From ioplex at gmail.com  Fri Feb  1 03:05:47 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Fri, 1 Feb 2008 03:05:47 -0500
Subject: [nycphp-talk] Dynamic Form Elements
Message-ID: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>

I'm familiar with DOM, DHTML, JavaScript, etc but I'm not sure what
the best way to do dynamic forms is.

Basically I just want to dynamically insert or remove one element in a
form. The form is normally just a select with a submit button
immediately to it's right. But depending on what option in the select
is selected, I want another select to be inserted between the first
select and the button.

So it's either <select1><button> or <select1><select2><button>.

I would be perfectly happy with toggling the style visibility: visible
or visibility: hidden but this doesn't change the position of the
button. It always appears off to the right. I want the form to
re-pack.

Or should I use DOM calls?

What's the best, most portable way to do this?

Mike


From ramons at gmx.net  Fri Feb  1 06:42:30 2008
From: ramons at gmx.net (David Krings)
Date: Fri, 01 Feb 2008 06:42:30 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
Message-ID: <47A305A6.6050206@gmx.net>

Michael B Allen wrote:
> What's the best, most portable way to do this?

There is likely a better way, but what I do (and I think I needed it once) is 
to simply reload the page and evaluate the submission. Ugly, but it works and 
it is definitely portable. You can either do an automatic self-submit (not 
section 508 compatible...as most of the Web2.0 stuff) or wait for the submit 
button to be clicked.

David


From jmcgraw1 at gmail.com  Fri Feb  1 09:22:52 2008
From: jmcgraw1 at gmail.com (Jake McGraw)
Date: Fri, 1 Feb 2008 09:22:52 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <47A305A6.6050206@gmx.net>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<47A305A6.6050206@gmx.net>
Message-ID: <e065b8610802010622l7898a41dx802e3bc4bbd840d5@mail.gmail.com>

I'd create the form normally, with the optional select visible, but
the first value of the optional select list stating "Applicable only
for value XYZ". Then I'd use JavaScript to hide the optional select
list, remove the "Applicable only for value XYZ" and detect an
onchange event on the first select list for determining visibility for
the optional select list. This way, if your user is one of the 6% of
internet users without JavaScript turned on, at least the second list
will make some sense. When the request gets sent to the server, always
check both values and make sure it makes sense. I always try to
develop my web applications / forms entirely in HTML first and make
sure it works without javascript, then I add javascript where it makes
sense for a better user experience.

- jake

On Feb 1, 2008 6:42 AM, David Krings <ramons at gmx.net> wrote:
> Michael B Allen wrote:
> > What's the best, most portable way to do this?
>
> There is likely a better way, but what I do (and I think I needed it once) is
> to simply reload the page and evaluate the submission. Ugly, but it works and
> it is definitely portable. You can either do an automatic self-submit (not
> section 508 compatible...as most of the Web2.0 stuff) or wait for the submit
> button to be clicked.
>
> David
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>


From ps at sun-code.com  Fri Feb  1 10:58:07 2008
From: ps at sun-code.com (Peter Sawczynec)
Date: Fri, 1 Feb 2008 10:58:07 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <e065b8610802010622l7898a41dx802e3bc4bbd840d5@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>	<47A305A6.6050206@gmx.net>
	<e065b8610802010622l7898a41dx802e3bc4bbd840d5@mail.gmail.com>
Message-ID: <001d01c864eb$3cabe6d0$b603b470$@com>

This note is purely a personal reflection. 

Www coders have been developing and juggling JS usability with some
seriousness at least since NS3 and IE 1 were the serious browser
platforms. In this time, no downside risk to using JS has slowed JS
spread and usage.

Over time it has become one of my hard won beliefs that it is likely
superior to cater more strongly to the 94% of users that have JavaScript
turned on and try with slick, convenient features (Ajax, Flash, Java
applets, JS, DHTML) to get a bigger share of that slice of the 94%
market than possibly to hedge a  web site's eye appeal and clickability
by deving pages for JS turned off. (Again all just IMHO.)

I feel that show/hide DOM elements is now de rigueur and SOP and has
almost single handedly helped turn web pages into the intensely
concentrated dynamite packs of information that they are now.

I vote, pour on the JS. Show/hide. Tool tips. Mouseover. And even, whoa,
inline frames. 

Peter





 

 

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Jake McGraw
Sent: Friday, February 01, 2008 9:23 AM
To: NYPHP Talk
Subject: Re: [nycphp-talk] Dynamic Form Elements

I'd create the form normally, with the optional select visible, but
the first value of the optional select list stating "Applicable only
for value XYZ". Then I'd use JavaScript to hide the optional select
list, remove the "Applicable only for value XYZ" and detect an
onchange event on the first select list for determining visibility for
the optional select list. This way, if your user is one of the 6% of
internet users without JavaScript turned on, at least the second list
will make some sense. When the request gets sent to the server, always
check both values and make sure it makes sense. I always try to
develop my web applications / forms entirely in HTML first and make
sure it works without javascript, then I add javascript where it makes
sense for a better user experience.

- jake

On Feb 1, 2008 6:42 AM, David Krings <ramons at gmx.net> wrote:
> Michael B Allen wrote:
> > What's the best, most portable way to do this?
>
> There is likely a better way, but what I do (and I think I needed it
once) is
> to simply reload the page and evaluate the submission. Ugly, but it
works and
> it is definitely portable. You can either do an automatic self-submit
(not
> section 508 compatible...as most of the Web2.0 stuff) or wait for the
submit
> button to be clicked.
>
> David
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From danielc at analysisandsolutions.com  Fri Feb  1 11:24:14 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Fri, 1 Feb 2008 11:24:14 -0500
Subject: [nycphp-talk] html 5
Message-ID: <20080201162414.GA403@panix.com>

Hi Folks:

A new version of HTML is being proposed.  Here are the changes 
http://www.w3.org/TR/2008/WD-html5-diff-20080122/.  Here are some 
highlights.

* There are "section" elements and they can have "header" and "footer" 
elements.
* There's a "nav" element.
* New "type"'s for "input" such as "datetime" and "url".
* A "type" element can be set to "autofocus".
* Form elements can be associated with more than one form.
* "script" elements can now be "async".
* Frames are gone.
* Many stylistic attributes are being yanked in favor of CSS like 
"align", "border", etc.

One major thing I like is being removed: accesskey.  This allows me (and 
other users, I suppose) to keyboard navigate through web pages and forms.  
I also see "summary" and "abbr" is being pulled from table related 
elements.  Perhpas these are being replaced with some other elements or 
attributes, but I didn't notice such in my quick look over the working 
draft.

Enjoy,

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From ashaw at polymerdb.org  Fri Feb  1 11:26:06 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Fri, 01 Feb 2008 10:26:06 -0600
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
Message-ID: <47A3481E.5060705@polymerdb.org>

Michael B Allen wrote:
> Basically I just want to dynamically insert or remove one element in a
> form. The form is normally just a select with a submit button
> immediately to it's right. But depending on what option in the select
> is selected, I want another select to be inserted between the first
> select and the button.
>
> So it's either <select1><button> or <select1><select2><button>.
>
> I would be perfectly happy with toggling the style visibility: visible
> or visibility: hidden but this doesn't change the position of the
> button. It always appears off to the right. I want the form to
> re-pack.
Hi Mike,

The properties you want to mess with on <select2> are display (not 
visibility) and disabled.

var select2 = document.getElementById('select2')  // or however you want 
to go about defining select2

To turn off <select2> use something like this:
select2.style.display = 'none'; // this will collapse select2 so it 
takes up no space and is invisible
select2.disabled = true;  // not sure if this is necessary (may be 
redundant given
                        // that display = 'none'), but it will ensure 
the element is not submitted
                        // in the form.

To turn on <select2> use something like this:
select2.style.display = 'block'; // or 'inline', depending on what your 
layout.
select2.disabled = false;  // not sure if this is necessary (may be 
redundant given
                        // that display != 'none'), but it will ensure 
the element is not disabled

For more on the 'display' property, see this link: 
<http://www.blooberry.com/indexdot/css/properties/classify/display.htm>  
That site is slightly dated but still incredibly useful for 
understanding CSS properties;  I've been using it as a primary reference 
for years and find it only ages in its failure to report CSS support for 
newer browsers, which is information I can get elsewhere.

Good luck,
Allen


-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From ioplex at gmail.com  Fri Feb  1 11:28:10 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Fri, 1 Feb 2008 11:28:10 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <e065b8610802010622l7898a41dx802e3bc4bbd840d5@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<47A305A6.6050206@gmx.net>
	<e065b8610802010622l7898a41dx802e3bc4bbd840d5@mail.gmail.com>
Message-ID: <78c6bd860802010828x60cfc6e1n79c68494a93db7fb@mail.gmail.com>

On 2/1/08, Jake McGraw <jmcgraw1 at gmail.com> wrote:
> Then I'd use JavaScript to hide the optional select
> list, remove the "Applicable only for value XYZ" and detect an
> onchange event on the first select list for ...

But w/ JavaScript turned on how do I hide the select so that it no
longer occupies that space? With all elements in a row, if I set
visibility: hidden, the Submit button is off to the right where it
would be without the select hidden leaving a big gap. I want it to
shift over to the left as if there were really no select there at all.

Mike


From jkelly at sussex.edu  Fri Feb  1 11:39:17 2008
From: jkelly at sussex.edu (jessica kelly)
Date: Fri, 01 Feb 2008 11:39:17 -0500
Subject: [nycphp-talk] Dynamic Form Elements
Message-ID: <47A304E50200008A00017388@mail.sussex.edu>

Try,

style="display:none" 

Jessica

>>> "Michael B Allen" <ioplex at gmail.com> 02/01/08 11:28 AM >>>
On 2/1/08, Jake McGraw <jmcgraw1 at gmail.com> wrote:
> Then I'd use JavaScript to hide the optional select
> list, remove the "Applicable only for value XYZ" and detect an
> onchange event on the first select list for ...

But w/ JavaScript turned on how do I hide the select so that it no
longer occupies that space? With all elements in a row, if I set
visibility: hidden, the Submit button is off to the right where it
would be without the select hidden leaving a big gap. I want it to
shift over to the left as if there were really no select there at all.

Mike
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From ashaw at polymerdb.org  Fri Feb  1 11:49:00 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Fri, 01 Feb 2008 10:49:00 -0600
Subject: [nycphp-talk] html 5
In-Reply-To: <20080201162414.GA403@panix.com>
References: <20080201162414.GA403@panix.com>
Message-ID: <47A34D7C.7020408@polymerdb.org>

An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080201/d83d100c/attachment.html>

From ioplex at gmail.com  Fri Feb  1 11:59:59 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Fri, 1 Feb 2008 11:59:59 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <47A3481E.5060705@polymerdb.org>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<47A3481E.5060705@polymerdb.org>
Message-ID: <78c6bd860802010859h3aef38dct80884fbc15f31a11@mail.gmail.com>

On 2/1/08, Allen Shaw <ashaw at polymerdb.org> wrote:
> Michael B Allen wrote:
> > Basically I just want to dynamically insert or remove one element in a
> > form. The form is normally just a select with a submit button
> > immediately to it's right. But depending on what option in the select
> > is selected, I want another select to be inserted between the first
> > select and the button.
> >
> > So it's either <select1><button> or <select1><select2><button>.
> >
> > I would be perfectly happy with toggling the style visibility: visible
> > or visibility: hidden but this doesn't change the position of the
> > button. It always appears off to the right. I want the form to
> > re-pack.
> Hi Mike,
>
> The properties you want to mess with on <select2> are display (not
> visibility) and disabled.
>
> var select2 = document.getElementById('select2')  // or however you want
> to go about defining select2
>
> To turn off <select2> use something like this:
> select2.style.display = 'none'; // this will collapse select2 so it
> takes up no space and is invisible

Bingo. That is exactly what I want. It works like a champ.

Thanks,
Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/


From ps at sun-code.com  Fri Feb  1 12:01:16 2008
From: ps at sun-code.com (Peter Sawczynec)
Date: Fri, 1 Feb 2008 12:01:16 -0500
Subject: [nycphp-talk] html 5
In-Reply-To: <47A34D7C.7020408@polymerdb.org>
References: <20080201162414.GA403@panix.com> <47A34D7C.7020408@polymerdb.org>
Message-ID: <002201c864f4$10748a50$315d9ef0$@com>

So are we saying that "id" and "name" will be used in favor of
"accesskey". It was my impression that ultimately it 

was "id" that was supposed to win out as the way to address all the
elements in the DOM. Is that right?

 

 Peter

 

From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Allen Shaw
Sent: Friday, February 01, 2008 11:49 AM
To: NYPHP Talk
Subject: Re: [nycphp-talk] html 5

 

Daniel Convissor wrote: 

Hi Folks:
 
A new version of HTML is being proposed.  Here are the changes 
http://www.w3.org/TR/2008/WD-html5-diff-20080122/.  ...
One major thing I like is being removed: accesskey.  This allows me (and

other users, I suppose) to keyboard navigate through web pages and
forms.  
I also see "summary" and "abbr" is being pulled from table related 
elements.  Perhpas these are being replaced with some other elements or 
attributes, but I didn't notice such in my quick look over the working 
draft.

As of a week ago, this commenter to the w3c proposal didn't notice a
replacement for accesskey either, mentioning "the deprecation of the
accesskey attribute (with no stated replacement)":
 
<http://lists.w3.org/Archives/Public/public-html-comments/2008Jan/0015.h
tml>
<http://lists.w3.org/Archives/Public/public-html-comments/2008Jan/0015.h
tml>

I agree it's a major feature, and I wonder why it's being deprecated, as
I find it incredibly useful (I primarily design targeted applications,
not public Web sites).

This page points out that for public web sites there are many things
that can get in the way of accesskey definitions, namely user agents
that are already using various accesskeys for their own features, so
that there are only 3 keys out of the US-typical qwerty keyboard that
are not used (and thus effectively blocked) by at least one of these
user agents.
 <http://www.wats.ca/show.php?contentid=32>
<http://www.wats.ca/show.php?contentid=32>

Finally, this page at the w3c wiki shows some rationale from both sides
-- to include accesskeys or not.  It mentions that "An alternate,
superior mechanism can be found in the XHTML access module
<http://www.w3.org/TR/xhtml2/mod-access.html#edef_access_access>
<http://www.w3.org/TR/xhtml2/mod-access.html#edef_access_access>, which
supports essential semantics for accesskey navigation, but without the
device dependency restrictions of accesskey as defined in HTML 4.01.":
 <http://esw.w3.org/topic/HTML/DroppedAttributeAccesskey>
<http://esw.w3.org/topic/HTML/DroppedAttributeAccesskey>

I'm no advocate, so I likely won't be trying to make my voice heard in
any of this, but I'm quietly hoping that either accesskey is added to
the html5 spec, or that I'll be able to make use of a standardized
replacement.

- Allen






-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080201/aadbc56b/attachment.html>

From dorgan at donaldorgan.com  Fri Feb  1 12:08:03 2008
From: dorgan at donaldorgan.com (Donald J Organ IV)
Date: Fri, 01 Feb 2008 12:08:03 -0500
Subject: [nycphp-talk] html 5
In-Reply-To: <002201c864f4$10748a50$315d9ef0$@com>
References: <20080201162414.GA403@panix.com> <47A34D7C.7020408@polymerdb.org>
	<002201c864f4$10748a50$315d9ef0$@com>
Message-ID: <47A351F3.9000908@donaldorgan.com>

An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080201/3f311e27/attachment.html>

From jmcgraw1 at gmail.com  Fri Feb  1 12:08:31 2008
From: jmcgraw1 at gmail.com (Jake McGraw)
Date: Fri, 1 Feb 2008 12:08:31 -0500
Subject: [nycphp-talk] Secure String Interpolation for JavaScript (highly
	applicable to PHP)
Message-ID: <e065b8610802010908w1a3b5aadgeb761a5f448e053d@mail.gmail.com>

This should be ported to PHP immediately, once some libraries for
SQL,etc have been written, form processing headaches, output
headaches, will be a thing of the past:

http://google-caja.googlecode.com/svn/changes/mikesamuel/string-interpolation-29-Jan-2008/trunk/src/js/com/google/caja/interp/index.html

- jake


From jmcgraw1 at gmail.com  Fri Feb  1 12:12:43 2008
From: jmcgraw1 at gmail.com (Jake McGraw)
Date: Fri, 1 Feb 2008 12:12:43 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <78c6bd860802010859h3aef38dct80884fbc15f31a11@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<47A3481E.5060705@polymerdb.org>
	<78c6bd860802010859h3aef38dct80884fbc15f31a11@mail.gmail.com>
Message-ID: <e065b8610802010912k70a4ba18g51d93bfdff836adc@mail.gmail.com>

Btw, not to go OT or start a js framework war, I highly recommend
jQuery for any DOM manipulation tasks like the one you describe here.

- jake

On Feb 1, 2008 11:59 AM, Michael B Allen <ioplex at gmail.com> wrote:
> On 2/1/08, Allen Shaw <ashaw at polymerdb.org> wrote:
> > Michael B Allen wrote:
> > > Basically I just want to dynamically insert or remove one element in a
> > > form. The form is normally just a select with a submit button
> > > immediately to it's right. But depending on what option in the select
> > > is selected, I want another select to be inserted between the first
> > > select and the button.
> > >
> > > So it's either <select1><button> or <select1><select2><button>.
> > >
> > > I would be perfectly happy with toggling the style visibility: visible
> > > or visibility: hidden but this doesn't change the position of the
> > > button. It always appears off to the right. I want the form to
> > > re-pack.
> > Hi Mike,
> >
> > The properties you want to mess with on <select2> are display (not
> > visibility) and disabled.
> >
> > var select2 = document.getElementById('select2')  // or however you want
> > to go about defining select2
> >
> > To turn off <select2> use something like this:
> > select2.style.display = 'none'; // this will collapse select2 so it
> > takes up no space and is invisible
>
> Bingo. That is exactly what I want. It works like a champ.
>
> Thanks,
> Mike
>
> --
> Michael B Allen
> PHP Active Directory SPNEGO SSO
> http://www.ioplex.com/
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>


From ashaw at polymerdb.org  Fri Feb  1 12:13:56 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Fri, 01 Feb 2008 11:13:56 -0600
Subject: [nycphp-talk] html 5
In-Reply-To: <002201c864f4$10748a50$315d9ef0$@com>
References: <20080201162414.GA403@panix.com> <47A34D7C.7020408@polymerdb.org>
	<002201c864f4$10748a50$315d9ef0$@com>
Message-ID: <47A35354.3070409@polymerdb.org>

Peter Sawczynec wrote:
> So are we saying that "id" and "name" will be used in favor of
> "accesskey". It was my impression that ultimately it 
> was "id" that was supposed to win out as the way to address all the
> elements in the DOM. Is that right?
>   
Hi Peter,

I think the discussion for accesskey is not about how to JS code to 
access the element but how to allow the user to access a form element or 
link without using the mouse or tabbing through other elements to get to 
it.

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From ps at sun-code.com  Fri Feb  1 12:38:05 2008
From: ps at sun-code.com (Peter Sawczynec)
Date: Fri, 1 Feb 2008 12:38:05 -0500
Subject: [nycphp-talk] html 5
In-Reply-To: <47A35354.3070409@polymerdb.org>
References: <20080201162414.GA403@panix.com>
	<47A34D7C.7020408@polymerdb.org>	<002201c864f4$10748a50$315d9ef0$@com>
	<47A35354.3070409@polymerdb.org>
Message-ID: <003701c864f9$340a6570$9c1f3050$@com>

Yes. That is correct. My bad. But, further generally to this area. Then
I was thinking that in a more convoluted way one might yet be able to
use JS with onkeypress event captures, so that JS could still remain
valuable here. So that certain keyboard combination events could be
hooked to send focus to form elements by id. Plausible? Yes? No? Also,
Flash AS has access key attributes to maybe help meet this need too.
Peter




-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Allen Shaw
Sent: Friday, February 01, 2008 12:14 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] html 5

Peter Sawczynec wrote:
> So are we saying that "id" and "name" will be used in favor of
> "accesskey". It was my impression that ultimately it 
> was "id" that was supposed to win out as the way to address all the
> elements in the DOM. Is that right?
>   
Hi Peter,

I think the discussion for accesskey is not about how to JS code to 
access the element but how to allow the user to access a form element or

link without using the mouse or tabbing through other elements to get to

it.

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From ashaw at polymerdb.org  Fri Feb  1 12:42:52 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Fri, 01 Feb 2008 11:42:52 -0600
Subject: [nycphp-talk] html 5
In-Reply-To: <003701c864f9$340a6570$9c1f3050$@com>
References: <20080201162414.GA403@panix.com>	<47A34D7C.7020408@polymerdb.org>	<002201c864f4$10748a50$315d9ef0$@com>	<47A35354.3070409@polymerdb.org>
	<003701c864f9$340a6570$9c1f3050$@com>
Message-ID: <47A35A1C.5010608@polymerdb.org>

Peter Sawczynec wrote:
> Yes. That is correct. My bad. But, further generally to this area. Then
> I was thinking that in a more convoluted way one might yet be able to
> use JS with onkeypress event captures, so that JS could still remain
> valuable here. So that certain keyboard combination events could be
> hooked to send focus to form elements by id. Plausible? Yes? No? Also,
> Flash AS has access key attributes to maybe help meet this need too.
> Peter
>   
It's possible, and I suppose it's being done (it's mentioned in a few 
online references to the html5 deprecation of accesskeys). But the 
advantage of the accesskey attribute is that it works in non-JS 
environments, and that I as a developer don't have to code it. I'm 
hoping it won't come to that.

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From ps at sun-code.com  Fri Feb  1 12:49:21 2008
From: ps at sun-code.com (Peter Sawczynec)
Date: Fri, 1 Feb 2008 12:49:21 -0500
Subject: [nycphp-talk] html 5
In-Reply-To: <003701c864f9$340a6570$9c1f3050$@com>
References: <20080201162414.GA403@panix.com>	<47A34D7C.7020408@polymerdb.org>	<002201c864f4$10748a50$315d9ef0$@com>	<47A35354.3070409@polymerdb.org>
	<003701c864f9$340a6570$9c1f3050$@com>
Message-ID: <003801c864fa$c77081e0$565185a0$@com>

And also, it has always been my observation that tab and shift-tabbing
thru form elements is a browser level functionality employed by all. So
that an onload JS puts the user in the form then they tab it as needed.
And a hit of the enter key submits the focused submit button or even
submits the active form from any focused location in the form. 

But I believe another problem here is that readers look to accesskey
attributes to read their function or name info out to users who need
this service. So that JS, ids, and browser tabbing may still not match
what accesskey can do. 

Peter
 

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Peter Sawczynec
Sent: Friday, February 01, 2008 12:38 PM
To: 'NYPHP Talk'
Subject: RE: [nycphp-talk] html 5

Yes. That is correct. My bad. But, further generally to this area. Then
I was thinking that in a more convoluted way one might yet be able to
use JS with onkeypress event captures, so that JS could still remain
valuable here. So that certain keyboard combination events could be
hooked to send focus to form elements by id. Plausible? Yes? No? Also,
Flash AS has access key attributes to maybe help meet this need too.
Peter




-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Allen Shaw
Sent: Friday, February 01, 2008 12:14 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] html 5

Peter Sawczynec wrote:
> So are we saying that "id" and "name" will be used in favor of
> "accesskey". It was my impression that ultimately it 
> was "id" that was supposed to win out as the way to address all the
> elements in the DOM. Is that right?
>   
Hi Peter,

I think the discussion for accesskey is not about how to JS code to 
access the element but how to allow the user to access a form element or

link without using the mouse or tabbing through other elements to get to

it.

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From chsnyder at gmail.com  Fri Feb  1 13:00:42 2008
From: chsnyder at gmail.com (csnyder)
Date: Fri, 1 Feb 2008 13:00:42 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <001d01c864eb$3cabe6d0$b603b470$@com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<47A305A6.6050206@gmx.net>
	<e065b8610802010622l7898a41dx802e3bc4bbd840d5@mail.gmail.com>
	<001d01c864eb$3cabe6d0$b603b470$@com>
Message-ID: <b76252690802011000k4d550bccq9e3043d3d4aa1a77@mail.gmail.com>

On Feb 1, 2008 10:58 AM, Peter Sawczynec <ps at sun-code.com> wrote:

> I vote, pour on the JS. Show/hide. Tool tips. Mouseover. And even, whoa,
> inline frames.

Yes, but some approaches make more sense than others.

Progressive enhancement, where the markup of the page works without
javascript, and then javascript is used to add richer functionality,
is ideal.
http://en.wikipedia.org/wiki/Progressive_enhancement
http://en.wikipedia.org/wiki/Unobtrusive_JavaScript

It seems like more work, since you make a functional wireframe first
and then make it all ajax-y, but it provides a necessary (imo)
separation between front- and back-end processes.

It's similar to the notion that your application should be usable (if
ugly) without css and images.

-- 
Chris Snyder
http://chxo.com/


From scott at crisscott.com  Fri Feb  1 13:11:15 2008
From: scott at crisscott.com (Scott Mattocks)
Date: Fri, 01 Feb 2008 13:11:15 -0500
Subject: [nycphp-talk] html 5
In-Reply-To: <47A34D7C.7020408@polymerdb.org>
References: <20080201162414.GA403@panix.com> <47A34D7C.7020408@polymerdb.org>
Message-ID: <47A360C3.8050007@crisscott.com>

Allen Shaw wrote:
> I agree it's a major feature, and I wonder why it's being deprecated, as I find 
> it incredibly useful (I primarily design targeted applications, not public Web 
> sites).

I think one of the main arguments against accesskeys is that they 
interfere with normal hotkeys in the browser and other applications. In 
particular they can cause problems with screen readers and other 
accessibility tools where being able to use crtl-A for an expected 
operation is essential. If you override that functionality to access an 
element, you have made the site useless to someone that depends on a 
certain action to access a site.

Scott Mattocks


From ben at projectskyline.com  Fri Feb  1 13:19:32 2008
From: ben at projectskyline.com (Ben Sgro)
Date: Fri, 01 Feb 2008 13:19:32 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <e065b8610802010912k70a4ba18g51d93bfdff836adc@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>	<47A3481E.5060705@polymerdb.org>	<78c6bd860802010859h3aef38dct80884fbc15f31a11@mail.gmail.com>
	<e065b8610802010912k70a4ba18g51d93bfdff836adc@mail.gmail.com>
Message-ID: <47A362B4.4090403@projectskyline.com>

+1 to jquery. It makes working with js enjoyable.

- Ben

Jake McGraw wrote:
> Btw, not to go OT or start a js framework war, I highly recommend
> jQuery for any DOM manipulation tasks like the one you describe here.
>
> - jake
>
> On Feb 1, 2008 11:59 AM, Michael B Allen <ioplex at gmail.com> wrote:
>   
>> On 2/1/08, Allen Shaw <ashaw at polymerdb.org> wrote:
>>     
>>> Michael B Allen wrote:
>>>       
>>>> Basically I just want to dynamically insert or remove one element in a
>>>> form. The form is normally just a select with a submit button
>>>> immediately to it's right. But depending on what option in the select
>>>> is selected, I want another select to be inserted between the first
>>>> select and the button.
>>>>
>>>> So it's either <select1><button> or <select1><select2><button>.
>>>>
>>>> I would be perfectly happy with toggling the style visibility: visible
>>>> or visibility: hidden but this doesn't change the position of the
>>>> button. It always appears off to the right. I want the form to
>>>> re-pack.
>>>>         
>>> Hi Mike,
>>>
>>> The properties you want to mess with on <select2> are display (not
>>> visibility) and disabled.
>>>
>>> var select2 = document.getElementById('select2')  // or however you want
>>> to go about defining select2
>>>
>>> To turn off <select2> use something like this:
>>> select2.style.display = 'none'; // this will collapse select2 so it
>>> takes up no space and is invisible
>>>       
>> Bingo. That is exactly what I want. It works like a champ.
>>
>> Thanks,
>> Mike
>>
>> --
>> Michael B Allen
>> PHP Active Directory SPNEGO SSO
>> http://www.ioplex.com/
>>
>> _______________________________________________
>> New York PHP Community Talk Mailing List
>> http://lists.nyphp.org/mailman/listinfo/talk
>>
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>>
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>>
>>     
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>   


From ashaw at polymerdb.org  Fri Feb  1 13:24:00 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Fri, 01 Feb 2008 12:24:00 -0600
Subject: [nycphp-talk] html 5
In-Reply-To: <47A360C3.8050007@crisscott.com>
References: <20080201162414.GA403@panix.com> <47A34D7C.7020408@polymerdb.org>
	<47A360C3.8050007@crisscott.com>
Message-ID: <47A363C0.9030700@polymerdb.org>

Scott Mattocks wrote:
> Allen Shaw wrote:
>> I agree it's a major feature, and I wonder why it's being deprecated, 
>> as I find it incredibly useful (I primarily design targeted 
>> applications, not public Web sites).
>
> I think one of the main arguments against accesskeys is that they 
> interfere with normal hotkeys in the browser and other applications. 
> In particular they can cause problems with screen readers and other 
> accessibility tools where being able to use crtl-A for an expected 
> operation is essential. If you override that functionality to access 
> an element, you have made the site useless to someone that depends on 
> a certain action to access a site.
>
Yeah, I think that's right.  Conflicts with screen reader functions and 
browser chrome are a recurring issue with accesskeys.  This is one 
reason why this guy <http://www.wats.ca/show.php?contentid=32> was 
suggesting that accesskeys may not be especially useful except in 
intranet application or similar settings, in which you can develop for 
specific UAs.  That happens to be my situation for most projects, 
though, so the potential for such conflicts is far less of an issue for 
me than it might be for others.

- A.

