21 Feb 2006 14:08:39 -0500
Subject: [nycphp-talk] Debugging Remote Problem
In-Reply-To: <43FB5560.8000008@cyberxdesigns.com>
References: <43FB5560.8000008@cyberxdesigns.com>
Message-ID: <b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>

On 2/21/06, Hans Kaspersetz <lamolist at cyberxdesigns.com> wrote:
> I am having trouble with users of a web site.  The site is based on
> Joomla.  When the user logs in, site uses the community builder
> component, he can browse a page or so, then he is redirected to the
> login screen.  The users are in South Africa.  The rest of my users,
> throughout Europe and US, seem to be using the site fine.  I have been
> unable to reproduce the problem locally here in the US.
>
> How would you approach debugging this problem?  I have phone access to
> the user.  I am the administrator of the server so I can configure
> logging however I need to.  I have set up a development site for my
> guinea pig and I can make what ever changes I need to the site to test
> things.
>
> Joomla + Community Builder
> RHE + Apache 1.3
> Cpanel
>
> Ideas?
>
> Hans

Out of curiousity, is SSL involved? Are you able to have the user try
a different browser?
Have you already gone over a dump of the global vars generated by one
of their requests? Their geographic location could well be a red
herring.

--
Chris Snyder
http://chxo.com/

From lamolist at cyberxdesigns.com  Tue Feb 21 14:43:56 2006
From: lamolist at cyberxdesigns.com (Hans Kaspersetz)
Date: Tue, 21 Feb 2006 14:43:56 -0500
Subject: [nycphp-talk] Debugging Remote Problem
In-Reply-To: <b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>
References: <43FB5560.8000008@cyberxdesigns.com>
	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>
Message-ID: <43FB6D7C.7050205@cyberxdesigns.com>

SSL was involved.  I setup the demo site to remove that from the 
equation.  When SSL was involved the user could not even login.  I would 
see a successful login in the logs but then an immediate redirect to the 
logged our state.  Very weird.  Taking SSL out of the equation made 
things better.  Now the user can login and browse 1 or 2 pages.  Then 
redirect to logged out state. 

The user started with IE on Win XP.  I had them install Firefox, same 
problem.  This problem seems to be with multiple users in South Africa.  
Has anyone else seen geographically localized problems with web 
applications like Joomla?

 How would you suggest I capture the global vars generated by one of 
their requests?  Insert some scripting on my side to save them to db or 
log file?  Or output to screen on their end and have them cut and 
paste?  Or is there some better way?

HCK


> Out of curiousity, is SSL involved? Are you able to have the user try
> a different browser?
> Have you already gone over a dump of the global vars generated by one
> of their requests? Their geographic location could well be a red
> herring.
>
> --
> Chris Snyder
> http://chxo.com/
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>
>   



From scott at crisscott.com  Tue Feb 21 14:50:56 2006
From: scott at crisscott.com (Scott Mattocks)
Date: Tue, 21 Feb 2006 14:50:56 -0500
Subject: [nycphp-talk] Debugging Remote Problem
In-Reply-To: <43FB6D7C.7050205@cyberxdesigns.com>
References: <43FB5560.8000008@cyberxdesigns.com>	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>
	<43FB6D7C.7050205@cyberxdesigns.com>
Message-ID: <43FB6F20.7030105@crisscott.com>

Hans Kaspersetz wrote:
>  How would you suggest I capture the global vars generated by one of 
> their requests?  Insert some scripting on my side to save them to db or 
> log file?  Or output to screen on their end and have them cut and 
> paste?  Or is there some better way?

You can capture global var info using trigger_error and print_r:

trigger_error(print_r($_REQUEST, true), E_USER_NOTICE);

If your error reporting and displaying options are set up right, you 
should find a dump of $_REQUEST in your error log. $_REQUEST will tell 
you if the session id was sent.

Hope that helps,
-- 
Scott Mattocks
http://www.crisscott.com


From andrew at plexpod.com  Tue Feb 21 15:29:25 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Tue, 21 Feb 2006 15:29:25 -0500
Subject: [nycphp-talk] Debugging Remote Problem
In-Reply-To: <43FB6D7C.7050205@cyberxdesigns.com>
References: <43FB5560.8000008@cyberxdesigns.com>	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>
	<43FB6D7C.7050205@cyberxdesigns.com>
Message-ID: <43FB7825.1050401@plexpod.com>

Hans Kaspersetz wrote:
> SSL was involved.  I setup the demo site to remove that from the 
> equation.  When SSL was involved the user could not even login.  I would 
> see a successful login in the logs but then an immediate redirect to the 
> logged our state.  Very weird.  Taking SSL out of the equation made 
> things better.  Now the user can login and browse 1 or 2 pages.  Then 
> redirect to logged out state. 

Sounds a lot like cookies/sessions aren't working.  Try either having
them turn on cookies, or set up the php url rewriter.  If they have
cookies on, possibly a proxy server is getting in the way.  You may be
able to find that out from asking them if they know they're using a
proxy or by looking up the PTR records for their source IPs and/or the
user agent in your logs.

HTH,
Andrew
-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From tgales at tgaconnect.com  Tue Feb 21 15:35:43 2006
From: tgales at tgaconnect.com (Tim Gales)
Date: Tue, 21 Feb 2006 15:35:43 -0500
Subject: [nycphp-talk] Debugging Remote Problem
In-Reply-To: <43FB7825.1050401@plexpod.com>
References: <43FB5560.8000008@cyberxdesigns.com>	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>	<43FB6D7C.7050205@cyberxdesigns.com>
	<43FB7825.1050401@plexpod.com>
Message-ID: <43FB799F.2070600@tgaconnect.com>

Andrew Yochum wrote:
> Hans Kaspersetz wrote:
>> SSL was involved.  I setup the demo site to remove that from the 
>> equation.  When SSL was involved the user could not even login.  I would 
>> see a successful login in the logs but then an immediate redirect to the 
>> logged our state.  Very weird.  Taking SSL out of the equation made 
>> things better.  Now the user can login and browse 1 or 2 pages.  Then 
>> redirect to logged out state. 
> 
> Sounds a lot like cookies/sessions aren't working.  Try either having
> them turn on cookies, or set up the php url rewriter.  If they have
> cookies on, possibly a proxy server is getting in the way. 

If a proxy is in the way
maybe this will help


http://forum.mamboserver.com/showthread.php?t=18759



-- 

T. Gales & Associates
'Helping People Connect with Technology'

http://www.tgaconnect.com


From corey at domanistudios.com  Tue Feb 21 15:54:47 2006
From: corey at domanistudios.com (Corey Szopinski)
Date: Tue, 21 Feb 2006 15:54:47 -0500
Subject: [nycphp-talk] Debugging Remote Problem
In-Reply-To: <43FB7825.1050401@plexpod.com>
References: <43FB5560.8000008@cyberxdesigns.com>	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>
	<43FB6D7C.7050205@cyberxdesigns.com> <43FB7825.1050401@plexpod.com>
Message-ID: <2151DF20-5C07-47DE-A9E0-3438E6462F42@domanistudios.com>

I once had a problem where a client had their local computer's time  
zone set to someplace in China (the computer was in NY). This caused  
sessions to timeout immediately because the client clock was 13+  
hours a head of the cookie expiration. Now I keep my cookies valid  
for at least 24 hours, as a rough catch all. (Needless to say, that  
bug took a while to track down.)

Not sure if that's the issue, but if it's localized to one machine it  
might be a helpful tip.

-corey


On Feb 21, 2006, at 3:29 PM, Andrew Yochum wrote:

> Sounds a lot like cookies/sessions aren't working.  Try either having
> them turn on cookies, or set up the php url rewriter.  If they have
> cookies on, possibly a proxy server is getting in the way.  You may be
> able to find that out from asking them if they know they're using a
> proxy or by looking up the PTR records for their source IPs and/or the
> user agent in your logs.
>
> HTH,
> Andrew

Corey Szopinski
Director of Technology

DOMANI STUDIOS
corey at domanistudios.com
55 Washington St. Suite 822
Brooklyn, NY 11201
718-797-4470  x116


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060221/16df4361/attachment.html>

From lamolist at cyberxdesigns.com  Tue Feb 21 19:27:40 2006
From: lamolist at cyberxdesigns.com (Hans Kaspersetz)
Date: Tue, 21 Feb 2006 19:27:40 -0500
Subject: [nycphp-talk] Debugging Remote Problem
In-Reply-To: <43FB799F.2070600@tgaconnect.com>
References: <43FB5560.8000008@cyberxdesigns.com>	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>	<43FB6D7C.7050205@cyberxdesigns.com>	<43FB7825.1050401@plexpod.com>
	<43FB799F.2070600@tgaconnect.com>
Message-ID: <43FBAFFC.8010105@cyberxdesigns.com>

I think it is proxy related.  I read the resources Tim turned me onto 
and it was very helpful.  I implemented one of the patches and asked the 
user to retry.  I suspect it is the proxy issue because I can see the 
user switching IPs in the middle of the session.

I will have more information tomorrow after the user tests.

HCK

Tim Gales wrote:
> Andrew Yochum wrote:
>   
>> Hans Kaspersetz wrote:
>>     
>>> SSL was involved.  I setup the demo site to remove that from the 
>>> equation.  When SSL was involved the user could not even login.  I would 
>>> see a successful login in the logs but then an immediate redirect to the 
>>> logged our state.  Very weird.  Taking SSL out of the equation made 
>>> things better.  Now the user can login and browse 1 or 2 pages.  Then 
>>> redirect to logged out state. 
>>>       
>> Sounds a lot like cookies/sessions aren't working.  Try either having
>> them turn on cookies, or set up the php url rewriter.  If they have
>> cookies on, possibly a proxy server is getting in the way. 
>>     
>
> If a proxy is in the way
> maybe this will help
>
>
> http://forum.mamboserver.com/showthread.php?t=18759
>
>
>
>   



From krook at us.ibm.com  Tue Feb 21 19:42:57 2006
From: krook at us.ibm.com (Daniel Krook)
Date: Tue, 21 Feb 2006 16:42:57 -0800
Subject: [nycphp-talk] Calling mysqli_stmt_bind_param with arbitrary number
	of parameters?
Message-ID: <OFFEB914F2.79E02116-ON8825711D.0003AA81-8825711D.0003ECE9@us.ibm.com>

Hello all,

I'm trying to send parameters to a prepared statement using the mysqli 
extension.

The manual shows that it is used like this:
  $stmt = $mysqli->prepare("INSERT INTO CountryLanguage VALUES (?, ?, ?, 
?)");
  $stmt->bind_param('sssd', $code, $language, $official, $percent);

Where bind_param can take any number of values like so:
  $stmt->bind_param('s', $foo);
  $stmt->bind_param('si', $foo, $bar);
  $stmt->bind_param('sid', $foo, $bar, $baz); 
 
Unfortunately, I can't be sure of the number of placeholders in the SQL 
statement I am sending, and don't know how many corresponding parameters 
are in an array I pass to my function.  I would like to replicate this 
functionality that I use in the Unified ODBC extension:
  $stmt = odbc_prepare($db, $sql);
  $result = odbc_execute($stmt, $params); 
 
With bind_param it would seem I'd have to construct the bind_param call 
manually and then eval() it to get the same flexibility.  This is what I'd 
like to be able to do:
  $stmt->bind_param($aSeriesOfLettersDependingOnParamsSize, $params);

This would seem like something I'd need to do but haven't been able to 
figure out how to pull it off:
  eval(sprintf('$stmt->bind_param("sss...", %s, %s, %s, ...);') $params);
 
Is there a solution to this that anyone has run into?  Am I overlooking 
something really obvious (anytime eval() comes into play I get that 
feeling...)

TIA,
-Dan



Daniel Krook, Content Tools Developer
Global Production Services - Tools, ibm.com

http://bluepages.redirect.webahead.ibm.com/
http://blogpages.redirect.webahead.ibm.com/
http://bookmarks.redirect.webahead.ibm.com/




From andrew at plexpod.com  Tue Feb 21 19:57:27 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Tue, 21 Feb 2006 19:57:27 -0500
Subject: [nycphp-talk] Calling mysqli_stmt_bind_param with arbitrary
 number of parameters?
In-Reply-To: <OFFEB914F2.79E02116-ON8825711D.0003AA81-8825711D.0003ECE9@us.ibm.com>
References: <OFFEB914F2.79E02116-ON8825711D.0003AA81-8825711D.0003ECE9@us.ibm.com>
Message-ID: <43FBB6F7.40209@plexpod.com>

Daniel Krook wrote:
> Hello all,
> 
> I'm trying to send parameters to a prepared statement using the mysqli 
> extension.
> 
> The manual shows that it is used like this:
>   $stmt = $mysqli->prepare("INSERT INTO CountryLanguage VALUES (?, ?, ?, 
> ?)");
>   $stmt->bind_param('sssd', $code, $language, $official, $percent);
> 
> Where bind_param can take any number of values like so:
>   $stmt->bind_param('s', $foo);
>   $stmt->bind_param('si', $foo, $bar);
>   $stmt->bind_param('sid', $foo, $bar, $baz); 
>  
> Unfortunately, I can't be sure of the number of placeholders in the SQL 
> statement I am sending, and don't know how many corresponding parameters 
> are in an array I pass to my function.  I would like to replicate this 
> functionality that I use in the Unified ODBC extension:
>   $stmt = odbc_prepare($db, $sql);
>   $result = odbc_execute($stmt, $params); 
>  
> With bind_param it would seem I'd have to construct the bind_param call 
> manually and then eval() it to get the same flexibility.  This is what I'd 
> like to be able to do:
>   $stmt->bind_param($aSeriesOfLettersDependingOnParamsSize, $params);
> 
> This would seem like something I'd need to do but haven't been able to 
> figure out how to pull it off:
>   eval(sprintf('$stmt->bind_param("sss...", %s, %s, %s, ...);') $params);
>  
> Is there a solution to this that anyone has run into?  Am I overlooking 
> something really obvious (anytime eval() comes into play I get that 
> feeling...)

I know that feeling. :)

How about using call_user_func_array()?

Something like:
	array_unshift('sql ? ? ?', $params);
	call_user_func_array(array($stmt, 'bind_param'), $params);

HTH,
Andrew

-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From danielc at analysisandsolutions.com  Tue Feb 21 22:38:03 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Tue, 21 Feb 2006 22:38:03 -0500
Subject: [nycphp-talk] Calling mysqli_stmt_bind_param with arbitrary
	number of parameters?
In-Reply-To: <OFFEB914F2.79E02116-ON8825711D.0003AA81-8825711D.0003ECE9@us.ibm.com>
References: <OFFEB914F2.79E02116-ON8825711D.0003AA81-8825711D.0003ECE9@us.ibm.com>
Message-ID: <20060222033802.GA13711@panix.com>

On Tue, Feb 21, 2006 at 04:42:57PM -0800, Daniel Krook wrote:
>  
> Unfortunately, I can't be sure of the number of placeholders in the SQL 
> statement I am sending, and don't know how many corresponding parameters 
> are in an array I pass to my function.

Here's something I just did along these lines the other day for the Single 
Sign-On module I just contributed to Drupal.  (Note that Drupal's 
db_query() function takes the SQL string as the first parameter and an 
unlimited number of parameter values as subsequent parameters.)