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From ps at sun-code.com  Fri Feb  1 13:24:40 2008
From: ps at sun-code.com (Peter Sawczynec)
Date: Fri, 1 Feb 2008 13:24:40 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <b76252690802011000k4d550bccq9e3043d3d4aa1a77@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>	<47A305A6.6050206@gmx.net>	<e065b8610802010622l7898a41dx802e3bc4bbd840d5@mail.gmail.com>	<001d01c864eb$3cabe6d0$b603b470$@com>
	<b76252690802011000k4d550bccq9e3043d3d4aa1a77@mail.gmail.com>
Message-ID: <003e01c864ff$b6164510$2242cf30$@com>

Degrading gracefully is an important dev technique certainly.

Just for the sake of discussion, pulling back far to a rough massively macro level it is worth noting though that, I believe, it has been yahoo that has quietly supported this unobtrusive JS concept over the past decade while it was google that non-standardly JS'd, ajaxed, custom API'd and gadgeted their way to monster acceptance on the cool and convenience hungry 94% consumer and corporate desktops, laptops and mobiles. 

Peter



-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On Behalf Of csnyder
Sent: Friday, February 01, 2008 1:01 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] Dynamic Form Elements

On Feb 1, 2008 10:58 AM, Peter Sawczynec <ps at sun-code.com> wrote:

> I vote, pour on the JS. Show/hide. Tool tips. Mouseover. And even, whoa,
> inline frames.

Yes, but some approaches make more sense than others.

Progressive enhancement, where the markup of the page works without
javascript, and then javascript is used to add richer functionality,
is ideal.
http://en.wikipedia.org/wiki/Progressive_enhancement
http://en.wikipedia.org/wiki/Unobtrusive_JavaScript

It seems like more work, since you make a functional wireframe first
and then make it all ajax-y, but it provides a necessary (imo)
separation between front- and back-end processes.

It's similar to the notion that your application should be usable (if
ugly) without css and images.

-- 
Chris Snyder
http://chxo.com/
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From marybeth at nyc.rr.com  Fri Feb  1 13:57:47 2008
From: marybeth at nyc.rr.com (Mary Beth Kooper)
Date: Fri, 1 Feb 2008 13:57:47 -0500
Subject: [nycphp-talk] Sporadic problems with forms
Message-ID: <357401c86504$56154c10$0300a8c0@W6987>

I have a cmu that I have taken over.  The forms in this cmu are in frames.
Every once in a while, a 2nd update is submitted to the mysql database with
blank data fields.  I thought it might be an issue with ie, but it has now
also happened with firefox.  The users swear that they are not refreshing
the pages or hitting submit more than once.  Any clues to why this may
happen are greatly appreciated.
 
Mary Beth Kooper
LarryBeth Web Services Unlimited <http://www.larrybeth.com/> 
Web Design, Development, Maintenance and Hosting

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080201/5645ffa6/attachment.html>

From michael.southwell at nyphp.com  Fri Feb  1 14:31:29 2008
From: michael.southwell at nyphp.com (Michael Southwell)
Date: Fri, 01 Feb 2008 14:31:29 -0500
Subject: [nycphp-talk] Sporadic problems with forms
In-Reply-To: <357401c86504$56154c10$0300a8c0@W6987>
References: <357401c86504$56154c10$0300a8c0@W6987>
Message-ID: <47A37391.2070103@nyphp.com>

Mary Beth Kooper wrote:
> I have a cmu that I have taken over.  The forms in this cmu are in 
> frames.  Every once in a while, a 2nd update is submitted to the mysql 
> database with blank data fields.  

Are you both using sessions and doing any redirections with header( 
'Location... (for example, after validating field content)? If so, you 
need to carry the session id along with the redirection URI or you will 
lose your session. That in and of itself will not cause duplication, but 
it can cause empty data.


-- 
=================
Michael Southwell
Vice President, Education
NYPHP TRAINING:  http://nyphp.com/Training/Indepth


From dcech at phpwerx.net  Fri Feb  1 14:39:56 2008
From: dcech at phpwerx.net (Dan Cech)
Date: Fri, 01 Feb 2008 14:39:56 -0500
Subject: [nycphp-talk] Sporadic problems with forms
In-Reply-To: <47A37391.2070103@nyphp.com>
References: <357401c86504$56154c10$0300a8c0@W6987> <47A37391.2070103@nyphp.com>
Message-ID: <47A3758C.5030404@phpwerx.net>

Michael Southwell wrote:
> Mary Beth Kooper wrote:
>> I have a cmu that I have taken over.  The forms in this cmu are in 
>> frames.  Every once in a while, a 2nd update is submitted to the mysql 
>> database with blank data fields.  
> 
> Are you both using sessions and doing any redirections with header( 
> 'Location... (for example, after validating field content)? If so, you 
> need to carry the session id along with the redirection URI or you will 
> lose your session. That in and of itself will not cause duplication, but 
> it can cause empty data.

This would only be true if you are using non-cookie sessions and relying 
on the session.use_trans_sid directive to pass the session id around. 
If you're using a cookie to store the session id then you don't have to 
do anything special with redirects.

Dan


From ashaw at polymerdb.org  Fri Feb  1 14:54:13 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Fri, 01 Feb 2008 13:54:13 -0600
Subject: [nycphp-talk] Sporadic problems with forms
In-Reply-To: <357401c86504$56154c10$0300a8c0@W6987>
References: <357401c86504$56154c10$0300a8c0@W6987>
Message-ID: <47A378E5.5080201@polymerdb.org>

Mary Beth Kooper wrote:
> I have a cmu that I have taken over.  The forms in this cmu are in frames.
> Every once in a while, a 2nd update is submitted to the mysql database with
> blank data fields.  I thought it might be an issue with ie, but it has now
> also happened with firefox.  The users swear that they are not refreshing
> the pages or hitting submit more than once.  Any clues to why this may
> happen are greatly appreciated.
>   
Hi Mary Beth,

In my experience "mystery problems" like this one are almost always 
being done by the code itself -- some function is being called twice, or 
an ancient dummy function that was never removed is being called only in 
certain circumstances.  Unfortunately the only way to find something 
like that is to get in there and untangle the code.  You *might* get 
some clues by looking for patterns in those error cases.

On another note, it would be better for your application if this kind of 
thing doesn't happen /even if/ the page is reloaded -- that is, the 
application should be fixed to avoid repeat processing on a refresh.  
Depending on how convoluted the codebase is, this may be something you 
can add in and thereby either solve the problem or at least eliminate 
page refresh as the culprit.

- Allen


-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From danielc at analysisandsolutions.com  Sun Feb  3 13:27:45 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Sun, 3 Feb 2008 13:27:45 -0500
Subject: [nycphp-talk] Sporadic problems with forms
In-Reply-To: <47A378E5.5080201@polymerdb.org>
References: <357401c86504$56154c10$0300a8c0@W6987>
	<47A378E5.5080201@polymerdb.org>
Message-ID: <20080203182745.GA18145@panix.com>

On Fri, Feb 01, 2008 at 01:54:13PM -0600, Allen Shaw wrote:
> 
> Unfortunately the only way to find something 
> like that is to get in there and untangle the code.  You *might* get 
> some clues by looking for patterns in those error cases.

Or you can add logging.  Right before the problematic query gets 
executed, log it and a backtrace using debug_backtrace().  You can even 
just log the information if the parameters to the query are empty so you 
just trap the stuff you need.  Plus have your log function email you so 
you know when to go look.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From ashaw at polymerdb.org  Sun Feb  3 16:30:33 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Sun, 03 Feb 2008 15:30:33 -0600
Subject: [nycphp-talk] Sporadic problems with forms
In-Reply-To: <20080203182745.GA18145@panix.com>
References: <357401c86504$56154c10$0300a8c0@W6987>	<47A378E5.5080201@polymerdb.org>
	<20080203182745.GA18145@panix.com>
Message-ID: <47A63279.50309@polymerdb.org>

Daniel Convissor wrote:
> On Fri, Feb 01, 2008 at 01:54:13PM -0600, Allen Shaw wrote:
>   
>> Unfortunately the only way to find something 
>> like that is to get in there and untangle the code.  You *might* get 
>> some clues by looking for patterns in those error cases.
>>     
> Or you can add logging.  Right before the problematic query gets 
> executed, log it and a backtrace using debug_backtrace().  
>   
Yep, Dan, you're right. I'm going to have to start working smarter like 
that.

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From ben at projectskyline.com  Mon Feb  4 12:33:32 2008
From: ben at projectskyline.com (Ben Sgro)
Date: Mon, 04 Feb 2008 12:33:32 -0500
Subject: [nycphp-talk] [OT] SQL Query
Message-ID: <47A74C6C.9020304@projectskyline.com>

Hello All,

I have a table that includes an id (not unique and a version).

A unique row is identified by both the id and version. This is for MSSQL.

I want to select all the id's, but only return the most up to date version.

So, for a table

id | version
-------------
1 | 0
1 | 1
2 | 0
2 | 1
2 | 2

The query should return

id | version
-------------
1 | 1
2 | 2

Any help much appreciated.

- Ben


From dcech at phpwerx.net  Mon Feb  4 12:53:09 2008
From: dcech at phpwerx.net (Dan Cech)
Date: Mon, 04 Feb 2008 12:53:09 -0500
Subject: [nycphp-talk] [OT] SQL Query
In-Reply-To: <47A74C6C.9020304@projectskyline.com>
References: <47A74C6C.9020304@projectskyline.com>
Message-ID: <47A75105.4090509@phpwerx.net>

Ben Sgro wrote:
> I have a table that includes an id (not unique and a version).
> 
> A unique row is identified by both the id and version. This is for MSSQL.
> 
> I want to select all the id's, but only return the most up to date version.
> 
> So, for a table
> 
> id | version
> -------------
> 1 | 0
> 1 | 1
> 2 | 0
> 2 | 1
> 2 | 2
> 
> The query should return
> 
> id | version
> -------------
> 1 | 1
> 2 | 2
> 
> Any help much appreciated.

This problem is sometimes referred to as the group-wise maximum.  I'm 
not sure if they would work in mssql but there are a couple of potential 
solutions for mysql outlined here:

http://dev.mysql.com/doc/refman/4.1/en/example-maximum-column-group-row.html

Dan


From drydell at optonline.net  Mon Feb  4 12:53:17 2008
From: drydell at optonline.net (drydell at optonline.net)
Date: Mon, 04 Feb 2008 17:53:17 +0000 (GMT)
Subject: [nycphp-talk] [OT] SQL Query
In-Reply-To: <47A74C6C.9020304@projectskyline.com>
References: <47A74C6C.9020304@projectskyline.com>
Message-ID: <e7ccca86ddeb.47a7510d@optonline.net>

select id, max(version) from table group by id----- Original Message -----From: Ben Sgro Date: Monday, February 4, 2008 12:33 pmSubject: [nycphp-talk] [OT] SQL QueryTo: NYPHP Talk > Hello All,> > I have a table that includes an id (not unique and a version).> > A unique row is identified by both the id and version. This is > for MSSQL.> > I want to select all the id's, but only return the most up to > date version.> > So, for a table> > id | version> -------------> 1 | 0> 1 | 1> 2 | 0> 2 | 1> 2 | 2> > The query should return> > id | version> -------------> 1 | 1> 2 | 2> > Any help much appreciated.> > - Ben> _______________________________________________> New York PHP Community Talk Mailing List> http://lists.nyphp.org/mailman/listinfo/talk> > NYPHPCon 2006 Presentations Online> http://www.nyphpcon.com> > Show Your Participation in New York PHP> http://www.nyphp.org/show_participation.php> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080204/48b31c60/attachment.html>

From ashaw at polymerdb.org  Mon Feb  4 12:59:49 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Mon, 04 Feb 2008 11:59:49 -0600
Subject: [nycphp-talk] [OT] SQL Query
In-Reply-To: <47A74C6C.9020304@projectskyline.com>
References: <47A74C6C.9020304@projectskyline.com>
Message-ID: <47A75295.4010607@polymerdb.org>

Ben Sgro wrote:
> I have a table that includes an id (not unique and a version).
> A unique row is identified by both the id and version. This is for MSSQL.
> I want to select all the id's, but only return the most up to date 
> version.
Hi Ben,

Not sure about MSSQL but I believe the following is standard sql:

select id, max(version) from mytable group by id;

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From ben at projectskyline.com  Mon Feb  4 13:22:38 2008
From: ben at projectskyline.com (Ben Sgro)
Date: Mon, 04 Feb 2008 13:22:38 -0500
Subject: [nycphp-talk] [OT] SQL Query
In-Reply-To: <47A75295.4010607@polymerdb.org>
References: <47A74C6C.9020304@projectskyline.com>
	<47A75295.4010607@polymerdb.org>
Message-ID: <47A757EE.8010003@projectskyline.com>

Hello,

Thanks to all. I was doing this for the individual id selection, and it just
appeared that it wouldn't work for all id's.

I should have just tried it before asking.

Thanks again,

- Ben

Allen Shaw wrote:
> Ben Sgro wrote:
>> I have a table that includes an id (not unique and a version).
>> A unique row is identified by both the id and version. This is for 
>> MSSQL.
>> I want to select all the id's, but only return the most up to date 
>> version.
> Hi Ben,
>
> Not sure about MSSQL but I believe the following is standard sql:
>
> select id, max(version) from mytable group by id;
>
> - Allen
>


From cliff at pinestream.com  Mon Feb  4 15:58:24 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Mon, 04 Feb 2008 15:58:24 -0500
Subject: [nycphp-talk] PhP error handler help -- totally confounded
Message-ID: <C3CCE6A0.C5C1%cliff@pinestream.com>

The error handler on my production server has stopped working. I ran some
code to test it and am completely stuck. The trigger error line below works
just fine. But php isn?t directing it?s errors to the error handler.
blasasdfsdfgorg{; just stops dead. foobar(); which should also throw an
error since it doesn?t exist, also doesn?t get caught by the error handler.

Things were working until a few weeks ago and I can?t think of any major
changes since then. PHP hasn?t changed; no kernal updates, no code changes,
etc. Any ideas? 
<?php
echo 'Testing error handler';
                   
function error_handler($errNo, $errStr, $errFile, $errLine) {
    echo 'Inside error handling function';
...
...
...
}

ini_set('error_reporting', E_ALL);

$old_handler = set_error_handler('error_handler');

echo 'Making errors now';

trigger_error("An error", E_USER_NOTICE);
   
foobar();

blasasdfsdfgorg{;
  
echo 'An error appeared above';
?>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080204/e29f5cc7/attachment.html>

From ashaw at polymerdb.org  Mon Feb  4 16:18:29 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Mon, 04 Feb 2008 15:18:29 -0600
Subject: [nycphp-talk] PhP error handler help -- totally confounded
In-Reply-To: <C3CCE6A0.C5C1%cliff@pinestream.com>
References: <C3CCE6A0.C5C1%cliff@pinestream.com>
Message-ID: <47A78125.6030405@polymerdb.org>

Cliff Hirsch wrote:
> The error handler on my production server has stopped working. I ran some
> code to test it and am completely stuck. The trigger error line below works
> just fine. But php isn?t directing it?s errors to the error handler.
> blasasdfsdfgorg{; just stops dead. foobar(); which should also throw an
> error since it doesn?t exist, also doesn?t get caught by the error handler.
>   
Hi Cliff,

The two types of errors your having trouble with are the type that can't 
be handled easily with custom error handlers.

blasasdfsdfgorg(;
This makes a parse error.  PHP won't get far enough to use your custom 
handler because it will just die.  Manual 
<http://www.php.net/manual/en/function.set-error-handler.php> says:
The following error types cannot be handled with a user defined 
function: *E_ERROR*, *E_PARSE*, *E_CORE_ERROR*, *E_CORE_WARNING*, 
*E_COMPILE_ERROR*, *E_COMPILE_WARNING*, and most of *E_STRICT* raised in 
the file where *set_error_handler()* is called.

foobar(); (the function that doesn't exist):
I never tried this myself, but this comment 
<http://www.php.net/manual/en/function.set-error-handler.php#73239> 
suggests that normal custom error handlers won't be able to catch this.

You might be expecting an error message on screen, however, or at least 
something besides a white page.  If you're not getting it, it probably 
means that display_errors 
<http://www.php.net/manual/en/ref.errorfunc.php#ini.display-errors> is 
turned off.
> Things were working until a few weeks ago and I can?t think of any major
> changes since then. 
Is it possible you weren't testing for parse errors and "call to 
undefined function" errors back then?

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From cliff at pinestream.com  Mon Feb  4 16:55:14 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Mon, 04 Feb 2008 16:55:14 -0500
Subject: [nycphp-talk] PhP error handler help -- totally confounded
In-Reply-To: <47A78125.6030405@polymerdb.org>
Message-ID: <C3CCF3F2.C5D5%cliff@pinestream.com>

> blasasdfsdfgorg(;
> This makes a parse error.  PHP won't get far enough to use your custom
> handler because it will just die.

> The following error types cannot be handled with a user defined
> function: *E_ERROR*, *E_PARSE*, *E_CORE_ERROR*, *E_CORE_WARNING*,
> *E_COMPILE_ERROR*, *E_COMPILE_WARNING*, and most of *E_STRICT* raised in
> the file where *set_error_handler()* is called.

> foobar(); (the function that doesn't exist):
> suggests that normal custom error handlers won't be able to catch this.

I think I have just figured this out after wasting an afternoon. My errors
until now have mainly been smarty compile errors, which are caught.

Funny how all the examples on the php web site are like:

function userErrorHandler($errno, $errmsg, $filename, $linenum, $vars) {
    $errortype = array (E_ERROR => 'Error',

Even though these aren't caught!

So...the moral of the story is you need two error handlers...the customer,
user friendly, error handler, and the error_log file in your php.ini if you
want to keep php errors separate from Apache errors.





From suzerain at suzerain.com  Mon Feb  4 20:40:43 2008
From: suzerain at suzerain.com (Marc Antony Vose)
Date: Tue, 5 Feb 2008 09:40:43 +0800
Subject: [nycphp-talk] preserving cross-domain login?
In-Reply-To: <47A757EE.8010003@projectskyline.com>
References: <47A74C6C.9020304@projectskyline.com>
	<47A75295.4010607@polymerdb.org>
	<47A757EE.8010003@projectskyline.com>
Message-ID: <ED8E7879-37A0-4676-943C-F913650B361F@suzerain.com>

Hi there:

I have built a system that consists of one centralized user database,  
and a few other things, that have multiple sites around the outside  
connecting to it.  So, a login on one of the satellites happens  
through ajax connecting to a little proxy script on the satellite that  
uses curl to perform the actual login remotely.  each satellite  
resides on its own domain.

This is all fine, until other people on the project request that  
logins be preserved, regardless of which domain the login happened on.

I know that cookies have domain limitations, and so I'm trying to come  
up with a way in my head this can work, and work efficiently and  
effectively.  Anyone have any ideas?  Ever attempted something similar  
in the past?

My first idea is something like that evil facebook script that updates  
the feed on status with things people do at other web sites (fandango,  
etc.).  I suppose if some piece of javascript in the page is loaded  
remotely from the central domain, that it could look for a cookie from  
the central domain, and call a PHP script that sets a session variable  
on the satellite.  (The problem I have, of course, is that my login  
technically occurs solely on the satellite, even though it connects to  
a database remotely, so I will have to rearchitect that somehow;  
perhaps forcing the entire login process to run through a JavaScript  
loaded from the central server.)

Does that approach seem feasible?

Cheers,

Marc Vose
Founder, Suzerain Studios
http://www.suzerain.com


From ioplex at gmail.com  Mon Feb  4 21:46:22 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Mon, 4 Feb 2008 21:46:22 -0500
Subject: [nycphp-talk] preserving cross-domain login?
In-Reply-To: <ED8E7879-37A0-4676-943C-F913650B361F@suzerain.com>
References: <47A74C6C.9020304@projectskyline.com>
	<47A75295.4010607@polymerdb.org> <47A757EE.8010003@projectskyline.com>
	<ED8E7879-37A0-4676-943C-F913650B361F@suzerain.com>
Message-ID: <78c6bd860802041846l6b656791g62d317b5e2a999e8@mail.gmail.com>

On 2/4/08, Marc Antony Vose <suzerain at suzerain.com> wrote:
> Hi there:
>
> I have built a system that consists of one centralized user database,
> and a few other things, that have multiple sites around the outside
> connecting to it.  So, a login on one of the satellites happens
> through ajax connecting to a little proxy script on the satellite that
> uses curl to perform the actual login remotely.  each satellite
> resides on its own domain.
>
> This is all fine, until other people on the project request that
> logins be preserved, regardless of which domain the login happened on.
>
> I know that cookies have domain limitations, and so I'm trying to come
> up with a way in my head this can work, and work efficiently and
> effectively.  Anyone have any ideas?  Ever attempted something similar
> in the past?
>
> My first idea is something like that evil facebook script that updates
> the feed on status with things people do at other web sites (fandango,
> etc.).  I suppose if some piece of javascript in the page is loaded
> remotely from the central domain, that it could look for a cookie from
> the central domain, and call a PHP script that sets a session variable
> on the satellite.  (The problem I have, of course, is that my login
> technically occurs solely on the satellite, even though it connects to
> a database remotely, so I will have to rearchitect that somehow;
> perhaps forcing the entire login process to run through a JavaScript
> loaded from the central server.)
>
> Does that approach seem feasible?

Hi Marc,

If you really care about security this isn't really the kind of thing
that you should dream up on your own. What your describing is called
"Single Sign-On" or SSO for short.

Are your sites on the IntErnet or on an IntrAnet?

If your sites are on the IntErnet OpenID is one solution although I
don't know what sort of access control it offers such that you can
stop anyone with an OpenID account from accessing protected parts of
your sites. There's also something called Stanford WebAuth which is
Free so you can setup your own isolated auth server.

If you're on an IntrAnet there are a lot of products that do this sort
of thing. SiteMinder is one that's been around for a long time.

Although SiteMinder, Stanford WebAuth and products like it are not
*true* SSO since you have to enter your credentials twice - once to
login to your workstation and then again with the auth site. With true
SSO users never have to enter their credentials at all when they
access a site, they just go right on. True SSO is sometimes referred
to as Enterprise Single Sign-On.

If you want "Enterprise SSO" there's something called SPNEGO
authentication which is a special feature of IE and some other
browsers like Firefox. Microsoft calls this Integrated Windows
Authentication or IWA. IIS supports SPNEGO but PHP can't access much
info about the user once your authenticate and of course you have to
use a Windows web server.

Finally, my company (yes this is a proprietary pitch after all) offers
a full featured SPNEGO solution specifically for PHP on Linux and
FreeBSD. See sig for details.

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/


From anieshjoseph at gmail.com  Tue Feb  5 02:27:12 2008
From: anieshjoseph at gmail.com (Aniesh joseph)
Date: Tue, 5 Feb 2008 12:57:12 +0530
Subject: [nycphp-talk] filesize & download
Message-ID: <1b3d2fde0802042327xc56cfcax7a4dbc347551a3fc@mail.gmail.com>

I have a web page where it displays the list of audio collection. Some of
these audios are stored in another server of mine. I wish to add a
'download' option near to each audios.

So at the time of download, I want to specify the filesize. But filesize or
stat functions of php are not return the size of the audio file, if
specifies the absolute url of the audio.

Can someone suggests any method to find out the size of an audio file such
as http://example.com/myaudio.mp3 ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080205/612c6635/attachment.html>

From ramons at gmx.net  Tue Feb  5 06:57:22 2008
From: ramons at gmx.net (David Krings)
Date: Tue, 05 Feb 2008 06:57:22 -0500
Subject: [nycphp-talk] filesize & download
In-Reply-To: <1b3d2fde0802042327xc56cfcax7a4dbc347551a3fc@mail.gmail.com>
References: <1b3d2fde0802042327xc56cfcax7a4dbc347551a3fc@mail.gmail.com>
Message-ID: <47A84F22.1060101@gmx.net>

Aniesh joseph wrote:
> I have a web page where it displays the list of audio collection. Some 
> of these audios are stored in another server of mine. I wish to add a 
> 'download' option near to each audios.
> 
> So at the time of download, I want to specify the filesize. But filesize 
> or stat functions of php are not return the size of the audio file, if 
> specifies the absolute url of the audio.
> 
> Can someone suggests any method to find out the size of an audio file 
> such as http://example.com/myaudio.mp3 ?

Based on what php.net states, with PHP5.x and up you can use URLs with stat(). 
HTTP and HTTPS are in the list of supported protocols.

You could also store the file size when you add the MP3 to the system, but 
would need to back fill that information for the existing files.


David


From cliff at pinestream.com  Tue Feb  5 10:27:10 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 05 Feb 2008 10:27:10 -0500
Subject: [nycphp-talk] Mod_rewrite and pretty urls problem
Message-ID: <C3CDEA7E.C64F%cliff@pinestream.com>

For pretty urls, I have set up mod_rewrite like so:

RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php?$1

For a page like www.domain.com/faq the controller captures the faq command
and everything works fine.

But for www.domain.com/faq/ the images, css and javascript files are all
missing. They are all set up as relative links. I?m assuming that there are
now relative to the /faq directory, which does not exist. Is this a
side-effect of mod_rewrite? If so, how do you prevent it? Make all images,
css and JS files absolute links or always relative to root?

Also, what is the proper RewriteRule to preserve get query variables?

Something like RewriteRule ?(.*)$ index.php?$1

Cliff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080205/e58edfab/attachment.html>

From nynj.tech at hotmail.com  Tue Feb  5 10:52:48 2008
From: nynj.tech at hotmail.com (chad qian)
Date: Tue, 5 Feb 2008 10:52:48 -0500
Subject: [nycphp-talk] warning message on the php page
Message-ID: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>


Hi,
I try to debug one php page.Everything is fine but I always get this error message on top when I load the web page:
 
Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/getatwoq/public_html/chad/registrationverified.php:3) in /home/getatwoq/public_html/chad/inc/prehtml.php on line 23
 
I want to get rid of this meaage when I locad the php web page.
 
How to do it?
 
Thanks!
 
chad
 
_________________________________________________________________
Shed those extra pounds with MSN and The Biggest Loser!
http://biggestloser.msn.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080205/377a6d21/attachment.html>

From kenrbnsn at rbnsn.com  Tue Feb  5 11:15:42 2008
From: kenrbnsn at rbnsn.com (Ken Robinson)
Date: Tue, 05 Feb 2008 11:15:42 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
Message-ID: <20080205111542.moqyf80ioko8osok@www.rbnsn.com>

Quoting chad qian <nynj.tech at hotmail.com>:

>
> Hi,
> I try to debug one php page.Everything is fine but I always get this  
>  error message on top when I load the web page:
>
> Warning: session_start() [function.session-start]: Cannot send   
> session cache limiter - headers already sent (output started at   
> /home/getatwoq/public_html/chad/registrationverified.php:3) in   
> /home/getatwoq/public_html/chad/inc/prehtml.php on line 23
>
> I want to get rid of this meaage when I locad the php web page.
>
> How to do it?

The session_start() function must be called before any output is sent  
to the browser. This usually done by putting the call immediately  
after the opening <?php tag.

What is on line 3 of registrationverified.php?

Ken



From shaijudavis at gmail.com  Tue Feb  5 10:59:25 2008
From: shaijudavis at gmail.com (shaiju davis)
Date: Tue, 5 Feb 2008 21:29:25 +0530
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
Message-ID: <30ce306c0802050759l1b1ca785jb57e8899050ebe7a@mail.gmail.com>

Hi

 please add ob_start() at the top of the php page.

 Thanks,
 Shaiju Davis













On Feb 5, 2008 9:22 PM, chad qian <nynj.tech at hotmail.com> wrote:

>  Hi,
> I try to debug one php page.Everything is fine but I always get this error
> message on top when I load the web page:
>
> *Warning*: session_start() [*function.session-start*<http://chad.geta2q.com/function.session-start>]:
> Cannot send session cache limiter - headers already sent (output started at
> /home/getatwoq/public_html/chad/registrationverified.php:3) in *
> /home/getatwoq/public_html/chad/inc/prehtml.php* on line *23*
> **
> I want to get rid of this meaage when I locad the php web page.
>
> How to do it?
>
> Thanks!
>
> chad
>
>
> ------------------------------
> Shed those extra pounds with MSN and The Biggest Loser! Learn more.<http://biggestloser.msn.com/>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



-- 
Warm Regards
Shaiju Davis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080205/641e9b19/attachment.html>

From ashaw at polymerdb.org  Tue Feb  5 11:07:05 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Tue, 05 Feb 2008 10:07:05 -0600
Subject: [nycphp-talk] filesize & download
In-Reply-To: <47A84F22.1060101@gmx.net>
References: <1b3d2fde0802042327xc56cfcax7a4dbc347551a3fc@mail.gmail.com>
	<47A84F22.1060101@gmx.net>
Message-ID: <47A889A9.2080907@polymerdb.org>

David Krings wrote:
> Aniesh joseph wrote:
>> Can someone suggests any method to find out the size of an audio file 
>> such as http://example.com/myaudio.mp3 ?
 >
> Based on what php.net states, with PHP5.x and up you can use URLs with 
> stat(). HTTP and HTTPS are in the list of supported protocols.
>
> You could also store the file size when you add the MP3 to the system, 
> but would need to back fill that information for the existing files.

Alternatively, you could put a script on example.com that returns the
file size for a named file, so that
http://example.com/getfilesize?file=audio1.mp3 returns a size in bytes.

But the better option is surely to use stat(), if you have php5.

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)


From kenrbnsn at rbnsn.com  Tue Feb  5 11:25:40 2008
From: kenrbnsn at rbnsn.com (Ken Robinson)
Date: Tue, 05 Feb 2008 11:25:40 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <30ce306c0802050759l1b1ca785jb57e8899050ebe7a@mail.gmail.com>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
	<30ce306c0802050759l1b1ca785jb57e8899050ebe7a@mail.gmail.com>
Message-ID: <20080205112540.l58tomgnm88ggks0@www.rbnsn.com>

Quoting shaiju davis <shaijudavis at gmail.com>:

> Hi
>
>  please add ob_start() at the top of the php page.
>

IMHO using ob_start() just masks the problem, it doesn't fix it. The  
real solution is to find out why the script is sending output before  
starting the session and start the session before doing the output.