$in   = substr(str_repeat("'%s',", count($sids)), 0, -1);
$sql  = "UPDATE sessions SET uid = %d WHERE sid IN ($in)";
$args = array_merge(array($sql), array($user->uid), $sids);

call_user_func_array('db_query', $args);

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From hendler at simmons.edu  Wed Feb 22 01:15:17 2006
From: hendler at simmons.edu (Jonathan Hendler)
Date: Wed, 22 Feb 2006 01:15:17 -0500
Subject: [nycphp-talk] Calling mysqli_stmt_bind_param with arbitrary
 number of parameters?
In-Reply-To: <43FBB6F7.40209@plexpod.com>
References: <OFFEB914F2.79E02116-ON8825711D.0003AA81-8825711D.0003ECE9@us.ibm.com>
	<43FBB6F7.40209@plexpod.com>
Message-ID: <43FC0175.1050900@simmons.edu>

For my two cents, I've done something like this using ADODB. 
But maybe you loose the speed benifits by using ADODB instead of a 
straight call.
Does anyone know the difference of using repeated prepared statements 
and a systax where you could have a giant insert statement:

INSERT INTO table(c1,c2)
VALUES (v1.1,v2.1),..., (v1.n,v2.n)

I also found this resource useful:
http://dev.mysql.com/tech-resources/articles/4.1/prepared-statements.html

Andrew Yochum wrote:

>Daniel Krook wrote:
>  
>
>>Hello all,
>>
>>I'm trying to send parameters to a prepared statement using the mysqli 
>>extension.
>>
>>The manual shows that it is used like this:
>>  $stmt = $mysqli->prepare("INSERT INTO CountryLanguage VALUES (?, ?, ?, 
>>?)");
>>  $stmt->bind_param('sssd', $code, $language, $official, $percent);
>>
>>Where bind_param can take any number of values like so:
>>  $stmt->bind_param('s', $foo);
>>  $stmt->bind_param('si', $foo, $bar);
>>  $stmt->bind_param('sid', $foo, $bar, $baz); 
>> 
>>Unfortunately, I can't be sure of the number of placeholders in the SQL 
>>statement I am sending, and don't know how many corresponding parameters 
>>are in an array I pass to my function.  I would like to replicate this 
>>functionality that I use in the Unified ODBC extension:
>>  $stmt = odbc_prepare($db, $sql);
>>  $result = odbc_execute($stmt, $params); 
>> 
>>With bind_param it would seem I'd have to construct the bind_param call 
>>manually and then eval() it to get the same flexibility.  This is what I'd 
>>like to be able to do:
>>  $stmt->bind_param($aSeriesOfLettersDependingOnParamsSize, $params);
>>
>>This would seem like something I'd need to do but haven't been able to 
>>figure out how to pull it off:
>>  eval(sprintf('$stmt->bind_param("sss...", %s, %s, %s, ...);') $params);
>> 
>>Is there a solution to this that anyone has run into?  Am I overlooking 
>>something really obvious (anytime eval() comes into play I get that 
>>feeling...)
>>    
>>
>
>I know that feeling. :)
>
>How about using call_user_func_array()?
>
>Something like:
>	array_unshift('sql ? ? ?', $params);
>	call_user_func_array(array($stmt, 'bind_param'), $params);
>
>HTH,
>Andrew
>
>  
>



From artzi at avaya.com  Wed Feb 22 03:03:39 2006
From: artzi at avaya.com (Artzi, Yoav (Yoav))
Date: Wed, 22 Feb 2006 10:03:39 +0200
Subject: [nycphp-talk] =?iso-8859-1?q?=28no_subject=29?=
Message-ID: <AAB4B3D3CF0F454F98272CBE187FDE2F0A1177FB@is0004avexu1.global.avaya.com>

I have the following system for cross compilation: a computer on which I
build, on which the file system of the target computer is mounted. So, I
do the compile and everything, no problem, pointing to the libraries I
need (I compile with OpenSSL) by their location on the compilation
computer. When I switch to the target computer, the libs are there, but
of course on a different path, and PHP doesn't want to run, pointing to
unable to find the libs. It doesn't help to put them in the PATH. PHP
won't run unless I create for them a PATH exactly like it was on the
compilation computer. 
 
Any idea? There must be a simple way to solve it that I dont't know.
Oh, and, of course,  I don't want to compile with static libraries as
it's a waste of dear space.
 
Thanks.
 
 
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060222/7d6fcf92/attachment.html>

From lamolist at cyberxdesigns.com  Wed Feb 22 10:08:14 2006
From: lamolist at cyberxdesigns.com (Hans Kaspersetz)
Date: Wed, 22 Feb 2006 10:08:14 -0500
Subject: [nycphp-talk] Debugging Remote Problem - Solved
In-Reply-To: <43FBAFFC.8010105@cyberxdesigns.com>
References: <43FB5560.8000008@cyberxdesigns.com>	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>	<43FB6D7C.7050205@cyberxdesigns.com>	<43FB7825.1050401@plexpod.com>	<43FB799F.2070600@tgaconnect.com>
	<43FBAFFC.8010105@cyberxdesigns.com>
Message-ID: <43FC7E5E.2010103@cyberxdesigns.com>

The problem came down to Joomla and Mambo using the user's IP address 
authenticate users.  When users come from a proxy farm their IP address 
changes mid session and they loose the data that connects them to the 
stored session data and the user is logged out.

I would suggest reading: 
http://www.mambers.com/showthread.php?p=127067#post127067

 From the post:
----------------  snip -------------
The problem, as another poster outlined above, is that Mambo is using 
the users ip address to authenticate sessions ($_SERVER['REMOTE_ADDR']), 
and AOL users who use the AOL browser are coming through proxy banks, 
and could potentially have one of up to 128 different ip addresses for 
every separate page request.
----------------- end snip --------

When reading this post just substitute the word proxy farm for AOL.

I have implemented his suggested hack:

--------

|$test = explode('.', $_SERVER['REMOTE_ADDR']);
unset ($test[3]);
$test = join('.', $test);

------

My users in SA seem to be using the site successfully now.  One major 
problem with this hack is that you have to modify Mambo.php.  I hate 
making changes to the core of an application because now I have to track 
this thing and apply patches into the future manually or reapply my 
patch after the update.

Remember to apply this fix to any of your custom code that relies on 
session data.

I hope this helps, it certainly helped me.

Hans Kaspersetz
Cyber X Designs
http://www.cyberxdesigns.com

|


>> If a proxy is in the way
>> maybe this will help
>>
>>
>> http://forum.mamboserver.com/showthread.php?t=18759
>>
>>
>>
>>   
>>     



From andrew at plexpod.com  Wed Feb 22 10:17:21 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Wed, 22 Feb 2006 10:17:21 -0500
Subject: [nycphp-talk] (no subject)
In-Reply-To: <AAB4B3D3CF0F454F98272CBE187FDE2F0A1177FB@is0004avexu1.global.avaya.com>
References: <AAB4B3D3CF0F454F98272CBE187FDE2F0A1177FB@is0004avexu1.global.avaya.com>
Message-ID: <43FC8081.9070404@plexpod.com>

Artzi, Yoav (Yoav) wrote:
> I have the following system for cross compilation: a computer on which I
> build, on which the file system of the target computer is mounted. So, I
> do the compile and everything, no problem, pointing to the libraries I
> need (I compile with OpenSSL) by their location on the compilation
> computer. When I switch to the target computer, the libs are there, but
> of course on a different path, and PHP doesn't want to run, pointing to
> unable to find the libs. It doesn't help to put them in the PATH. PHP
> won't run unless I create for them a PATH exactly like it was on the
> compilation computer.
>  
> Any idea? There must be a simple way to solve it that I dont't know.
> Oh, and, of course,  I don't want to compile with static libraries as
> it's a waste of dear space.
>  
> Thanks.

Make sure the path to your libs is in your dynamic linker configuration,
usually found in /etc/ld.so.conf and then run ldconfig.  See "man 8
ldconfig" for more info.

HTH,
Andrew
-- 
Andrew Yochum
Plexpod
andrew at plexpod.com
718-360-0879


From mitch.pirtle at gmail.com  Wed Feb 22 10:52:57 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Wed, 22 Feb 2006 10:52:57 -0500
Subject: [nycphp-talk] Debugging Remote Problem - Solved
In-Reply-To: <43FC7E5E.2010103@cyberxdesigns.com>
References: <43FB5560.8000008@cyberxdesigns.com>
	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>
	<43FB6D7C.7050205@cyberxdesigns.com> <43FB7825.1050401@plexpod.com>
	<43FB799F.2070600@tgaconnect.com> <43FBAFFC.8010105@cyberxdesigns.com>
	<43FC7E5E.2010103@cyberxdesigns.com>
Message-ID: <330532b60602220752y5a6e838dy1e8654c11862c05e@mail.gmail.com>

On 2/22/06, Hans Kaspersetz <lamolist at cyberxdesigns.com> wrote:
> The problem came down to Joomla and Mambo using the user's IP address
> authenticate users.  When users come from a proxy farm their IP address
> changes mid session and they loose the data that connects them to the
> stored session data and the user is logged out.

Forwarded to the Joomla core devs, and I will be following up on this one...

--
Mitch Pirtle, thinking they had switched to cookies, maybe for 1.1
Joomla! Core Developer
Open Source Matters


From mitch.pirtle at gmail.com  Wed Feb 22 11:37:13 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Wed, 22 Feb 2006 11:37:13 -0500
Subject: [nycphp-talk] Debugging Remote Problem - Solved
In-Reply-To: <330532b60602220752y5a6e838dy1e8654c11862c05e@mail.gmail.com>
References: <43FB5560.8000008@cyberxdesigns.com>
	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>
	<43FB6D7C.7050205@cyberxdesigns.com> <43FB7825.1050401@plexpod.com>
	<43FB799F.2070600@tgaconnect.com> <43FBAFFC.8010105@cyberxdesigns.com>
	<43FC7E5E.2010103@cyberxdesigns.com>
	<330532b60602220752y5a6e838dy1e8654c11862c05e@mail.gmail.com>
Message-ID: <330532b60602220837v613b9d04l8c7a99a337ecf691@mail.gmail.com>

Aha, I was right! We switched away from IP reliance in the upcoming
1.0.8 release, as well as the newer 1.1 development release, see Rey's
comments below about the 1.0.x series:

++++++++++++++++++++++++++++++++++++++++++++++++++++++
It is addressed in 1.0.8, suggest you tell them to read my blog here:
http://dev.joomla.org/component/option,com_jd-wp/Itemid,33/p,28/

Basically they will have an option to use session id generated from
only first 3 values of IP address instead of full IP, which should
alleviate such problems.  However full IP address (which is more
secure) is the default behaviour.

Note this makes session ids slightly less secure (not checking against
full IP), However the addition of mosConfig_secret and user agent info
will make the generated session id more secure than 1.0.7 and below.
++++++++++++++++++++++++++++++++++++++++++++++++++++++

Cross-posting as it is relevant info for the Joomla SIG.

-- Mitch

On 2/22/06, Mitch Pirtle <mitch.pirtle at gmail.com> wrote:
> On 2/22/06, Hans Kaspersetz <lamolist at cyberxdesigns.com> wrote:
> > The problem came down to Joomla and Mambo using the user's IP address
> > authenticate users.  When users come from a proxy farm their IP address
> > changes mid session and they loose the data that connects them to the
> > stored session data and the user is logged out.
>
> Forwarded to the Joomla core devs, and I will be following up on this one...
>
> --
> Mitch Pirtle, thinking they had switched to cookies, maybe for 1.1
> Joomla! Core Developer
> Open Source Matters
>


--
--
Mitch Pirtle
Joomla! Core Developer
Open Source Matters


From chsnyder at gmail.com  Wed Feb 22 12:16:06 2006
From: chsnyder at gmail.com (csnyder)
Date: Wed, 22 Feb 2006 12:16:06 -0500
Subject: [nycphp-talk] Debugging Remote Problem - Solved
In-Reply-To: <330532b60602220837v613b9d04l8c7a99a337ecf691@mail.gmail.com>
References: <43FB5560.8000008@cyberxdesigns.com>
	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>
	<43FB6D7C.7050205@cyberxdesigns.com> <43FB7825.1050401@plexpod.com>
	<43FB799F.2070600@tgaconnect.com> <43FBAFFC.8010105@cyberxdesigns.com>
	<43FC7E5E.2010103@cyberxdesigns.com>
	<330532b60602220752y5a6e838dy1e8654c11862c05e@mail.gmail.com>
	<330532b60602220837v613b9d04l8c7a99a337ecf691@mail.gmail.com>
Message-ID: <b76252690602220916v740d5173g2ef06a741ab00dc7@mail.gmail.com>

On 2/22/06, Mitch Pirtle <mitch.pirtle at gmail.com> wrote:
> Aha, I was right! We switched away from IP reliance in the upcoming
> 1.0.8 release, as well as the newer 1.1 development release, see Rey's
> comments below about the 1.0.x series:
>

Yeah, I can see where IP address checking could be considered a layer
of security "onion" but it only prevents some classes of attack.
Anybody in a position to sniff a session id and use it to create their
own requests is probably also in a position to spoof the IP address on
the packet.

I'm thinking specifically of what might happen if you access your site
using a compromised router, or if someone on your wifi network was
doing packet sniffing.

What are you preventing, then, by checking the IP address? Cross-site
scripting attacks, where the attacker is on another network. That's
pretty big, but you can't assume that all attacks will originate on a
separate network.

--
Chris Snyder
http://chxo.com/

From chsnyder at gmail.com  Wed Feb 22 12:34:38 2006
From: chsnyder at gmail.com (csnyder)
Date: Wed, 22 Feb 2006 12:34:38 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <26865-82008@sneakemail.com>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
	<p06230904c01fd6b84d73@192.168.0.100>
	<8d9a42800602201301q57212f4fp65dc174e41cdc4d1@mail.gmail.com>
	<26865-82008@sneakemail.com>
Message-ID: <b76252690602220934q3cb05d45ubf01146d56ce39e0@mail.gmail.com>

On 2/20/06, inforequest <1j0lkq002 at sneakemail.com> wrote:
> Joseph Crawford codebowl-at-gmail.com |nyphp dev/internal group use| wrote:
>
> > i would also suggest weberdev as i contribute there when i have the time.
> >
> > i am surprised though that no one suggested www.devshed.com
> > <http://www.devshed.com>
> >
> I guess I am tainted because I know how much money some of those sites
> have made of off  "free" user-submitted content :-)
>
> -=john andrews
> http://www.seo-fun.com


If you have written any useful code (and I'm sure you have!) that you
would be willing to "support" as open source, publish it on your site
and create a FreshMeat record for it. That's a little different from
just posting code somewhere, because you retain control over the
content.

Also, don't be afraid of a little self-promotion. Where is the URL in
your signature when you post to this list (and others)? Come on, man!

Maybe it's time to start the member-blog-aggregation service at
rss.nyphp.org...

--
Chris Snyder
http://chxo.com/

From mitch.pirtle at gmail.com  Wed Feb 22 12:53:34 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Wed, 22 Feb 2006 12:53:34 -0500
Subject: [nycphp-talk] Debugging Remote Problem - Solved
In-Reply-To: <b76252690602220916v740d5173g2ef06a741ab00dc7@mail.gmail.com>
References: <43FB5560.8000008@cyberxdesigns.com>
	<b76252690602211108o76d3340ew6170ad1411fd8cf1@mail.gmail.com>
	<43FB6D7C.7050205@cyberxdesigns.com> <43FB7825.1050401@plexpod.com>
	<43FB799F.2070600@tgaconnect.com> <43FBAFFC.8010105@cyberxdesigns.com>
	<43FC7E5E.2010103@cyberxdesigns.com>
	<330532b60602220752y5a6e838dy1e8654c11862c05e@mail.gmail.com>
	<330532b60602220837v613b9d04l8c7a99a337ecf691@mail.gmail.com>
	<b76252690602220916v740d5173g2ef06a741ab00dc7@mail.gmail.com>
Message-ID: <330532b60602220953v71a65ce5o899693b69b8a5384@mail.gmail.com>

On 2/22/06, csnyder <chsnyder at gmail.com> wrote:
> What are you preventing, then, by checking the IP address? Cross-site
> scripting attacks, where the attacker is on another network. That's
> pretty big, but you can't assume that all attacks will originate on a
> separate network.

As you stated earlier in your response, this is just one layer of the
security onion. We've also incorporated quite a few enhancements to
the 1.1 session class. There is no one quick fix to the problem, and
that is why we decided to tackle the challenge with a variety of
approaches.

We just did an internal security audit of 1.0.7, and the upcoming
1.0.8 is the result of that. I've asked several times if any FOSS
security aficionados wanted to participate in a security audit of
Joomla code (even asked back in the Mambo years) but alas, no takers
to date.  (hint, hint)

I'd like an external entity to take a look, as we are too familiar
with our own code, and when you stare at the same thing every day you
manage to stop noticing the cracks and imperfections on your own.

--
Mitch Pirtle
Joomla! Core Developer
Open Source Matters


From prusak at gmail.com  Wed Feb 22 13:15:58 2006
From: prusak at gmail.com (Ophir Prusak)
Date: Wed, 22 Feb 2006 13:15:58 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <b76252690602220934q3cb05d45ubf01146d56ce39e0@mail.gmail.com>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
	<p06230904c01fd6b84d73@192.168.0.100>
	<8d9a42800602201301q57212f4fp65dc174e41cdc4d1@mail.gmail.com>
	<26865-82008@sneakemail.com>
	<b76252690602220934q3cb05d45ubf01146d56ce39e0@mail.gmail.com>
Message-ID: <f1dc81bb0602221015g4b4fb6f9yab12ab20f6ed283c@mail.gmail.com>

On 2/22/06, csnyder <chsnyder at gmail.com> wrote:
>
> If you have written any useful code (and I'm sure you have!) that you
> would be willing to "support" as open source, publish it on your site
> and create a FreshMeat record for it. That's a little different from
> just posting code somewhere, because you retain control over the
> content.
>
> Also, don't be afraid of a little self-promotion. Where is the URL in
> your signature when you post to this list (and others)? Come on, man!
>
> Maybe it's time to start the member-blog-aggregation service at
> rss.nyphp.org...
>
> --
> Chris Snyder
> http://chxo.com/
> _______________________________________________

Great suggestions ;)

--
Ophir Prusak
http://www.prusak.com


From dwclifton at gmail.com  Wed Feb 22 15:33:40 2006
From: dwclifton at gmail.com (Douglas Clifton)
Date: Wed, 22 Feb 2006 15:33:40 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
Message-ID: <7d6cdcb0602221233o3d8b878dob50c860c97519e3e@mail.gmail.com>

Perhaps your site might get a few more visitors, for
instance from members of this list, if you posted your
message with a signature that includes a link to this
site? I can give you some suggestions, and pointers
to places that may publish your material, but it sure
would be nice to check out some of your existing
content first!

--
Douglas Clifton
dwclifton at gmail.com
http://loadaveragezero.com/
http://loadaveragezero.com/app/s9y/
http://loadaveragezero.com/drx/rss/recent

> From: "Ophir Prusak" <prusak at gmail.com>
> To: "NYPHP Talk" <talk at lists.nyphp.org>
> Date: Mon, 20 Feb 2006 14:18:21 -0500
> Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
> hi all.
>
> a while back I converted my personal web site into a blog (wordpress)
> so I can easily start expressing my self through articles that I think
> some people might find helpful. I'm a web developer with lots of
> experience in php / databases so most of the articles have been about
> web dev (programming / databases stuff).
>
> this morning I was looking at the stats of my site - i get about 10
> visitors a day.
>
> so, I've decided that I should start writing on some other site that
> gets more exposure where hopefully more people can benefit from my
> writings.
>
> The first place that comes to mind is sitepoint which seems to have a
> broad coverage of topics and strong reader base.
>
> I was wondering what other sites people would suggest for writing
> articles about web dev stuff besides the obvious nyphp.org :) ?
>
> tia,
> ophir

From 1j0lkq002 at sneakemail.com  Wed Feb 22 17:48:18 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Wed, 22 Feb 2006 14:48:18 -0800
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <7d6cdcb0602221233o3d8b878dob50c860c97519e3e@mail.gmail.com>
References: <7d6cdcb0602221233o3d8b878dob50c860c97519e3e@mail.gmail.com>
Message-ID: <25070-39612@sneakemail.com>

Douglas Clifton dwclifton-at-gmail.com |nyphp dev/internal group use| 
wrote:

>Perhaps your site might get a few more visitors, for  instance from members of this list, if you posted your message with a signature that includes a link to this
>site? I can give you some suggestions, and pointers to places that may publish your material, but it sure would be nice to check out some of your existing
>content first!
>  
>

Might be nice to see more people hosting the NYPHP.org member logo as well :

http://www.nyphp.org/show_participation.php

-=john andrews
http://www.seo-fun.com



From codebowl at gmail.com  Wed Feb 22 17:53:45 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Wed, 22 Feb 2006 17:53:45 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <25070-39612@sneakemail.com>
References: <7d6cdcb0602221233o3d8b878dob50c860c97519e3e@mail.gmail.com>
	<25070-39612@sneakemail.com>
Message-ID: <8d9a42800602221453t63b7bc8cv108e0f57d982dcc5@mail.gmail.com>

i had no idea that link existed, it will be placed on my new site as soon as
it is up ;)


--
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
http://www.codebowl.com/
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060222/2b29760f/attachment.html>

From michael.southwell at nyphp.org  Wed Feb 22 18:20:19 2006
From: michael.southwell at nyphp.org (Michael Southwell)
Date: Wed, 22 Feb 2006 18:20:19 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <8d9a42800602221453t63b7bc8cv108e0f57d982dcc5@mail.gmail.co m>
References: <7d6cdcb0602221233o3d8b878dob50c860c97519e3e@mail.gmail.com>
	<25070-39612@sneakemail.com>
	<8d9a42800602221453t63b7bc8cv108e0f57d982dcc5@mail.gmail.com>
Message-ID: <6.2.3.4.2.20060222181752.0250d1a8@mail.optonline.net>

An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060222/fccd8227/attachment.html>

From mailinglists at caseysoftware.com  Wed Feb 22 18:24:50 2006
From: mailinglists at caseysoftware.com (Keith Casey)
Date: Wed, 22 Feb 2006 18:24:50 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
Message-ID: <43FCF2C2.3050703@caseysoftware.com>

I run CodeSnipers ( http://codesnipers.com/ ).  We're a general software 
development site but we have a trio of factions that share ideas, 
information, etc.

The first and probably loudest factions is PHP led by Nola Stowe.  You 
might have seen her articles syndicated to PHPDeveloper and some other 
places.  I think she's planning to go to NYPHP Conf.

The second and most excitable is the Rails crowd led by Caleb Tennis. 
He's an author with the Pragmatic Programmers and one of O'Reilly's Ruby 
bloggers.

Finally, there's everything else...  Gavin Bowman is big in the mISV 
crowd, we have a couple C/C++ people lurking around, there's a bit of 
Perl and Java hiding in there, and I regularly interview people 
throughout the community (Mike Ho of QCodo and Chris Shiflett were in 
the last couple months).

According to Technorati, we're in the top 30k blogs... and we generate a 
fair amount of traffic.  Oh, and it's all built on Drupal with some nice 
modules and custom extensions.  By default, all content on the site is 
treated as "Attribution-NonCommercial-ShareAlike 2.5".

If you or anyone else is interested in contributing, please feel free.

Keith

-- 
D. Keith Casey Jr.
CEO, CaseySoftware, LLC
http://CaseySoftware.com


From Consult at CovenantEDesign.com  Wed Feb 22 18:25:51 2006
From: Consult at CovenantEDesign.com (CED)
Date: Wed, 22 Feb 2006 18:25:51 -0500
Subject: [nycphp-talk] Big Banner
Message-ID: <00cf01c63807$525ad990$1519a8c0@ced>

Incase anyone is interested, feel free to use these:

http://edwardprevost.info/images/banners/nyphporgmember_lg.gif
http://edwardprevost.info/images/banners/nyphporgmember_lgtags.gif


Hope I haven't crossed any boundaries. =D


Edward J Prevost II
Senior Applications Specialist
SIS Project, Data Migration Lead
Albany Medical College
Albany Medical Center
Edward.Prevost at amc.edu
desk |  518.262.2743
cell |  518.331.5061

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060222/1ad46a45/attachment.html>

From 1j0lkq002 at sneakemail.com  Wed Feb 22 19:08:52 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Wed, 22 Feb 2006 16:08:52 -0800
Subject: [nycphp-talk] [OT] Re: best place to post articles (other than
	nyphp.org)
In-Reply-To: <43FCF2C2.3050703@caseysoftware.com>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
	<43FCF2C2.3050703@caseysoftware.com>
Message-ID: <17529-59385@sneakemail.com>

Keith Casey mailinglists-at-caseysoftware.com |nyphp dev/internal group 
use| wrote:

>I run CodeSnipers ( http://codesnipers.com/ ).  We're a general software 
>development site but we have a trio of factions that share ideas, 
>information, etc.
>
>  
>
Keith,

You may want to fix that Drupal installation so that you don't have 
PHPSESSID in the URLs. While it does appear Google is indexing some of 
them (it didn't used to index those at all) there are good reasons for 
the search engines to de-prioritze deep crawling sites with sessids 
because they represent an opportunity for crawl bots to get trapped.

See 
http://www.google.com/search?q=site:codesnipers.com&hl=en&lr=&start=90&sa=N

Only 997 pages indexed, and only 550 or so permited to show as results 
of search queries. Of those 550, only 20 or so have PHPSESSID in the 
URL. Like I said, I do see some indexed, but conventional wisdom is that 
the sessid in the url is holding you back.
 
(the php_trans_sessid and use_cookies settings in php.ini might be 
helpful there).

You may also want to try the pathauto module which IMHO really rocks.If 
you do so on 4.6.x, however, it needs a manual patch (available as a 
diff from the .org site).

Hope that was helpful.

-=john andrews
http://www.seo-fun.com
================================================================================================================================================================
License: this post and it's contents are distributed under the new 
"EgoBoost Attribution License". By reading these words, you agree to put 
a backlink to the author using the anchor text "best seo" on at least 10 
websites. Since you have already read these words, what are you waiting 
for? You are inviolation of your license! Get to work on those back links!





From krook at us.ibm.com  Wed Feb 22 20:20:12 2006
From: krook at us.ibm.com (Daniel Krook)
Date: Wed, 22 Feb 2006 17:20:12 -0800
Subject: [nycphp-talk] Calling mysqli_stmt_bind_param with arbitrary
 number of parameters?
In-Reply-To: <43FC0175.1050900@simmons.edu>
Message-ID: <OF2A7C4D30.D4993CEE-ON8825711E.0007272C-0825711E.000756D1@us.ibm.com>

Andrew, Dan and Jonathan,

Thanks for the tips.  I'll look into call_user_func_array and see if I can 
get the result I want.   I'll post back a summary when I discover a 
solution.

Thanks,
-Dan



Daniel Krook, Content Tools Developer
Global Production Services - Tools, ibm.com

http://bluepages.redirect.webahead.ibm.com/
http://blogpages.redirect.webahead.ibm.com/
http://bookmarks.redirect.webahead.ibm.com/




From jonbaer at jonbaer.com  Wed Feb 22 21:40:38 2006
From: jonbaer at jonbaer.com (Jon Baer)
Date: Wed, 22 Feb 2006 21:40:38 -0500
Subject: [nycphp-talk] Yahoo! Developer Network - PHP Developer Center
Message-ID: <AE74886B-3FE6-41EC-9CC3-0950B610C4AA@jonbaer.com>

Via Jeremy Zawodny ...

"Woohoo! The PHP Development Center is now live on the Yahoo!  
Developer Network. It's full of useful code samples, advice, and  
HOWTO documents for plugging into our growing army of Web Services  
using the world's most popular server-side web scripting language: PHP."

http://developer.yahoo.net/php/

Good stuff.

- Jon








From mitch.pirtle at gmail.com  Thu Feb 23 00:30:19 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Thu, 23 Feb 2006 00:30:19 -0500
Subject: [nycphp-talk] [joomla] Joomla training
Message-ID: <330532b60602222130j61d0c1bbpb551be5e5689ceaa@mail.gmail.com>

Second crosspost of the week, my apologies.

On 2/10/06, Dan Gisolfi <gisolfi at us.ibm.com> wrote:
>
> Jeff Phelps @ Clearmark wrote: Any other info on this?  Location, time,
> date, etc.
>
> See: www.jamboworks.com and click on Education Services

Which now finally has content, including an online
payment/registration system, thanks to a slightly chopped and
repurposed gigCalendar.

JamboWorks, IBM and MicroTek partner to bring professional training to
Joomla developers and content managers, with a very targeted, hands-on
approach geared to get you productive as soon as possible.

I'm personally quite excited about this, as it has been a long time
coming and is in great need. Looking forward to growing the Joomla
community in the NYC area, as well as adding more professional
developers to the Joomla ecosystem!

http://www.jamboworks.com/content/view/27/51/

--
Mitch Pirtle
Joomla! Core Developer
Open Source Matters


From lists at zaunere.com  Thu Feb 23 08:53:35 2006
From: lists at zaunere.com (Hans Zaunere)
Date: Thu, 23 Feb 2006 08:53:35 -0500
Subject: [nycphp-talk] Big Banner
In-Reply-To: <00cf01c63807$525ad990$1519a8c0@ced>
Message-ID: <006501c63880$8b6f62e0$6401a8c0@MZ>



CED wrote on Wednesday, February 22, 2006 6:26 PM:
> Incase anyone is interested, feel free to use these:
> 
> http://edwardprevost.info/images/banners/nyphporgmember_lg.gif
> http://edwardprevost.info/images/banners/nyphporgmember_lgtags.gif
> 
> 
> Hope I haven't crossed any boundaries. =D

Not at all - thanks Edward for the helping hand - much appreciated.