Ken



From urb at e-government.com  Tue Feb  5 11:30:30 2008
From: urb at e-government.com (Urb LeJeune)
Date: Tue, 05 Feb 2008 11:30:30 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
Message-ID: <7.0.1.0.2.20080205112949.02c6c0d8@e-government.com>


>
>I try to debug one php page.Everything is fine but I always get this 
>error message on top when I load the web page:
>
>Warning: session_start() 
>[<http://chad.geta2q.com/function.session-start>function.session-start]: 
>Cannot send session cache limiter - headers already sent (output 
>started at 
>/home/getatwoq/public_html/chad/registrationverified.php:3) in 
>/home/getatwoq/public_html/chad/inc/prehtml.php on line 23
>
>I want to get rid of this meaage when I locad the php web page.

         Make sure your:

<?php

starts on line flush left.


Urb

Dr. Urban A. LeJeune, President
E-Government.com
609-294-0320  800-204-9545
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
E-Government.com lowers you costs while increasing your expectations.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080205/093e87c9/attachment.html>

From ajai at bitblit.net  Tue Feb  5 11:40:11 2008
From: ajai at bitblit.net (Ajai Khattri)
Date: Tue, 5 Feb 2008 11:40:11 -0500 (EST)
Subject: [nycphp-talk] Mod_rewrite and pretty urls problem
In-Reply-To: <C3CDEA7E.C64F%cliff@pinestream.com>
Message-ID: <Pine.LNX.4.44.0802051138280.24150-100000@bitblit.net>

On Tue, 5 Feb 2008, Cliff Hirsch wrote:

> For pretty urls, I have set up mod_rewrite like so:
> 
> RewriteEngine On
> RewriteCond %{REQUEST_FILENAME} !-f
> RewriteCond %{REQUEST_FILENAME} !-d
> RewriteRule ^(.*)$ index.php?$1
> 
> For a page like www.domain.com/faq the controller captures the faq command
> and everything works fine.
> 
> But for www.domain.com/faq/ the images, css and javascript files are all
> missing. They are all set up as relative links. I?m assuming that there are
> now relative to the /faq directory, which does not exist. Is this a
> side-effect of mod_rewrite? If so, how do you prevent it? Make all images,
> css and JS files absolute links or always relative to root?

You probably need to add a rule (or rules) before the one above (and also 
use L to shortcircuit the rest of the rules) when dealing with you faq 
folder and images/css.


-- 
Aj.



From urb at e-government.com  Tue Feb  5 11:51:18 2008
From: urb at e-government.com (Urb LeJeune)
Date: Tue, 05 Feb 2008 11:51:18 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <7.0.1.0.2.20080205112949.02c6c0d8@e-government.com>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
	<7.0.1.0.2.20080205112949.02c6c0d8@e-government.com>
Message-ID: <7.0.1.0.2.20080205115031.02c77550@e-government.com>


>         Make sure your:

That's line one below.


><?php
>
>starts on line flush left.


Urb

Dr. Urban A. LeJeune, President
E-Government.com
609-294-0320  800-204-9545
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
E-Government.com lowers you costs while increasing your expectations.




From jcampbell1 at gmail.com  Tue Feb  5 12:01:18 2008
From: jcampbell1 at gmail.com (John Campbell)
Date: Tue, 5 Feb 2008 12:01:18 -0500
Subject: [nycphp-talk] Mod_rewrite and pretty urls problem
In-Reply-To: <C3CDEA7E.C64F%cliff@pinestream.com>
References: <AchoC5L80V77tNP+EdyxcgAX8sO4jw==>
	<C3CDEA7E.C64F%cliff@pinestream.com>
Message-ID: <8f0676b40802050901if20d00dx68203af9bf97da5f@mail.gmail.com>

>  But for www.domain.com/faq/ the images, css and javascript files are all
> missing. They are all set up as relative links. I'm assuming that there are
> now relative to the /faq directory, which does not exist. Is this a
> side-effect of mod_rewrite? If so, how do you prevent it? Make all images,
> css and JS files absolute links or always relative to root?

Make images, javascript and css relative to root.  This is standard
practice.  Put the css/javascript in a folder with gzip turned on, and
the images in a folder without gzip.

>  Also, what is the proper RewriteRule to preserve get query variables?
>
>  Something like RewriteRule ?(.*)$ index.php?$1

Just use add [QSA] (Query string append) to the end.
RewriteRule ^(.*)$ index.php?req=$1 [QSA]

-John C.


From cliff at pinestream.com  Tue Feb  5 12:16:40 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 05 Feb 2008 12:16:40 -0500
Subject: [nycphp-talk] Mod_rewrite and pretty urls problem
In-Reply-To: <8f0676b40802050901if20d00dx68203af9bf97da5f@mail.gmail.com>
Message-ID: <C3CE0428.C671%cliff@pinestream.com>

> Make images, javascript and css relative to root.  This is standard
> practice.  Put the css/javascript in a folder with gzip turned on, and
> the images in a folder without gzip.

Thanks John. Makes sense. Had it the other as a legacy leftover from when my
dev. app was in a subdir.
 
>>  Also, what is the proper RewriteRule to preserve get query variables?
> Just use add [QSA] (Query string append) to the end.
> RewriteRule ^(.*)$ index.php?req=$1 [QSA]

Excellent. This pretty url, mod_rewrite mystery is coming together...




From ramons at gmx.net  Tue Feb  5 16:25:04 2008
From: ramons at gmx.net (David Krings)
Date: Tue, 05 Feb 2008 16:25:04 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
Message-ID: <47A8D430.7030709@gmx.net>

chad qian wrote:
> Hi,
> I try to debug one php page.Everything is fine but I always get this 
> error message on top when I load the web page:
>  
> *Warning*: session_start() [_function.session-start_ 
> <http://chad.geta2q.com/function.session-start>]: Cannot send session 
> cache limiter - headers already sent (output started at 
> /home/getatwoq/public_html/chad/registrationverified.php:3) in 
> */home/getatwoq/public_html/chad/inc/prehtml.php* on line *23*
> ** 
> I want to get rid of this meaage when I locad the php web page.
>  
> How to do it?

I found that session_start() works only OK when it is the first thing that 
happens in a script. Before initializing variables and anything.
You script should start as such

<?php  // Line 1
   session_strt(); // Line 2

....everything else


I follow that strictly and since then never had a problem.


David



From ben at projectskyline.com  Tue Feb  5 16:29:24 2008
From: ben at projectskyline.com (Ben Sgro)
Date: Tue, 05 Feb 2008 16:29:24 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <47A8D430.7030709@gmx.net>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
	<47A8D430.7030709@gmx.net>
Message-ID: <47A8D534.3080406@projectskyline.com>

Hello all,

I have a class that handles session and that is included further down in 
the class.

Typically file struct:

PHP
    Config (dev, live, etc)
    Includes
    Instantiate classes (session_start( ) gets called in the session 
objects constructor)

    Support functions

    Main code, usually in the form of a switch( ) on a GET/POST var

    Debug data (db/script execution time, etc.)
</PHP

Works great for me.

- Ben

David Krings wrote:
> chad qian wrote:
>> Hi,
>> I try to debug one php page.Everything is fine but I always get this 
>> error message on top when I load the web page:
>>  
>> *Warning*: session_start() [_function.session-start_ 
>> <http://chad.geta2q.com/function.session-start>]: Cannot send session 
>> cache limiter - headers already sent (output started at 
>> /home/getatwoq/public_html/chad/registrationverified.php:3) in 
>> */home/getatwoq/public_html/chad/inc/prehtml.php* on line *23*
>> ** I want to get rid of this meaage when I locad the php web page.
>>  
>> How to do it?
>
> I found that session_start() works only OK when it is the first thing 
> that happens in a script. Before initializing variables and anything.
> You script should start as such
>
> <?php  // Line 1
>   session_strt(); // Line 2
>
> ....everything else
>
>
> I follow that strictly and since then never had a problem.
>
>
> David
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>


From tim_lists at o2group.com  Tue Feb  5 16:40:56 2008
From: tim_lists at o2group.com (Tim Lieberman)
Date: Tue, 05 Feb 2008 14:40:56 -0700
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <47A8D534.3080406@projectskyline.com>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>	<47A8D430.7030709@gmx.net>
	<47A8D534.3080406@projectskyline.com>
Message-ID: <47A8D7E8.3060102@o2group.com>

The only rule is that you need to call session_start() before any output 
is sent to the browser.

You can accomplish this by either making sure that your script won't 
echo/print any data (and won't print notices, warnings, etc) before 
session_start() is called, or you can turn on output buffering (so make 
your first line ob_start(), or set it up via configs), so all output is 
buffered on the server until the script completes.

Ben Sgro wrote:
> Hello all,
>
> I have a class that handles session and that is included further down 
> in the class.
>
> Typically file struct:
>
> PHP
>    Config (dev, live, etc)
>    Includes
>    Instantiate classes (session_start( ) gets called in the session 
> objects constructor)
>
>    Support functions
>
>    Main code, usually in the form of a switch( ) on a GET/POST var
>
>    Debug data (db/script execution time, etc.)
> </PHP
>
> Works great for me.
>
> - Ben
>
> David Krings wrote:
>> chad qian wrote:
>>> Hi,
>>> I try to debug one php page.Everything is fine but I always get this 
>>> error message on top when I load the web page:
>>>  
>>> *Warning*: session_start() [_function.session-start_ 
>>> <http://chad.geta2q.com/function.session-start>]: Cannot send 
>>> session cache limiter - headers already sent (output started at 
>>> /home/getatwoq/public_html/chad/registrationverified.php:3) in 
>>> */home/getatwoq/public_html/chad/inc/prehtml.php* on line *23*
>>> ** I want to get rid of this meaage when I locad the php web page.
>>>  
>>> How to do it?
>>
>> I found that session_start() works only OK when it is the first thing 
>> that happens in a script. Before initializing variables and anything.
>> You script should start as such
>>
>> <?php  // Line 1
>>   session_strt(); // Line 2
>>
>> ....everything else
>>
>>
>> I follow that strictly and since then never had a problem.
>>
>>
>> David
>>
>> _______________________________________________
>> New York PHP Community Talk Mailing List
>> http://lists.nyphp.org/mailman/listinfo/talk
>>
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>>
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



From tedd at sperling.com  Tue Feb  5 18:20:49 2008
From: tedd at sperling.com (tedd)
Date: Tue, 5 Feb 2008 18:20:49 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <47A8D430.7030709@gmx.net>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
	<47A8D430.7030709@gmx.net>
Message-ID: <p06240802c3ce9ef85938@[192.168.1.102]>

At 4:25 PM -0500 2/5/08, David Krings wrote:
>chad qian wrote:
>>Hi,
>>I try to debug one php page.Everything is fine but I always get 
>>this error message on top when I load the web page:
>>  *Warning*: session_start() [_function.session-start_ 
>><http://chad.geta2q.com/function.session-start>]: Cannot send 
>>session cache limiter - headers already sent (output started at 
>>/home/getatwoq/public_html/chad/registrationverified.php:3) in 
>>*/home/getatwoq/public_html/chad/inc/prehtml.php* on line *23*
>>** I want to get rid of this meaage when I locad the php web page.
>>  How to do it?
>
>I found that session_start() works only OK when it is the first 
>thing that happens in a script. Before initializing variables and 
>anything.
>You script should start as such
>
><?php  // Line 1
>   session_strt(); // Line 2
>
>....everything else
>
>I follow that strictly and since then never had a problem.


I use:

<?php  session_start();

and never have any problem unless I include a file that has that as 
the first line.

Cheers,

tedd
-- 
-------
http://sperling.com  http://ancientstones.com  http://earthstones.com


From dcech at phpwerx.net  Tue Feb  5 20:11:24 2008
From: dcech at phpwerx.net (Dan Cech)
Date: Tue, 05 Feb 2008 20:11:24 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
Message-ID: <47A9093C.3060707@phpwerx.net>

chad qian wrote:
> I try to debug one php page.Everything is fine but I always get this
> error message on top when I load the web page:
> 
> Warning: session_start() [function.session-start]: Cannot send
> session cache limiter - headers already sent (output started at
> /home/getatwoq/public_html/chad/registrationverified.php:3) in
> /home/getatwoq/public_html/chad/inc/prehtml.php on line 23

All,

I have been following the comments in this thread with surprise.  This 
is a fairly simple problem and should really be part of PHP-101.

The output is being started on line 23 of prehtml.php.  Odds are fairly 
good that this file is 23 lines long and the end of the file looks like 
this:

?>[\n]

That trailing newline after the closing PHP tag is causing output to 
start and resulting in the error message above.

In general, 2 simple rules for include file will save you these kind of 
headaches.

1. Begin the file with <?php, don't put any whitespace before it.  This 
is pretty obvious and the usual way of doing things.

2. End the file with a comment, like:

// end of file[\n]

I recall this concept being explained to me on this very list, the gist 
of it is that the php parser will stop when it hits the end of the file, 
so the explicit ?> tag is redundant.  Most editors however will add a 
newline [\n] at the end of the file which is then sent to the browser 
and breaks session and header functions.

The problem is not in any way related to whitespace within the PHP tags, 
as this is not sent to the browser, it is the whitespace outside the PHP 
tags (like a newline following the PHP end tag) that causes problems. 
By not explicitly closing the PHP tag the whitespace will all be treated 
as PHP code and ignored by the parser.

Follow these simple rules and you will not have to worry about this 
problem any more.

Dan


From kenrbnsn at rbnsn.com  Tue Feb  5 20:24:24 2008
From: kenrbnsn at rbnsn.com (Ken Robinson)
Date: Tue, 05 Feb 2008 20:24:24 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <47A9093C.3060707@phpwerx.net>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
	<47A9093C.3060707@phpwerx.net>
Message-ID: <mailman.24.1363003728.25290.talk@lists.nyphp.org>

At 08:11 PM 2/5/2008, Dan Cech wrote:
>chad qian wrote:
>>I try to debug one php page.Everything is fine but I always get this
>>error message on top when I load the web page:
>>Warning: session_start() [function.session-start]: Cannot send
>>session cache limiter - headers already sent (output started at
>>/home/getatwoq/public_html/chad/registrationverified.php:3) in
>>/home/getatwoq/public_html/chad/inc/prehtml.php on line 23
>
>All,
>
>I have been following the comments in this thread with 
>surprise.  This is a fairly simple problem and should really be part 
>of PHP-101.
>
>The output is being started on line 23 of prehtml.php.  Odds are 
>fairly good that this file is 23 lines long and the end of the file 
>looks like this:

Actually, the error message says "output started at 
/home/getatwoq/public_html/chad/registrationverified.php:3"

So the output is on line 3 of registrationverified.php, not line 23 
of prehtml.php. If the OP had posted his code, we probably would have 
seen the session_start() on that line.

Ken 



From edwardpotter at gmail.com  Tue Feb  5 20:56:27 2008
From: edwardpotter at gmail.com (Edward Potter)
Date: Tue, 5 Feb 2008 20:56:27 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <47a90c58.1a01360a.4621.7011SMTPIN_ADDED@mx.google.com>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
	<47A9093C.3060707@phpwerx.net>
	<47a90c58.1a01360a.4621.7011SMTPIN_ADDED@mx.google.com>
Message-ID: <c5949a380802051756p7a20f42ew9a256e18c8cd7b94@mail.gmail.com>

I guess after debugging a zillion lines of php code (by the way some
great responses here).  A tip?

BREAK IT DOWN!   Start with <?php  ?>  if you have too. Add your code
line by line. YOU WILL ALWAYS be able to fix the bug. In the end, it's
just a chip made of silicon -which is really just sand!

"Silicon is present in the sun and stars and is a principal component
of a class of meteorites known as aerolites."

:-)  ed

On 2/5/08, Ken Robinson <kenrbnsn at rbnsn.com> wrote:
> At 08:11 PM 2/5/2008, Dan Cech wrote:
> >chad qian wrote:
> >>I try to debug one php page.Everything is fine but I always get this
> >>error message on top when I load the web page:
> >>Warning: session_start() [function.session-start]: Cannot send
> >>session cache limiter - headers already sent (output started at
> >>/home/getatwoq/public_html/chad/registrationverified.php:3) in
> >>/home/getatwoq/public_html/chad/inc/prehtml.php on line 23
> >
> >All,
> >
> >I have been following the comments in this thread with
> >surprise.  This is a fairly simple problem and should really be part
> >of PHP-101.
> >
> >The output is being started on line 23 of prehtml.php.  Odds are
> >fairly good that this file is 23 lines long and the end of the file
> >looks like this:
>
> Actually, the error message says "output started at
> /home/getatwoq/public_html/chad/registrationverified.php:3"
>
> So the output is on line 3 of registrationverified.php, not line 23
> of prehtml.php. If the OP had posted his code, we probably would have
> seen the session_start() on that line.
>
> Ken
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>


-- 
IM/iChat: ejpusa
Links: http://del.icio.us/ejpusa
Blog: http://www.utopiaparkway.com
Follow me: http://www.twitter.com/ejpusa
Karma: http://www.coderswithconscience.com
Projects: http://flickr.com/photos/86842405 at N00/
Store: http://astore.amazon.com/httpwwwutopic-20


From anieshjoseph at gmail.com  Wed Feb  6 02:29:34 2008
From: anieshjoseph at gmail.com (Aniesh joseph)
Date: Wed, 6 Feb 2008 12:59:34 +0530
Subject: [nycphp-talk] Re:filesize & download
Message-ID: <1b3d2fde0802052329w5d96f03cv921377c331cf2761@mail.gmail.com>

I tried stat() function but it doesn't return the result. Anyway I got a
function to calculate the size of the remote file and it works fine. The
page link is below:

http://textsnippets.com/posts/show/1214

But now some other issue at the time of audio download. I use the following
headers in  the download page:


$mm_type="application/octet-stream";

header("Cache-Control: public, must-revalidate");
header("Pragma: hack");
header("Content-Type: " . $mm_type);
header("Content-Length: " .(string)(filesize($myFile)) );
header('Content-Disposition: attachment; filename="'.$filename.'"');
header("Content-Transfer-Encoding: binary\n");

readfile($myFile);


But an error occured when I play the audio.

Can someone suggest another method for audio downloading ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080206/8f71ae24/attachment.html>

From paulcheung at tiscali.co.uk  Wed Feb  6 02:59:12 2008
From: paulcheung at tiscali.co.uk (PaulCheung)
Date: Wed, 6 Feb 2008 07:59:12 -0000
Subject: [nycphp-talk] FTPing PHP scripts.
Message-ID: <000f01c86896$29814560$0200a8c0@X9183>

I don't know if anybody else has been having a problem when trying to FTP 
PHP scripts. I am using "1and1" to host my website and have uploaded  PHP 
scripts All have uploaded. Unfortunately some scripts are loaded correctly 
and other arrive as 0 length. No matter what solution is suggested by 1and1 
Tech. Support or tried, nothing appears to work I simply cannot overwrite 
these 0 length scripts. I have even deleted the sub diectory and reFTPed 
over new. The interesting thing is it is alway the same scripts that are 0 
length, I have rename the scripts and ftp them and still no joy. I have 
looked at the scripts but there is nothing to suggest anything that could 
stop an FTP, which is logical anyway, as what is contained within a script 
should not affect a script's upload.

"1and1" level2 support say, they cannot reproduce the problem and I am able 
to demonstrate it to their level1 support, thus the reason for level1 
support esculating the problem to level2 support. I have tried doing 
everything they have suggested and now have used FireFTP, Filzilla and Wise 
FTP5 to upload. I am now scrapping the bottom of the barrel, I would not 
have thought that this has anything to do with PHP; But just in case, has 
anybody else had this FTP problem and what was the solution?

Paul





From cliff at pinestream.com  Wed Feb  6 09:49:21 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Wed, 06 Feb 2008 09:49:21 -0500
Subject: [nycphp-talk] Secure email attachments suggestions
Message-ID: <C3CF3321.C714%cliff@pinestream.com>

I would like to send secure email attachments. Suggestions? Recommendations?

Would you use GnuPG to encrypt the attachment? And std. packages? Just PECL?
What desktop client can decrypt these attachments?

Cliff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080206/e49c0b51/attachment.html>

From nynj.tech at hotmail.com  Wed Feb  6 10:30:56 2008
From: nynj.tech at hotmail.com (chad qian)
Date: Wed, 6 Feb 2008 10:30:56 -0500
Subject: [nycphp-talk] sign in/out of the website
Message-ID: <BLU126-W2BE28D205C10D800286A8E82D0@phx.gbl>



I am working on one php/mysql website
(1)user login system(registration,profile,forget password).After user input correct username/password,he can view/update his profile
(2)Home page.I put some links on home page.All these links link to other web pages
 
My question:
Anyone can browse the home page without sign in.
But when user clicks some links on the homepage:
(1)if he doesn't go to login form to sign in,he will be forwarded to "unauthorized access" page
(2)Only after he signs in,he can access any other web page.Otherwise,he can only view the home page,.
(3)he can sign in/out 
 
I am completely lost here.How to do php coding?
 
Thanks in advance
 
chad
_________________________________________________________________
Connect and share in new ways with Windows Live.
http://www.windowslive.com/share.html?ocid=TXT_TAGHM_Wave2_sharelife_012008
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080206/2d4f1f4f/attachment.html>

From michael.southwell at nyphp.com  Wed Feb  6 10:31:12 2008
From: michael.southwell at nyphp.com (Michael Southwell)
Date: Wed, 06 Feb 2008 10:31:12 -0500
Subject: [nycphp-talk] FTPing PHP scripts.
In-Reply-To: <000f01c86896$29814560$0200a8c0@X9183>
References: <000f01c86896$29814560$0200a8c0@X9183>
Message-ID: <20080206103112.0eambfcqgwskwok0@webmail.nyphp.com>

Quoting PaulCheung <paulcheung at tiscali.co.uk>:

> I don't know if anybody else has been having a problem when trying to
> FTP PHP scripts. I am using "1and1" to host my website and have
> uploaded  PHP scripts All have uploaded. Unfortunately some scripts are
> loaded correctly and other arrive as 0 length.

You may have some binary character hiding at the beginning of your  
script. Delete the first line or two and try again. If that works,  
recreate what you deleted and try again. Alternatively, look at your  
script in some editor that will show every character rather than just  
the alphanumeric ones.


-- 
Michael Southwell
Vice President, Education
NYPHP TRAINING http://nyphp.com/training/indepth


From danielc at analysisandsolutions.com  Wed Feb  6 10:35:48 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Wed, 6 Feb 2008 10:35:48 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <47A9093C.3060707@phpwerx.net>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
	<47A9093C.3060707@phpwerx.net>
Message-ID: <20080206153548.GA3136@panix.com>

Folks:

On Tue, Feb 05, 2008 at 08:11:24PM -0500, Dan Cech wrote:
> chad qian wrote:
> >
> >Warning: session_start() [function.session-start]: Cannot send
> >session cache limiter - headers already sent (output started at
> >/home/getatwoq/public_html/chad/registrationverified.php:3) in
> >/home/getatwoq/public_html/chad/inc/prehtml.php on line 23

Personally, I've been ignoring this thread.  The error message PHP 
produces is completely clear about what and where the problem is.  But 
Dan, who's pretty good about stuff, posted, and I was curious about what 
drew him into the fray.  I've got to disagree with a few things he said.


> The output is being started on line 23 of prehtml.php.

Actually, the error message says "output started at... 
registrationverified.php:3."  The ":3" means line 3.  That aside,


> Odds are fairly 
> good that this file is 23 lines long and the end of the file looks like 
> this:
> 
> ?>[\n]
> 
> That trailing newline after the closing PHP tag is causing output to 
> start and resulting in the error message above.

Nope.  PHP is okay with one line break after the ?>, but not two.



> 2. End the file with a comment, like:
> 
> // end of file[\n]

I agree it's much cleaner to not include the closing ?> at the end of the 
file.  But putting a comment about it being the end of the file is 
completely supurfluous.  The end of the file is the end of the file.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From danielc at analysisandsolutions.com  Wed Feb  6 10:39:37 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Wed, 6 Feb 2008 10:39:37 -0500
Subject: [nycphp-talk] FTPing PHP scripts.
In-Reply-To: <20080206103112.0eambfcqgwskwok0@webmail.nyphp.com>
References: <000f01c86896$29814560$0200a8c0@X9183>
	<20080206103112.0eambfcqgwskwok0@webmail.nyphp.com>
Message-ID: <20080206153937.GB3136@panix.com>

On Wed, Feb 06, 2008 at 10:31:12AM -0500, Michael Southwell wrote:

> You may have some binary character hiding at the beginning of your  
> script.

I was thinking the same thing.  I would suggest getting a better FTP 
client or at least using binary mode for the transfers.  Or, perhaps the 
files are 0 length on his computer. :/

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From danielc at analysisandsolutions.com  Wed Feb  6 10:43:46 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Wed, 6 Feb 2008 10:43:46 -0500
Subject: [nycphp-talk] sign in/out of the website
In-Reply-To: <BLU126-W2BE28D205C10D800286A8E82D0@phx.gbl>
References: <BLU126-W2BE28D205C10D800286A8E82D0@phx.gbl>
Message-ID: <20080206154346.GC3136@panix.com>

Hi Chad:

On Wed, Feb 06, 2008 at 10:30:56AM -0500, chad qian wrote:
> 
[... whole dillemma stripped down to the essence...]
>
> I am completely lost here.How to do php coding?

Asking such broad questions is completely inappropriate.  You need to 
learn for yourself rather than asking people to do your job for you. 
There are tons of websites and books out there explaining authentication 
processes.

Good luck.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From nynj.tech at hotmail.com  Wed Feb  6 10:56:45 2008
From: nynj.tech at hotmail.com (chad qian)
Date: Wed, 6 Feb 2008 10:56:45 -0500
Subject: [nycphp-talk] sign in/out of the website
In-Reply-To: <20080206154346.GC3136@panix.com>
References: <BLU126-W2BE28D205C10D800286A8E82D0@phx.gbl>
	<20080206154346.GC3136@panix.com>
Message-ID: <BLU126-W210C763367A37857A58E20E82D0@phx.gbl>


Hi,I am sorry.I just started to do php coding a couple of months ago.If anyone can give me some hints,that's enough.
 
Thanks again.
 
chad
 
> Date: Wed, 6 Feb 2008 10:43:46 -0500> From: danielc at analysisandsolutions.com> To: talk at lists.nyphp.org> Subject: Re: [nycphp-talk] sign in/out of the website> > Hi Chad:> > On Wed, Feb 06, 2008 at 10:30:56AM -0500, chad qian wrote:> > > [... whole dillemma stripped down to the essence...]> >> > I am completely lost here.How to do php coding?> > Asking such broad questions is completely inappropriate. You need to > learn for yourself rather than asking people to do your job for you. > There are tons of websites and books out there explaining authentication > processes.> > Good luck.> > --Dan> > -- > T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y> data intensive web and database programming> http://www.AnalysisAndSolutions.com/> 4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409> _______________________________________________> New York PHP Community Talk Mailing List> http://lists.nyphp.org/mailman/listinfo/talk> > NYPHPCon 2006 Presentations Online> http://www.nyphpcon.com> > Show Your Participation in New York PHP> http://www.nyphp.org/show_participation.php
_________________________________________________________________
Shed those extra pounds with MSN and The Biggest Loser!
http://biggestloser.msn.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080206/a58b06ad/attachment.html>

From ben at projectskyline.com  Wed Feb  6 10:57:56 2008
From: ben at projectskyline.com (Ben Sgro)
Date: Wed, 06 Feb 2008 10:57:56 -0500
Subject: [nycphp-talk] sign in/out of the website
In-Reply-To: <BLU126-W2BE28D205C10D800286A8E82D0@phx.gbl>
References: <BLU126-W2BE28D205C10D800286A8E82D0@phx.gbl>
Message-ID: <47A9D904.6020300@projectskyline.com>

Hello Chad,

There are many ways to do this, and probably better ways then what I'm 
going to say..but here goes:

On each page, at the top, before you do any output do a login test:

<?php

function userIsLoggedIn($username)
{
    if ($username == $_SESSION['username']['loginBool'] == TRUE )
    { return TRUE; } else { return FALSE; }
}

if (!userIsLoggedIn($username))
{
    header("Location: index.php");
}
/* Otherwise we let them continue. */

That's really just some pseudo code.

- Ben

chad qian wrote:
> I am working on one php/mysql website
> (1)user login system(registration,profile,forget password).After user 
> input correct username/password,he can view/update his profile
> (2)Home page.I put some links on home page.All these links link to 
> other web pages
>  
> My question:
> Anyone can browse the home page without sign in.
> But when user clicks some links on the homepage:
> (1)if he doesn't go to login form to sign in,he will be forwarded to 
> "unauthorized access" page
> (2)Only after he signs in,he can access any other web 
> page.Otherwise,he can only view the home page,.
> (3)he can sign in/out
>  
> I am completely lost here.How to do php coding?
>  
> Thanks in advance
>  
> chad
>
> ------------------------------------------------------------------------
> Connect and share in new ways with Windows Live. Get it now! 
> <http://www.windowslive.com/share.html?ocid=TXT_TAGHM_Wave2_sharelife_012008> 
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php


From dcech at phpwerx.net  Wed Feb  6 10:59:56 2008
From: dcech at phpwerx.net (Dan Cech)
Date: Wed, 06 Feb 2008 10:59:56 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <20080206153548.GA3136@panix.com>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>	<47A9093C.3060707@phpwerx.net>
	<20080206153548.GA3136@panix.com>
Message-ID: <47A9D97C.9060009@phpwerx.net>

Daniel Convissor wrote:
> Folks:
> 
> On Tue, Feb 05, 2008 at 08:11:24PM -0500, Dan Cech wrote:
>> chad qian wrote:
>>> Warning: session_start() [function.session-start]: Cannot send
>>> session cache limiter - headers already sent (output started at
>>> /home/getatwoq/public_html/chad/registrationverified.php:3) in
>>> /home/getatwoq/public_html/chad/inc/prehtml.php on line 23
> 
> Personally, I've been ignoring this thread.  The error message PHP 
> produces is completely clear about what and where the problem is.  But 
> Dan, who's pretty good about stuff, posted, and I was curious about what 
> drew him into the fray.  I've got to disagree with a few things he said.
> 
> 
>> The output is being started on line 23 of prehtml.php.
> 
> Actually, the error message says "output started at... 
> registrationverified.php:3."  The ":3" means line 3.  That aside,

My bad, it had been a long day.