---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com





From SHalter at ThorntonTomasetti.com  Thu Feb 23 10:02:13 2006
From: SHalter at ThorntonTomasetti.com (Halter, Shari)
Date: Thu, 23 Feb 2006 10:02:13 -0500
Subject: [nycphp-talk] Preventing spam with php mail function
Message-ID: <AA081BBF5AEED7118ADF00065B3929D90EC51521@ny1post.windows.thettgroup.com>

I have just joined this mailing list, and hope to attend the next meeting on
Tuesday.  I hope this question is not too rudimentary for this group.

Is there a widely-accepted solution to prevent spammers from exploiting the
php mail function (as forwarded from HTML forms, for instance)?  I have seen
several out there, but is there any particular approach that is considered
best?  The less elaborate, the better --I don't really need Pentagon level
security-- but right now there is nothing and the site owners are getting
swamped with spam.

I would appreciate any quick pointers you could offer.

Shari Halter




We've Moved!

Our new address is 51 Madison Avenue, New York, NY 10010.
Our telephone and fax numbers remain the same.

Shari L. Halter
Web Programmer
Thornton Tomasetti
51 Madison Avenue
New York, NY  10010
T 917.661.7800  F 917.661.7801  
D 917.661.7970  
SHalter at ThorntonTomasetti.com



<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
The information in this email and any attachments may contain
confidential information that is intended solely for the
attention and use of the named addressee(s).  This message or
any part thereof must not be disclosed, copied, distributed or
retained by any person without authorization from the addressee.
If you are not the intended addressee, please notify the sender
immediately, and delete this message. 
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060223/1c6ec269/attachment.html>

From agfische at email.smith.edu  Thu Feb 23 12:01:28 2006
From: agfische at email.smith.edu (Aaron Fischer)
Date: Thu, 23 Feb 2006 12:01:28 -0500
Subject: [nycphp-talk] Testing session authentication - multiple apps
Message-ID: <43FDEA68.6090700@email.smith.edu>

Greetings all, apologies if this is a boringly rudimentary question...

I am curious as to one aspect of how sessions work.  Say a user has a 
few different session cookies that have been set by my site from 
different apps.  When they visit one app and I start the session and 
check an identifier such as an authentication variable, how does the 
session mechanism know which session cookie to check? 

Not sure what I'm missing here.  Or perhaps I'm not missing anything and 
I need to uniquely identify each session using session_name() or use 
different session authentication vars in each app (e.g. 
$_SESSION['postcard_auth'] = true; in one, $_SESSION['dbmanage_auth'] = 
true; in another, etc.).

Any info would be helpful.

Thanks,

-Aaron



From tgales at tgaconnect.com  Thu Feb 23 12:47:09 2006
From: tgales at tgaconnect.com (Tim Gales)
Date: Thu, 23 Feb 2006 12:47:09 -0500
Subject: [nycphp-talk] Testing session authentication - multiple apps
In-Reply-To: <43FDEA68.6090700@email.smith.edu>
References: <43FDEA68.6090700@email.smith.edu>
Message-ID: <43FDF51D.20102@tgaconnect.com>

Aaron Fischer wrote:
...

> I am curious as to one aspect of how sessions work.  Say a user has a 
> few different session cookies that have been set by my site from 
> different apps.  When they visit one app and I start the session and 
> check an identifier such as an authentication variable, how does the 
> session mechanism know which session cookie to check? 

David Lane & Hugh E. Williams give some background on sessions
in their book 'Web Database Applications with PHP & MySQL'

http://www.oreilly.com/catalog/webdbapps/chapter/ch08.html

-- 

T. Gales & Associates
'Helping People Connect with Technology'

http://www.tgaconnect.com


From jeff.loiselle at gmail.com  Thu Feb 23 14:56:31 2006
From: jeff.loiselle at gmail.com (Jeff Loiselle)
Date: Thu, 23 Feb 2006 14:56:31 -0500
Subject: [nycphp-talk] PHP Quebec
Message-ID: <4b1887110602231156i54e19b4bw44e44209b07952c7@mail.gmail.com>

Any discounts for NYPHP members this year for PHP Quebec Conference? ;-)

---
Jeff Loiselle
Web Developer, Musician, and Observer
http://jeff.loiselles.com


From chsnyder at gmail.com  Thu Feb 23 15:00:16 2006
From: chsnyder at gmail.com (csnyder)
Date: Thu, 23 Feb 2006 15:00:16 -0500
Subject: [nycphp-talk] Preventing spam with php mail function
In-Reply-To: <AA081BBF5AEED7118ADF00065B3929D90EC51521@ny1post.windows.thettgroup.com>
References: <AA081BBF5AEED7118ADF00065B3929D90EC51521@ny1post.windows.thettgroup.com>
Message-ID: <b76252690602231200u67a09b3ma357f4a22cbe2de1@mail.gmail.com>

On 2/23/06, Halter, Shari <SHalter at thorntontomasetti.com> wrote:
>
>
> I have just joined this mailing list, and hope to attend the next meeting on
> Tuesday.  I hope this question is not too rudimentary for this group.
>
> Is there a widely-accepted solution to prevent spammers from exploiting the
> php mail function (as forwarded from HTML forms, for instance)?  I have seen
> several out there, but is there any particular approach that is considered
> best?  The less elaborate, the better --I don't really need Pentagon level
> security-- but right now there is nothing and the site owners are getting
> swamped with spam.
>
> I would appreciate any quick pointers you could offer.
>
> Shari Halter
>


The best antidote for spam is, first and foremost, a good spam filter
on the email server. Maybe that's not the answer you're looking for,
but it is actually pretty hard to prevent scripts or dedicated humans
from POSTing to a public form on a website.

Aside from filtering messages on the email end, there are some things
you could try to make it harder to spam the form, or not worth the
effort:

1) remove the incentive. Why are people spamming your contact form?
What's in it for them? Do you post the submissions somewhere? Are the
owners a high-value spam target? Can a spammer craft a form submission
so that it gets sent to multiple recipients? Perhaps the form can be
changed to be less of a spam magnet.

2) require a valid HTTP_REFERER on form submission. This is easy for a
spammer to spoof, but they might decide not to bother. Only prevents
scripted abuse.

3) require the poster to decipher a captcha (words encoded as an
image, like Yahoo! uses on registration) Again, there are workarounds
for spammers, but would they bother?

4) Capture the IP address of the poster as part of the submission, and
use php or firewall to block the abusers. This only works if they're
not distributed.

I think a lot of people put up HTML contact forms a few years back
thinking that it would somehow protect them from spam, but it doesn't.

--
Chris Snyder
http://chxo.com/

From chsnyder at gmail.com  Thu Feb 23 15:29:53 2006
From: chsnyder at gmail.com (csnyder)
Date: Thu, 23 Feb 2006 15:29:53 -0500
Subject: [nycphp-talk] Testing session authentication - multiple apps
In-Reply-To: <43FDEA68.6090700@email.smith.edu>
References: <43FDEA68.6090700@email.smith.edu>
Message-ID: <b76252690602231229ga0083d6s279b7bff69268a2d@mail.gmail.com>

On 2/23/06, Aaron Fischer <agfische at email.smith.edu> wrote:
> Or perhaps I'm not missing anything and
> I need to uniquely identify each session using session_name() or use
> different session authentication vars in each app (e.g.
> $_SESSION['postcard_auth'] = true; in one, $_SESSION['dbmanage_auth'] =
> true; in another, etc.).


Bingo. session_name() called before session_start() will set the name
of the cookie used by PHP to track the session. If you have different
apps in the same domain name that can't share a session, then you can
give them each a unique cookie name.

Paranoid security note -- each app will be able to see the session ids
that are in use by the other applications, and could pull an "inside
job" to get the values associated with those other sessions, or send
spoofed requests to the other apps. If you want zero information
leakage you need to put the apps on separate domains.


--
Chris Snyder
http://chxo.com/

From agfische at email.smith.edu  Thu Feb 23 15:44:30 2006
From: agfische at email.smith.edu (Aaron Fischer)
Date: Thu, 23 Feb 2006 15:44:30 -0500
Subject: [nycphp-talk] Testing session authentication - multiple apps
In-Reply-To: <b76252690602231229ga0083d6s279b7bff69268a2d@mail.gmail.com>
References: <43FDEA68.6090700@email.smith.edu>
	<b76252690602231229ga0083d6s279b7bff69268a2d@mail.gmail.com>
Message-ID: <43FE1EAE.4010305@email.smith.edu>

Cool.  Interestingly enough I'm viewing the session cookies set by one 
of my apps and it appears that none of my parameters are being set (e.g. 
session name, expire time, etc.). 

I know this was working previously, but I'm not sure if I've checked 
this out since our server upgraded from PHP4 to PHP5, perhaps there is 
something inherent in the versions or our admins changed some ini 
settings.  I dunno, two steps forward, one step back it seems.  Time for 
more investigation.  Grumble.

-Aaron

csnyder wrote:

>
>Bingo. session_name() called before session_start() will set the name
>of the cookie used by PHP to track the session. If you have different
>apps in the same domain name that can't share a session, then you can
>give them each a unique cookie name.
>
>  
>



From SHalter at ThorntonTomasetti.com  Thu Feb 23 15:50:00 2006
From: SHalter at ThorntonTomasetti.com (Halter, Shari)
Date: Thu, 23 Feb 2006 15:50:00 -0500
Subject: [nycphp-talk] Preventing spam with php mail function
Message-ID: <AA081BBF5AEED7118ADF00065B3929D90ECDB34C@ny1post.windows.thettgroup.com>

Chris,

Thanks so much for your very thorough advice.  

There is no good scripting method or practice, then, that is better to use,
like validation or using include files instead of building the php code into
the form, itself?  (I've heard this could prevent some bots from sniffing
out the mail details.)

Shari


We've Moved!

Our new address is 51 Madison Avenue, New York, NY 10010.
Our telephone and fax numbers remain the same.


Shari L. Halter
Web Programmer
Thornton Tomasetti
51 Madison Avenue
New York, NY  10010
T 917.661.7800  F 917.661.7801  
D 917.661.7970  
SHalter at ThorntonTomasetti.com



-----Original Message-----
From: csnyder [mailto:chsnyder at gmail.com] 
Sent: Thursday, February 23, 2006 3:00 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] Preventing spam with php mail function

On 2/23/06, Halter, Shari <SHalter at thorntontomasetti.com> wrote:
>
>
> I have just joined this mailing list, and hope to attend the next 
> meeting on Tuesday.  I hope this question is not too rudimentary for this
group.
>
> Is there a widely-accepted solution to prevent spammers from 
> exploiting the php mail function (as forwarded from HTML forms, for 
> instance)?  I have seen several out there, but is there any particular 
> approach that is considered best?  The less elaborate, the better --I 
> don't really need Pentagon level
> security-- but right now there is nothing and the site owners are 
> getting swamped with spam.
>
> I would appreciate any quick pointers you could offer.
>
> Shari Halter
>


The best antidote for spam is, first and foremost, a good spam filter on the
email server. Maybe that's not the answer you're looking for, but it is
actually pretty hard to prevent scripts or dedicated humans from POSTing to
a public form on a website.

Aside from filtering messages on the email end, there are some things you
could try to make it harder to spam the form, or not worth the
effort:

1) remove the incentive. Why are people spamming your contact form?
What's in it for them? Do you post the submissions somewhere? Are the owners
a high-value spam target? Can a spammer craft a form submission so that it
gets sent to multiple recipients? Perhaps the form can be changed to be less
of a spam magnet.

2) require a valid HTTP_REFERER on form submission. This is easy for a
spammer to spoof, but they might decide not to bother. Only prevents
scripted abuse.

3) require the poster to decipher a captcha (words encoded as an image, like
Yahoo! uses on registration) Again, there are workarounds for spammers, but
would they bother?

4) Capture the IP address of the poster as part of the submission, and use
php or firewall to block the abusers. This only works if they're not
distributed.

I think a lot of people put up HTML contact forms a few years back thinking
that it would somehow protect them from spam, but it doesn't.

--
Chris Snyder
http://chxo.com/
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
The information in this email and any attachments may contain
confidential information that is intended solely for the
attention and use of the named addressee(s).  This message or
any part thereof must not be disclosed, copied, distributed or
retained by any person without authorization from the addressee.
If you are not the intended addressee, please notify the sender
immediately, and delete this message. 
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>


From ldgphp at ldgmedia.com  Thu Feb 23 16:20:06 2006
From: ldgphp at ldgmedia.com (Lars Gelfan)
Date: Thu, 23 Feb 2006 16:20:06 -0500
Subject: [nycphp-talk] Preventing spam with php mail function
In-Reply-To: <AA081BBF5AEED7118ADF00065B3929D90ECDB34C@ny1post.windows.thettgroup.com>
Message-ID: <C0239136.10835%ldgphp@ldgmedia.com>


It's hard to know exactly what you mean by "exploiting the php mail
function" but Chris made some excellent suggestions.

If it's an issue of you including the email address as a hidden field (or
using "mailto" links anywhere on your site), then, yes that is an easy way
for bots to harvest the addresses. You should never include your email
addresses in a hidden form field, especially if that makes it possible for
someone to easily alter the form and use your server to send out spam. From
what I can tell, however, it sounds like the main problem is your company is
getting too much mail, not that someone is using your form as a relay.

If you are getting flooded with fake form submissions, there are multiple
strategies you can do, some of which were already mentioned, and the best
plan usually involves both client-side as well as server-side solutions.

One thing I might caution about using the HTTP_REFERER method is that many
"privacy" software applications filter this out (as I found out the hard way
on an e-commerce site once) and could prevent legit submissions. Certainly a
mix of cookies, session tracking, ip logging, "captchas", etc. would prevent
submission flooding.

And you can use JavaScript functions to replace "mailto" links to at least
slow down bot email harvesting.

-Lars




On 2/23/06 3:50 PM, "Halter, Shari" <SHalter at ThorntonTomasetti.com> wrote:

> Chris,
> 
> Thanks so much for your very thorough advice.
> 
> There is no good scripting method or practice, then, that is better to use,
> like validation or using include files instead of building the php code into
> the form, itself?  (I've heard this could prevent some bots from sniffing
> out the mail details.)
> 
> Shari


-- 

L A R S  G E L F A N
.....................
lars at ldgmedia.com
o: 212.267.5012
m: 917.554.4593



From lists at zaunere.com  Thu Feb 23 17:19:33 2006
From: lists at zaunere.com (Hans Zaunere)
Date: Thu, 23 Feb 2006 17:19:33 -0500
Subject: [nycphp-talk] Preventing spam with php mail function
In-Reply-To: <AA081BBF5AEED7118ADF00065B3929D90EC51521@ny1post.windows.thettgroup.com>
Message-ID: <00e401c638c7$3a1b41b0$6401a8c0@MZ>



Halter, Shari wrote on Thursday, February 23, 2006 10:02 AM:
> I have just joined this mailing list, and hope to attend the next meeting
> on Tuesday.  I hope this question is not too rudimentary for this group. 

Not at all - welcome, Shari...

> Is there a widely-accepted solution to prevent spammers from exploiting
> the php mail function (as forwarded from HTML forms, for instance)?  I
> have seen several out there, but is there any particular approach that is
> considered best?  The less elaborate, the better --I don't really need
> Pentagon level security-- but right now there is nothing and the site
> owners are getting swamped with spam.     
> 
> I would appreciate any quick pointers you could offer.