>> Odds are fairly 
>> good that this file is 23 lines long and the end of the file looks like 
>> this:
>>
>> ?>[\n]
>>
>> That trailing newline after the closing PHP tag is causing output to 
>> start and resulting in the error message above.
> 
> Nope.  PHP is okay with one line break after the ?>, but not two.

Fair enough, the gist of the argument is that it is easy to end up with 
an additional trailing newline that isn't immediately obvious in most 
editors (I run with newline and tab marks turned on which would show 
this up) and can cause massive problems.

>> 2. End the file with a comment, like:
>>
>> // end of file[\n]
> 
> I agree it's much cleaner to not include the closing ?> at the end of the 
> file.  But putting a comment about it being the end of the file is 
> completely supurfluous.  The end of the file is the end of the file.

There are many reasons for adding a comment at the end of the file, but 
the single biggest one is to prevent the situation where some helpful 
developer looks at the file and says "Hey, they forgot a closing ?> tag 
here".  They then add the tag and maybe a couple trailing newlines for 
good measure. Hey presto, broken sessions and header redirects.

Dan


From jcampbell1 at gmail.com  Wed Feb  6 11:11:34 2008
From: jcampbell1 at gmail.com (John Campbell)
Date: Wed, 6 Feb 2008 11:11:34 -0500
Subject: [nycphp-talk] Re:filesize & download
In-Reply-To: <1b3d2fde0802052329w5d96f03cv921377c331cf2761@mail.gmail.com>
References: <1b3d2fde0802052329w5d96f03cv921377c331cf2761@mail.gmail.com>
Message-ID: <8f0676b40802060811g3b23865dpee909cb818ff6e8f@mail.gmail.com>

On Feb 6, 2008 2:29 AM, Aniesh joseph <anieshjoseph at gmail.com> wrote:
> I tried stat() function but it doesn't return the result. Anyway I got a
> function to calculate the size of the remote file and it works fine. The
> page link is below:
>
> http://textsnippets.com/posts/show/1214

I am impressed you wrote that, but you should use curl instead.  Just
set it to follow redirects and only download the headers.  There is no
reason to write a partial implementation of HTTP using
streams/sockets.

> But now some other issue at the time of audio download. I use the following
> headers in  the download page:
>
>
>  $mm_type="application/octet-stream";
>
>  header("Cache-Control: public, must-revalidate");
>  header("Pragma: hack");
>  header("Content-Type: " . $mm_type);
>  header("Content-Length: " .(string)(filesize($myFile)) );
>  header('Content-Disposition: attachment; filename="'.$filename.'"');
>  header("Content-Transfer-Encoding: binary\n");
>
>  readfile($myFile);

I don't think you need Content-Disposition or
Content-Transfer-Encoding headers since you are only sending one file
per request.  I am not sure why you have a cache-control header
either.

John C.


From ashaw at polymerdb.org  Wed Feb  6 11:16:16 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Wed, 06 Feb 2008 10:16:16 -0600
Subject: [nycphp-talk] sign in/out of the website
In-Reply-To: <BLU126-W210C763367A37857A58E20E82D0@phx.gbl>
References: <BLU126-W2BE28D205C10D800286A8E82D0@phx.gbl>	<20080206154346.GC3136@panix.com>
	<BLU126-W210C763367A37857A58E20E82D0@phx.gbl>
Message-ID: <47A9DD50.3090201@polymerdb.org>

chad qian wrote:
> I am sorry.I just started to do php coding a couple of months ago.If 
> anyone can give me some hints,that's enough.
Hi Chad,

Asking even the most vague question is at least a little better than 
giving up.  I think what you should do, though, is not just hunt around 
for a few tips.  Get in and learn the basics, especially on a complex 
topic like authentication.

Please google for /php authentication/ and /php authentication 
tutorial/.  You will find lots and lots of tutorials on the topic.  I 
can't recommend any one of them because this is an area that's been done 
so many different ways, and most of the tutorials and books I've seen 
screw it up in one way or another.

Follow along in one or two of those tutorials.  Those are the hints you 
need.

Folks on this list will be happy to help you with specific questions you 
might need to ask about along the way.  The help may come in the form of 
"google for x" sometimes, but generally that only happens when that's 
really the best answer.

Let us know how it goes as you progress.  New programmers need other 
voices quite often.  As long as you're putting in your own sweat and 
doing your homework, you'll learn a lot.

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From jcampbell1 at gmail.com  Wed Feb  6 11:30:39 2008
From: jcampbell1 at gmail.com (John Campbell)
Date: Wed, 6 Feb 2008 11:30:39 -0500
Subject: [nycphp-talk] Secure email attachments suggestions
In-Reply-To: <C3CF3321.C714%cliff@pinestream.com>
References: <C3CF3321.C714%cliff@pinestream.com>
Message-ID: <8f0676b40802060830l46ee899cyc3141b1c1d8f4e3e@mail.gmail.com>

On Feb 6, 2008 9:49 AM, Cliff Hirsch <cliff at pinestream.com> wrote:
>
>  I would like to send secure email attachments. Suggestions?
> Recommendations?
>
>  Would you use GnuPG to encrypt the attachment? And std. packages? Just
> PECL? What desktop client can decrypt these attachments?

I think this is going to be a lost cause.  It is technically possible
with PGP and you will need to have the public keys for each user,
which will require the users to  do things that they don't comprehend.
 I recommend doing what the banks do... "You have a secure message.
Please login to your account to check the message."

I'd implement the latter first, and then think about offering PGP as a
convenience method for power users later.

John C.


From cliff at pinestream.com  Wed Feb  6 12:06:54 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Wed, 06 Feb 2008 12:06:54 -0500
Subject: [nycphp-talk] Secure email attachments suggestions
In-Reply-To: <8f0676b40802060830l46ee899cyc3141b1c1d8f4e3e@mail.gmail.com>
Message-ID: <C3CF535E.C73C%cliff@pinestream.com>

On 2/6/08 11:30 AM, "John Campbell" <jcampbell1 at gmail.com> wrote:
>>  I would like to send secure email attachments. Suggestions?
>> Recommendations?
>> 
> I think this is going to be a lost cause.  It is technically possible
> with PGP and you will need to have the public keys for each user,
> which will require the users to  do things that they don't comprehend.
>  I recommend doing what the banks do... "You have a secure message.
> Please login to your account to check the message."

What if I just want it for sending log files to me? My intent was to just
email various log files to me using cron.




From ramons at gmx.net  Wed Feb  6 12:25:59 2008
From: ramons at gmx.net (David Krings)
Date: Wed, 06 Feb 2008 12:25:59 -0500
Subject: [nycphp-talk] sign in/out of the website
In-Reply-To: <BLU126-W2BE28D205C10D800286A8E82D0@phx.gbl>
References: <BLU126-W2BE28D205C10D800286A8E82D0@phx.gbl>
Message-ID: <47A9EDA7.4050206@gmx.net>

chad qian wrote:
> I am working on one php/mysql website
> (1)user login system(registration,profile,forget password).After user 
> input correct username/password,he can view/update his profile
> (2)Home page.I put some links on home page.All these links link to other 
> web pages
>  
> My question:
> Anyone can browse the home page without sign in.
> But when user clicks some links on the homepage:
> (1)if he doesn't go to login form to sign in,he will be forwarded to 
> "unauthorized access" page
> (2)Only after he signs in,he can access any other web page.Otherwise,he 
> can only view the home page,.
> (3)he can sign in/out
>  
> I am completely lost here.How to do php coding?

I wonder what the point is in allowing access to the home page when anything 
one does on there results into showing an unauthorized access page unless the 
suer logged in before. I think it is much easier to show only the login page, 
make the user log in, then have scripting for the home page to make sure that 
they did indeed sign in (I store the session ID in the user table in the 
database with a time stamp, there may be better ways). That script in the home 
page fires each time the page gets accessed and I send the user typically bcak 
to the login page via redirect when there is no entry for that user, which 
basically means that if they access the home page directly they will never see 
it unless they logged in using the login page. I think your requirement to 
have the home page visible to anyone and react on a hyperlink click to a 
different site complicates this quite a bit.

David


From jcampbell1 at gmail.com  Wed Feb  6 12:58:18 2008
From: jcampbell1 at gmail.com (John Campbell)
Date: Wed, 6 Feb 2008 12:58:18 -0500
Subject: [nycphp-talk] Secure email attachments suggestions
In-Reply-To: <C3CF535E.C73C%cliff@pinestream.com>
References: <8f0676b40802060830l46ee899cyc3141b1c1d8f4e3e@mail.gmail.com>
	<C3CF535E.C73C%cliff@pinestream.com>
Message-ID: <8f0676b40802060958p83019d5ueba8299864aaa04a@mail.gmail.com>

On Feb 6, 2008 12:06 PM, Cliff Hirsch <cliff at pinestream.com> wrote:
> On 2/6/08 11:30 AM, "John Campbell" <jcampbell1 at gmail.com> wrote:
> >>  I would like to send secure email attachments. Suggestions?
> >> Recommendations?
> >>
> > I think this is going to be a lost cause.  It is technically possible
> > with PGP and you will need to have the public keys for each user,
> > which will require the users to  do things that they don't comprehend.
> >  I recommend doing what the banks do... "You have a secure message.
> > Please login to your account to check the message."
>
> What if I just want it for sending log files to me? My intent was to just
> email various log files to me using cron.

Something like the following should work:

cat log_file.txt |  gpg -e -r "pgp_username" | mail -s "Daily Log file
email" your at email.com > /dev/null

You just need to install a pgp extension for your email client and
import your public key into gpg.  For fun you can even toss in a
little bit of sed, sort and uniq to make the log file more manageable
if it is really large.

Regards,
John C.


From cmerlo at ncc.edu  Wed Feb  6 13:39:01 2008
From: cmerlo at ncc.edu (Christopher R. Merlo)
Date: Wed, 6 Feb 2008 13:39:01 -0500
Subject: [nycphp-talk] FTPing PHP scripts.
In-Reply-To: <000f01c86896$29814560$0200a8c0@X9183>
References: <000f01c86896$29814560$0200a8c0@X9183>
Message-ID: <946586480802061039q7f2c1d2fqc16c77acf04f20b0@mail.gmail.com>

Try mixing up the order in which the files are sent.  If the disk is running
out of space during the transfer, you'll get inodes for each file, but no
data getting stored for the inodes to refer to -- hence, 0-byte files.  If
you change the order, and different files are zeroed out, then your server
is probably filling up halfway through.

If you change the order of transfer, and the same files are showing up with
zero bytes, then Michael Southwell is probably on the right track, with
weird stuff in the beginning of your file.
-c
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080206/cdfb509c/attachment.html>

From ioplex at gmail.com  Wed Feb  6 14:06:05 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Wed, 6 Feb 2008 14:06:05 -0500
Subject: [nycphp-talk] JavaScript just above form in body?
Message-ID: <78c6bd860802061106l16b27889me6e52f24c47968cd@mail.gmail.com>

Is it considered bad practice to emit scripts within the body of a
page such as immediately preceeding the form that uses it? It seems to
work fine but from looking at some random sites I have yet to see an
example of this. Logically it makes sense to put the JavaScript close
to where it will be used no?

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/


From jcampbell1 at gmail.com  Wed Feb  6 14:30:59 2008
From: jcampbell1 at gmail.com (John Campbell)
Date: Wed, 6 Feb 2008 14:30:59 -0500
Subject: [nycphp-talk] JavaScript just above form in body?
In-Reply-To: <78c6bd860802061106l16b27889me6e52f24c47968cd@mail.gmail.com>
References: <78c6bd860802061106l16b27889me6e52f24c47968cd@mail.gmail.com>
Message-ID: <8f0676b40802061130g28f36ce0y7a4b42a0e9e1b02e@mail.gmail.com>

On Feb 6, 2008 2:06 PM, Michael B Allen <ioplex at gmail.com> wrote:
> Is it considered bad practice to emit scripts within the body of a
> page such as immediately preceeding the form that uses it? It seems to
> work fine but from looking at some random sites I have yet to see an
> example of this. Logically it makes sense to put the JavaScript close
> to where it will be used no?

The standards nazis will tell you to put scripts in the head.  The
performance freaks will tell you to put your scripts as the last
element in the body.  Putting javascript in the middle of the page, is
bad practice but can simplify development.  So where you put scripts
is up to you... I prefer putting all scripts as the last element in
the body because performance is more important to me than standards
compliance, but I'm not afraid to put them in the middle or inline to
get things done faster.

Just don't do this:
<script>
var form_elem = document.getElementById('myform');
</script>
<form id="myform" ...>
...
</form>

The problem with the above code, is that the script searches for an id
that doesn't exist when the script is run.  It may work in some
browsers, but it will be terrible/buggy code.

I highly recommend using a js library with a good onLoad event
replacement (my favorite is jQuery).  The standard default onload
event sucks because it waits for all images to be downloaded rather
than being a "DOMContentReady" event.

Regards,
John C.


From danielc at analysisandsolutions.com  Wed Feb  6 14:42:14 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Wed, 6 Feb 2008 14:42:14 -0500
Subject: [nycphp-talk] warning message on the php page
In-Reply-To: <47A9D97C.9060009@phpwerx.net>
References: <BLU126-W40F3FB19E01382E0D9BA3AE82C0@phx.gbl>
	<47A9093C.3060707@phpwerx.net> <20080206153548.GA3136@panix.com>
	<47A9D97C.9060009@phpwerx.net>
Message-ID: <20080206194213.GA24246@panix.com>

On Wed, Feb 06, 2008 at 10:59:56AM -0500, Dan Cech wrote:
> 
> There are many reasons for adding a comment at the end of the file, but 
> the single biggest one is to prevent the situation where some helpful 
> developer looks at the file and says "Hey, they forgot a closing ?> tag 
> here".

So, what's to keep them from adding the ?> after the comment or replacing 
the comment with it? :)

This kind of situation is what coding standards are for.  If someone 
can't follow them, fire them.  :)

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From ioplex at gmail.com  Wed Feb  6 16:12:33 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Wed, 6 Feb 2008 16:12:33 -0500
Subject: [nycphp-talk] JavaScript just above form in body?
In-Reply-To: <8f0676b40802061130g28f36ce0y7a4b42a0e9e1b02e@mail.gmail.com>
References: <78c6bd860802061106l16b27889me6e52f24c47968cd@mail.gmail.com>
	<8f0676b40802061130g28f36ce0y7a4b42a0e9e1b02e@mail.gmail.com>
Message-ID: <78c6bd860802061312j6eb3b2a6wa96d45040d18eec@mail.gmail.com>

On 2/6/08, John Campbell <jcampbell1 at gmail.com> wrote:
> On Feb 6, 2008 2:06 PM, Michael B Allen <ioplex at gmail.com> wrote:
> > Is it considered bad practice to emit scripts within the body of a
> > page such as immediately preceeding the form that uses it? It seems to
> > work fine but from looking at some random sites I have yet to see an
> > example of this. Logically it makes sense to put the JavaScript close
> > to where it will be used no?
>
> The standards nazis will tell you to put scripts in the head.  The
> performance freaks will tell you to put your scripts as the last
> element in the body.  Putting javascript in the middle of the page, is
> bad practice but can simplify development.  So where you put scripts
> is up to you... I prefer putting all scripts as the last element in
> the body because performance is more important to me than standards
> compliance, but I'm not afraid to put them in the middle or inline to
> get things done faster.

<snip>
> I highly recommend using a js library with a good onLoad event
> replacement (my favorite is jQuery).  The standard default onload
> event sucks because it waits for all images to be downloaded rather
> than being a "DOMContentReady" event.

Hi John,

Actually I'm trying not to use much JavaScript if I can help it. I
just need a few functions to help with forms (so far).

How about src-ing a .js? I've been looking at random pages and I'm
surprised to see that not many pages actually do this. Is there a
reason?

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/


From jcampbell1 at gmail.com  Wed Feb  6 17:05:08 2008
From: jcampbell1 at gmail.com (John Campbell)
Date: Wed, 6 Feb 2008 17:05:08 -0500
Subject: [nycphp-talk] JavaScript just above form in body?
In-Reply-To: <78c6bd860802061312j6eb3b2a6wa96d45040d18eec@mail.gmail.com>
References: <78c6bd860802061106l16b27889me6e52f24c47968cd@mail.gmail.com>
	<8f0676b40802061130g28f36ce0y7a4b42a0e9e1b02e@mail.gmail.com>
	<78c6bd860802061312j6eb3b2a6wa96d45040d18eec@mail.gmail.com>
Message-ID: <8f0676b40802061405u5c1024f9p2f91dce55a9c8de9@mail.gmail.com>

> How about src-ing a .js? I've been looking at random pages and I'm
> surprised to see that not many pages actually do this. Is there a
> reason?

For non-library code, it is faster to include the javascript with the
html because it saves a web request.  For library code, it is a
trade-off... an extra web request vs loading the js from the cache
during subsequent page views.

I also think creating a js file for each page is painful.  When you
change the html you generally have to change the javascript, so why
not keep it in one place?

John C.


From ioplex at gmail.com  Wed Feb  6 18:11:56 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Wed, 6 Feb 2008 18:11:56 -0500
Subject: [nycphp-talk] JavaScript just above form in body?
In-Reply-To: <8f0676b40802061405u5c1024f9p2f91dce55a9c8de9@mail.gmail.com>
References: <78c6bd860802061106l16b27889me6e52f24c47968cd@mail.gmail.com>
	<8f0676b40802061130g28f36ce0y7a4b42a0e9e1b02e@mail.gmail.com>
	<78c6bd860802061312j6eb3b2a6wa96d45040d18eec@mail.gmail.com>
	<8f0676b40802061405u5c1024f9p2f91dce55a9c8de9@mail.gmail.com>
Message-ID: <78c6bd860802061511l50a9c05fv711670486ffb4dd1@mail.gmail.com>

On 2/6/08, John Campbell <jcampbell1 at gmail.com> wrote:
> > How about src-ing a .js? I've been looking at random pages and I'm
> > surprised to see that not many pages actually do this. Is there a
> > reason?
>
> For non-library code, it is faster to include the javascript with the
> html because it saves a web request.  For library code, it is a
> trade-off... an extra web request vs loading the js from the cache
> during subsequent page views.
>
> I also think creating a js file for each page is painful.  When you
> change the html you generally have to change the javascript, so why
> not keep it in one place?

I was not going to have a .js for each page. I think one .js will do.
And I don't see how this is any different from another cached .gif or
.css.

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/


From ps at sun-code.com  Wed Feb  6 20:58:32 2008
From: ps at sun-code.com (Peter Sawczynec)
Date: Wed, 6 Feb 2008 20:58:32 -0500
Subject: [nycphp-talk] [OT] Learning Online Resource
Message-ID: <000001c8692c$f1304890$d390d9b0$@com>

At this web site simply called Lynda.com, at this URL:
http://movielibrary.lynda.com/html/modListing.asp#titleListing

 

...you will find a long list of free to view QuickTime video tutorials.
Remarkably, if you scroll to the bottom of the video tutorial list you
will find basic PHP, MySQL, Ruby, CSS and XML. Plus, of course, lots of
Photoshop, Flash, Dreamweaver, Acrobat.

 

I would estimate that about 20 - 25% of the total video tutorials
available are free. I have viewed many of the free ones and they are on
the overall excellent. 

 

I hope someone else might find some certain value and some helpful new
knowledge with these too. Good luck.

 

Warmest regards, 

 

Peter Sawczynec 

Technology Dir.

Sun-code Interactive

Sun-code.com 

646.316.3678 

 <mailto:ps at sun-code.com> ps at sun-code.com

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080206/c55e51b6/attachment.html>

From ps at sun-code.com  Wed Feb  6 21:04:08 2008
From: ps at sun-code.com (Peter Sawczynec)
Date: Wed, 6 Feb 2008 21:04:08 -0500
Subject: [nycphp-talk] JavaScript just above form in body?
In-Reply-To: <78c6bd860802061312j6eb3b2a6wa96d45040d18eec@mail.gmail.com>
References: <78c6bd860802061106l16b27889me6e52f24c47968cd@mail.gmail.com>	<8f0676b40802061130g28f36ce0y7a4b42a0e9e1b02e@mail.gmail.com>
	<78c6bd860802061312j6eb3b2a6wa96d45040d18eec@mail.gmail.com>
Message-ID: <000b01c8692d$b960e900$2c22bb00$@com>

JavaScript(s) loads in an order similar to how CSS loads. Without
getting to deep, I have found incidences where a JavaScript snippet or
code section will perform as expected when the actual JS code is
embedded with script tags in the head of the HTML page, but when this
same script is loaded as a JS source file it will fail. Peter

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Michael B Allen
Sent: Wednesday, February 06, 2008 4:13 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] JavaScript just above form in body?

On 2/6/08, John Campbell <jcampbell1 at gmail.com> wrote:
> On Feb 6, 2008 2:06 PM, Michael B Allen <ioplex at gmail.com> wrote:
> > Is it considered bad practice to emit scripts within the body of a
> > page such as immediately preceeding the form that uses it? It seems
to
> > work fine but from looking at some random sites I have yet to see an
> > example of this. Logically it makes sense to put the JavaScript
close
> > to where it will be used no?
>
> The standards nazis will tell you to put scripts in the head.  The
> performance freaks will tell you to put your scripts as the last
> element in the body.  Putting javascript in the middle of the page, is
> bad practice but can simplify development.  So where you put scripts
> is up to you... I prefer putting all scripts as the last element in
> the body because performance is more important to me than standards
> compliance, but I'm not afraid to put them in the middle or inline to
> get things done faster.

<snip>
> I highly recommend using a js library with a good onLoad event
> replacement (my favorite is jQuery).  The standard default onload
> event sucks because it waits for all images to be downloaded rather
> than being a "DOMContentReady" event.

Hi John,

Actually I'm trying not to use much JavaScript if I can help it. I
just need a few functions to help with forms (so far).

How about src-ing a .js? I've been looking at random pages and I'm
surprised to see that not many pages actually do this. Is there a
reason?

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From susan_shemin at yahoo.com  Wed Feb  6 23:45:11 2008
From: susan_shemin at yahoo.com (Susan Shemin)
Date: Wed, 6 Feb 2008 20:45:11 -0800 (PST)
Subject: [nycphp-talk] JavaScript just above form in body?
Message-ID: <272122.68844.qm@web50206.mail.re2.yahoo.com>

Interesting discussion.  I use Dreamweaver as a code editor because of the intellisense and being able to visually see the page elements.  If you drag a div with a css class definition, the css updates automatically if it's in the document between the head tags, which I love.  I also would like to keep the css in a separate document for "neatness" sake, but then it doesn't update.

The intellisense gives php tags a bright red so I can see if an end is missing!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080206/626b556d/attachment.html>

From ps at sun-code.com  Thu Feb  7 05:43:10 2008
From: ps at sun-code.com (Peter Sawczynec)
Date: Thu, 7 Feb 2008 05:43:10 -0500
Subject: [nycphp-talk] JavaScript just above form in body?
In-Reply-To: <272122.68844.qm@web50206.mail.re2.yahoo.com>
References: <272122.68844.qm@web50206.mail.re2.yahoo.com>
Message-ID: <000f01c86976$3b9691c0$b2c3b540$@com>

When you have a web document open in Dreamweaver, I kind of recall that
there was a menu interface where you can tell Dreamweaver to associate
an external CSS file with this document(s) and then those CSS rules will
show up in the dropdowns, menus, etc and then the external CSS will
update as expected. Take a look for this. 

 

Further to the JS, it has long been my impression that all these varying
JS insert positions and insert styles will potentially have an effect on
how and in what order your script(s) may execute:

a) JS script included as an external src file (inclusion order of
multiple src files is significant)

b) JS script(s) in head tag

c) JS (via inline script tag(s) or src ext) just after opening body tag

d) JS (via inline script tag(s) or src ext) within the body before a
target tag(s)

e) JS (via inline script tag(s) or src ext) within the body after a
target tag(s)

f) JS (via inline script tag(s) or src ext) just before the closing body
tag

g) JS (via inline script tag(s) or src ext) just after the closing body
tag

 

Additionally, CSS that the JS works with may need to be sensitively
inserted with the positioned JS. 

 

As I say, these are all my impressions only.

 

Peter 

 

From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Susan Shemin
Sent: Wednesday, February 06, 2008 11:45 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] JavaScript just above form in body?

 

Interesting discussion.  I use Dreamweaver as a code editor because of
the intellisense and being able to visually see the page elements.  If
you drag a div with a css class definition, the css updates
automatically if it's in the document between the head tags, which I
love.  I also would like to keep the css in a separate document for
"neatness" sake, but then it doesn't update.

 

The intellisense gives php tags a bright red so I can see if an end is
missing!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080207/e5efa16f/attachment.html>

From rahmin at insite-out.com  Thu Feb  7 12:00:12 2008
From: rahmin at insite-out.com (Rahmin Pavlovic)
Date: Thu, 07 Feb 2008 12:00:12 -0500
Subject: [nycphp-talk] JavaScript just above form in body?
In-Reply-To: <78c6bd860802061106l16b27889me6e52f24c47968cd@mail.gmail.com>
Message-ID: <C3D0A34C.5F5A5%rahmin@insite-out.com>


Michael B Allen wrote:

> Is it considered bad practice to emit scripts within the body of a
> page such as immediately preceeding the form that uses it? It seems to
> work fine but from looking at some random sites I have yet to see an
> example of this. Logically it makes sense to put the JavaScript close
> to where it will be used no?
> 

That actually makes perfect sense in terms of download speed.  It became
somewhat of a standard practice to include JS in the HEAD of the document,
but that actually slows things down.

I actually wrote about this and a bunch of other JS optimization tricks in
my well-ignored Wordpress blog (primarily ignored by me):
http://insite-out.com/#load-scripts-last





From jcampbell1 at gmail.com  Thu Feb  7 12:39:58 2008
From: jcampbell1 at gmail.com (John Campbell)
Date: Thu, 7 Feb 2008 12:39:58 -0500
Subject: [nycphp-talk] JavaScript just above form in body?
In-Reply-To: <C3D0A34C.5F5A5%rahmin@insite-out.com>
References: <78c6bd860802061106l16b27889me6e52f24c47968cd@mail.gmail.com>
	<C3D0A34C.5F5A5%rahmin@insite-out.com>
Message-ID: <8f0676b40802070939l267bce72jcb04b95d58b6cc18@mail.gmail.com>

On Feb 7, 2008 12:00 PM, Rahmin Pavlovic <rahmin at insite-out.com> wrote:
>
> Michael B Allen wrote:
>
> > Is it considered bad practice to emit scripts within the body of a
> > page such as immediately preceeding the form that uses it? It seems to
> > work fine but from looking at some random sites I have yet to see an
> > example of this. Logically it makes sense to put the JavaScript close
> > to where it will be used no?
> >
>
> That actually makes perfect sense in terms of download speed.  It became
> somewhat of a standard practice to include JS in the HEAD of the document,
> but that actually slows things down.
>
> I actually wrote about this and a bunch of other JS optimization tricks in
> my well-ignored Wordpress blog (primarily ignored by me):
> http://insite-out.com/#load-scripts-last

Insightful post, although I disagree with the bit about destructors.
I prefer to let the scope+garbage collection destroy objects rather
than doing it manually.

The key thing to understand is that the browser stops rendering the
page when it encounters a <script> tag.  The script is fully parsed
and executed, before rendering resumes.  Browsers must work this way
because the script may contain "document.write".   Presently, the
defer attribute is not supported across all browsers thus it is not a
viable workaround.


-John C.


From aw at sap8.com  Thu Feb  7 19:33:37 2008
From: aw at sap8.com (Anthony Wlodarski)
Date: Thu, 7 Feb 2008 19:33:37 -0500
Subject: [nycphp-talk] Saving data from forms
Message-ID: <000c01c869ea$3eb8c7a0$bc2a56e0$@com>

I was just writing something up and I have a question about saving data from
forms for a password.

 

So the logic for what I want to do is something like this:

 

Input from form -> check for magic quotes(if not then add quotes) -> md5
value -> save to database.

 

Now what happens if you change the logic to:

 

Input from form -> md5 value -> save to database.

 

Other individuals I have discussed this with would say that if you are on a
platform without magic quotes then the md5 values will be different.  Is
this the case?

 

-Anthony

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080207/4b48f9e4/attachment.html>

From ramons at gmx.net  Thu Feb  7 20:44:44 2008
From: ramons at gmx.net (David Krings)
Date: Thu, 07 Feb 2008 20:44:44 -0500
Subject: [nycphp-talk] Saving data from forms
In-Reply-To: <000c01c869ea$3eb8c7a0$bc2a56e0$@com>
References: <000c01c869ea$3eb8c7a0$bc2a56e0$@com>
Message-ID: <47ABB40C.9060502@gmx.net>

Anthony Wlodarski wrote:
> I was just writing something up and I have a question about saving data 
> from forms for a password.
> So the logic for what I want to do is something like this:
> Input from form -> check for magic quotes(if not then add quotes) -> md5 
> value -> save to database.
> Now what happens if you change the logic to:
> Input from form -> md5 value -> save to database.
> Other individuals I have discussed this with would say that if you are 
> on a platform without magic quotes then the md5 values will be 
> different.  Is this the case?