If I understand correctly, we have a PHundamentals article available for
this:

http://www.nyphp.org/phundamentals/email_header_injection.php


---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com





From 1j0lkq002 at sneakemail.com  Thu Feb 23 17:46:35 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Thu, 23 Feb 2006 14:46:35 -0800
Subject: [nycphp-talk] Preventing spam with php mail function
In-Reply-To: <00e401c638c7$3a1b41b0$6401a8c0@MZ>
References: <00e401c638c7$3a1b41b0$6401a8c0@MZ>
Message-ID: <9442-15870@sneakemail.com>

Hans Zaunere lists-at-zaunere.com |nyphp dev/internal group use| wrote:

> If I understand correctly, we have a PHundamentals article available for
>
>this:
>
>http://www.nyphp.org/phundamentals/email_header_injection.php
>
>  
>

Hans beat me to it. IMHO that article is one of the best on the web for 
addressing multi-part MIME exploits using contact forms. It is an 
advanced topic, though, but as with every "exploit"  if the coder 
suffered through the advanced topics early,  the learning process would 
be much less painful.

Basically it shows how even if you build a "safer" contact form, it may 
be used to insert spam because Internet mail systems permit mail 
messages to be inserted into other mail messages. The bottom line is 
that you have to filter every field of the mail your form will create 
and send, even if you don't collect those fields on your form (default 
fields and the like). Most people are filtering every field their form 
collects (which is not enough... you have to filter/control the defaults 
as well). That article also highlights the need to filter out newlines 
that might indictate an inserted message-within-a-message. It's a good 
article.

Chris' reply is excellent for the way it suggests you review the bigger 
picture of your security (not just the technology of the contact form). 
I completely agree, and would like to add more. Consider these ideas as 
a start:

Can your form be used to spoof an email so that it appears to come from 
someone within your company even though it really originated on your 
website, created by an outsider?

Could I use your form to send an email to the person who handles 
user-submitted requests, perhaps looking like an email from your web 
hosting company directing an update of shell account username/passwords etc?

Can your "change my password" form be used to change another user's 
password withoit prior permission/approval?

Does your contact-us form CC others in your organization prior to any 
adminsitrative review? You don't want obscene or harassing statements 
circulated within the company, or you could open up the company to civil 
liabilities. Similarly, if your organization is regulated (HIPAA, 
banking and finance, securities, etc) un-reviewed user submissions 
should not be circulated (copied to multiple places onclient machines etc).

Hope this helps.

-=johnandrews
http://www.seo-fun.com





From aarong at thinkcomputer.com  Thu Feb 23 18:13:20 2006
From: aarong at thinkcomputer.com (Aaron Greenspan)
Date: Thu, 23 Feb 2006 17:13:20 -0600
Subject: [nycphp-talk] Preventing spam with php mail function
Message-ID: <43FE4190.2040105@thinkcomputer.com>

Hi everyone,

I'm more interested in finding out what is causing the widespread 
exploitation of forms. I've written a paper on it (which references the 
NYPHP article), though I have admittedly little information. If anyone 
has anything to contribute, please let me know. I've logged about 80 
attempts at exploiting a form on my server today, and they're 
increasingly from the United States.

http://www.thinkcomputer.com/corporate/news/unabombersghost.pdf

Aaron

Aaron Greenspan
President & CEO
Think Computer Corporation

http://www.thinkcomputer.com


From chsnyder at gmail.com  Thu Feb 23 18:35:04 2006
From: chsnyder at gmail.com (csnyder)
Date: Thu, 23 Feb 2006 18:35:04 -0500
Subject: [nycphp-talk] Preventing spam with php mail function
In-Reply-To: <43FE4190.2040105@thinkcomputer.com>
References: <43FE4190.2040105@thinkcomputer.com>
Message-ID: <b76252690602231535l4fbcacd2r3a14bd572fa804c0@mail.gmail.com>

On 2/23/06, Aaron Greenspan <aarong at thinkcomputer.com> wrote:
> Hi everyone,
>
> I'm more interested in finding out what is causing the widespread
> exploitation of forms. I've written a paper on it (which references the
> NYPHP article), though I have admittedly little information. If anyone
> has anything to contribute, please let me know. I've logged about 80
> attempts at exploiting a form on my server today, and they're
> increasingly from the United States.
>
> http://www.thinkcomputer.com/corporate/news/unabombersghost.pdf
>
> Aaron
>

Eh, viruses happen. Malware happens. Heck, you could use a cross-site
scripting attack to perform this kind of spamming using Ajax requests.

It doesn't really matter what's causing the attacks, because there
will always be something ready to step up and exploit the scripts
until they get fixed. There are plenty of people out there running old
perl scripts that turn their web servers into open mail relays, at
least most of the PHP contact form handlers I've seen haven't been
quite that naiive.

--
Chris Snyder
http://chxo.com/

From 1j0lkq002 at sneakemail.com  Thu Feb 23 18:53:32 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Thu, 23 Feb 2006 15:53:32 -0800
Subject: [nycphp-talk] Preventing spam with php mail function
In-Reply-To: <43FE4190.2040105@thinkcomputer.com>
References: <43FE4190.2040105@thinkcomputer.com>
Message-ID: <26917-90112@sneakemail.com>

As I recall, the majority of distributed denial of service (DDOS) 
attacks are now coming from compromised servers (check Netcraft). 
Consider this scenario:

Programming "company" creates website offering a free script to the 
world. Maybe it's a PHP script. Maybe it's a forum, or a directory 
script, or maybe it's a mod to one of those. The site is in a 
less-regulated place with a TLD ending in 2 letters. The coders are 
identified by monikers. The "AboutUs" looks one of those corporate 
templates we all love so much. The forum is full of "awesome dood... I 
need a script like this! But I can't get  it to work!" followed by admin 
responses like "no problem. PM me and I'll help you" and then "thanks 
dude! you rock! It works great!"

What we didn't see was the passing of shell access from user to unknown, 
overseas coder. Even if that didn't happen, is the script full of 
cross-site or other injection opportunities? Sure they are. Free support 
for a free script running on a low-cost shared hosting plan = 
compromised server (or compromisable).

Now after you see one of those blatantly exploitable free scripts 
gaining popularity, go file a report with Secunia or whomever. Unless 
you provide extensive details of the code and exploit potential, they 
won't publish it nor can they afford the time to look into it.

-=john andrews
http://www.seo-fun.com



From dwclifton at gmail.com  Fri Feb 24 00:42:35 2006
From: dwclifton at gmail.com (Douglas Clifton)
Date: Fri, 24 Feb 2006 00:42:35 -0500
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
Message-ID: <7d6cdcb0602232142m56d68d56ld09047dbd7041e64@mail.gmail.com>

> ---------- Forwarded message ----------
> From: "inforequest" <1j0lkq002 at sneakemail.com>
> To: talk at lists.nyphp.org
> Date: Wed, 22 Feb 2006 14:48:18 -0800
> Subject: Re: [nycphp-talk] best place to post articles (other than nyphp.org)
> Might be nice to see more people hosting the NYPHP.org member logo as well :
>
> http://www.nyphp.org/show_participation.php

One of the very first additions to my list of developer resources:

http://loadaveragezero.com/app/drx/Programming/Languages/PHP#nyphp:sig

--
Douglas Clifton
dwclifton at gmail.com
http://loadaveragezero.com/
http://loadaveragezero.com/app/s9y/
http://loadaveragezero.com/drx/rss/recent

From enolists at gmail.com  Fri Feb 24 00:50:06 2006
From: enolists at gmail.com (Mark Armendariz)
Date: Thu, 23 Feb 2006 21:50:06 -0800
Subject: [nycphp-talk] best place to post articles (other than nyphp.org)
In-Reply-To: <7d6cdcb0602232142m56d68d56ld09047dbd7041e64@mail.gmail.com>
Message-ID: <055d01c63906$2ce80cf0$6500a8c0@enobrev>

> 
> One of the very first additions to my list of developer resources:
> 
> http://loadaveragezero.com/app/drx/Programming/Languages/PHP#nyphp:sig
> 
> --
> Douglas Clifton

I was about to complain about the 4-star rating until I realized the only
5-star was the manual. 

Mark



From lists at zaunere.com  Fri Feb 24 08:29:15 2006
From: lists at zaunere.com (Hans Zaunere)
Date: Fri, 24 Feb 2006 08:29:15 -0500
Subject: [nycphp-talk] [OT] Our Signature
Message-ID: <003501c63946$4fbb3280$6401a8c0@MZ>


Well, it's true that our signature is perhaps a little busy, but hey, we
have a lot going on.  :)

> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk

This is mandatory... :)

> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com

So I'm sure most on this list have heard already, but we've launched a
significant PHP/open source/technology event, happening June 14-16, 2006.
We always are pleased to have people involved, whether it be via
sponsorship, speaking, or helping to spread the word.

For speakers, we're reaching out to local companies to learn how they're
using, integrating or even just considering PHP.

To help spread the word, all you need to do is check out the Show
Participation section:

http://www.nyphpcon.com/show_participation.php

We appreciate folks jotting a link or image on their sites, blogs, etc. and
if you'd like to participate as a media sponsor, please contact me offlist.

> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

And the above link, which is new, gives a way for people to show that
they're involved and helping NYPHP support the open source community.
Again, place a link or image anywhere that's convenient.


---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com







From SHalter at ThorntonTomasetti.com  Fri Feb 24 09:39:01 2006
From: SHalter at ThorntonTomasetti.com (Halter, Shari)
Date: Fri, 24 Feb 2006 09:39:01 -0500
Subject: [nycphp-talk] Preventing spam with php mail function
Message-ID: <AA081BBF5AEED7118ADF00065B3929D90ECDB742@ny1post.windows.thettgroup.com>

 
Thank you John and Hans.  Looking forward to meeting up on Tuesday.
Shari  


We've Moved!

Our new address is 51 Madison Avenue, New York, NY 10010.
Our telephone and fax numbers remain the same.


Shari L. Halter
Web Programmer
Thornton Tomasetti
51 Madison Avenue
New York, NY  10010
T 917.661.7800  F 917.661.7801  
D 917.661.7970  
SHalter at ThorntonTomasetti.com



-----Original Message-----
From: Hans Zaunere [mailto:lists at zaunere.com] 
Sent: Thursday, February 23, 2006 5:20 PM
To: 'NYPHP Talk'
Subject: Re: [nycphp-talk] Preventing spam with php mail function



Halter, Shari wrote on Thursday, February 23, 2006 10:02 AM:
> I have just joined this mailing list, and hope to attend the next 
> meeting on Tuesday.  I hope this question is not too rudimentary for this
group.

Not at all - welcome, Shari...

> Is there a widely-accepted solution to prevent spammers from 
> exploiting the php mail function (as forwarded from HTML forms, for 
> instance)?  I have seen several out there, but is there any particular 
> approach that is considered best?  The less elaborate, the better --I 
> don't really need Pentagon level security-- but right now there is nothing
and the site
> owners are getting swamped with spam.     
> 
> I would appreciate any quick pointers you could offer.

If I understand correctly, we have a PHundamentals article available for
this:

http://www.nyphp.org/phundamentals/email_header_injection.php


---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com



_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
The information in this email and any attachments may contain
confidential information that is intended solely for the
attention and use of the named addressee(s).  This message or
any part thereof must not be disclosed, copied, distributed or
retained by any person without authorization from the addressee.
If you are not the intended addressee, please notify the sender
immediately, and delete this message. 
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>


From mitch.pirtle at gmail.com  Fri Feb 24 11:47:32 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Fri, 24 Feb 2006 11:47:32 -0500
Subject: [nycphp-talk] Web Traffic Analytics
In-Reply-To: <3253-41807@sneakemail.com>
References: <3253-41807@sneakemail.com>
Message-ID: <330532b60602240847j21355f24kd1fa1d873445cb63@mail.gmail.com>

On 7/23/05, inforequest <1j0lkq002 at sneakemail.com> wrote:
> This is another case of convenience and perhaps customer ignorance trumping security. These are log-file analysis programs, which operate after-the-fact on server files which contain proprietary company data. Do they really need to be "live" on a public web server?

I'd like to revive this thread and ask if there are any good FOSS
offline analysis tools available. Say a fat-client app that can chew
up logfiles on a local machine, and that generates (pretty formatted)
reports.

Would be nice to know if something like that exists out there,
especially in the FOSS world...

--
Mitch Pirtle
Joomla! Core Developer
Open Source Matters


From chsnyder at gmail.com  Fri Feb 24 12:05:33 2006
From: chsnyder at gmail.com (csnyder)
Date: Fri, 24 Feb 2006 12:05:33 -0500
Subject: [nycphp-talk] Web Traffic Analytics
In-Reply-To: <330532b60602240847j21355f24kd1fa1d873445cb63@mail.gmail.com>
References: <3253-41807@sneakemail.com>
	<330532b60602240847j21355f24kd1fa1d873445cb63@mail.gmail.com>
Message-ID: <b76252690602240905y3c4eec5ja3e18fe74a3baa64@mail.gmail.com>

On 2/24/06, Mitch Pirtle <mitch.pirtle at gmail.com> wrote:
> On 7/23/05, inforequest <1j0lkq002 at sneakemail.com> wrote:
> > This is another case of convenience and perhaps customer ignorance trumping security. These are log-file analysis programs, which operate after-the-fact on server files which contain proprietary company data. Do they really need to be "live" on a public web server?
>
> I'd like to revive this thread and ask if there are any good FOSS
> offline analysis tools available. Say a fat-client app that can chew
> up logfiles on a local machine, and that generates (pretty formatted)
> reports.
>
> Would be nice to know if something like that exists out there,
> especially in the FOSS world...
>

And AWStats doesn't cut it?

I rsync server logs to a separate box nightly, and then awstats.pl
chews through them and generates its databases. The result is a
relatively pretty, formatted report.

The bonus is that the logs are backed up if the server goes belly-up.
And you only have to maintain one instance of AWStats. This saves a
lot of maintenance when generating stats for multiple hosts, because
each host config can include a global config that has the bulk of the
configuration directives.


--
Chris Snyder
http://chxo.com/

From greg.rundlett at gmail.com  Fri Feb 24 16:11:46 2006
From: greg.rundlett at gmail.com (Greg Rundlett)
Date: Fri, 24 Feb 2006 16:11:46 -0500
Subject: [nycphp-talk] Web Traffic Analytics
In-Reply-To: <b76252690602240905y3c4eec5ja3e18fe74a3baa64@mail.gmail.com>
References: <3253-41807@sneakemail.com>
	<330532b60602240847j21355f24kd1fa1d873445cb63@mail.gmail.com>
	<b76252690602240905y3c4eec5ja3e18fe74a3baa64@mail.gmail.com>
Message-ID: <5e2aaca40602241311o4440706fha939064bb7a10af3@mail.gmail.com>

On 2/24/06, csnyder <chsnyder at gmail.com> wrote:
>
> On 2/24/06, Mitch Pirtle <mitch.pirtle at gmail.com> wrote:
> >


[snip]

> I'd like to revive this thread and ask if there are any good FOSS
> > offline analysis tools available. Say a fat-client app that can chew
> > up logfiles on a local machine, and that generates (pretty formatted)
> > reports.