That may very well be, but that comes only into play when you carry the 
database from one system with magicquotes to one without or vice versa, or end 
up having the magicquotes enabled after an update, but not before or the other 
way around. As long as you operate on a system that either has magicquotes or 
not it doesn't matter in the end. I use the same password obfuscation and used 
it on several systems without a problem, but maybe I was just lucky?

David


From danielc at analysisandsolutions.com  Fri Feb  8 12:47:20 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Fri, 8 Feb 2008 12:47:20 -0500
Subject: [nycphp-talk] Saving data from forms
In-Reply-To: <000c01c869ea$3eb8c7a0$bc2a56e0$@com>
References: <000c01c869ea$3eb8c7a0$bc2a56e0$@com>
Message-ID: <20080208174719.GA14886@panix.com>

Hi Anthony:

On Thu, Feb 07, 2008 at 07:33:37PM -0500, Anthony Wlodarski wrote:
> 
> Input from form -> check for magic quotes(if not then add quotes) -> md5
> value -> save to database.
> 
> Now what happens if you change the logic to:
> Input from form -> md5 value -> save to database.
>
> Other individuals I have discussed this with would say that if you are on a
> platform without magic quotes then the md5 values will be different.  Is
> this the case?

You will get a different hash, since "That\'s good stuff, man." is 
different than "That's good stuff, man."

In your case it doesn't fully matter if it's on or off, ASSUMING that 
they will ALWAYS be in that same state.  The initial save and the 
subsequent verification submissions will both hit MD5 function with the 
same string.  But if the company changes servers/versions/settings which 
winds up changing this ini setting, you're SCREWED.

PHP comes with this nightmarish feature turned off by default and most 
hosts I've seen have it off also.  So, if you need to ENSURE portability, 
plan your logic accordingly.  For example, if MQ is on, put in 
stripslashes before making the MD5 hash.  Or you could do the database 
server's MD5(), since the slashes will be gone by the time it gets there.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From lists at zaunere.com  Fri Feb  8 16:43:09 2008
From: lists at zaunere.com (Hans Zaunere)
Date: Fri, 8 Feb 2008 16:43:09 -0500
Subject: [nycphp-talk] SoapClient - Worthless?
Message-ID: <024301c86a9b$98bae740$ca30b5c0$@com>

Hi all,

I've been trying to use SoapClient against what I'd think would be a
heavily used and fairly standard WSDL:

https://apitest.authorize.net/soap/v1/service.asmx?wsdl 

Yet, SoapClient is extremely unstable and often causes Apache to
seg-fault.  I haven't SoapClient in over a year because of this (used
nuSOAP at that time) but I had figured SoapClient would stabilize.

Apparently, it hasn't.  Out of curisotiry, anyone else have these types
of problems with SoapClient - or have used SoapClient successfully?

H





From arzala at gmail.com  Fri Feb  8 22:38:54 2008
From: arzala at gmail.com (Anirudh Zala)
Date: Sat, 9 Feb 2008 09:08:54 +0530
Subject: [nycphp-talk] SoapClient - Worthless?
In-Reply-To: <024301c86a9b$98bae740$ca30b5c0$@com>
References: <024301c86a9b$98bae740$ca30b5c0$@com>
Message-ID: <200802090908.54342.arzala@gmail.com>

On Saturday 09 Feb 2008 03:13:09 Hans Zaunere wrote:
> Hi all,
>
> I've been trying to use SoapClient against what I'd think would be a
> heavily used and fairly standard WSDL:
>
> https://apitest.authorize.net/soap/v1/service.asmx?wsdl
>
> Yet, SoapClient is extremely unstable and often causes Apache to
> seg-fault.  I haven't SoapClient in over a year because of this (used
> nuSOAP at that time) but I had figured SoapClient would stabilize.

We have been using SoapClient since 1 year or so without any proboem. But our 
scripts are using only 5 to 10 operations at a time. It has been seen that 
there are various reasons for this kind of SegFault viz.

# WSDL file
# LibXML version
# Some buggy versions of PHP like PHP 5.0 and PHP 5.1

We have been using PHP 5.1.6 but with latest updates. Below link may help you 
tracing your problem.

http://bugs.php.net/bug.php?id=35570

Thanks

Anirudh Zala

>
> Apparently, it hasn't.  Out of curisotiry, anyone else have these types
> of problems with SoapClient - or have used SoapClient successfully?
>
> H
>
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php




From ioplex at gmail.com  Sat Feb  9 15:16:57 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Sat, 9 Feb 2008 15:16:57 -0500
Subject: [nycphp-talk] htmlspecialchars: ENT_COMPAT or ENT_QUOTES
Message-ID: <78c6bd860802091216ld8681e3of39c261837ed5923@mail.gmail.com>

Hi,

What is the most appropriate quote_style value to use with htmlspecialchars?

For some reason I've always used ENT_QUOTES for everthing. But now I
have some code that automatically escapes element attributes and
ENT_QUOTES is creating a little bit if an issue with JavaScript.

Is there any way to get into trouble with htmlspecialchars?

Are there pitfalls to using ENT_COMPAT?

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/


From cliff at pinestream.com  Sun Feb 10 07:48:42 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Sun, 10 Feb 2008 07:48:42 -0500
Subject: [nycphp-talk] Drupalcon in Boston, March 3 - 6
Message-ID: <C3D45CDA.C904%cliff@pinestream.com>

Drupalcon will be in Boston, March 3 ? 6:

http://boston2008.drupalcon.org/

On Feb. 28th, BostonPhP will be hosting an in depth view of Drupal
presentation.

http://www.bostonphp.org/content/view/97/9/

We?d be happy to host any New Yorkers despite the upset.

Best regards,
Cliff Hirsch
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080210/af3db427/attachment.html>

From randalrust at gmail.com  Sun Feb 10 08:20:38 2008
From: randalrust at gmail.com (Randal Rust)
Date: Sun, 10 Feb 2008 08:20:38 -0500
Subject: [nycphp-talk] Joomla Site Home Page Loading Slowly
Message-ID: <a9caffe50802100520t9dc8110sba6de99274fc1811@mail.gmail.com>

I know that I could go to the Joomla forums and ask this, but I think
I'm going to get better results here, so bear with me. We just took
over a site for a client that was built in Joomla. Yesterday, the site
suddenly went down as though it was getting a DOS or spam attack. This
continued on to about midnight.

This morning, I noticed something very strange. The only page that
seems to be loading slowly is the home page. If I type the URL of
another page into the address bar, it will load with no problem at
all.

This is a Joomla 1.012e install. Is there anything that I should be
looking at in an attempt to resolve this issue?

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From lists at zaunere.com  Sun Feb 10 08:56:06 2008
From: lists at zaunere.com (Hans Zaunere)
Date: Sun, 10 Feb 2008 08:56:06 -0500
Subject: [nycphp-talk] Drupalcon in Boston, March 3 - 6
In-Reply-To: <C3D45CDA.C904%cliff@pinestream.com>
References: <C3D45CDA.C904%cliff@pinestream.com>
Message-ID: <059b01c86bec$aeae94f0$0c0bbed0$@com>

> http://www.bostonphp.org/content/view/97/9/
>
> We'd be happy to host any New Yorkers despite the upset.

I'd be there simply because of the upset :)

H




From lists at zaunere.com  Sun Feb 10 09:04:56 2008
From: lists at zaunere.com (Hans Zaunere)
Date: Sun, 10 Feb 2008 09:04:56 -0500
Subject: [nycphp-talk] SoapClient - Worthless?
In-Reply-To: <200802090908.54342.arzala@gmail.com>
References: <024301c86a9b$98bae740$ca30b5c0$@com>
	<200802090908.54342.arzala@gmail.com>
Message-ID: <05a201c86bed$ea56aff0$bf040fd0$@com>


> > I've been trying to use SoapClient against what I'd think would be a
> > heavily used and fairly standard WSDL:
> >
> > https://apitest.authorize.net/soap/v1/service.asmx?wsdl
> >
> > Yet, SoapClient is extremely unstable and often causes Apache to
> > seg-fault.  I haven't SoapClient in over a year because of this
(used
> > nuSOAP at that time) but I had figured SoapClient would stabilize.
> 
> We have been using SoapClient since 1 year or so without any proboem.
But our
> scripts are using only 5 to 10 operations at a time. It has been seen
that
> there are various reasons for this kind of SegFault viz.
> 
> # WSDL file
> # LibXML version
> # Some buggy versions of PHP like PHP 5.0 and PHP 5.1
> 
> We have been using PHP 5.1.6 but with latest updates. Below link
> may help you tracing your problem.
> 
> http://bugs.php.net/bug.php?id=35570

Thanks Zala for the feedback.

> > Apparently, it hasn't.  Out of curiosity, anyone else have these
types
> > of problems with SoapClient - or have used SoapClient successfully?

As it ends up, though, I've ended up eating these words, thanks to our
friends over at MySQL.

Through much debugging, I finally discovered that any socket connection
to a https:// URL would cause the segfault - even something as simple as
file_get_contents().

Though not well described across the web, there is a symbol conflict in
versions around MySQL 5.0.27 and OpenSSL.  Thus the segfault.  Upgrading
to MySQL 5.051a and recompiling PHP against those client libs, and the
problem mysteriously fixed itself.

This isn't the first time odd symbol conflicts have happened with
libmysqlclient.  I can't pin it down now, but I do remember a very
similar issue not long ago.  Hopefully Sun can push some testing
practices, even if it is for PHP.

H




From ramons at gmx.net  Sun Feb 10 09:58:35 2008
From: ramons at gmx.net (David Krings)
Date: Sun, 10 Feb 2008 09:58:35 -0500
Subject: [nycphp-talk] Drupalcon in Boston, March 3 - 6
In-Reply-To: <059b01c86bec$aeae94f0$0c0bbed0$@com>
References: <C3D45CDA.C904%cliff@pinestream.com>
	<059b01c86bec$aeae94f0$0c0bbed0$@com>
Message-ID: <47AF111B.6040009@gmx.net>

Hans Zaunere wrote:
>> http://www.bostonphp.org/content/view/97/9/
>>
>> We'd be happy to host any New Yorkers despite the upset.
> 
> I'd be there simply because of the upset :)

What upset are you guys talking about?


From cliff at pinestream.com  Sun Feb 10 10:27:42 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Sun, 10 Feb 2008 10:27:42 -0500
Subject: [nycphp-talk] Drupalcon in Boston, March 3 - 6
In-Reply-To: <47AF111B.6040009@gmx.net>
Message-ID: <C3D4821E.C90D%cliff@pinestream.com>

On 2/10/08 9:58 AM, "David Krings" <ramons at gmx.net> wrote:

> Hans Zaunere wrote:
>>> http://www.bostonphp.org/content/view/97/9/
>>> 
>>> We'd be happy to host any New Yorkers despite the upset.
>> 
>> I'd be there simply because of the upset :)
> 
> What upset are you guys talking about?

Think about it...a 100 million "page" views one Sunday evening...perfection
denied...




From ramons at gmx.net  Sun Feb 10 13:33:24 2008
From: ramons at gmx.net (David Krings)
Date: Sun, 10 Feb 2008 13:33:24 -0500
Subject: [nycphp-talk] Drupalcon in Boston, March 3 - 6
In-Reply-To: <C3D4821E.C90D%cliff@pinestream.com>
References: <C3D4821E.C90D%cliff@pinestream.com>
Message-ID: <47AF4374.6080002@gmx.net>

Cliff Hirsch wrote:
>> What upset are you guys talking about?
> 
> Think about it...a 100 million "page" views one Sunday evening...perfection
> denied...

Ah, you mean the Microsoft bid that Yahoo denied?


From ioplex at gmail.com  Sun Feb 10 15:35:54 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Sun, 10 Feb 2008 15:35:54 -0500
Subject: [nycphp-talk] Drupalcon in Boston, March 3 - 6
In-Reply-To: <47AF4374.6080002@gmx.net>
References: <C3D4821E.C90D%cliff@pinestream.com> <47AF4374.6080002@gmx.net>
Message-ID: <78c6bd860802101235i2e9236d5odc3eff11e3e6fc6c@mail.gmail.com>

On 2/10/08, David Krings <ramons at gmx.net> wrote:
> Cliff Hirsch wrote:
> >> What upset are you guys talking about?
> >
> > Think about it...a 100 million "page" views one Sunday evening...perfection
> > denied...
>
> Ah, you mean the Microsoft bid that Yahoo denied?

They're referring to the New England Patriot's loss to the New York
Giants in Super Bowl XXLII last Sunday. New England was 18-0 and a win
in the Super Bowl would have been a "perfect season". Almost 100
million people watched the game, second only to the 1983 M*A*S*H
finale.

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/


From 1j0lkq002 at sneakemail.com  Sun Feb 10 16:04:19 2008
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Sun, 10 Feb 2008 13:04:19 -0800
Subject: [nycphp-talk] Drupalcon in Boston, March 3 - 6
In-Reply-To: <C3D45CDA.C904%cliff@pinestream.com>
References: <C3D45CDA.C904%cliff@pinestream.com>
Message-ID: <28600-20903@sneakemail.com>

Cliff Hirsch cliff-at-pinestream.com |nyphp dev/internal group use| wrote:

> Drupalcon will be in Boston, March 3 ? 6:
>
> http://boston2008.drupalcon.org/
>
> On Feb. 28th, BostonPhP will be hosting an in depth view of Drupal 
> presentation.
>
> http://www.bostonphp.org/content/view/97/9/
>
> We?d be happy to host any New Yorkers despite the upset.
>
> Best regards,
> Cliff Hirsch

Surely you mean New Jerseyans, no?


From ramons at gmx.net  Sun Feb 10 16:45:34 2008
From: ramons at gmx.net (David Krings)
Date: Sun, 10 Feb 2008 16:45:34 -0500
Subject: [nycphp-talk] Drupalcon in Boston, March 3 - 6
In-Reply-To: <78c6bd860802101235i2e9236d5odc3eff11e3e6fc6c@mail.gmail.com>
References: <C3D4821E.C90D%cliff@pinestream.com> <47AF4374.6080002@gmx.net>
	<78c6bd860802101235i2e9236d5odc3eff11e3e6fc6c@mail.gmail.com>
Message-ID: <47AF707E.1020107@gmx.net>

Michael B Allen wrote:
> On 2/10/08, David Krings <ramons at gmx.net> wrote:
>> Cliff Hirsch wrote:
>>>> What upset are you guys talking about?
>>> Think about it...a 100 million "page" views one Sunday evening...perfection
>>> denied...
>> Ah, you mean the Microsoft bid that Yahoo denied?
> 
> They're referring to the New England Patriot's loss to the New York
> Giants in Super Bowl XXLII last Sunday. New England was 18-0 and a win
> in the Super Bowl would have been a "perfect season". Almost 100
> million people watched the game, second only to the 1983 M*A*S*H
> finale.


Ah, thanks, I'm not interested in brutal "sports" executed by low IQed 
individuals. People actually watch stuff like that??? I thought the FCC 
prohibits brutality (football) and sex (cheerleaders) on daytime TV.

I guess now is the right time to duck?

Just pulling your legs.....I still think broadcasting football is a waste of 
energy.


From ioplex at gmail.com  Sun Feb 10 16:52:44 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Sun, 10 Feb 2008 16:52:44 -0500
Subject: [nycphp-talk] Drupalcon in Boston, March 3 - 6
In-Reply-To: <47AF707E.1020107@gmx.net>
References: <C3D4821E.C90D%cliff@pinestream.com> <47AF4374.6080002@gmx.net>
	<78c6bd860802101235i2e9236d5odc3eff11e3e6fc6c@mail.gmail.com>
	<47AF707E.1020107@gmx.net>
Message-ID: <78c6bd860802101352u2d6c2d2bg923e94c39dd9494f@mail.gmail.com>

On 2/10/08, David Krings <ramons at gmx.net> wrote:
> I thought the FCC
> prohibits brutality (football) and sex (cheerleaders) on daytime TV.

Not if you're wearing protection.

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/


From rmarscher at beaffinitive.com  Sun Feb 10 19:27:28 2008
From: rmarscher at beaffinitive.com (Rob Marscher)
Date: Sun, 10 Feb 2008 19:27:28 -0500
Subject: [nycphp-talk] SoapClient - Worthless?
In-Reply-To: <05a201c86bed$ea56aff0$bf040fd0$@com>
References: <024301c86a9b$98bae740$ca30b5c0$@com>
	<200802090908.54342.arzala@gmail.com>
	<05a201c86bed$ea56aff0$bf040fd0$@com>
Message-ID: <280C8EA7-5A9C-4D95-A709-5219F885A261@beaffinitive.com>

On Feb 10, 2008, at 9:04 AM, Hans Zaunere wrote:
> This isn't the first time odd symbol conflicts have happened with
> libmysqlclient.  I can't pin it down now, but I do remember a very
> similar issue not long ago.  Hopefully Sun can push some testing
> practices, even if it is for PHP.

Yes!  I've also had segfaults with mysql/php... upgrading and  
rebuilding everything fixed it.  I think it was something with a 64  
bit architecture, but that's off the top of my head.  When's that  
native mysql driver coming for php?  Looks like a dev version is  
available.  Anyone try it?
http://dev.mysql.com/downloads/connector/php-mysqlnd/

Also get segfaults with xml services now and then.  We've been using  
SoapClient with the National Weather Service WSDL.  It seems that  
everything has been running smoothly with that as far as I can tell.   
The code using it has been in production for a couple months.

Anyone ever get a segfault with debug_backtrace?  Had to disable the  
use of that on a couple of our servers.  Never could track down the  
cause of it.


From lists at zaunere.com  Mon Feb 11 17:57:58 2008
From: lists at zaunere.com (Hans Zaunere)
Date: Mon, 11 Feb 2008 17:57:58 -0500
Subject: [nycphp-talk] SoapClient - Worthless?
In-Reply-To: <280C8EA7-5A9C-4D95-A709-5219F885A261@beaffinitive.com>
References: <024301c86a9b$98bae740$ca30b5c0$@com>	<200802090908.54342.arzala@gmail.com>	<05a201c86bed$ea56aff0$bf040fd0$@com>
	<280C8EA7-5A9C-4D95-A709-5219F885A261@beaffinitive.com>
Message-ID: <006f01c86d01$8be7ac70$a3b70550$@com>

> On Feb 10, 2008, at 9:04 AM, Hans Zaunere wrote:
> > This isn't the first time odd symbol conflicts have happened with
> > libmysqlclient.  I can't pin it down now, but I do remember a very
> > similar issue not long ago.  Hopefully Sun can push some testing
> > practices, even if it is for PHP.
> 
> Yes!  I've also had segfaults with mysql/php... upgrading and
> rebuilding everything fixed it.  I think it was something with a 64
> bit architecture, but that's off the top of my head.  When's that
> native mysql driver coming for php?  Looks like a dev version is
> available.  Anyone try it?
> http://dev.mysql.com/downloads/connector/php-mysqlnd/

I've played with it a bit, but it never struck me as being so cool to
warrant a move to it quite yet.

In general, segfaults could also happen because of mismatched libmysqlclient
versions and architectures (compiled for i386 or x86_64, for example).
Something that is always tricky (not only when compiling against
libmysqlclient) is getting PHP to link against the right libs (look at
--with-libdir=lib64 which is something I requested some time ago).

I've also reported this bug recently:

http://bugs.php.net/bug.php?id=44087

> Also get segfaults with xml services now and then.  We've been using
> SoapClient with the National Weather Service WSDL.  It seems that
> everything has been running smoothly with that as far as I can tell.
> The code using it has been in production for a couple months.

I'm currently using SoapClient, and although improved, it's still a little
shaky.

Ironically enough, NYPHP was recently approached by this group:

http://wso2.org/

and specifically:

http://wso2.org/projects/wsf/php

It's built on some solid XML/SOAP technology, and from messing with it a
little bit, looks very promising.  I'm actually discussing some issues with
their developers, surrounding complex WSDLs (which always seem to be a
problem).  They're releasing a new version this week, and from what they've
shown to me by using some test WSDLs, it's going to be solid.  And it
includes automatic class generation from the WSDL, which is the way SOAP is
supposed to be - finally in PHP!

> Anyone ever get a segfault with debug_backtrace?  Had to disable the
> use of that on a couple of our servers.  Never could track down the
> cause of it.

I hear you - a real time killer, so generally I don't have the chance to
research... gone are those days...

H




From cliff at pinestream.com  Mon Feb 11 18:16:52 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Mon, 11 Feb 2008 18:16:52 -0500
Subject: [nycphp-talk] Favorite js tooltip?
Message-ID: <C3D64194.C9FE%cliff@pinestream.com>

Does anyone have a favorite javascript tooltip utility? Ideally, something
based on jQuery.

Cliff

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080211/43a9a32f/attachment.html>

From cliff at pinestream.com  Mon Feb 11 18:40:02 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Mon, 11 Feb 2008 18:40:02 -0500
Subject: [nycphp-talk] Addcslashes bug
Message-ID: <C3D64702.CA01%cliff@pinestream.com>

I had a very strange error, catastrophic yesterday. addcslashes failed to
put a slash in front of a single quote. Can anyone imagine how this could
happen? Is it possible it didn?t catch a multi-byte character? Am I back to
charset issues? Unfortunately, I can?t reproduce the error.

Cliff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080211/115902ed/attachment.html>

From matteo.rinaudo at gmail.com  Mon Feb 11 18:54:32 2008
From: matteo.rinaudo at gmail.com (Matteo Rinaudo)
Date: Mon, 11 Feb 2008 18:54:32 -0500
Subject: [nycphp-talk] Addcslashes bug
In-Reply-To: <C3D64702.CA01%cliff@pinestream.com>
References: <C3D64702.CA01%cliff@pinestream.com>
Message-ID: <e2bdf8970802111554p72ecdd38m1245dc439d09012e@mail.gmail.com>

Hi - do the Apache logs show you something (if you log them via
php.ini) like warning or errors related to this issue?
Matteo Rinaudo

On Feb 11, 2008 6:40 PM, Cliff Hirsch <cliff at pinestream.com> wrote:
>
>  I had a very strange error, catastrophic yesterday. addcslashes failed to
> put a slash in front of a single quote. Can anyone imagine how this could
> happen? Is it possible it didn't catch a multi-byte character? Am I back to
> charset issues? Unfortunately, I can't reproduce the error.
>
>  Cliff
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>


From matteo.rinaudo at gmail.com  Mon Feb 11 18:58:17 2008
From: matteo.rinaudo at gmail.com (Matteo Rinaudo)
Date: Mon, 11 Feb 2008 18:58:17 -0500
Subject: [nycphp-talk] Addcslashes bug
In-Reply-To: <e2bdf8970802111554p72ecdd38m1245dc439d09012e@mail.gmail.com>
References: <C3D64702.CA01%cliff@pinestream.com>
	<e2bdf8970802111554p72ecdd38m1245dc439d09012e@mail.gmail.com>
Message-ID: <e2bdf8970802111558h3224f474l82fb6fbb3fba6a7f@mail.gmail.com>

> Hi - do the Apache logs show you something (if you log them via
> php.ini) like warning or errors related to this issue?

Sorry, I meant `if you log the PHP errors using the log_errors
directive in php.ini'.
Matteo Rinaudo

> On Feb 11, 2008 6:40 PM, Cliff Hirsch <cliff at pinestream.com> wrote:
> >
> >  I had a very strange error, catastrophic yesterday. addcslashes failed to
> > put a slash in front of a single quote. Can anyone imagine how this could
> > happen? Is it possible it didn't catch a multi-byte character? Am I back to
> > charset issues? Unfortunately, I can't reproduce the error.
> >
> >  Cliff
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
>


From cliff at pinestream.com  Mon Feb 11 20:54:50 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Mon, 11 Feb 2008 20:54:50 -0500
Subject: [nycphp-talk] Addcslashes bug
In-Reply-To: <e2bdf8970802111558h3224f474l82fb6fbb3fba6a7f@mail.gmail.com>
Message-ID: <C3D6669A.CA19%cliff@pinestream.com>

>> On Feb 11, 2008 6:40 PM, Cliff Hirsch <cliff at pinestream.com> wrote:
>>>  I had a very strange error, catastrophic yesterday. addcslashes failed to
>>> put a slash in front of a single quote. Can anyone imagine how this could
>>> happen? Is it possible it didn't catch a multi-byte character? Am I back to
>>> charset issues? Unfortunately, I can't reproduce the error.

On 2/11/08 6:58 PM, "Matteo Rinaudo" <matteo.rinaudo at gmail.com> wrote:
>> Hi - do the Apache logs show you something (if you log them via
>> php.ini) like warning or errors related to this issue?
> 
> Sorry, I meant `if you log the PHP errors using the log_errors
> directive in php.ini'.
> Matteo Rinaudo
> 

The logs picked up the error after the damage was done: "PHP Parse error:
syntax error, unexpected T_STRING". But the logs don't indicate why
addcslashes failed to slash a single quote in this one instance.




From jcampbell1 at gmail.com  Mon Feb 11 21:30:46 2008
From: jcampbell1 at gmail.com (John Campbell)
Date: Mon, 11 Feb 2008 21:30:46 -0500
Subject: [nycphp-talk] Addcslashes bug
In-Reply-To: <C3D6669A.CA19%cliff@pinestream.com>
References: <e2bdf8970802111558h3224f474l82fb6fbb3fba6a7f@mail.gmail.com>
	<C3D6669A.CA19%cliff@pinestream.com>
Message-ID: <8f0676b40802111830r2d994f45y46145a5f45d59ef8@mail.gmail.com>

> The logs picked up the error after the damage was done: "PHP Parse error:
> syntax error, unexpected T_STRING". But the logs don't indicate why
> addcslashes failed to slash a single quote in this one instance.

This doesn't make sense.  How would a slashing failure lead to a parse
error?  Parsing should always happen first.  Were you hacked?  Are you
sure it isn't an unsafe include?

-John C.


From urb at e-government.com  Mon Feb 11 21:50:26 2008
From: urb at e-government.com (Urb LeJeune)
Date: Mon, 11 Feb 2008 21:50:26 -0500
Subject: [nycphp-talk] Java Script
In-Reply-To: <e2bdf8970802111554p72ecdd38m1245dc439d09012e@mail.gmail.co
 m>
References: <C3D64702.CA01%cliff@pinestream.com>
	<e2bdf8970802111554p72ecdd38m1245dc439d09012e@mail.gmail.com>
Message-ID: <7.0.1.0.2.20080211213613.032b4668@e-government.com>

	My knowledge of Java Script is limited to taking someone else's
script and making very minor changes. I would like to replicate PHP
ability to have an include file located somewhere that is not in the
normal web space.

	My clients have a document root of:

/home/domain-name/htdocs

	I have php.ini configured to first look in the current directory and
then /usr/local/include so that every client on the same server uses the
same source code. Is the scheme doable using Jave Script?

	Thanks

Urb

Dr. Urban A. LeJeune, President
E-Government.com
609-294-0320  800-204-9545
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
E-Government.com lowers you costs while increasing your expectations.




From urb at e-government.com  Mon Feb 11 21:53:27 2008
From: urb at e-government.com (Urb LeJeune)
Date: Mon, 11 Feb 2008 21:53:27 -0500
Subject: [nycphp-talk] WYSIWYG editors
Message-ID: <7.0.1.0.2.20080211215320.031d4940@usats.com>

	A few week back I had asked for any suggestions for a WYSIWYG editor
and received many good suggestions. It was also suggested that I evaluate the
suggestions and report back.

	After looking at a lot of WYSIWYG editors I have settled on the Innova
Studio editor.

http://www.innovastudio.com

	I had four major requirements, not necessarily in order:

1. Highly configurable
2. The textarea name parameter could be an array name such as
name="FormValues[Comment]"
3. There could be multiple textarea elements in the same form.
4. Easy to install and configure.
5. Low, not necessarily free, cost.

	This editor integrates into PHP, ASP, and ASP.net environments.
A single developer license of $69.95 allows unlimited distribution in all
your commercial products. Many suppliers want a fee for every domain
on which their product was installed.

	Has anyone else used this product?

Urb
Urb

Dr. Urban A. LeJeune, President
E-Government.com
609-294-0320  800-204-9545
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
E-Government.com lowers you costs while increasing your expectations.




From danielc at analysisandsolutions.com  Mon Feb 11 22:06:23 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Mon, 11 Feb 2008 22:06:23 -0500
Subject: [nycphp-talk] Addcslashes bug
In-Reply-To: <C3D6669A.CA19%cliff@pinestream.com>
References: <e2bdf8970802111558h3224f474l82fb6fbb3fba6a7f@mail.gmail.com>
	<C3D6669A.CA19%cliff@pinestream.com>
Message-ID: <20080212030622.GA6424@panix.com>

Hi Cliff:


> The logs picked up the error after the damage was done: "PHP Parse error:
> syntax error, unexpected T_STRING". But the logs don't indicate why
> addcslashes failed to slash a single quote in this one instance.

Are you eval()'ing code?  If so, _that's_ your problem, not the inability 
to add slashes. :)

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From asmith at observer.com  Mon Feb 11 22:15:50 2008
From: asmith at observer.com (Austin Smith)
Date: Mon, 11 Feb 2008 22:15:50 -0500
Subject: [nycphp-talk] WYSIWYG editors
In-Reply-To: <7.0.1.0.2.20080211213852.02a97be0@usats.com>
References: <7.0.1.0.2.20080211213852.02a97be0@usats.com>
Message-ID: <68a246880802111915t68dbd401o1755d940eaf199c2@mail.gmail.com>

A company I worked for until last July used Innova. It's not the *best* but
it's alright I suppose. I don't see why it's better than FCKeditor or
TinyMCE. I like WYMeditor for it's structure-over-presentation attitude, but
if giving your clients access to colors, fonts, etc., is important you can't
really use WYMeditor.

My biggest complaint with Innova is it's non-free.

Austin

On Feb 11, 2008 9:53 PM, Urb LeJeune <urb at e-government.com> wrote:

>        A few week back I had asked for any suggestions for a WYSIWYG
> editor
> and received many good suggestions. It was also suggested that I evaluate
> the
> suggestions and report back.
>
>        After looking at a lot of WYSIWYG editors I have settled on the
> Innova
> Studio editor.
>
> http://www.innovastudio.com
>
>        I had four major requirements, not necessarily in order:
>
> 1. Highly configurable
> 2. The textarea name parameter could be an array name such as
> name="FormValues[Comment]"
> 3. There could be multiple textarea elements in the same form.
> 4. Easy to install and configure.
> 5. Low, not necessarily free, cost.
>
>        This editor integrates into PHP, ASP, and ASP.net environments.
> A single developer license of $69.95 allows unlimited distribution in all
> your commercial products. Many suppliers want a fee for every domain
> on which their product was installed.
>
>        Has anyone else used this product?
>
> Urb
> Urb
>
> Dr. Urban A. LeJeune, President
> E-Government.com
> 609-294-0320  800-204-9545
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> E-Government.com lowers you costs while increasing your expectations.
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080211/92730157/attachment.html>

From strudeau at umich.edu  Mon Feb 11 22:34:08 2008
From: strudeau at umich.edu (Scott Trudeau)
Date: Mon, 11 Feb 2008 22:34:08 -0500
Subject: [nycphp-talk] Java Script
In-Reply-To: <7.0.1.0.2.20080211213613.032b4668@e-government.com>
References: <C3D64702.CA01%cliff@pinestream.com>
	<e2bdf8970802111554p72ecdd38m1245dc439d09012e@mail.gmail.com>
	<7.0.1.0.2.20080211213613.032b4668@e-government.com>
Message-ID: <90174f6c0802111934g4b28e993v95c3424d235488a5@mail.gmail.com>

Urb,

Short answer: no.

Javascript loaded from a remote file has to available via a URL accessible
to any browser; since the browser downloads and runs the script itself.

It's often good practice to concatenate any external script files used
across most of your site and use a javascript "minify" or "pack" technique
to reduce the size of the javascript file so it is downloaded to the client
faster.  Some of these techniques can also be used to help obfuscate your
javascript code, but in general, you should expect any javascript to be
visible to any user agent that can access it.

As a total aside, there's been some interesting analysis recently into
optimal methods for delivering javascript, e.g.:

http://ejohn.org/blog/library-loading-speed/

... anyone have a sense if there's any interest out there for a NYC
Javascript meetup/SIG?

Scott

On Feb 11, 2008 9:50 PM, Urb LeJeune <urb at e-government.com> wrote:

>        My knowledge of Java Script is limited to taking someone else's
> script and making very minor changes. I would like to replicate PHP
> ability to have an include file located somewhere that is not in the
> normal web space.
>
>        My clients have a document root of:
>
> /home/domain-name/htdocs
>
>        I have php.ini configured to first look in the current directory
> and
> then /usr/local/include so that every client on the same server uses the
> same source code. Is the scheme doable using Jave Script?
>
>        Thanks
>
> Urb
>
> Dr. Urban A. LeJeune, President
> E-Government.com
> 609-294-0320  800-204-9545
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> E-Government.com lowers you costs while increasing your expectations.
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080211/89b1caa4/attachment.html>

From edwardpotter at gmail.com  Mon Feb 11 22:43:30 2008
From: edwardpotter at gmail.com (Edward Potter)
Date: Mon, 11 Feb 2008 22:43:30 -0500
Subject: [nycphp-talk] Favorite js tooltip?
In-Reply-To: <C3D64194.C9FE%cliff@pinestream.com>
References: <C3D64194.C9FE%cliff@pinestream.com>
Message-ID: <c5949a380802111943u75d9a347s3660636405bad5e@mail.gmail.com>

I think jquery pretty much took over in the JS world (IMHO), just
google that with tool tips, you'll find lots of examples.

:-)  ed



On Feb 11, 2008 6:16 PM, Cliff Hirsch <cliff at pinestream.com> wrote:
>
>  Does anyone have a favorite javascript tooltip utility? Ideally, something
> based on jQuery.
>
>  Cliff
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



-- 
IM/iChat: ejpusa
Links: http://del.icio.us/ejpusa
Blog: http://www.utopiaparkway.com
Follow me: http://www.twitter.com/ejpusa
Karma: http://www.coderswithconscience.com
Projects: http://flickr.com/photos/86842405 at N00/
Store: http://astore.amazon.com/httpwwwutopic-20


From greg.rundlett at gmail.com  Mon Feb 11 22:44:26 2008
From: greg.rundlett at gmail.com (Greg Rundlett)
Date: Mon, 11 Feb 2008 22:44:26 -0500
Subject: [nycphp-talk] Java Script
In-Reply-To: <7.0.1.0.2.20080211213613.032b4668@e-government.com>
References: <C3D64702.CA01%cliff@pinestream.com>
	<e2bdf8970802111554p72ecdd38m1245dc439d09012e@mail.gmail.com>
	<7.0.1.0.2.20080211213613.032b4668@e-government.com>
Message-ID: <5e2aaca40802111944m70b27dbag22b129cf74604bf3@mail.gmail.com>

On Feb 11, 2008 9:50 PM, Urb LeJeune <urb at e-government.com> wrote:
>         My knowledge of Java Script is limited to taking someone else's
> script and making very minor changes. I would like to replicate PHP
> ability to have an include file located somewhere that is not in the
> normal web space.
>
>         My clients have a document root of:
>
> /home/domain-name/htdocs
>
>         I have php.ini configured to first look in the current directory and
> then /usr/local/include so that every client on the same server uses the
> same source code. Is the scheme doable using Jave Script?
>
>         Thanks
>

If I'm reading you correctly, you are trying to give each site access
to the same javascript source for easy maintenance and code re-use.
If that is the case, then the simple answer is to make the js script
tag for each domain all refer to a single domain for js code:  script
src='http://master.example.com/js/path/to/script.js'

Any domain can load js across domain boundaries.  That is why
cross-site scripting can be problematic.

-- 
A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?


From cliff at pinestream.com  Tue Feb 12 07:15:37 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 12 Feb 2008 07:15:37 -0500
Subject: [nycphp-talk] Addcslashes bug
In-Reply-To: <8f0676b40802111830r2d994f45y46145a5f45d59ef8@mail.gmail.com>
Message-ID: <C3D6F819.CA3E%cliff@pinestream.com>

> This doesn't make sense.  How would a slashing failure lead to a parse
> error?  Parsing should always happen first.  Were you hacked?  Are you
> sure it isn't an unsafe include?

No eval() in the code.

PEAR Config writes a PHP array file like so:

<?php

$config = array(
  param1 => 'value',
  param2 => 'val'ue2',
  ...
);

The writing process is what failed to generate the backslash. The parsing
happens on subsequent page loads. The strange thing is that I have not been
able to reproduce the error and I looked the the PEAR Config code, which
does use addcslashes($val, "\\'").





From danielc at analysisandsolutions.com  Tue Feb 12 08:15:01 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Tue, 12 Feb 2008 08:15:01 -0500
Subject: [nycphp-talk] Addcslashes bug
In-Reply-To: <C3D6F819.CA3E%cliff@pinestream.com>
References: <8f0676b40802111830r2d994f45y46145a5f45d59ef8@mail.gmail.com>
	<C3D6F819.CA3E%cliff@pinestream.com>
Message-ID: <20080212131501.GA25847@panix.com>

Cliff:

On Tue, Feb 12, 2008 at 07:15:37AM -0500, Cliff Hirsch wrote:
> 
> PEAR Config writes a PHP array file like so:

Your earlier description of the error coming up out of the blue makes it 
sound like you're writing out configuration files on the fly.  Is that 
the case?  If so, why?  If not, please step back and explain exactly what 
your system is doing so we don't need to waste our time guessing.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From cliff at pinestream.com  Tue Feb 12 08:29:13 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 12 Feb 2008 08:29:13 -0500
Subject: [nycphp-talk] Addcslashes bug
In-Reply-To: <20080212131501.GA25847@panix.com>
Message-ID: <C3D70959.CA50%cliff@pinestream.com>

> On Tue, Feb 12, 2008 at 07:15:37AM -0500, Cliff Hirsch wrote:
>> PEAR Config writes a PHP array file like so:
> 
> Your earlier description of the error coming up out of the blue makes it
> sound like you're writing out configuration files on the fly.  Is that
> the case?  If so, why?  If not, please step back and explain exactly what
> your system is doing so we don't need to waste our time guessing.

Yes, I can update config files on the fly in the admin interface. PEAR
Config loads settings from an ini file. The admin can change various
settings as required (like turn debug on/off, error text description, and a
bazillion other parameters), which are then written back to the ini file as
well as a php array file. For speed, the main system reads setting from the
php array, not the ini.

PEAR Config is awesome for this -- handles many container types (ini, php
array, php define, etc). But why addcslash failed to insert that backslash
is still the mystery.




From hans at cyberxdesigns.com  Tue Feb 12 09:22:25 2008
From: hans at cyberxdesigns.com (Hans Kaspersetz)
Date: Tue, 12 Feb 2008 08:22:25 -0600
Subject: [nycphp-talk] SoapClient - Worthless?
In-Reply-To: <05a201c86bed$ea56aff0$bf040fd0$@com>
References: <024301c86a9b$98bae740$ca30b5c0$@com>	<200802090908.54342.arzala@gmail.com>
	<05a201c86bed$ea56aff0$bf040fd0$@com>
Message-ID: <47B1ABA1.5060203@cyberxdesigns.com>


>
> As it ends up, though, I've ended up eating these words, thanks to our
> friends over at MySQL.
>
> Through much debugging, I finally discovered that any socket connection
> to a https:// URL would cause the segfault - even something as simple as
> file_get_contents().
>
> Though not well described across the web, there is a symbol conflict in
> versions around MySQL 5.0.27 and OpenSSL.  Thus the segfault.  Upgrading
> to MySQL 5.051a and recompiling PHP against those client libs, and the
> problem mysteriously fixed itself.
>
> This isn't the first time odd symbol conflicts have happened with
> libmysqlclient.  I can't pin it down now, but I do remember a very
> similar issue not long ago.  Hopefully Sun can push some testing
> practices, even if it is for PHP.
>
> H
>
>
>   

We had a problem with Curl and PHP segfaulting with specific versions of 
MySQL.   Our troubles were on the 5.0.x  branch of MySQL and we ended up 
needing to regress from the latest for a while.  I think 5.0.36+ fixed 
the issues.  It was a real PITA to figure out and the only solution we 
found was to keep compiling versions of MySQL until we found the right one.

Hans K


From mitch.pirtle at gmail.com  Tue Feb 12 11:40:28 2008
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Tue, 12 Feb 2008 11:40:28 -0500
Subject: [nycphp-talk] Joomla Site Home Page Loading Slowly
In-Reply-To: <a9caffe50802100520t9dc8110sba6de99274fc1811@mail.gmail.com>
References: <a9caffe50802100520t9dc8110sba6de99274fc1811@mail.gmail.com>
Message-ID: <330532b60802120840j710e86aeyde153354015a4dcb@mail.gmail.com>

On Feb 10, 2008 8:20 AM, Randal Rust <randalrust at gmail.com> wrote:
>
> This morning, I noticed something very strange. The only page that
> seems to be loading slowly is the home page. If I type the URL of
> another page into the address bar, it will load with no problem at
> all.
>
> This is a Joomla 1.012e install. Is there anything that I should be
> looking at in an attempt to resolve this issue?

Latest release in the 1.0 series is 1.0.14, which has performance
tweaks, security fixes and some bug squashage. I'd consider running up
a parallel install of the site in another vhost, doing the upgrade and
seeing if that solves your issues - and even if not, you should test
to see if the upgrade was smooth, as you could probably use the added
security tweaks.

As for your front page issues, you need to take a look at what modules
are included on the front page only of the site. Chances are, you got
a module that is trying to fetch a remote resource (RSS feed maybe?)
and is simply timing out on you, blocking the page from finishing the
download (and render) to the browser.

-- Mitch


From randalrust at gmail.com  Tue Feb 12 11:48:06 2008
From: randalrust at gmail.com (Randal Rust)
Date: Tue, 12 Feb 2008 11:48:06 -0500
Subject: [nycphp-talk] Joomla Site Home Page Loading Slowly
In-Reply-To: <330532b60802120840j710e86aeyde153354015a4dcb@mail.gmail.com>
References: <a9caffe50802100520t9dc8110sba6de99274fc1811@mail.gmail.com>
	<330532b60802120840j710e86aeyde153354015a4dcb@mail.gmail.com>
Message-ID: <a9caffe50802120848q42760eacraaca8cd05bcf5ba7@mail.gmail.com>

On Tue, Feb 12, 2008 at 11:40 AM, Mitch Pirtle <mitch.pirtle at gmail.com> wrote:

>  As for your front page issues, you need to take a look at what modules
>  are included on the front page only of the site.

And that's what it turned out to be. The site was using the zweather
module. As soon as I turned it off, everything started running
smoothly.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From rmarscher at beaffinitive.com  Tue Feb 12 13:54:39 2008
From: rmarscher at beaffinitive.com (Rob Marscher)
Date: Tue, 12 Feb 2008 13:54:39 -0500
Subject: [nycphp-talk] Addcslashes bug
In-Reply-To: <C3D64702.CA01%cliff@pinestream.com>
References: <C3D64702.CA01%cliff@pinestream.com>
Message-ID: <78C67709-4806-4BC5-94A6-CF97B8233A31@beaffinitive.com>

Cliff Hirsch wrote:
> I had a very strange error, catastrophic yesterday.
> PEAR Config writes a PHP array file like so:
>
> <?php
>
> $config = array(
>  param1 => 'value',
>  param2 => 'val'ue2',
>  ...
> );
>
> The writing process is what failed to generate the backslash. The  
> parsing
> happens on subsequent page loads. The strange thing is that I have  
> not been
> able to reproduce the error and I looked the the PEAR Config code,  
> which
> does use addcslashes($val, "\\'").
> addcslashes failed to put a slash in front of a single quote. Can  
> anyone imagine how this could happen? Is it possible it didn?t catch  
> a multi-byte character? Am I back to charset issues?
Yeah... weird.  I'm not terribly familiar with addcslashes or PEAR  
Config... but I do write a config file in a similar way to you...  
except I use smarty to write it and use the {$var|escape:'quotes'}  
modifier.  I'm looking at the code for that modifier and it uses this  
odd regular expression:

preg_replace("%(?<!\\\\)'%", "\\'", $string);

> Unfortunately, I can?t reproduce the error.
You tried a resave of your config with the same exact settings and it  
worked?  I dunno.  Is there anything else that could possible modify  
your config file?  Or anyway that PEAR Config can write something  
without passing it through addcslashes?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080212/8f8dae8f/attachment.html>

From matteo.rinaudo at gmail.com  Tue Feb 12 15:27:57 2008
From: matteo.rinaudo at gmail.com (Matteo Rinaudo)
Date: Tue, 12 Feb 2008 15:27:57 -0500
Subject: [nycphp-talk] Addcslashes bug
In-Reply-To: <78C67709-4806-4BC5-94A6-CF97B8233A31@beaffinitive.com>
References: <C3D64702.CA01%cliff@pinestream.com>
	<78C67709-4806-4BC5-94A6-CF97B8233A31@beaffinitive.com>
Message-ID: <e2bdf8970802121227n2eeb8332k82c97bf59aa64117@mail.gmail.com>

> addcslashes failed to put a slash in front of a single quote. Can anyone
> imagine how this could happen? Is it possible it didn't catch a multi-byte
> character? Am I back to charset issues?

I would guess: was the single quote something different than the
standard single quote, like a very similar symbol but with an ASCII
code greater than 127 that wouldn't be caught in the character range
you specified for addcslashes() ?
Were some inputs coming from some documents edited with word
processors where you would have used this kind of characters?

Matteo Rinaudo


From ameseguer at gmail.com  Tue Feb 12 16:39:10 2008
From: ameseguer at gmail.com (=?ISO-8859-1?Q?@ndr=E9s?=)
Date: Tue, 12 Feb 2008 15:39:10 -0600
Subject: [nycphp-talk] Favorite js tooltip?
In-Reply-To: <c5949a380802111943u75d9a347s3660636405bad5e@mail.gmail.com>
References: <C3D64194.C9FE%cliff@pinestream.com>
	<c5949a380802111943u75d9a347s3660636405bad5e@mail.gmail.com>
Message-ID: <2d0b1cd70802121339k59db3f03q8aa680b4d2c7fe6e@mail.gmail.com>

I personally prefer css-tooltips over js tool tips. They are lighter,faster
and almost as cool

On Feb 11, 2008 9:43 PM, Edward Potter <edwardpotter at gmail.com> wrote:

> I think jquery pretty much took over in the JS world (IMHO), just
> google that with tool tips, you'll find lots of examples.
>
> :-)  ed
>
>
>
> On Feb 11, 2008 6:16 PM, Cliff Hirsch <cliff at pinestream.com> wrote:
> >
> >  Does anyone have a favorite javascript tooltip utility? Ideally,
> something
> > based on jQuery.
> >
> >  Cliff
> >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
>
>
>
> --
> IM/iChat: ejpusa
> Links: http://del.icio.us/ejpusa
> Blog: http://www.utopiaparkway.com
> Follow me: http://www.twitter.com/ejpusa
> Karma: http://www.coderswithconscience.com
> Projects: http://flickr.com/photos/86842405 at N00/
> Store: http://astore.amazon.com/httpwwwutopic-20
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



-- 
Andr?s Meseguer Rojas
          http://www.ic-itcr.ac.cr/about/ameseguer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080212/bf7b5d24/attachment.html>

From cliff at pinestream.com  Tue Feb 12 16:53:12 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 12 Feb 2008 16:53:12 -0500
Subject: [nycphp-talk] Favorite js tooltip?
In-Reply-To: <2d0b1cd70802121339k59db3f03q8aa680b4d2c7fe6e@mail.gmail.com>
Message-ID: <C3D77F78.CAB7%cliff@pinestream.com>

On Feb 11, 2008 9:43 PM, Edward Potter <edwardpotter at gmail.com> wrote:
>> I think jquery pretty much took over in the JS world (IMHO), just
>> google that with tool tips, you'll find lots of examples.
>> 
>> :-)  ed

On 2/12/08 4:39 PM, "@ndr?s" <ameseguer at gmail.com> wrote:

> I personally prefer css-tooltips over js tool tips. They are lighter,faster
> and almost as cool
> 
> Do you have an example? I implemented jQuery tooltip today, and its pretty
> slick.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080212/59a34ca1/attachment.html>

From ajai at bitblit.net  Tue Feb 12 17:26:33 2008
From: ajai at bitblit.net (Ajai Khattri)
Date: Tue, 12 Feb 2008 17:26:33 -0500 (EST)
Subject: [nycphp-talk] Favorite js tooltip?
In-Reply-To: <2d0b1cd70802121339k59db3f03q8aa680b4d2c7fe6e@mail.gmail.com>
Message-ID: <Pine.LNX.4.44.0802121726150.11139-100000@bitblit.net>

On Tue, 12 Feb 2008, @ndr?s wrote:

> I personally prefer css-tooltips over js tool tips. They are lighter,faster
> and almost as cool


How about? http://trentrichardson.com/examples/csstooltips/


-- 
Aj.



From danielc at analysisandsolutions.com  Tue Feb 12 18:22:25 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Tue, 12 Feb 2008 18:22:25 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <003e01c864ff$b6164510$2242cf30$@com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<47A305A6.6050206@gmx.net>
	<e065b8610802010622l7898a41dx802e3bc4bbd840d5@mail.gmail.com>
	<001d01c864eb$3cabe6d0$b603b470$@com>
	<b76252690802011000k4d550bccq9e3043d3d4aa1a77@mail.gmail.com>
	<003e01c864ff$b6164510$2242cf30$@com>
Message-ID: <20080212232224.GA5345@panix.com>

Peter:

> while it was google that non-standardly JS'd, ajaxed, custom API'd 
> and gadgeted their way to monster acceptance

First, Google works just fine for folks with JavaScript turned off.

Second, the search engine and advertising prowess has more to do with 
their success than their JavaScript mojo.

--Dan

... snipping ...  a novel concept ...

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From SHalter at ThorntonTomasetti.com  Tue Feb 12 19:22:04 2008
From: SHalter at ThorntonTomasetti.com (Halter, Shari)
Date: Tue, 12 Feb 2008 19:22:04 -0500
Subject: [nycphp-talk] OT -Registration Open for GoRuCo 2008-
References: <20080212133333.4149B110229@mx1.thorntontomasetti.com>
Message-ID: <20080213002700.54BFB1104F1@mx1.thorntontomasetti.com>

 


Registration is now open for Gotham Ruby Conference [GoRuCo] 2008, a
one-day, single-track technical conference, aimed at highly motivated
programmers, in New York City and dedicated to everything Ruby. 

The conference will be held on 

Saturday, April 26th at the Manhattan campus of Pace University.

Registration is $125 per person and includes lunch. 

Based on last year's enthusiastic response, we expect this conference to
sell out, so purchase your tickets early!

Register here:

http://goruco2008.eventwax.com/gotham-ruby-conference-goruco-2008/regist
er

 

GoRuCo 2008 Speakers:

Giles Bowkett 
Archaeopteryx: A Ruby MIDI Generator

Paul Dix 
Collective Intelligence: Leveraging User Data to Create Intelligent
Rails Applications

Bryan Helmkamp 
Story Driven Development: The Next Generation of Rails Functional
Testing

Alex Payne 
Twitter

Chris Wanstrath 
Forbidden Fruit: A Taste of Ruby's Parse Tree

Ezra Zygmuntowicz 
Merb, All you need, None you don't

 

For more information, visit :    http://2008.goruco.com/


 
 
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
The information in this email and any attachments may contain
confidential information that is intended solely for the
attention and use of the named addressee(s). This message or
any part thereof must not be disclosed, copied, distributed
or retained by any person without authorization from the
addressee. If you are not the intended addressee, please
notify the sender immediately, and delete this message.
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>



From edwardpotter at gmail.com  Tue Feb 12 21:10:01 2008
From: edwardpotter at gmail.com (Edward Potter)
Date: Tue, 12 Feb 2008 21:10:01 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
Message-ID: <c5949a380802121810s431228d2pda74dd22c2fd9658@mail.gmail.com>

JQUERY!  It does everything, EVERY php coder should be looking at it.  :-)
ed


On Feb 1, 2008 3:05 AM, Michael B Allen <ioplex at gmail.com> wrote:

> I'm familiar with DOM, DHTML, JavaScript, etc but I'm not sure what
> the best way to do dynamic forms is.
>
> Basically I just want to dynamically insert or remove one element in a
> form. The form is normally just a select with a submit button
> immediately to it's right. But depending on what option in the select
> is selected, I want another select to be inserted between the first
> select and the button.
>
> So it's either <select1><button> or <select1><select2><button>.
>
> I would be perfectly happy with toggling the style visibility: visible
> or visibility: hidden but this doesn't change the position of the
> button. It always appears off to the right. I want the form to
> re-pack.
>
> Or should I use DOM calls?
>
> What's the best, most portable way to do this?
>
> Mike
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



-- 
IM/iChat: ejpusa
Links: http://del.icio.us/ejpusa
Blog: http://www.utopiaparkway.com
Follow me: http://www.twitter.com/ejpusa
Karma: http://www.coderswithconscience.com
Projects: http://flickr.com/photos/86842405 at N00/
Store: http://astore.amazon.com/httpwwwutopic-20
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080212/0bf1da52/attachment.html>

From ps at sun-code.com  Wed Feb 13 05:38:19 2008
From: ps at sun-code.com (Peter Sawczynec)
Date: Wed, 13 Feb 2008 05:38:19 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <20080212232224.GA5345@panix.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>	<47A305A6.6050206@gmx.net>	<e065b8610802010622l7898a41dx802e3bc4bbd840d5@mail.gmail.com>	<001d01c864eb$3cabe6d0$b603b470$@com>	<b76252690802011000k4d550bccq9e3043d3d4aa1a77@mail.gmail.com>	<003e01c864ff$b6164510$2242cf30$@com>
	<20080212232224.GA5345@panix.com>
Message-ID: <000a01c86e2c$8cc6bbf0$a65433d0$@com>

Well, then even more power to google for their overall innovation. 

But, my points when I am in a backwards compatibility discussion is not
about the literal code and compatibility issues, instead I am trying to
make the point that I feel that there is major benefit to be found in
innovating with code and not simply conforming the existent code to be
ever more compatible with the way things used to work in the past and
are every moment becoming ever more rapidly even more irrelevant. 

And I agree again, google's real success was not in their highhanded
technical code prowess, but it was in their "invention." They made
search a valuable modern tool in fresh ways. They massified the
potential of targeted advertising on the web better than how it had been
done before. 

So my central point(s) remains that programming innovation is more
important and should always be a larger ongoing vital concern than
backwards compatibility. 

Users, consumers, businesses and their clients are always willing to
innovate with you even at tremendous temporary inconvenience and cost.
Entire governments will change international legislation to match the
rise of innovation(s) (like HD TV, fiber optics, DVDs, GPS, electronic
payments, digital photography  << there's no backwards compatibility in
here. go ahead, go use a paper check at the grocery store to pay for
your shopping).

And it seems to me that all initially nonbackwards compatible
innovations are ultimately tailored for special access needs and then
those with special access needs gain improved access and improved
lifestyle too.

Let us evaluate this thought. Do those with special access needs want to
hear: a) hey, you are going to browse the web with up and down arrows
keys on a Netscape 1.0 compatible browser because all web experiences
have been stepped down to meet text and hyperlink only 1993-style tech
levels. Or would they rather be told: b) hey, you are going to browse
the web with a modern innovative browser hybrid product that can read
and speak aloud specially prepared web pages, can react to your spoken
word input and understands the gesticulations of a wireless air mouse.  

So coder, innovation first. Even in something as humble as JavaScript
technique.

Warmest regards, 
?
Peter Sawczynec 
Technology Dir.
Sun-code Interactive
Sun-code.com 
646.316.3678 
ps at sun-code.com



-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Daniel Convissor
Sent: Tuesday, February 12, 2008 6:22 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] Dynamic Form Elements

Peter:

> while it was google that non-standardly JS'd, ajaxed, custom API'd 
> and gadgeted their way to monster acceptance

First, Google works just fine for folks with JavaScript turned off.

Second, the search engine and advertising prowess has more to do with 
their success than their JavaScript mojo.

--Dan

... snipping ...  a novel concept ...

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php



From randalrust at gmail.com  Wed Feb 13 08:23:58 2008
From: randalrust at gmail.com (Randal Rust)
Date: Wed, 13 Feb 2008 08:23:58 -0500
Subject: [nycphp-talk] Dynamic Form Elements
In-Reply-To: <000a01c86e2c$8cc6bbf0$a65433d0$@com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<47A305A6.6050206@gmx.net>
	<e065b8610802010622l7898a41dx802e3bc4bbd840d5@mail.gmail.com>
	<001d01c864eb$3cabe6d0$b603b470$@com>
	<b76252690802011000k4d550bccq9e3043d3d4aa1a77@mail.gmail.com>
	<003e01c864ff$b6164510$2242cf30$@com>
	<20080212232224.GA5345@panix.com>
	<000a01c86e2c$8cc6bbf0$a65433d0$@com>
Message-ID: <a9caffe50802130523k201b638cube0f6e87201ce420@mail.gmail.com>

On Wed, Feb 13, 2008 at 5:38 AM, Peter Sawczynec <ps at sun-code.com> wrote:

>  programming innovation is more
>  important and should always be a larger ongoing vital concern than
>  backwards compatibility.

It depends on what the crux of your business is. If you need to create
the next great software package (be it web-based or desktop) then you
need to do product development. This is the realm where programming
innovation fits perfectly. Google is in the business of providing
people with access to (quality) content. This is why their online
tools (Docs, Maps, etc.) all fit into that overall plan. It's also why
AdWords is not strictly based on bid price. That speaks directly to
the prowess that Dan mentioned.

>  Let us evaluate this thought. Do those with special access needs want to hear:

Take that statement and look at it a different way.

Do users want to hear what technology they should have to use to browse the web?

Absolutely not.

As a webmaster, consultant, developer or designer the overriding
guideline of the web is that it is a user-centered medium, unlike any
of the other content-delivery mediums. The user has total control over
display, format and access.

So it becomes a case of market analysis and study of your audience,
which really isn't too difficult if you are using Google Analytics. Or
if you just pay attention to what is going on all around you. We are
increasingly becoming a point-and-click world, because people simply
don't want to waste time searching a website for information. That's
what they depend on Google and other SEs for.

Technical innovation is fantastic -- if it simplifies a process --
especially when it comes to the web.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From ioplex at gmail.com  Wed Feb 13 17:08:06 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Wed, 13 Feb 2008 17:08:06 -0500
Subject: [nycphp-talk] linebreak not emitted after ?>
Message-ID: <78c6bd860802131408n2b32726as83ccac9f4a99d2c8@mail.gmail.com>

This is just a curious question but consider the following trivial script:

#!/usr/bin/php -q
<?php
echo 'hello';
?>
end

Why does this ouput:

$ ./test.php
helloend

and not:

$ ./test.php
hello
end

Meaning the linebreak after the ?> is not emitted.

Is there some kind of special rule about this or is it just a quirk?

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/


From chsnyder at gmail.com  Wed Feb 13 17:12:03 2008
From: chsnyder at gmail.com (csnyder)
Date: Wed, 13 Feb 2008 17:12:03 -0500
Subject: [nycphp-talk] linebreak not emitted after ?>
In-Reply-To: <78c6bd860802131408n2b32726as83ccac9f4a99d2c8@mail.gmail.com>
References: <78c6bd860802131408n2b32726as83ccac9f4a99d2c8@mail.gmail.com>
Message-ID: <b76252690802131412m7ceec408s4e98726859536a26@mail.gmail.com>

On Feb 13, 2008 5:08 PM, Michael B Allen <ioplex at gmail.com> wrote:
>
> Meaning the linebreak after the ?> is not emitted.
>
> Is there some kind of special rule about this or is it just a quirk?
>

The character following ?> is always truncated.