[snip]

>
> > Would be nice to know if something like that exists out there,
> > especially in the FOSS world...
> >
>
> And AWStats doesn't cut it?
>
> I rsync server logs to a separate box nightly, and then awstats.pl
> chews through them and generates its databases. The result is a
> relatively pretty, formatted report.
>
>
>
+1
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060224/45549586/attachment.html>

From lists at zaunere.com  Fri Feb 24 18:24:32 2006
From: lists at zaunere.com (Hans Zaunere)
Date: Fri, 24 Feb 2006 18:24:32 -0500
Subject: [nycphp-talk] [OT] Our Signature
In-Reply-To: <003501c63946$4fbb3280$6401a8c0@MZ>
Message-ID: <009901c63999$789ecb50$c405a8c0@MZ>


Hans Zaunere wrote on Friday, February 24, 2006 8:29 AM:
> Well, it's true that our signature is perhaps a little busy, but hey, we
> have a lot going on.  :)

Everyone loves it when people reply to their own posts, but as I mention
above, we have a lot going on.  See the end of this message for some new
developments...

> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> 
> This is mandatory... :)
> 
> > New York PHP Conference and Expo 2006
> > http://www.nyphpcon.com
> 
> So I'm sure most on this list have heard already, but we've launched a
> significant PHP/open source/technology event, happening June 14-16, 2006.
> We always are pleased to have people involved, whether it be via
> sponsorship, speaking, or helping to spread the word.
> 
> For speakers, we're reaching out to local companies to learn how they're
> using, integrating or even just considering PHP.
> 
> To help spread the word, all you need to do is check out the Show
> Participation section:
> 
> http://www.nyphpcon.com/show_participation.php
> 
> We appreciate folks jotting a link or image on their sites, blogs, etc.
> and if you'd like to participate as a media sponsor, please contact me
> offlist. 
> 
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> 
> And the above link, which is new, gives a way for people to show that
> they're involved and helping NYPHP support the open source community.
> Again, place a link or image anywhere that's convenient.

We're going to start sponsoring online presentations for those who can't
make it to New York City.  These won't be instead of the monthly meetings,
but in addition to, and we encourage the community to participate.  For
those of you on the NYPHP-Announce list (which everyone should be!) our
first online presentation featuring "Web Attacks and How They Are Stopped By
dotDefender" has just been announced.  There's also a calendar entry:

http://www.nyphp.org/content/calendar/view_entry.php?id=90&date=20060314

We've also opened up a presentation submittal form where everyone is
encouraged to submit or suggest topics.  More details are available at:

http://www.nyphp.org/presentations.php

And no, it's probably not a good idea to add more lines to the signature.

So please check the http://www.nyphp.org frontpage frequently for updates,
and be sure you're subscribed to the NYPHP-Announce
(http://www.nyphp.org/lists) mailing list (announcements are NOT
cross-posted between lists).


---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com





From arzala at gmail.com  Sat Feb 25 00:07:40 2006
From: arzala at gmail.com (Anirudhsinh Zala)
Date: Sat, 25 Feb 2006 10:37:40 +0530
Subject: [nycphp-talk] [OT] Our Signature
In-Reply-To: <009901c63999$789ecb50$c405a8c0@MZ>
References: <009901c63999$789ecb50$c405a8c0@MZ>
Message-ID: <op.s5ii62mke5m7mr@aum1.aum.com>

On Sat, 25 Feb 2006 04:54:32 +0530, Hans Zaunere <lists at zaunere.com> wrote:

>
> Hans Zaunere wrote on Friday, February 24, 2006 8:29 AM:
>> Well, it's true that our signature is perhaps a little busy, but hey, we
>> have a lot going on.  :)
>
> Everyone loves it when people reply to their own posts, but as I mention
> above, we have a lot going on.  See the end of this message for some new
> developments...
>
>> > New York PHP Community Talk Mailing List
>> > http://lists.nyphp.org/mailman/listinfo/talk
>>
>> This is mandatory... :)
>>
>> > New York PHP Conference and Expo 2006
>> > http://www.nyphpcon.com
>>
>> So I'm sure most on this list have heard already, but we've launched a
>> significant PHP/open source/technology event, happening June 14-16, 2006.
>> We always are pleased to have people involved, whether it be via
>> sponsorship, speaking, or helping to spread the word.
>>
>> For speakers, we're reaching out to local companies to learn how they're
>> using, integrating or even just considering PHP.
>>
>> To help spread the word, all you need to do is check out the Show
>> Participation section:
>>
>> http://www.nyphpcon.com/show_participation.php
>>
>> We appreciate folks jotting a link or image on their sites, blogs, etc.
>> and if you'd like to participate as a media sponsor, please contact me
>> offlist.
>>
>> > Show Your Participation in New York PHP
>> > http://www.nyphp.org/show_participation.php
>>
>> And the above link, which is new, gives a way for people to show that
>> they're involved and helping NYPHP support the open source community.
>> Again, place a link or image anywhere that's convenient.
>
> We're going to start sponsoring online presentations for those who can't
> make it to New York City.  These won't be instead of the monthly meetings,
> but in addition to, and we encourage the community to participate.  For
> those of you on the NYPHP-Announce list (which everyone should be!) our
> first online presentation featuring "Web Attacks and How They Are Stopped By
> dotDefender" has just been announced.  There's also a calendar entry:
>
> http://www.nyphp.org/content/calendar/view_entry.php?id=90&date=20060314

This is indeed helpful addition in current way of presentations, mainly for those whow are not able to join presentations over there. By this change non US members can also feel like they are there with them. I wish best luck to this new way of online presentations and looking forward to participate in this presentations.

>
> We've also opened up a presentation submittal form where everyone is
> encouraged to submit or suggest topics.  More details are available at:
>
> http://www.nyphp.org/presentations.php
>
> And no, it's probably not a good idea to add more lines to the signature.
>
> So please check the http://www.nyphp.org frontpage frequently for updates,
> and be sure you're subscribed to the NYPHP-Announce
> (http://www.nyphp.org/lists) mailing list (announcements are NOT
> cross-posted between lists).
>
>
> ---
> Hans Zaunere / President / New York PHP
>    www.nyphp.org  /  www.nyphp.com
>
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



-- 
-----------------------------------------------------
Anirudh Zala (Production Manager)
ASPL, http://www.aspl.in
Ph: +91 281 245 1894
arzala at gmail.com
-----------------------------------------------------


From danielc at analysisandsolutions.com  Sat Feb 25 21:47:39 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Sat, 25 Feb 2006 21:47:39 -0500
Subject: [nycphp-talk] Preventing spam with php mail function
In-Reply-To: <00e401c638c7$3a1b41b0$6401a8c0@MZ>
References: <AA081BBF5AEED7118ADF00065B3929D90EC51521@ny1post.windows.thettgroup.com>
	<00e401c638c7$3a1b41b0$6401a8c0@MZ>
Message-ID: <20060226024739.GB27283@panix.com>

On Thu, Feb 23, 2006 at 05:19:33PM -0500, Hans Zaunere wrote:
> 
> http://www.nyphp.org/phundamentals/email_header_injection.php

Pardon my dissent, but that article has flaws.  I've mentioned them before 
on several occasions.  But let's cut to the chase.  The quick, guaranteed 
way to avoid header injection is to pass all email headers through the 
following:

   $value = preg_replace("/[\r\n]+/", "\r\n ", trim($value));

There's a whole thread about this stuff, of which this is one:
http://lists.nyphp.org/pipermail/talk/2005-September/016172.html

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From shiflett at php.net  Sun Feb 26 15:53:22 2006
From: shiflett at php.net (Chris Shiflett)
Date: Sun, 26 Feb 2006 15:53:22 -0500
Subject: [nycphp-talk] Planet NYPHP (Was: best place to post articles (other
 than nyphp.org))
In-Reply-To: <b76252690602220934q3cb05d45ubf01146d56ce39e0@mail.gmail.com>
References: <f1dc81bb0602201118t34b68e9fvcafe309274bbd17f@mail.gmail.com>
	<p06230904c01fd6b84d73@192.168.0.100>
	<8d9a42800602201301q57212f4fp65dc174e41cdc4d1@mail.gmail.com>
	<26865-82008@sneakemail.com>
	<b76252690602220934q3cb05d45ubf01146d56ce39e0@mail.gmail.com>
Message-ID: <44021542.1000309@php.net>

csnyder wrote:
> Maybe it's time to start the member-blog-aggregation service at
> rss.nyphp.org.

I was going to suggest this a while ago - something like a Planet NYPHP. 
I have a feeling there are a bunch of NYPHP blogs I would read if I knew 
they existed...

Chris


From prusak at gmail.com  Sun Feb 26 22:05:17 2006
From: prusak at gmail.com (Ophir Prusak)
Date: Sun, 26 Feb 2006 22:05:17 -0500
Subject: [nycphp-talk] Web Traffic Analytics
In-Reply-To: <98763d07214cd76dcb1bcece54d20b46@jobsforge.com>
References: <98763d07214cd76dcb1bcece54d20b46@jobsforge.com>
Message-ID: <f1dc81bb0602261905q6bf8eba9y5e2c54b1d3d39632@mail.gmail.com>

On 7/16/05, Matthew Terenzio <matt at jobsforge.com> wrote:
>
>
> Anyone have a favorite web traffic analytics program or service?
> Preferably free, but I 'd like some level of sophistication.

Without knowing anything else I'd say sign up for google analytics and
wait (there's a waiting list).

Nothing else free comes even close.

If you need something right now - I'd say http://www.statcounter.com/

hmm - just realized this is a very old thread ... oh well.

>
> _______________________________________________
> New York PHP Talk Mailing List
> AMP Technology
> Supporting Apache, MySQL and PHP
> http://lists.nyphp.org/mailman/listinfo/talk
> http://www.nyphp.org
>


--
Ophir Prusak
http://www.prusak.com


From ps at pswebcode.com  Mon Feb 27 08:53:25 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Mon, 27 Feb 2006 08:53:25 -0500
Subject: [nycphp-talk] Send/Receive SMS (Text Messaging) with PHP
Message-ID: <000101c63ba5$2e1b6df0$68e4a144@Rubicon>

I see that there are ad hoc free scripts/classes/methods for sending SMS
text messages from a PHP script out to a specific 
telephone company's gateway server...

but I'm wondering if anyone on the list has had a past experience with
setting up a client's website application to 
send and receive SMS text messages.

If so, have you used a vendor with servers that send/receive on your behalf
like: http://www.tm4b.com/

Has anyone used Teleflip http://www.teleflip.com/teleflip/index.jsp
personally or professionally?

Any previous experiences would be of interest.

Warmest regards,

Peter Sawczynec,
Technology Director
PSWebcode
_Design & Interface
_Ecommerce
_Database Management
ps at pswebcode.com
718.796.1951
www.pswebcode.com



From list at harveyk.com  Mon Feb 27 09:11:06 2006
From: list at harveyk.com (harvey)
Date: Mon, 27 Feb 2006 09:11:06 -0500
Subject: [nycphp-talk] Send/Receive SMS (Text Messaging) with PHP
In-Reply-To: <000101c63ba5$2e1b6df0$68e4a144@Rubicon>
References: <000101c63ba5$2e1b6df0$68e4a144@Rubicon>
Message-ID: <7.0.1.0.2.20060227090855.0380e950@harveyk.com>

I've used teleflip personally to send texts now and then and it seems 
to have worked fine to different carriers. But that was just very 
light casual use...


At 08:53 AM 2/27/2006, Peter Sawczynec wrote:

>I see that there are ad hoc free scripts/classes/methods for sending SMS
>text messages from a PHP script out to a specific
>telephone company's gateway server...
>
>but I'm wondering if anyone on the list has had a past experience with
>setting up a client's website application to
>send and receive SMS text messages.
>
>If so, have you used a vendor with servers that send/receive on your behalf
>like: http://www.tm4b.com/
>
>Has anyone used Teleflip http://www.teleflip.com/teleflip/index.jsp
>personally or professionally?
>
>Any previous experiences would be of interest.
>
>Warmest regards,
>
>Peter Sawczynec,
>Technology Director
>PSWebcode
>_Design & Interface
>_Ecommerce
>_Database Management
>ps at pswebcode.com
>718.796.1951
>www.pswebcode.com
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php



From snirgal at optonline.net  Mon Feb 27 09:58:54 2006
From: snirgal at optonline.net (snir gal)
Date: Mon, 27 Feb 2006 09:58:54 -0500
Subject: [nycphp-talk] hosting?
Message-ID: <001701c63bae$54691940$0337a8c0@shalomHome>

hi,

any good hosting company?
i use johncompanies.com

looking for a good hosting with unlimited plesk key
for a customer.

thanks and have a nice day.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060227/5746a6b7/attachment.html>

From ken at secdat.com  Mon Feb 27 10:16:22 2006
From: ken at secdat.com (Kenneth Downs)
Date: Mon, 27 Feb 2006 10:16:22 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <001701c63bae$54691940$0337a8c0@shalomHome>
References: <001701c63bae$54691940$0337a8c0@shalomHome>
Message-ID: <440317C6.8070604@secdat.com>

snir gal wrote:

> hi,
>  
> any good hosting company?
> i use johncompanies.com

Top of the line is rackspace.com, they do "managed hosting", incredible 
cs, but of course more pricey.

I have a dedicated gentoo server at sevenl.net, and another at 
serverpronto.com.  They are cheaper than rackspace.com and for that I 
get occassional annoyances, miscommunications, and other stuff.  Each of 
the networks has been down for and hour so in the past few months.

Based on these experiences I am intending myself to keep all of my test 
stuff on one of either sevenl.net or serverpronto.com, and move the 
production stuff to rackspace.com.


>  
> looking for a good hosting with unlimited plesk key
> for a customer.
>  
> thanks and have a nice day.
>  
>
>------------------------------------------------------------------------
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060227/0b8a01a4/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 186 bytes
Desc: not available
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060227/0b8a01a4/attachment.vcf>

From mitch.pirtle at gmail.com  Mon Feb 27 10:39:28 2006
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Mon, 27 Feb 2006 10:39:28 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <001701c63bae$54691940$0337a8c0@shalomHome>
References: <001701c63bae$54691940$0337a8c0@shalomHome>
Message-ID: <330532b60602270739k5ebcdca7yfcec08e3642839d4@mail.gmail.com>

Not sure about the unlimited plesk key requirement, but I am a happy
user of ServerBeach, which is basically RackSpace wth much, much lower
prices and similar support. Founded by one of the RackSpace guys, you
should feel right at home if you are familiar with their service.

-- Mitch

On 2/27/06, snir gal <snirgal at optonline.net> wrote:
>
> hi,
>
> any good hosting company?
> i use johncompanies.com
>
> looking for a good hosting with unlimited plesk key
> for a customer.