If you want the line-break, put a single space after ?>.

-- 
Chris Snyder
http://chxo.com/


From lists at zaunere.com  Wed Feb 13 17:12:47 2008
From: lists at zaunere.com (Hans Zaunere)
Date: Wed, 13 Feb 2008 17:12:47 -0500
Subject: [nycphp-talk] linebreak not emitted after ?>
In-Reply-To: <78c6bd860802131408n2b32726as83ccac9f4a99d2c8@mail.gmail.com>
References: <78c6bd860802131408n2b32726as83ccac9f4a99d2c8@mail.gmail.com>
Message-ID: <03d601c86e8d$90857a90$b1906fb0$@com>

> This is just a curious question but consider the following trivial
> script:
> 
> #!/usr/bin/php -q
> <?php
> echo 'hello';
> ?>
> end
> 
> Why does this ouput:
> 
> $ ./test.php
> helloend
> 
> and not:
> 
> $ ./test.php
> hello
> end
> 
> Meaning the linebreak after the ?> is not emitted.
> 
> Is there some kind of special rule about this or is it just a quirk?

This is a "feature" - there's some reason they did it like this, although I
can't locate it.  If you put a space after the ?> the line break will be
preserved.

H




From ashaw at polymerdb.org  Wed Feb 13 17:17:47 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Wed, 13 Feb 2008 16:17:47 -0600
Subject: [nycphp-talk] linebreak not emitted after ?>
In-Reply-To: <78c6bd860802131408n2b32726as83ccac9f4a99d2c8@mail.gmail.com>
References: <78c6bd860802131408n2b32726as83ccac9f4a99d2c8@mail.gmail.com>
Message-ID: <47B36C8B.4070209@polymerdb.org>

Michael B Allen wrote:
> the linebreak after the ?> is not emitted.
>
> Is there some kind of special rule about this or is it just a quirk?
>   
Part of PHP syntax.  
<http://www.php.net/manual/en/language.basic-syntax.php> says:
"when PHP hits the ?> closing tags, it simply starts outputting whatever 
it finds (except for an immediately following newline - see instruction 
separation) until it hits another opening tag"

Not that I can tell you /why/ they do it this way.

- Allen


-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From jcampbell1 at gmail.com  Wed Feb 13 17:51:43 2008
From: jcampbell1 at gmail.com (John Campbell)
Date: Wed, 13 Feb 2008 17:51:43 -0500
Subject: [nycphp-talk] linebreak not emitted after ?>
In-Reply-To: <47B36C8B.4070209@polymerdb.org>
References: <78c6bd860802131408n2b32726as83ccac9f4a99d2c8@mail.gmail.com>
	<47B36C8B.4070209@polymerdb.org>
Message-ID: <8f0676b40802131451j791d460ai74bf4406a7127e72@mail.gmail.com>

On Feb 13, 2008 5:17 PM, Allen Shaw <ashaw at polymerdb.org> wrote:
> Michael B Allen wrote:
> > the linebreak after the ?> is not emitted.
> >
> > Is there some kind of special rule about this or is it just a quirk?
> >
> Part of PHP syntax.
> <http://www.php.net/manual/en/language.basic-syntax.php> says:
> "when PHP hits the ?> closing tags, it simply starts outputting whatever
> it finds (except for an immediately following newline - see instruction
> separation) until it hits another opening tag"
>
> Not that I can tell you /why/ they do it this way.
>

This "feature" was implemented to avoid "output already started" error
messages caused by text editors that auto-append a newline at the end
of the file.

John C.


From anoland at indigente.net  Thu Feb 14 09:50:01 2008
From: anoland at indigente.net (Adrian Noland)
Date: Thu, 14 Feb 2008 09:50:01 -0500
Subject: [nycphp-talk] NowDocs in next release of PHP
Message-ID: <1d8a0e930802140650s2d30c171v2c9c19daf95a468@mail.gmail.com>

Read about it here:

http://blogs.oracle.com/opal/discuss/msgReader$269
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080214/08070f99/attachment.html>

From cliff at pinestream.com  Thu Feb 14 12:33:10 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Thu, 14 Feb 2008 12:33:10 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
Message-ID: <C3D9E586.CBD4%cliff@pinestream.com>

NYPhP:

I have been holding off on this, waiting until things are ?perfect?, but
finally realized that could be an eternity. So...

Kerbeaz went live on Monday. I thought the hard part was behind me, but now
the true adventure begins ? building traffic.

Check out the site. Try creating a task as a performer or sponsor. Would
love to receive any and all feedback ? don?t be shy; don?t hold back! Based
on the few users that have tried it so far, I have a laundry list of things
to do, ranging from a new splash page, to more merchandise (of course), to
bug fixes, new features, etc. The kids are the easy ones ? walking my father
through it was pure torture:

Dad: ?I never received a confirmation email after registering?
Me:   ?Duh, you registered using Mom?s email?
Dad: ?How come Abby never responded?
Me:  ?You misspelled her email address?
Me:  ?Why did you make the reward 1 point? That?s one penny. What were you
thinking??
...
...

Targeting seniors ? what was I thinking?

Most importantly....

Thank you NYPhP. If you hadn?t noticed, I ask a question or two...now ?n
then....  There is no way I could have accomplished this without your
support. Everyone makes a big deal about open source. Well, the reality is
it?s not open source that matters, it?s the community support that is the
backbone of open source. The level of sharing and support is truly
inspirational. I?d love to repay whoever I can. Next time I?m in NY, the
beers are on me. And if any of you plan to visit Boston for Drupalcon, to
heckle us over the upset (we all know what that refers to now ? right. No
need to further rub it in), or for any other reason, please look me up.

Many thanks,
Cliff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080214/e60c998f/attachment.html>

From chsnyder at gmail.com  Thu Feb 14 13:38:49 2008
From: chsnyder at gmail.com (csnyder)
Date: Thu, 14 Feb 2008 13:38:49 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <C3D9E586.CBD4%cliff@pinestream.com>
References: <C3D9E586.CBD4%cliff@pinestream.com>
Message-ID: <b76252690802141038p4300845cwf69ea72e6dad7602@mail.gmail.com>

On Thu, Feb 14, 2008 at 12:33 PM, Cliff Hirsch <cliff at pinestream.com> wrote:

>  Kerbeaz went live on Monday. I thought the hard part was behind me, but now
> the true adventure begins ? building traffic.

http://www.kerbeaz.com/ for the curious...

Congrats, Cliff. Zippy site, interesting idea.
Did you end up using a framework, or did you roll your own?


-- 
Chris Snyder
http://chxo.com/

From codebowl at gmail.com  Thu Feb 14 13:48:07 2008
From: codebowl at gmail.com (Joseph Crawford)
Date: Thu, 14 Feb 2008 13:48:07 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <b76252690802141038p4300845cwf69ea72e6dad7602@mail.gmail.com>
References: <C3D9E586.CBD4%cliff@pinestream.com>
	<b76252690802141038p4300845cwf69ea72e6dad7602@mail.gmail.com>
Message-ID: <42D36BC4-11DD-49F4-9075-96EEF9AB4681@gmail.com>

That is an interesting idea now you just have to get the rich folk  
with too much money on there to reward for stuff.  seriously someone  
want to pay me to brush my dog everyday for a week, ill take it lol.

It is an interesting idea and I hope it takes off.

Joseph Crawford

On Feb 14, 2008, at 1:38 PM, csnyder wrote:

> On Thu, Feb 14, 2008 at 12:33 PM, Cliff Hirsch  
> <cliff at pinestream.com> wrote:
>
>> Kerbeaz went live on Monday. I thought the hard part was behind me,  
>> but now
>> the true adventure begins ? building traffic.
>
> http://www.kerbeaz.com/ for the curious...
>
> Congrats, Cliff. Zippy site, interesting idea.
> Did you end up using a framework, or did you roll your own?
>
>
> -- 
> Chris Snyder
> http://chxo.com/
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php



From cliff at pinestream.com  Thu Feb 14 14:03:33 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Thu, 14 Feb 2008 14:03:33 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <b76252690802141038p4300845cwf69ea72e6dad7602@mail.gmail.com>
Message-ID: <C3D9FAB5.CBE4%cliff@pinestream.com>

> traffic.

http://www.kerbeaz.com/ for the curious...

Congrats, Cliff. Zippy
> site, interesting idea.
Did you end up using a framework, or did you roll your
> own?


-- 
Chris Snyder
http://chxo.com/


No framework...was too deep into it to shift to one. Perhaps for rev 2.x

But when I knew zero about this stuff, I was fortunate to pick up Beginning
PHP & MySQL eCommerce, an Apress book, which advocated a 3 layer
architecture with a front-end controller. Although one strategy in the book
was way off base, at the 30K level it got me off on the right track.




From cliff at pinestream.com  Thu Feb 14 14:04:34 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Thu, 14 Feb 2008 14:04:34 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <42D36BC4-11DD-49F4-9075-96EEF9AB4681@gmail.com>
Message-ID: <C3D9FAF3.CBE5%cliff@pinestream.com>

On 2/14/08 1:48 PM, "Joseph Crawford" <codebowl at gmail.com> wrote:
> That is an interesting idea now you just have to get the rich folk
> with too much money on there to reward for stuff.  seriously someone
> want to pay me to brush my dog everyday for a week, ill take it lol.

I'm hoping those are called grandparents!




From codebowl at gmail.com  Thu Feb 14 14:36:25 2008
From: codebowl at gmail.com (Joseph Crawford)
Date: Thu, 14 Feb 2008 14:36:25 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <C3D9FAF3.CBE5%cliff@pinestream.com>
References: <C3D9FAF3.CBE5%cliff@pinestream.com>
Message-ID: <695DD48E-9AF4-4DB8-ABDF-F03DC5B898C2@gmail.com>

nah i think the name cliff came up somewhere :)

On Feb 14, 2008, at 2:04 PM, Cliff Hirsch wrote:

> On 2/14/08 1:48 PM, "Joseph Crawford" <codebowl at gmail.com> wrote:
>> That is an interesting idea now you just have to get the rich folk
>> with too much money on there to reward for stuff.  seriously someone
>> want to pay me to brush my dog everyday for a week, ill take it lol.
>
> I'm hoping those are called grandparents!
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php



From cliff at pinestream.com  Thu Feb 14 15:04:33 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Thu, 14 Feb 2008 15:04:33 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <695DD48E-9AF4-4DB8-ABDF-F03DC5B898C2@gmail.com>
Message-ID: <C3DA0901.CBF9%cliff@pinestream.com>

On 2/14/08 2:36 PM, "Joseph Crawford" <codebowl at gmail.com> wrote:
> nah i think the name cliff came up somewhere :)

No way! That's the whole point. I keep telling my kids, I'm tapped -- look
elsewhere...




From lists at zaunere.com  Thu Feb 14 16:01:07 2008
From: lists at zaunere.com (Hans Zaunere)
Date: Thu, 14 Feb 2008 16:01:07 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <b76252690802141038p4300845cwf69ea72e6dad7602@mail.gmail.com>
References: <C3D9E586.CBD4%cliff@pinestream.com>
	<b76252690802141038p4300845cwf69ea72e6dad7602@mail.gmail.com>
Message-ID: <01c001c86f4c$b82f62d0$288e2870$@com>


> >  Kerbeaz went live on Monday. I thought the hard part was behind me, but now
> > the true adventure begins ? building traffic.
> 
> http://www.kerbeaz.com/ for the curious...

Good stuff Cliff.

You may want to checkout a couple of the "technical" meetups, especially this one:

http://newtech.meetup.com/

I know there's 4k+ on the NYC chapter of that group.

H




From cliff at pinestream.com  Thu Feb 14 16:10:41 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Thu, 14 Feb 2008 16:10:41 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <01c001c86f4c$b82f62d0$288e2870$@com>
Message-ID: <C3DA1881.CC1E%cliff@pinestream.com>

>>>  Kerbeaz went live on Monday. I thought the hard part was behind me, but now
>>> the true adventure begins ? building traffic.
>> 
>> http://www.kerbeaz.com/ for the curious...
> 
> Good stuff Cliff.
> 
> You may want to checkout a couple of the "technical" meetups, especially this
> one:
> 
> http://newtech.meetup.com/
> 
> I know there's 4k+ on the NYC chapter of that group.

Thanks. That's a great idea. In Boston we have a Web Innovators Group
http://www.webinnovatorsgroup.com/ , which is run by a local VC firm. But I
previously hadn't heard of "technical" meetups -- great idea.

It's amazing how scaling up from 1 or 2 users to just a dozen or so has
already generated a page-long todo list.




From edwardpotter at gmail.com  Thu Feb 14 16:11:44 2008
From: edwardpotter at gmail.com (Edward Potter)
Date: Thu, 14 Feb 2008 16:11:44 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <C3D9E586.CBD4%cliff@pinestream.com>
References: <C3D9E586.CBD4%cliff@pinestream.com>
Message-ID: <c5949a380802141311k4ffd4451x84656be8c343d929@mail.gmail.com>

The "perfect" is the enemy of the good.  Programmers rule number 1.  :-)  ed


On Thu, Feb 14, 2008 at 12:33 PM, Cliff Hirsch <cliff at pinestream.com> wrote:

>  NYPhP:
>
> I have been holding off on this, waiting until things are "perfect", but
> finally realized that could be an eternity. So...
>
> Kerbeaz went live on Monday. I thought the hard part was behind me, but
> now the true adventure begins ? building traffic.
>
> Check out the site. Try creating a task as a performer or sponsor. Would
> love to receive any and all feedback ? don't be shy; don't hold back! Based
> on the few users that have tried it so far, I have a laundry list of things
> to do, ranging from a new splash page, to more merchandise (of course), to
> bug fixes, new features, etc. The kids are the easy ones ? walking my father
> through it was pure torture:
>
> Dad: "I never received a confirmation email after registering"
> Me:   "Duh, you registered using Mom's email"
> Dad: "How come Abby never responded?
> Me:  "You misspelled her email address"
> Me:  "Why did you make the reward 1 point? That's one penny. What were you
> thinking?"
> ...
> ...
>
> Targeting seniors ? what was I thinking?
>
> Most importantly....
>
> Thank you NYPhP. If you hadn't noticed, I ask a question or two...now 'n
> then....  There is no way I could have accomplished this without your
> support. Everyone makes a big deal about open source. Well, the reality is
> it's not open source that matters, it's the community support that is the
> backbone of open source. The level of sharing and support is truly
> inspirational. I'd love to repay whoever I can. Next time I'm in NY, the
> beers are on me. And if any of you plan to visit Boston for Drupalcon, to
> heckle us over the upset (we all know what that refers to now ? right. No
> need to further rub it in), or for any other reason, please look me up.
>
> Many thanks,
> Cliff
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



-- 
IM/iChat: ejpusa
Links: http://del.icio.us/ejpusa
Blog: http://www.utopiaparkway.com
Follow me: http://www.twitter.com/ejpusa
Karma: http://www.coderswithconscience.com
Projects: http://flickr.com/photos/86842405 at N00/
Store: http://astore.amazon.com/httpwwwutopic-20
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080214/9fb2f3e9/attachment.html>

From ben at projectskyline.com  Thu Feb 14 16:23:33 2008
From: ben at projectskyline.com (Ben Sgro)
Date: Thu, 14 Feb 2008 16:23:33 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <C3D9E586.CBD4%cliff@pinestream.com>
References: <C3D9E586.CBD4%cliff@pinestream.com>
Message-ID: <47B4B155.4060200@projectskyline.com>

Nice work Cliff,

/me raises glass
To your continued success!

- Ben

Cliff Hirsch wrote:
> NYPhP:
>
> I have been holding off on this, waiting until things are ?perfect?, 
> but finally realized that could be an eternity. So...
>
> Kerbeaz went live on Monday. I thought the hard part was behind me, 
> but now the true adventure begins ? building traffic.
>
> Check out the site. Try creating a task as a performer or sponsor. 
> Would love to receive any and all feedback ? don?t be shy; don?t hold 
> back! Based on the few users that have tried it so far, I have a 
> laundry list of things to do, ranging from a new splash page, to more 
> merchandise (of course), to bug fixes, new features, etc. The kids are 
> the easy ones ? walking my father through it was pure torture:
>
> Dad: ?I never received a confirmation email after registering?
> Me: ?Duh, you registered using Mom?s email?
> Dad: ?How come Abby never responded?
> Me: ?You misspelled her email address?
> Me: ?Why did you make the reward 1 point? That?s one penny. What were 
> you thinking??
> ...
> ...
>
> Targeting seniors ? what was I thinking?
>
> Most importantly....
>
> Thank you NYPhP. If you hadn?t noticed, I ask a question or two...now 
> ?n then.... There is no way I could have accomplished this without 
> your support. Everyone makes a big deal about open source. Well, the 
> reality is it?s not open source that matters, it?s the community 
> support that is the backbone of open source. The level of sharing and 
> support is truly inspirational. I?d love to repay whoever I can. Next 
> time I?m in NY, the beers are on me. And if any of you plan to visit 
> Boston for Drupalcon, to heckle us over the upset (we all know what 
> that refers to now ? right. No need to further rub it in), or for any 
> other reason, please look me up.
>
> Many thanks,
> Cliff
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php


From rolan at omnistep.com  Thu Feb 14 21:43:37 2008
From: rolan at omnistep.com (Rolan Yang)
Date: Thu, 14 Feb 2008 21:43:37 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <C3D9E586.CBD4%cliff@pinestream.com>
References: <C3D9E586.CBD4%cliff@pinestream.com>
Message-ID: <47B4FC59.2010506@omnistep.com>

Cliff Hirsch wrote:
> NYPhP:
>
> I have been holding off on this, waiting until things are ?perfect?, 
> but finally realized that could be an eternity. So...
>
> Kerbeaz went live on Monday. I thought the hard part was behind me, 
> but now the true adventure begins ? building traffic.
>
> ...
>
> Many thanks,
> Cliff 

You didn't mention the website address, but I guess most people who 
assume it to be kerbeaz.com.
What an interesting concept. I didn't quite get it a first, but after 
browsing around and reading the "About" section, it became clearer.
Now, if I could only figure a way of using the Kerbeaz site to curb my 
internet addiction :)

~Rolan



From ken at secdat.com  Fri Feb 15 09:24:22 2008
From: ken at secdat.com (Kenneth Downs)
Date: Fri, 15 Feb 2008 09:24:22 -0500
Subject: Meeting Topics (Was [nycphp-talk] Dynamic Form Elements)
In-Reply-To: <c5949a380802121810s431228d2pda74dd22c2fd9658@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<c5949a380802121810s431228d2pda74dd22c2fd9658@mail.gmail.com>
Message-ID: <47B5A096.3030507@secdat.com>

I'm wondering if we might have some meetings that go over some of these 
nifty javascript frameworks like dojo and extjs and jquery.

Edward Potter wrote:
> JQUERY!  It does everything, EVERY php coder should be looking at it.  
> :-)  ed
>
>
> On Feb 1, 2008 3:05 AM, Michael B Allen <ioplex at gmail.com 
> <mailto:ioplex at gmail.com>> wrote:
>
>     I'm familiar with DOM, DHTML, JavaScript, etc but I'm not sure what
>     the best way to do dynamic forms is.
>
>     Basically I just want to dynamically insert or remove one element in a
>     form. The form is normally just a select with a submit button
>     immediately to it's right. But depending on what option in the select
>     is selected, I want another select to be inserted between the first
>     select and the button.
>
>     So it's either <select1><button> or <select1><select2><button>.
>
>     I would be perfectly happy with toggling the style visibility: visible
>     or visibility: hidden but this doesn't change the position of the
>     button. It always appears off to the right. I want the form to
>     re-pack.
>
>     Or should I use DOM calls?
>
>     What's the best, most portable way to do this?
>
>     Mike
>     _______________________________________________
>     New York PHP Community Talk Mailing List
>     http://lists.nyphp.org/mailman/listinfo/talk
>
>     NYPHPCon 2006 Presentations Online
>     http://www.nyphpcon.com
>
>     Show Your Participation in New York PHP
>     http://www.nyphp.org/show_participation.php
>
>
>
>
> -- 
> IM/iChat: ejpusa
> Links: http://del.icio.us/ejpusa
> Blog: http://www.utopiaparkway.com
> Follow me: http://www.twitter.com/ejpusa
> Karma: http://www.coderswithconscience.com
> Projects: http://flickr.com/photos/86842405 at N00/
> Store: http://astore.amazon.com/httpwwwutopic-20
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php


-- 
Kenneth Downs
Secure Data Software, Inc.
www.secdat.com    www.andromeda-project.org
631-689-7200   Fax: 631-689-0527
cell: 631-379-0010

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080215/ceca4487/attachment.html>

From jmcgraw1 at gmail.com  Fri Feb 15 09:26:02 2008
From: jmcgraw1 at gmail.com (Jake McGraw)
Date: Fri, 15 Feb 2008 09:26:02 -0500
Subject: Meeting Topics (Was [nycphp-talk] Dynamic Form Elements)
In-Reply-To: <47B5A096.3030507@secdat.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<c5949a380802121810s431228d2pda74dd22c2fd9658@mail.gmail.com>
	<47B5A096.3030507@secdat.com>
Message-ID: <e065b8610802150626h42ffa6e9pae4282bc220ad71f@mail.gmail.com>

I'd be willing to give a introduction to jQuery.

- jake

On Fri, Feb 15, 2008 at 9:24 AM, Kenneth Downs <ken at secdat.com> wrote:
>
>  I'm wondering if we might have some meetings that go over some of these
> nifty javascript frameworks like dojo and extjs and jquery.
>
>  Edward Potter wrote:
> JQUERY!  It does everything, EVERY php coder should be looking at it.  :-)
> ed
>
>
>
> On Feb 1, 2008 3:05 AM, Michael B Allen <ioplex at gmail.com> wrote:
>
> > I'm familiar with DOM, DHTML, JavaScript, etc but I'm not sure what
> > the best way to do dynamic forms is.
> >
> > Basically I just want to dynamically insert or remove one element in a
> > form. The form is normally just a select with a submit button
> > immediately to it's right. But depending on what option in the select
> > is selected, I want another select to be inserted between the first
> > select and the button.
> >
> > So it's either <select1><button> or <select1><select2><button>.
> >
> > I would be perfectly happy with toggling the style visibility: visible
> > or visibility: hidden but this doesn't change the position of the
> > button. It always appears off to the right. I want the form to
> > re-pack.
> >
> > Or should I use DOM calls?
> >
> > What's the best, most portable way to do this?
> >
> > Mike
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
>
>
>
>  --
>  IM/iChat: ejpusa
>  Links: http://del.icio.us/ejpusa
>  Blog: http://www.utopiaparkway.com
>  Follow me: http://www.twitter.com/ejpusa
>  Karma: http://www.coderswithconscience.com
>  Projects: http://flickr.com/photos/86842405 at N00/
>  Store: http://astore.amazon.com/httpwwwutopic-20
> ________________________________
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>  --
> Kenneth Downs
> Secure Data Software, Inc.
> www.secdat.com www.andromeda-project.org
> 631-689-7200 Fax: 631-689-0527
> cell: 631-379-0010
>
>
> _______________________________________________
>  New York PHP Community Talk Mailing List
>  http://lists.nyphp.org/mailman/listinfo/talk
>
>  NYPHPCon 2006 Presentations Online
>  http://www.nyphpcon.com
>
>  Show Your Participation in New York PHP
>  http://www.nyphp.org/show_participation.php
>


From ken at secdat.com  Fri Feb 15 09:31:14 2008
From: ken at secdat.com (Kenneth Downs)
Date: Fri, 15 Feb 2008 09:31:14 -0500
Subject: Meeting Topics (Was [nycphp-talk] Dynamic Form Elements)
In-Reply-To: <e065b8610802150626h42ffa6e9pae4282bc220ad71f@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>	<c5949a380802121810s431228d2pda74dd22c2fd9658@mail.gmail.com>	<47B5A096.3030507@secdat.com>
	<e065b8610802150626h42ffa6e9pae4282bc220ad71f@mail.gmail.com>
Message-ID: <47B5A232.4090907@secdat.com>

That would be cool.

Jake McGraw wrote:

> I'd be willing to give a introduction to jQuery.
>
> - jake
>
> On Fri, Feb 15, 2008 at 9:24 AM, Kenneth Downs <ken at secdat.com> wrote:
>   
>>  I'm wondering if we might have some meetings that go over some of these
>> nifty javascript frameworks like dojo and extjs and jquery.
>>
>>  Edward Potter wrote:
>> JQUERY!  It does everything, EVERY php coder should be looking at it.  :-)
>> ed
>>
>>
>>
>> On Feb 1, 2008 3:05 AM, Michael B Allen <ioplex at gmail.com> wrote:
>>
>>     
>>> I'm familiar with DOM, DHTML, JavaScript, etc but I'm not sure what
>>> the best way to do dynamic forms is.
>>>
>>> Basically I just want to dynamically insert or remove one element in a
>>> form. The form is normally just a select with a submit button
>>> immediately to it's right. But depending on what option in the select
>>> is selected, I want another select to be inserted between the first
>>> select and the button.
>>>
>>> So it's either <select1><button> or <select1><select2><button>.
>>>
>>> I would be perfectly happy with toggling the style visibility: visible
>>> or visibility: hidden but this doesn't change the position of the
>>> button. It always appears off to the right. I want the form to
>>> re-pack.
>>>
>>> Or should I use DOM calls?
>>>
>>> What's the best, most portable way to do this?
>>>
>>> Mike
>>> _______________________________________________
>>> New York PHP Community Talk Mailing List
>>> http://lists.nyphp.org/mailman/listinfo/talk
>>>
>>> NYPHPCon 2006 Presentations Online
>>> http://www.nyphpcon.com
>>>
>>> Show Your Participation in New York PHP
>>> http://www.nyphp.org/show_participation.php
>>>
>>>       
>>
>>  --
>>  IM/iChat: ejpusa
>>  Links: http://del.icio.us/ejpusa
>>  Blog: http://www.utopiaparkway.com
>>  Follow me: http://www.twitter.com/ejpusa
>>  Karma: http://www.coderswithconscience.com
>>  Projects: http://flickr.com/photos/86842405 at N00/
>>  Store: http://astore.amazon.com/httpwwwutopic-20
>> ________________________________
>>
>> _______________________________________________
>> New York PHP Community Talk Mailing List
>> http://lists.nyphp.org/mailman/listinfo/talk
>>
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>>
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>>
>>
>>  --
>> Kenneth Downs
>> Secure Data Software, Inc.
>> www.secdat.com www.andromeda-project.org
>> 631-689-7200 Fax: 631-689-0527
>> cell: 631-379-0010
>>
>>
>> _______________________________________________
>>  New York PHP Community Talk Mailing List
>>  http://lists.nyphp.org/mailman/listinfo/talk
>>
>>  NYPHPCon 2006 Presentations Online
>>  http://www.nyphpcon.com
>>
>>  Show Your Participation in New York PHP
>>  http://www.nyphp.org/show_participation.php
>>
>>     
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   


-- 
Kenneth Downs
Secure Data Software, Inc.
www.secdat.com    www.andromeda-project.org
631-689-7200   Fax: 631-689-0527
cell: 631-379-0010

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080215/af9709ab/attachment.html>

From codebowl at gmail.com  Fri Feb 15 09:50:00 2008
From: codebowl at gmail.com (Joseph Crawford)
Date: Fri, 15 Feb 2008 09:50:00 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <47B4FC59.2010506@omnistep.com>
References: <C3D9E586.CBD4%cliff@pinestream.com>
	<47B4FC59.2010506@omnistep.com>
Message-ID: <715F1ECF-C47E-4A6A-BFFA-6EC2D8A693F9@gmail.com>

Yea I didn't get it at first either, I had to read the FAQ to  
understand it, maybe something should be on the front page to make  
people more aware so that they don't have to digg to find out what it  
is all about.


Hows it going Rolan?