From brian at vermonster.com  Mon Feb 27 10:43:07 2006
From: brian at vermonster.com (Brian Kaney)
Date: Mon, 27 Feb 2006 10:43:07 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <330532b60602270739k5ebcdca7yfcec08e3642839d4@mail.gmail.com>
References: <001701c63bae$54691940$0337a8c0@shalomHome>
	<330532b60602270739k5ebcdca7yfcec08e3642839d4@mail.gmail.com>
Message-ID: <44031E0B.80102@vermonster.com>

We use 1&1, which has been pretty good thus far.  But I wonder if anyone 
knows of any good Gentoo hosting providers?

-Brian


Mitch Pirtle wrote:
> Not sure about the unlimited plesk key requirement, but I am a happy
> user of ServerBeach, which is basically RackSpace wth much, much lower
> prices and similar support. Founded by one of the RackSpace guys, you
> should feel right at home if you are familiar with their service.
> 
> -- Mitch
> 
> On 2/27/06, snir gal <snirgal at optonline.net> wrote:
> 
>>hi,
>>
>>any good hosting company?
>>i use johncompanies.com
>>
>>looking for a good hosting with unlimited plesk key
>>for a customer.


From ken at secdat.com  Mon Feb 27 10:47:43 2006
From: ken at secdat.com (Kenneth Downs)
Date: Mon, 27 Feb 2006 10:47:43 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <44031E0B.80102@vermonster.com>
References: <001701c63bae$54691940$0337a8c0@shalomHome>	<330532b60602270739k5ebcdca7yfcec08e3642839d4@mail.gmail.com>
	<44031E0B.80102@vermonster.com>
Message-ID: <44031F1F.2060503@secdat.com>

Brian Kaney wrote:

>We use 1&1, which has been pretty good thus far.  But I wonder if anyone 
>knows of any good Gentoo hosting providers?
>  
>
both sevenl.net and serverpront.com will create a gentoo box for you.

>-Brian
>
>
>Mitch Pirtle wrote:
>  
>
>>Not sure about the unlimited plesk key requirement, but I am a happy
>>user of ServerBeach, which is basically RackSpace wth much, much lower
>>prices and similar support. Founded by one of the RackSpace guys, you
>>should feel right at home if you are familiar with their service.
>>
>>-- Mitch
>>
>>On 2/27/06, snir gal <snirgal at optonline.net> wrote:
>>
>>    
>>
>>>hi,
>>>
>>>any good hosting company?
>>>i use johncompanies.com
>>>
>>>looking for a good hosting with unlimited plesk key
>>>for a customer.
>>>      
>>>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>New York PHP Conference and Expo 2006
>http://www.nyphpcon.com
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 186 bytes
Desc: not available
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060227/1277b079/attachment.vcf>

From ps at pswebcode.com  Mon Feb 27 11:11:04 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Mon, 27 Feb 2006 11:11:04 -0500
Subject: [nycphp-talk] "Scintillating, far-reaching, insightful."
Message-ID: <001601c63bb8$69067550$68e4a144@Rubicon>

"Advances this from of the art." 
"Multi-layered, skillful, intelligent." 

Pro PHP Security -- Chris Snyder and Michael Southwell, Apress 2005


Warmest regards,

Peter Sawczynec,
Technology Director
PSWebcode
_Design & Interface
_Ecommerce
_Database Management
ps at pswebcode.com
718.796.1951
www.pswebcode.com



From mailinglists at caseysoftware.com  Mon Feb 27 11:33:00 2006
From: mailinglists at caseysoftware.com (Keith Casey)
Date: Mon, 27 Feb 2006 11:33:00 -0500
Subject: [nycphp-talk] Send/Receive SMS (Text Messaging) with PHP
In-Reply-To: <000101c63ba5$2e1b6df0$68e4a144@Rubicon>
References: <000101c63ba5$2e1b6df0$68e4a144@Rubicon>
Message-ID: <440329BC.8040107@caseysoftware.com>

Peter,

My biggest customer is an SMS provider and if you're trying to send a 
simple SMS, you can normally do something along the lines of sending an 
email to {phonenumber}@{carrier}.  This will normally work for all free 
efforts across the major carriers but is not technically an SMS.

If you are looking to have true SMS capability - like where a user could 
respond via a shortcode - it gets quite a bit more complicated.  For 
this, you need dedicated connections (called binds) to the various 
carriers along with approval from the carriers so they know where to 
route the shortcode.  And the shortcode must be approved/purchased by 
the shortcode authority (like an IP).

On top of that, there are certain requirements - like supporting STOP, 
HELP, etc - that are involved at the carrier level.  If you're looking 
to do premium services, it gets even more fun.

More than anything, it's simply data down the pipe.  I'm working with 
production systems that do it in Java and PHP, so there are efforts out 
there... not sure what the licensing of the code is, but I think that's 
the least of the barriers.

Alternatively, I've been trying to convince my customer to build an API 
and resell some of the services, so people like you might serve to build 
my case.

If you have more/additional questions, feel free to drop me a note.

Keith

Peter Sawczynec wrote:
> I see that there are ad hoc free scripts/classes/methods for sending SMS
> text messages from a PHP script out to a specific 
> telephone company's gateway server...
> 
> but I'm wondering if anyone on the list has had a past experience with
> setting up a client's website application to 
> send and receive SMS text messages.
> 
> If so, have you used a vendor with servers that send/receive on your behalf
> like: http://www.tm4b.com/
> 
> Has anyone used Teleflip http://www.teleflip.com/teleflip/index.jsp
> personally or professionally?
> 
> Any previous experiences would be of interest.

-- 
D. Keith Casey Jr.
CEO, CaseySoftware, LLC
http://CaseySoftware.com


From lamolist at cyberxdesigns.com  Mon Feb 27 11:46:14 2006
From: lamolist at cyberxdesigns.com (Hans Kaspersetz)
Date: Mon, 27 Feb 2006 11:46:14 -0500
Subject: [nycphp-talk] January Presentation
Message-ID: <44032CD6.4090103@cyberxdesigns.com>

We have posted January's presentation to NYPHP.org.  There is a Zip of 
files and as always the audio.

Thanks to all those that made it happen and see you tomorrow night!

Hans Kaspersetz
Presentation Lacky, NY PHP


From ashaw at polymerdb.org  Mon Feb 27 11:46:34 2006
From: ashaw at polymerdb.org (Allen Shaw)
Date: Mon, 27 Feb 2006 10:46:34 -0600
Subject: [nycphp-talk] "Scintillating, far-reaching, insightful."
In-Reply-To: <001601c63bb8$69067550$68e4a144@Rubicon>
References: <001601c63bb8$69067550$68e4a144@Rubicon>
Message-ID: <44032CEA.40902@polymerdb.org>

Spam (if so, it's intriguing), or an inside joke just for locals?

- Allen

Peter Sawczynec wrote:
> "Advances this from of the art." 
> "Multi-layered, skillful, intelligent." 
> 
> Pro PHP Security -- Chris Snyder and Michael Southwell, Apress 2005
> 
> 
> Warmest regards,
> 
> Peter Sawczynec,
> Technology Director
> PSWebcode
> _Design & Interface
> _Ecommerce
> _Database Management
> ps at pswebcode.com
> 718.796.1951
> www.pswebcode.com
> 
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
> 


-- 
Allen Shaw
Polymer (http://polymerdb.org)


From ps at pswebcode.com  Mon Feb 27 12:02:27 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Mon, 27 Feb 2006 12:02:27 -0500
Subject: [nycphp-talk] Send/Receive SMS (Text Messaging) with PHP
In-Reply-To: <440329BC.8040107@caseysoftware.com>
Message-ID: <001901c63bbf$96bed940$68e4a144@Rubicon>

Thank you, Keith. Your encapsulation was good. 

Peter

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of Keith Casey
Sent: Monday, February 27, 2006 11:33 AM
To: NYPHP Talk
Subject: Re: [nycphp-talk] Send/Receive SMS (Text Messaging) with PHP


Peter,

My biggest customer is an SMS provider and if you're trying to send a 
simple SMS, you can normally do something along the lines of sending an 
email to {phonenumber}@{carrier}.  This will normally work for all free 
efforts across the major carriers but is not technically an SMS.

If you are looking to have true SMS capability - like where a user could 
respond via a shortcode - it gets quite a bit more complicated.  For 
this, you need dedicated connections (called binds) to the various 
carriers along with approval from the carriers so they know where to 
route the shortcode.  And the shortcode must be approved/purchased by 
the shortcode authority (like an IP).

On top of that, there are certain requirements - like supporting STOP, 
HELP, etc - that are involved at the carrier level.  If you're looking 
to do premium services, it gets even more fun.

More than anything, it's simply data down the pipe.  I'm working with 
production systems that do it in Java and PHP, so there are efforts out 
there... not sure what the licensing of the code is, but I think that's 
the least of the barriers.

Alternatively, I've been trying to convince my customer to build an API 
and resell some of the services, so people like you might serve to build 
my case.

If you have more/additional questions, feel free to drop me a note.

Keith

Peter Sawczynec wrote:
> I see that there are ad hoc free scripts/classes/methods for sending 
> SMS text messages from a PHP script out to a specific telephone 
> company's gateway server...
> 
> but I'm wondering if anyone on the list has had a past experience with 
> setting up a client's website application to send and receive SMS text 
> messages.
> 
> If so, have you used a vendor with servers that send/receive on your 
> behalf
> like: http://www.tm4b.com/
> 
> Has anyone used Teleflip http://www.teleflip.com/teleflip/index.jsp
> personally or professionally?
> 
> Any previous experiences would be of interest.

-- 
D. Keith Casey Jr.
CEO, CaseySoftware, LLC
http://CaseySoftware.com _______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From jonbaer at jonbaer.com  Mon Feb 27 17:38:43 2006
From: jonbaer at jonbaer.com (Jon Baer)
Date: Mon, 27 Feb 2006 17:38:43 -0500
Subject: [nycphp-talk] Send/Receive SMS (Text Messaging) with PHP
In-Reply-To: <440329BC.8040107@caseysoftware.com>
References: <000101c63ba5$2e1b6df0$68e4a144@Rubicon>
	<440329BC.8040107@caseysoftware.com>
Message-ID: <26CAC31A-A042-49D4-88F6-3ACF06B2BD90@jonbaer.com>

It is currently a huge PITA to obtains shortcodes and provision them  
w/ all the carriers @ the moment (not to mention a monopoly on the  
registry) ...

http://www.usshortcodes.com can get you a CSC for ~$500 per month  
(random) or $1000 for fixed.  And it is the *only* route to go.

For low cost apps, Ive personally used UA ...

http://www.unwiredevents.com/main/app

I normally judge a SMS third-party on their level of integration know- 
how + how quick they reply to emails :-)  Either way easy to setup, I  
just wish doing it all w/ a CSC and trying your luck w/ SMS apps was  
a bit more straight forward ...  Teleflip is also very handy.  But if  
you get serious about it you have to study up on MO (message  
originating) and MT (message terminating) charges to see if its  
worthwhile.

- Jon

On Feb 27, 2006, at 11:33 AM, Keith Casey wrote:

> Peter,
>
> My biggest customer is an SMS provider and if you're trying to send a
> simple SMS, you can normally do something along the lines of  
> sending an
> email to {phonenumber}@{carrier}.  This will normally work for all  
> free
> efforts across the major carriers but is not technically an SMS.
>
> If you are looking to have true SMS capability - like where a user  
> could
> respond via a shortcode - it gets quite a bit more complicated.  For
> this, you need dedicated connections (called binds) to the various
> carriers along with approval from the carriers so they know where to
> route the shortcode.  And the shortcode must be approved/purchased by
> the shortcode authority (like an IP).
>
> On top of that, there are certain requirements - like supporting STOP,
> HELP, etc - that are involved at the carrier level.  If you're looking
> to do premium services, it gets even more fun.
>
> More than anything, it's simply data down the pipe.  I'm working with
> production systems that do it in Java and PHP, so there are efforts  
> out
> there... not sure what the licensing of the code is, but I think  
> that's
> the least of the barriers.
>
> Alternatively, I've been trying to convince my customer to build an  
> API
> and resell some of the services, so people like you might serve to  
> build
> my case.
>
> If you have more/additional questions, feel free to drop me a note.
>
> Keith
>
> Peter Sawczynec wrote:
>> I see that there are ad hoc free scripts/classes/methods for  
>> sending SMS
>> text messages from a PHP script out to a specific
>> telephone company's gateway server...
>>
>> but I'm wondering if anyone on the list has had a past experience  
>> with
>> setting up a client's website application to
>> send and receive SMS text messages.
>>
>> If so, have you used a vendor with servers that send/receive on  
>> your behalf
>> like: http://www.tm4b.com/
>>
>> Has anyone used Teleflip http://www.teleflip.com/teleflip/index.jsp
>> personally or professionally?
>>
>> Any previous experiences would be of interest.
>
> -- 
> D. Keith Casey Jr.
> CEO, CaseySoftware, LLC
> http://CaseySoftware.com
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



From list at harveyk.com  Tue Feb 28 00:59:00 2006
From: list at harveyk.com (harvey)
Date: Tue, 28 Feb 2006 00:59:00 -0500
Subject: [nycphp-talk] Send/Receive SMS (Text Messaging) with PHP
In-Reply-To: <7.0.1.0.2.20060227090855.0380e950@harveyk.com>
References: <000101c63ba5$2e1b6df0$68e4a144@Rubicon>
	<7.0.1.0.2.20060227090855.0380e950@harveyk.com>
Message-ID: <7.0.1.0.2.20060228005827.06f7a958@harveyk.com>

Fyi, Google has a send-to-phone extension for Firefox
http://toolbar.google.com/firefox/extensions/sendtophone/



At 09:11 AM 2/27/2006, harvey wrote:
>I've used teleflip personally to send texts now and then and it 
>seems to have worked fine to different carriers. But that was just 
>very light casual use...
>
>
>At 08:53 AM 2/27/2006, Peter Sawczynec wrote:
>
>>I see that there are ad hoc free scripts/classes/methods for sending SMS
>>text messages from a PHP script out to a specific
>>telephone company's gateway server...
>>
>>but I'm wondering if anyone on the list has had a past experience with
>>setting up a client's website application to
>>send and receive SMS text messages.
>>
>>If so, have you used a vendor with servers that send/receive on your behalf
>>like: http://www.tm4b.com/
>>
>>Has anyone used Teleflip http://www.teleflip.com/teleflip/index.jsp
>>personally or professionally?
>>
>>Any previous experiences would be of interest.
>>
>>Warmest regards,
>>
>>Peter Sawczynec,
>>Technology Director
>>PSWebcode
>>_Design & Interface
>>_Ecommerce
>>_Database Management
>>ps at pswebcode.com
>>718.796.1951
>>www.pswebcode.com
>>
>>_______________________________________________
>>New York PHP Community Talk Mailing List
>>http://lists.nyphp.org/mailman/listinfo/talk
>>New York PHP Conference and Expo 2006
>>http://www.nyphpcon.com
>>Show Your Participation in New York PHP
>>http://www.nyphp.org/show_participation.php



From ps at pswebcode.com  Tue Feb 28 08:03:50 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Tue, 28 Feb 2006 08:03:50 -0500
Subject: [nycphp-talk] Send/Receive SMS (Text Messaging) with PHP
In-Reply-To: <7.0.1.0.2.20060228005827.06f7a958@harveyk.com>
Message-ID: <000701c63c67$6b450020$68e4a144@Rubicon>

http://toolbar.google.com/send/sms/

Send text messages to pretty much any US carrier.
Hidden form field 'client' has value: firefox_sms_but.




-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of harvey
Sent: Tuesday, February 28, 2006 12:59 AM
To: NYPHP Talk
Subject: Re: [nycphp-talk] Send/Receive SMS (Text Messaging) with PHP


Fyi, Google has a send-to-phone extension for Firefox
http://toolbar.google.com/firefox/extensions/sendtophone/



At 09:11 AM 2/27/2006, harvey wrote:
>I've used teleflip personally to send texts now and then and it
>seems to have worked fine to different carriers. But that was just 
>very light casual use...
>
>
>At 08:53 AM 2/27/2006, Peter Sawczynec wrote:
>
>>I see that there are ad hoc free scripts/classes/methods for sending 
>>SMS text messages from a PHP script out to a specific telephone 
>>company's gateway server...
>>
>>but I'm wondering if anyone on the list has had a past experience with 
>>setting up a client's website application to send and receive SMS text 
>>messages.
>>
>>If so, have you used a vendor with servers that send/receive on your 
>>behalf
>>like: http://www.tm4b.com/
>>
>>Has anyone used Teleflip http://www.teleflip.com/teleflip/index.jsp
>>personally or professionally?
>>
>>Any previous experiences would be of interest.
>>
>>Warmest regards,
>>
>>Peter Sawczynec,
>>Technology Director
>>PSWebcode
>>_Design & Interface
>>_Ecommerce
>>_Database Management
>>ps at pswebcode.com
>>718.796.1951
>>www.pswebcode.com
>>
>>_______________________________________________
>>New York PHP Community Talk Mailing List 
>>http://lists.nyphp.org/mailman/listinfo/talk
>>New York PHP Conference and Expo 2006
>>http://www.nyphpcon.com
>>Show Your Participation in New York PHP 
>>http://www.nyphp.org/show_participation.php

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From ps at pswebcode.com  Tue Feb 28 09:05:22 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Tue, 28 Feb 2006 09:05:22 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <001701c63bae$54691940$0337a8c0@shalomHome>
Message-ID: <000601c63c70$03e1c810$68e4a144@Rubicon>

http://www.westhost.com/
 
Uses shared hosting technique called Virtual Private Server 
so that you can configure your own Apache and have 
SSH, Cron, optional PHP4.x or PHP 5.x. 
 
Very nice pricing. 
 
Peter

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of snir gal
Sent: Monday, February 27, 2006 9:59 AM
To: talk at lists.nyphp.org
Subject: [nycphp-talk] hosting?


hi,
 
any good hosting company?
i use johncompanies.com
 
looking for a good hosting with unlimited plesk key
for a customer.
 
thanks and have a nice day.
 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060228/5924511e/attachment.html>

From volcimaster at gmail.com  Tue Feb 28 09:15:50 2006
From: volcimaster at gmail.com (Warren Myers)
Date: Tue, 28 Feb 2006 09:15:50 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <000601c63c70$03e1c810$68e4a144@Rubicon>
References: <001701c63bae$54691940$0337a8c0@shalomHome>
	<000601c63c70$03e1c810$68e4a144@Rubicon>
Message-ID: <cd08a04c0602280615y2d8d6064x66b3622b3fc3de65@mail.gmail.com>

I use tektonic.net which also provides VPS hosting. For a cheaper
alternative, they have unmanaged hosting options, where you're 100%
responsible for the server.

WMM

On 2/28/06, Peter Sawczynec <ps at pswebcode.com> wrote:
>
> http://www.westhost.com/
>
> Uses shared hosting technique called Virtual Private Server
> so that you can configure your own Apache and have
> SSH, Cron, optional PHP4.x or PHP 5.x.
>
> Very nice pricing.
>
> Peter
>
>  -----Original Message-----
> *From:* talk-bounces at lists.nyphp.org [mailto: talk-bounces at lists.nyphp.org]
> *On Behalf Of *snir gal
> *Sent:* Monday, February 27, 2006 9:59 AM
> *To:* talk at lists.nyphp.org
> *Subject:* [nycphp-talk] hosting?
>
> hi,
>
> any good hosting company?
> i use johncompanies.com
>
> looking for a good hosting with unlimited plesk key
> for a customer.
>
> thanks and have a nice day.
>
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> New York PHP Conference and Expo 2006
> http://www.nyphpcon.com
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>


--
http://warrenmyers.com
"God may not play dice with the universe, but something strange is going on
with the prime numbers." --Paul Erd?s
"It's not possible. We are the type of people who have everything in our
favor going against us." --Ben Jarhvi, Short Circuit 2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060228/a9dcd079/attachment.html>

From ps at pswebcode.com  Tue Feb 28 09:46:37 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Tue, 28 Feb 2006 09:46:37 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <000601c63c70$03e1c810$68e4a144@Rubicon>
Message-ID: <001701c63c75$c755b180$68e4a144@Rubicon>

Further regarding this topical item of web hosting. Here is some of my two
cents.

Primero. If they don't have 24/7 live tech support. Just say no, skip it,
pass, move on, 
these aren't the droids we're looking for. 

Generally, I have found web hosting plans (*NIX or WIN) priced at less than
$10 per month to be unacceptable,  
plagued with web site outages in prime time business hours and on busy
shopping holidays. 
Email service frequently interrupted. Knowledgeable but inert tech support. 

Plans at $20 - $60 per month seem to offer more performance and uptime
respectability.

Staying our of the nearly vicious bargain basement web hosting arena really
eases the selection task anyway, 
fewer smorgasbord options and clearer path to realistic admin controls. 

I have settled on:

Interland 
I use them for myself and several clients. We never have web site down time
or email interruption.
General website performance: a bit off, but never unacceptable.
FTP xfr rate is always good.
But, admittedly, at the admin interface, response is typically a bit
sluggish, 
especially when using phpMyAdmin for MySQL admin.

Westhost 
I have a client using them. 
General website performance: nice.
FTP xfr rate is excellent
Admin interface response is very crisp.

Verizon Business-class
(A techie there told me that they actually subcontract to Interland.) 
I have one client using them.
General website performance: nice.
FTP xfr rate excellent.
Admin interface is snappy.

There that is my two cents. 

There really are no bargains and I think it works better in client meetings
when one calmly suggests 
a little focused business-class web hosting up tweak instead of getting out
the 9-panel Italian menu 
of diversionary options.

Peter




-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of Peter Sawczynec
Sent: Tuesday, February 28, 2006 9:05 AM
To: 'NYPHP Talk'
Subject: Re: [nycphp-talk] hosting?


http://www.westhost.com/

Uses shared hosting technique called Virtual Private Server 
so that you can configure your own Apache and have 
SSH, Cron, optional PHP4.x or PHP 5.x. 

Very nice pricing. 

Peter
-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of snir gal
Sent: Monday, February 27, 2006 9:59 AM
To: talk at lists.nyphp.org
Subject: [nycphp-talk] hosting?


hi,

any good hosting company?
i use johncompanies.com

looking for a good hosting with unlimited plesk key
for a customer.

thanks and have a nice day.



From ps at pswebcode.com  Tue Feb 28 10:19:16 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Tue, 28 Feb 2006 10:19:16 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <001701c63bae$54691940$0337a8c0@shalomHome>
Message-ID: <001801c63c7a$56af17f0$68e4a144@Rubicon>

Sorry, but one last caveat on this here web hosting.
 
Domain Names and Web Hosting
 
I don't let the web host provide the domain name service. 
I make the client actually buy it themselves, separately, from another
vendor like Network Solutions.
(Yes, this costs more.) But...
 
Then later if there are any irresolvable technical issues with the web host,
you can: 
1) Go and buy a new web hosting plan by IP address only, 
2) Set up the web site at the new host,
3) Log in to your separate domain name control panel and change the domain
name pointing yourself to the new web host,
4) End of nightmare old web hosting story. 
 
This way the client is in control of their own domain name destiny and can
be 
a discriminating consumer with playable options and can move around more at
will.
 
Giddy.
 
Peter
 
 
 
 

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of snir gal
Sent: Monday, February 27, 2006 9:59 AM
To: talk at lists.nyphp.org
Subject: [nycphp-talk] hosting?


hi,
 
any good hosting company?
i use johncompanies.com
 
looking for a good hosting with unlimited plesk key
for a customer.
 
thanks and have a nice day.
 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060228/c432b270/attachment.html>

From volcimaster at gmail.com  Tue Feb 28 10:22:17 2006
From: volcimaster at gmail.com (Warren Myers)
Date: Tue, 28 Feb 2006 10:22:17 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <001801c63c7a$56af17f0$68e4a144@Rubicon>
References: <001701c63bae$54691940$0337a8c0@shalomHome>
	<001801c63c7a$56af17f0$68e4a144@Rubicon>
Message-ID: <cd08a04c0602280722i4c9da4aet6fd0c3f0c965bb44@mail.gmail.com>

On 2/28/06, Peter Sawczynec <ps at pswebcode.com> wrote:
>
> Sorry, but one last caveat on this here web hosting.
>
> Domain Names and Web Hosting
>
> I don't let the web host provide the domain name service.
> I make the client actually buy it themselves, separately, from another
> vendor like Network Solutions.
> (Yes, this costs more.) But...
>

Good point. I've been doing this for a while, especially as needs change for
hosting solutions.

Then later if there are any irresolvable technical issues with the web host,
> you can:
> 1) Go and buy a new web hosting plan by IP address only,
> 2) Set up the web site at the new host,
> 3) Log in to your separate domain name control panel and change the domain
> name pointing yourself to the new web host,
> 4) End of nightmare old web hosting story.
>

Yeah, changing registrars later is a pain.

This way the client is in control of their own domain name destiny and can
> be
> a discriminating consumer with playable options and can move around more
> at will.
>
> Giddy.
>

--
http://warrenmyers.com
"God may not play dice with the universe, but something strange is going on
with the prime numbers." --Paul Erd?s
"It's not possible. We are the type of people who have everything in our
favor going against us." --Ben Jarhvi, Short Circuit 2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060228/7bca11c3/attachment.html>

From tedd at sperling.com  Tue Feb 28 10:23:21 2006
From: tedd at sperling.com (tedd)
Date: Tue, 28 Feb 2006 10:23:21 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <001701c63c75$c755b180$68e4a144@Rubicon>
References: <001701c63c75$c755b180$68e4a144@Rubicon>
Message-ID: <p06230902c02a1a46a2fc@[192.168.0.100]>


>Further regarding this topical item of web hosting. Here is some of my two
>cents.


Well... considering that everyone else is offering their two cents -- 
I'm definitely at the lower end of cost -- I can't afford the 
expensive stuff. As such, I get hosting for $6.95 per YEAR and it's 
sufficient for all my php development needs. No complaints yet.

Contact me off-list if interested.

tedd
-- 
--------------------------------------------------------------------------------
http://sperling.com


From tedd at sperling.com  Tue Feb 28 10:31:00 2006
From: tedd at sperling.com (tedd)
Date: Tue, 28 Feb 2006 10:31:00 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <001801c63c7a$56af17f0$68e4a144@Rubicon>
References: <001801c63c7a$56af17f0$68e4a144@Rubicon>
Message-ID: <p06230903c02a1bd5006c@[192.168.0.100]>

>This way the client is in control of their own domain name destiny and can be
>a discriminating consumer with playable options and can move around 
>more at will.
>
>Peter

Yeah, I had one client who did that and then every year 
like-clock-work his site would go down and then after blaming me for 
it, I would find that he had failed to reregister his domain. It 
happened four years in a row and I finally told him to go elsewhere.

Now, any web sites that I manage completely, I also handle all the 
domain name stuff and bill for it. If the client wants to go 
elsewhere, it's no problem to release the name to another register.

tedd
-- 
--------------------------------------------------------------------------------
http://sperling.com


From ps at pswebcode.com  Tue Feb 28 10:41:02 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Tue, 28 Feb 2006 10:41:02 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <p06230903c02a1bd5006c@[192.168.0.100]>
Message-ID: <002901c63c7d$61834810$68e4a144@Rubicon>

These are two alternative strategies and I definitely understand and respect
both models.

But I don't want the domain name or web hosting responsibility.
To be blunt, because I don't want the client calling me on Saturday
afternoon about 
"why is the web site slow" or email is down. 

Especially, if they have selected some 20-cent web hosting with 
automated avatar language-sensitive FAQ-driven IM chat tech support with
emoticons. 

Pedro



-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of tedd
Sent: Tuesday, February 28, 2006 10:31 AM
To: NYPHP Talk
Subject: Re: [nycphp-talk] hosting?


>This way the client is in control of their own domain name destiny and 
>can be a discriminating consumer with playable options and can move 
>around more at will.
>
>Peter

Yeah, I had one client who did that and then every year 
like-clock-work his site would go down and then after blaming me for 
it, I would find that he had failed to reregister his domain. It 
happened four years in a row and I finally told him to go elsewhere.

Now, any web sites that I manage completely, I also handle all the 
domain name stuff and bill for it. If the client wants to go 
elsewhere, it's no problem to release the name to another register.

tedd
-- 
----------------------------------------------------------------------------
----
http://sperling.com _______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
New York PHP Conference and Expo 2006
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From snirgal at optonline.net  Tue Feb 28 10:48:29 2006
From: snirgal at optonline.net (snir gal)
Date: Tue, 28 Feb 2006 10:48:29 -0500
Subject: [nycphp-talk] hosting?
References: <001701c63bae$54691940$0337a8c0@shalomHome>
Message-ID: <003901c63c7e$6c5b5ab0$0337a8c0@shalomHome>

hi,

since there is so many issues relating choosing a hosting service 
and every other day another company pops
it will be nice to see a list of hosting providers on NYPHP 
so member can give their opinion, experience and tips

I know it will help me make abetter choice after looking @ someone else opinion/ideas/suggestion

thanks 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060228/91e53ec1/attachment.html>

From ps at pswebcode.com  Tue Feb 28 10:59:41 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Tue, 28 Feb 2006 10:59:41 -0500
Subject: [nycphp-talk] hosting?
In-Reply-To: <003901c63c7e$6c5b5ab0$0337a8c0@shalomHome>
Message-ID: <002f01c63c7f$fc524100$68e4a144@Rubicon>

Essentially, Samsung builds almost all flat panel television screens,
regardless of whose brand name in on the box.
 
In web hosting I believe that essentially there is a handful of really big
hosts behind the scenes and many, many of the little 
guys are resellers for the big guys. They even get hooked to the big guys
tech support through well-devised intelligent 
800 number routing.
 
I'd enjoy seeing a schematic of webhosting ownership from the big true "we
physically own and control the servers" 
entities with connectors down to all the resellers they support. 
 
peter

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of snir gal
Sent: Tuesday, February 28, 2006 10:48 AM
To: NYPHP Talk
Subject: Re: [nycphp-talk] hosting?


hi,
 
since there is so many issues relating choosing a hosting service 
and every other day another company pops
it will be nice to see a list of hosting providers on NYPHP 
so member can give their opinion, experience and tips
 
I know it will help me make abetter choice after looking @ someone else
opinion/ideas/suggestion
 
thanks 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20060228/9b92bdae/attachment.html>