On Feb 14, 2008, at 9:43 PM, Rolan Yang wrote:

> Cliff Hirsch wrote:
>> NYPhP:
>>
>> I have been holding off on this, waiting until things are  
>> ?perfect?, but finally realized that could be an eternity. So...
>>
>> Kerbeaz went live on Monday. I thought the hard part was behind me,  
>> but now the true adventure begins ? building traffic.
>>
>> ...
>>
>> Many thanks,
>> Cliff
>
> You didn't mention the website address, but I guess most people who  
> assume it to be kerbeaz.com.
> What an interesting concept. I didn't quite get it a first, but  
> after browsing around and reading the "About" section, it became  
> clearer.
> Now, if I could only figure a way of using the Kerbeaz site to curb  
> my internet addiction :)
>
> ~Rolan
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php



From jmcgraw1 at gmail.com  Fri Feb 15 09:54:09 2008
From: jmcgraw1 at gmail.com (Jake McGraw)
Date: Fri, 15 Feb 2008 09:54:09 -0500
Subject: Meeting Topics (Was [nycphp-talk] Dynamic Form Elements)
In-Reply-To: <e065b8610802150643j1e170f2bs7195acb025ae8c94@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<c5949a380802121810s431228d2pda74dd22c2fd9658@mail.gmail.com>
	<47B5A096.3030507@secdat.com>
	<e065b8610802150626h42ffa6e9pae4282bc220ad71f@mail.gmail.com>
	<47B5A232.4090907@secdat.com>
	<e065b8610802150643j1e170f2bs7195acb025ae8c94@mail.gmail.com>
Message-ID: <e065b8610802150654i2889a0ecm17f7e2a524418ebf@mail.gmail.com>

Whoops, here is a link:

jakemcgraw.com/javascript/jquery.pdf

- jake

On Fri, Feb 15, 2008 at 9:43 AM, Jake McGraw <jmcgraw1 at gmail.com> wrote:
> Incase anyone is interested, I've attached a presentation I did on
>  jQuery about a year ago, this was after only using jQuery for 3
>  months, so it may seem a little simplistic.
>
>  - jake
>
>
>
>  On Fri, Feb 15, 2008 at 9:31 AM, Kenneth Downs <ken at secdat.com> wrote:
>  >
>  >  That would be cool.
>  >
>  >
>  >
>  >  Jake McGraw wrote:
>  >
>  >
>  >  I'd be willing to give a introduction to jQuery.
>  >
>  > - jake
>  >
>  > On Fri, Feb 15, 2008 at 9:24 AM, Kenneth Downs <ken at secdat.com> wrote:
>  >
>  >
>  >  I'm wondering if we might have some meetings that go over some of these
>  > nifty javascript frameworks like dojo and extjs and jquery.
>  >
>  >  Edward Potter wrote:
>  > JQUERY! It does everything, EVERY php coder should be looking at it. :-)
>  > ed
>  >
>  >
>  >
>  > On Feb 1, 2008 3:05 AM, Michael B Allen <ioplex at gmail.com> wrote:
>  >
>  >
>  >
>  >  I'm familiar with DOM, DHTML, JavaScript, etc but I'm not sure what
>  > the best way to do dynamic forms is.
>  >
>  > Basically I just want to dynamically insert or remove one element in a
>  > form. The form is normally just a select with a submit button
>  > immediately to it's right. But depending on what option in the select
>  > is selected, I want another select to be inserted between the first
>  > select and the button.
>  >
>  > So it's either <select1><button> or <select1><select2><button>.
>  >
>  > I would be perfectly happy with toggling the style visibility: visible
>  > or visibility: hidden but this doesn't change the position of the
>  > button. It always appears off to the right. I want the form to
>  > re-pack.
>  >
>  > Or should I use DOM calls?
>  >
>  > What's the best, most portable way to do this?
>  >
>  > Mike
>  > _______________________________________________
>  > New York PHP Community Talk Mailing List
>  > http://lists.nyphp.org/mailman/listinfo/talk
>  >
>  > NYPHPCon 2006 Presentations Online
>  > http://www.nyphpcon.com
>  >
>  > Show Your Participation in New York PHP
>  > http://www.nyphp.org/show_participation.php
>  >
>  >
>  >
>  >  --
>  >  IM/iChat: ejpusa
>  >  Links: http://del.icio.us/ejpusa
>  >  Blog: http://www.utopiaparkway.com
>  >  Follow me: http://www.twitter.com/ejpusa
>  >  Karma: http://www.coderswithconscience.com
>  >  Projects: http://flickr.com/photos/86842405 at N00/
>  >  Store: http://astore.amazon.com/httpwwwutopic-20
>  > ________________________________
>  >
>  > _______________________________________________
>  > New York PHP Community Talk Mailing List
>  > http://lists.nyphp.org/mailman/listinfo/talk
>  >
>  > NYPHPCon 2006 Presentations Online
>  > http://www.nyphpcon.com
>  >
>  > Show Your Participation in New York PHP
>  > http://www.nyphp.org/show_participation.php
>  >
>  >
>  >  --
>  > Kenneth Downs
>  > Secure Data Software, Inc.
>  > www.secdat.com www.andromeda-project.org
>  > 631-689-7200 Fax: 631-689-0527
>  > cell: 631-379-0010
>  >
>  >
>  > _______________________________________________
>  >  New York PHP Community Talk Mailing List
>  >  http://lists.nyphp.org/mailman/listinfo/talk
>  >
>  >  NYPHPCon 2006 Presentations Online
>  >  http://www.nyphpcon.com
>  >
>  >  Show Your Participation in New York PHP
>  >  http://www.nyphp.org/show_participation.php
>  >
>  >
>  >  _______________________________________________
>  > New York PHP Community Talk Mailing List
>  > http://lists.nyphp.org/mailman/listinfo/talk
>  >
>  > NYPHPCon 2006 Presentations Online
>  > http://www.nyphpcon.com
>  >
>  > Show Your Participation in New York PHP
>  > http://www.nyphp.org/show_participation.php
>  >
>  >
>  >
>  >  --
>  > Kenneth Downs
>  > Secure Data Software, Inc.
>  > www.secdat.com www.andromeda-project.org
>  > 631-689-7200 Fax: 631-689-0527
>  > cell: 631-379-0010
>  >
>  >
>  > _______________________________________________
>  >  New York PHP Community Talk Mailing List
>  >  http://lists.nyphp.org/mailman/listinfo/talk
>  >
>  >  NYPHPCon 2006 Presentations Online
>  >  http://www.nyphpcon.com
>  >
>  >  Show Your Participation in New York PHP
>  >  http://www.nyphp.org/show_participation.php
>  >
>


From cliff at pinestream.com  Fri Feb 15 10:12:04 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Fri, 15 Feb 2008 10:12:04 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <715F1ECF-C47E-4A6A-BFFA-6EC2D8A693F9@gmail.com>
Message-ID: <C3DB15F4.CC79%cliff@pinestream.com>

On 2/15/08 9:50 AM, "Joseph Crawford" <codebowl at gmail.com> wrote:
> Yea I didn't get it at first either, I had to read the FAQ to
> understand it, maybe something should be on the front page to make
> people more aware so that they don't have to digg to find out what it
> is all about.

>> Cliff Hirsch wrote:
>>> Kerbeaz went live on Monday. I thought the hard part was behind me,
>> assume it to be kerbeaz.com.

>> Now, if I could only figure a way of using the Kerbeaz site to curb
>> my internet addiction :)

It is different...and hard to explain. A new first view splash page is in
design.

We're working on solving Internet addiction after we have world peace
licked.




From smanes at magpie.com  Fri Feb 15 11:05:37 2008
From: smanes at magpie.com (Steve Manes)
Date: Fri, 15 Feb 2008 11:05:37 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <C3DA1881.CC1E%cliff@pinestream.com>
References: <C3DA1881.CC1E%cliff@pinestream.com>
Message-ID: <47B5B851.3010606@magpie.com>

Cliff Hirsch wrote:
>  Kerbeaz went live on Monday. I thought the hard part was behind me, but now
> the true adventure begins ? building traffic.

Looks real nice.

Under "A message from our founder" in Help:

"He still has a draw full of them" s/b "drawer".



From cliff at pinestream.com  Fri Feb 15 11:17:28 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Fri, 15 Feb 2008 11:17:28 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <47B5B851.3010606@magpie.com>
Message-ID: <C3DB2548.CC8B%cliff@pinestream.com>

On 2/15/08 11:05 AM, "Steve Manes" <smanes at magpie.com> wrote:
> Under "A message from our founder" in Help:
> "He still has a draw full of them" s/b "drawer".

Thanks -- appreciated. Did ya catch the part about Jolly Rogers?! You city
folk may have hit Coney Island, but us burbs people hit Jolly Rogers in
Farmingdale. I wonder if it's still there?




From smanes at magpie.com  Fri Feb 15 11:28:28 2008
From: smanes at magpie.com (Steve Manes)
Date: Fri, 15 Feb 2008 11:28:28 -0500
Subject: [nycphp-talk] Thank you NYPhP -- Kerbeaz launches!
In-Reply-To: <C3DB2548.CC8B%cliff@pinestream.com>
References: <C3DB2548.CC8B%cliff@pinestream.com>
Message-ID: <47B5BDAC.6070209@magpie.com>

Cliff Hirsch wrote:
> On 2/15/08 11:05 AM, "Steve Manes" <smanes at magpie.com> wrote:
>> Under "A message from our founder" in Help:
>> "He still has a draw full of them" s/b "drawer".
> 
> Thanks -- appreciated. Did ya catch the part about Jolly Rogers?! You city
> folk may have hit Coney Island, but us burbs people hit Jolly Rogers in
> Farmingdale. I wonder if it's still there?

When I was a kid around that age I was living on a military base in 
Japan.  No amusement parks.  My Coney Island was getting to ride in a 
tank or APC during maneuvers or to sit in the cockpit of an F4 at Atsugi 
NAS.  My brother and I were PITA kids so we didn't get to do that very 
often either <g>.



From paulcheung at tiscali.co.uk  Sat Feb 16 15:32:25 2008
From: paulcheung at tiscali.co.uk (PaulCheung)
Date: Sat, 16 Feb 2008 20:32:25 -0000
Subject: [nycphp-talk] FTPing PHP scripts.
References: <000f01c86896$29814560$0200a8c0@X9183>
	<20080206103112.0eambfcqgwskwok0@webmail.nyphp.com>
Message-ID: <000e01c870db$0c1aa280$0200a8c0@X9183>

I like to thank everybody for the suggestions.

As suggested I checked for hidden binary characters everything checked out 
OK.

The solution to the problem is to use
BINARY together with FTP PORT 21 or 22 (if one port does not work, try the 
other)

Paul

----- Original Message ----- 
From: "Michael Southwell" <michael.southwell at nyphp.com>
To: <talk at lists.nyphp.org>
Sent: Wednesday, February 06, 2008 3:31 PM
Subject: Re: [nycphp-talk] FTPing PHP scripts.


> Quoting PaulCheung <paulcheung at tiscali.co.uk>:
>
>> I don't know if anybody else has been having a problem when trying to
>> FTP PHP scripts. I am using "1and1" to host my website and have
>> uploaded  PHP scripts All have uploaded. Unfortunately some scripts are
>> loaded correctly and other arrive as 0 length.
>
> You may have some binary character hiding at the beginning of your
> script. Delete the first line or two and try again. If that works,
> recreate what you deleted and try again. Alternatively, look at your
> script in some editor that will show every character rather than just  the
> alphanumeric ones.
>
>
> -- 
> Michael Southwell
> Vice President, Education
> NYPHP TRAINING http://nyphp.com/training/indepth
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php



From susan_shemin at yahoo.com  Sat Feb 16 16:52:39 2008
From: susan_shemin at yahoo.com (Susan Shemin)
Date: Sat, 16 Feb 2008 13:52:39 -0800 (PST)
Subject: [nycphp-talk] FTPing PHP scripts.
Message-ID: <528504.43463.qm@web50206.mail.re2.yahoo.com>

Just a note, Paul.  I use Dreamweaver to upload all my files and have never had a problem at 1and1.  The upload is immediate, the upload feature also updates all my images, and I can switch to the browser to display my file/changes.  Just one more use for Dreamweaver.  :)

Susan


----- Original Message ----
From: PaulCheung <paulcheung at tiscali.co.uk>
To: NYPHP Talk <talk at lists.nyphp.org>
Sent: Saturday, February 16, 2008 12:32:25 PM
Subject: Re: [nycphp-talk] FTPing PHP scripts.

I like to thank everybody for the suggestions.

As suggested I checked for hidden binary characters everything checked out 
OK.

The solution to the problem is to use
BINARY together with FTP PORT 21 or 22 (if one port does not work, try the 
other)

Paul

----- Original Message ----- 
From: "Michael Southwell" <michael.southwell at nyphp.com>
To: <talk at lists.nyphp.org>
Sent: Wednesday, February 06, 2008 3:31 PM
Subject: Re: [nycphp-talk] FTPing PHP scripts.


> Quoting PaulCheung <paulcheung at tiscali.co.uk>:
>
>> I don't know if anybody else has been having a problem when trying to
>> FTP PHP scripts. I am using "1and1" to host my website and have
>> uploaded  PHP scripts All have uploaded. Unfortunately some scripts are
>> loaded correctly and other arrive as 0 length.
>
> You may have some binary character hiding at the beginning of your
> script. Delete the first line or two and try again. If that works,
> recreate what you deleted and try again. Alternatively, look at your
> script in some editor that will show every character rather than just  the
> alphanumeric ones.
>
>
> -- 
> Michael Southwell
> Vice President, Education
> NYPHP TRAINING http://nyphp.com/training/indepth
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080216/5ba57d0d/attachment.html>

From susan_shemin at yahoo.com  Mon Feb 18 05:23:24 2008
From: susan_shemin at yahoo.com (Susan Shemin)
Date: Mon, 18 Feb 2008 02:23:24 -0800 (PST)
Subject: [nycphp-talk] javascript calling php function
Message-ID: <478680.96171.qm@web50210.mail.re2.yahoo.com>

I want to use javascript onclick to call a php function.  This code works, but puts a "done, with errors" in the status line in the file when loaded, which I do not want.  (I've done some error testing and isolation, and found the onclick is what is causing the "errors" message.)  Any ideas -- or other ways to do it?

onclick="<?php here_it_is(); ?>";

Also, I tried onclick=""; to make sure that it's the "embedded" php code that's the culprit, thinking that maybe javascript is reading the php code as nothing inside the quotes.

Susan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080218/a9ed8cdb/attachment.html>

From arzala at gmail.com  Mon Feb 18 06:02:13 2008
From: arzala at gmail.com (Anirudh Zala)
Date: Mon, 18 Feb 2008 16:32:13 +0530
Subject: [nycphp-talk] javascript calling php function
In-Reply-To: <478680.96171.qm@web50210.mail.re2.yahoo.com>
References: <478680.96171.qm@web50210.mail.re2.yahoo.com>
Message-ID: <200802181632.13427.arzala@gmail.com>

On Monday 18 Feb 2008 15:53:24 Susan Shemin wrote:
> I want to use javascript onclick to call a php function.  This code works,
> but puts a "done, with errors" in the status line in the file when loaded,
> which I do not want.  (I've done some error testing and isolation, and
> found the onclick is what is causing the "errors" message.)  Any ideas --
> or other ways to do it?
>
> onclick="<?php here_it_is(); ?>";
>
> Also, I tried onclick=""; to make sure that it's the "embedded" php code
> that's the culprit, thinking that maybe javascript is reading the php code
> as nothing inside the quotes.
>
> Susan

You can't call PHP functions using JS like this. You need to use Ajax 
mechanism to call PHP function from your JS code.

I dobut whether it is working, as you said above, the way you wanted or not 
unless output of PHP function is valid JS code.

Also check your source code of your page to see what it reads 
between 'onclick=""' once page is loaded in browser.

Thanks

Anirudh Zala


From smanes at magpie.com  Mon Feb 18 10:18:47 2008
From: smanes at magpie.com (Steve Manes)
Date: Mon, 18 Feb 2008 10:18:47 -0500
Subject: [nycphp-talk] javascript calling php function
In-Reply-To: <478680.96171.qm@web50210.mail.re2.yahoo.com>
References: <478680.96171.qm@web50210.mail.re2.yahoo.com>
Message-ID: <47B9A1D7.7030800@magpie.com>

Susan Shemin wrote:
> I want to use javascript onclick to call a php function.  This code 
> works, but puts a "done, with errors" in the status line in the file 
> when loaded, which I do not want.  (I've done some error testing and 
> isolation, and found the onclick is what is causing the "errors" 
> message.)  Any ideas -- or other ways to do it?
>  
> onclick="<?php here_it_is(); ?>";
>  
> Also, I tried onclick=""; to make sure that it's the "embedded" php code 
> that's the culprit, thinking that maybe javascript is reading the php 
> code as nothing inside the quotes.

Javascript is client side and PHP is server side.  Javascript's 
'onclick' can only call a function within Javascript's namespace, not a 
function living on the server.  You may find this easier done with a 
library like xAjax which wraps PHP functions for Javascript calls using XML.



From tedd at sperling.com  Mon Feb 18 14:46:20 2008
From: tedd at sperling.com (tedd)
Date: Mon, 18 Feb 2008 14:46:20 -0500
Subject: [nycphp-talk] javascript calling php function
In-Reply-To: <478680.96171.qm@web50210.mail.re2.yahoo.com>
References: <478680.96171.qm@web50210.mail.re2.yahoo.com>
Message-ID: <p06240802c3df8f2aebf3@[192.168.1.105]>

At 2:23 AM -0800 2/18/08, Susan Shemin wrote:
>I want to use javascript onclick to call a php function.  This code 
>works, but puts a "done, with errors" in the status line in the file 
>when loaded, which I do not want.  (I've done some error testing and 
>isolation, and found the onclick is what is causing the "errors" 
>message.)  Any ideas -- or other ways to do it?
>
>onclick="<?php here_it_is(); ?>";
>
>Also, I tried onclick=""; to make sure that it's the "embedded" php 
>code that's the culprit, thinking that maybe javascript is reading 
>the php code as nothing inside the quotes.
>
>Susan

Susan:

I need more information.

 From what you described above, you don't even need js to call a php 
script. You can do it like this:

<a href="here_it_is.php"> Click this </a>

If you want to pass a variable, then try this:

<a href="here_it_is.php?var=whatever"> Click this </a>

There's lot's of ways to communicate between php and javascript, like this --

http://webbytedd.com/b/timed-php/

-- but you need the secret handshake to do it.

So, tell us what you're trying to do and we'll provide guidance, if 
not downright confusion

Cheers,

tedd

-- 
-------
http://sperling.com  http://ancientstones.com  http://earthstones.com


From susan_shemin at yahoo.com  Mon Feb 18 16:33:17 2008
From: susan_shemin at yahoo.com (Susan Shemin)
Date: Mon, 18 Feb 2008 13:33:17 -0800 (PST)
Subject: [nycphp-talk] javascript calling php function
Message-ID: <832831.87104.qm@web50211.mail.re2.yahoo.com>

I so wanted to avoid using Ajax only because my webpages are simple ones.  I've implemented Ajax on another website, and I'll just bring it over here.  Or, I'll might stay with the "you have an error" message in the status line, because the function is working -- the data from the called function does go into my database.  My users are mostly low tech, and they probably wouldn't notice the error, but I know how I react when I see "Done, with errors" at a major website!

Thanks for the responses.

Susan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080218/8036ec36/attachment.html>

From jmcgraw1 at gmail.com  Mon Feb 18 16:41:17 2008
From: jmcgraw1 at gmail.com (Jake McGraw)
Date: Mon, 18 Feb 2008 16:41:17 -0500
Subject: Meeting Topics (Was [nycphp-talk] Dynamic Form Elements)
In-Reply-To: <e065b8610802150654i2889a0ecm17f7e2a524418ebf@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>
	<c5949a380802121810s431228d2pda74dd22c2fd9658@mail.gmail.com>
	<47B5A096.3030507@secdat.com>
	<e065b8610802150626h42ffa6e9pae4282bc220ad71f@mail.gmail.com>
	<47B5A232.4090907@secdat.com>
	<e065b8610802150643j1e170f2bs7195acb025ae8c94@mail.gmail.com>
	<e065b8610802150654i2889a0ecm17f7e2a524418ebf@mail.gmail.com>
Message-ID: <e065b8610802181341h70710554n3051ce0bffc9a5fa@mail.gmail.com>

Not sure what the process is for getting an official meeting going,,,
I'd still like to volunteer my time, I just need to know when.

- jake


On Feb 15, 2008 9:54 AM, Jake McGraw <jmcgraw1 at gmail.com> wrote:
> Whoops, here is a link:
>
> jakemcgraw.com/javascript/jquery.pdf
>
> - jake
>
>
> On Fri, Feb 15, 2008 at 9:43 AM, Jake McGraw <jmcgraw1 at gmail.com> wrote:
> > Incase anyone is interested, I've attached a presentation I did on
> >  jQuery about a year ago, this was after only using jQuery for 3
> >  months, so it may seem a little simplistic.
> >
> >  - jake
> >
> >
> >
> >  On Fri, Feb 15, 2008 at 9:31 AM, Kenneth Downs <ken at secdat.com> wrote:
> >  >
> >  >  That would be cool.
> >  >
> >  >
> >  >
> >  >  Jake McGraw wrote:
> >  >
> >  >
> >  >  I'd be willing to give a introduction to jQuery.
> >  >
> >  > - jake
> >  >
> >  > On Fri, Feb 15, 2008 at 9:24 AM, Kenneth Downs <ken at secdat.com> wrote:
> >  >
> >  >
> >  >  I'm wondering if we might have some meetings that go over some of these
> >  > nifty javascript frameworks like dojo and extjs and jquery.
> >  >
> >  >  Edward Potter wrote:
> >  > JQUERY! It does everything, EVERY php coder should be looking at it. :-)
> >  > ed
> >  >
> >  >
> >  >
> >  > On Feb 1, 2008 3:05 AM, Michael B Allen <ioplex at gmail.com> wrote:
> >  >
> >  >
> >  >
> >  >  I'm familiar with DOM, DHTML, JavaScript, etc but I'm not sure what
> >  > the best way to do dynamic forms is.
> >  >
> >  > Basically I just want to dynamically insert or remove one element in a
> >  > form. The form is normally just a select with a submit button
> >  > immediately to it's right. But depending on what option in the select
> >  > is selected, I want another select to be inserted between the first
> >  > select and the button.
> >  >
> >  > So it's either <select1><button> or <select1><select2><button>.
> >  >
> >  > I would be perfectly happy with toggling the style visibility: visible
> >  > or visibility: hidden but this doesn't change the position of the
> >  > button. It always appears off to the right. I want the form to
> >  > re-pack.
> >  >
> >  > Or should I use DOM calls?
> >  >
> >  > What's the best, most portable way to do this?
> >  >
> >  > Mike
> >  > _______________________________________________
> >  > New York PHP Community Talk Mailing List
> >  > http://lists.nyphp.org/mailman/listinfo/talk
> >  >
> >  > NYPHPCon 2006 Presentations Online
> >  > http://www.nyphpcon.com
> >  >
> >  > Show Your Participation in New York PHP
> >  > http://www.nyphp.org/show_participation.php
> >  >
> >  >
> >  >
> >  >  --
> >  >  IM/iChat: ejpusa
> >  >  Links: http://del.icio.us/ejpusa
> >  >  Blog: http://www.utopiaparkway.com
> >  >  Follow me: http://www.twitter.com/ejpusa
> >  >  Karma: http://www.coderswithconscience.com
> >  >  Projects: http://flickr.com/photos/86842405 at N00/
> >  >  Store: http://astore.amazon.com/httpwwwutopic-20
> >  > ________________________________
> >  >
> >  > _______________________________________________
> >  > New York PHP Community Talk Mailing List
> >  > http://lists.nyphp.org/mailman/listinfo/talk
> >  >
> >  > NYPHPCon 2006 Presentations Online
> >  > http://www.nyphpcon.com
> >  >
> >  > Show Your Participation in New York PHP
> >  > http://www.nyphp.org/show_participation.php
> >  >
> >  >
> >  >  --
> >  > Kenneth Downs
> >  > Secure Data Software, Inc.
> >  > www.secdat.com www.andromeda-project.org
> >  > 631-689-7200 Fax: 631-689-0527
> >  > cell: 631-379-0010
> >  >
> >  >
> >  > _______________________________________________
> >  >  New York PHP Community Talk Mailing List
> >  >  http://lists.nyphp.org/mailman/listinfo/talk
> >  >
> >  >  NYPHPCon 2006 Presentations Online
> >  >  http://www.nyphpcon.com
> >  >
> >  >  Show Your Participation in New York PHP
> >  >  http://www.nyphp.org/show_participation.php
> >  >
> >  >
> >  >  _______________________________________________
> >  > New York PHP Community Talk Mailing List
> >  > http://lists.nyphp.org/mailman/listinfo/talk
> >  >
> >  > NYPHPCon 2006 Presentations Online
> >  > http://www.nyphpcon.com
> >  >
> >  > Show Your Participation in New York PHP
> >  > http://www.nyphp.org/show_participation.php
> >  >
> >  >
> >  >
> >  >  --
> >  > Kenneth Downs
> >  > Secure Data Software, Inc.
> >  > www.secdat.com www.andromeda-project.org
> >  > 631-689-7200 Fax: 631-689-0527
> >  > cell: 631-379-0010
> >  >
> >  >
> >  > _______________________________________________
> >  >  New York PHP Community Talk Mailing List
> >  >  http://lists.nyphp.org/mailman/listinfo/talk
> >  >
> >  >  NYPHPCon 2006 Presentations Online
> >  >  http://www.nyphpcon.com
> >  >
> >  >  Show Your Participation in New York PHP
> >  >  http://www.nyphp.org/show_participation.php
> >  >
> >
>


From lists at zaunere.com  Mon Feb 18 17:54:38 2008
From: lists at zaunere.com (Hans Zaunere)
Date: Mon, 18 Feb 2008 17:54:38 -0500
Subject: Meeting Topics (Was [nycphp-talk] Dynamic Form Elements)
In-Reply-To: <e065b8610802181341h70710554n3051ce0bffc9a5fa@mail.gmail.com>
References: <78c6bd860802010005m35ca9f60l2ce0a5e05a086f33@mail.gmail.com>	<c5949a380802121810s431228d2pda74dd22c2fd9658@mail.gmail.com>	<47B5A096.3030507@secdat.com>	<e065b8610802150626h42ffa6e9pae4282bc220ad71f@mail.gmail.com>	<47B5A232.4090907@secdat.com>	<e065b8610802150643j1e170f2bs7195acb025ae8c94@mail.gmail.com>	<e065b8610802150654i2889a0ecm17f7e2a524418ebf@mail.gmail.com>
	<e065b8610802181341h70710554n3051ce0bffc9a5fa@mail.gmail.com>
Message-ID: <00be01c87281$3f0837f0$bd18a7d0$@com>

Hi Jake,

> Not sure what the process is for getting an official meeting going,,,
> I'd still like to volunteer my time, I just need to know when.

Woops - missed this thread earlier.

We'd love to have you speak, thank you.

Our next available meeting is June - June 24th to be exact.

If this works for you, please send me offlist a blurb about the talk, bio,
etc.  If a later month works better, please let me know that as well.

Thanks,

---
Hans Zaunere / President / New York PHP
    www.nyphp.org  / ?www.nyphp.com 





From susan_shemin at yahoo.com  Mon Feb 18 23:20:53 2008
From: susan_shemin at yahoo.com (Susan Shemin)
Date: Mon, 18 Feb 2008 20:20:53 -0800 (PST)
Subject: [nycphp-talk] javascript calling php function -- now question on
	Ajax
Message-ID: <566797.97272.qm@web50210.mail.re2.yahoo.com>

My quick fix didn't work because it put entries into the database as the page loaded -- but they were there...

Anyway, Ajax is usually used to open an external file into a div, and it uses a form to send the request.  What I want to do is trigger a php script to run when someone clicks a certain anchor URL.  I guess you would call it my own stats attempt.  So I have no form, and nothing to be displayed on the current page because the user is going to URL from the click.

Please be gentle with me -- but what am I missing and is it at all possible, Ajax or not?

Susan


----- Original Message ----
From: Susan Shemin <susan_shemin at yahoo.com>
To: NYPHP Talk <talk at lists.nyphp.org>
Sent: Monday, February 18, 2008 1:33:17 PM
Subject: Re: [nycphp-talk] javascript calling php function


I so wanted to avoid using Ajax only because my webpages are simple ones.  I've implemented Ajax on another website, and I'll just bring it over here.  Or, I'll might stay with the "you have an error" message in the status line, because the function is working -- the data from the called function does go into my database.  My users are mostly low tech, and they probably wouldn't notice the error, but I know how I react when I see "Done, with errors" at a major website!
 
Thanks for the responses.
 
Susan


-----Inline Attachment Follows-----

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080218/b00be7f2/attachment.html>

From kenrbnsn at rbnsn.com  Mon Feb 18 23:31:14 2008
From: kenrbnsn at rbnsn.com (Ken Robinson)
Date: Mon, 18 Feb 2008 23:31:14 -0500
Subject: [nycphp-talk] javascript calling php function -- now
	question on Ajax
In-Reply-To: <566797.97272.qm@web50210.mail.re2.yahoo.com>
References: <566797.97272.qm@web50210.mail.re2.yahoo.com>
Message-ID: <mailman.25.1363003730.25290.talk@lists.nyphp.org>

At 11:20 PM 2/18/2008, Susan Shemin wrote:
>My quick fix didn't work because it put entries into the database as 
>the page loaded -- but they were there...
>
>Anyway, Ajax is usually used to open an external file into a div, 
>and it uses a form to send the request.  What I want to do is 
>trigger a php script to run when someone clicks a certain anchor 
>URL.  I guess you would call it my own stats attempt.  So I have no 
>form, and nothing to be displayed on the current page because the 
>user is going to URL from the click.

AJAX is just the technique to use for Javascript to invoke a PHP 
script. It has nothing to do with loading anything, that is up to 
your logic.  I use the Yahoo User Interface libraries when I want to 
do AJAX (just my preference). There are many places where I send a 
POST string to my script with information and I don't care what is returned.

Just set up an "OnClick" Javascript function which does the AJAX POST 
to your php script and then continues to where ever you want.

Ken


>
>Please be gentle with me -- but what am I missing and is it at all 
>possible, Ajax or not?
>
>Susan
>
>----- Original Message ----
>From: Susan Shemin <susan_shemin at yahoo.com>
>To: NYPHP Talk <talk at lists.nyphp.org>
>Sent: Monday, February 18, 2008 1:33:17 PM
>Subject: Re: [nycphp-talk] javascript calling php function
>
>I so wanted to avoid using Ajax only because my webpages are simple 
>ones.  I've implemented Ajax on another website, and I'll just bring 
>it over here.  Or, I'll might stay with the "you have an error" 
>message in the status line, because the function is working -- the 
>data from the called function does go into my database.  My users 
>are mostly low tech, and they probably wouldn't notice the error, 
>but I know how I react when I see "Done, with errors" at a major website!
>
>Thanks for the responses.
>
>Susan
>
>
>-----Inline Attachment Follows-----
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>
>NYPHPCon 2006 Presentations Online
>http://www.nyphpcon.com
>
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>
>NYPHPCon 2006 Presentations Online
>http://www.nyphpcon.com
>
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php



From smanes at magpie.com  Mon Feb 18 23:36:28 2008
From: smanes at magpie.com (Steve Manes)
Date: Mon, 18 Feb 2008 23:36:28 -0500
Subject: [nycphp-talk] javascript calling php function -- now question
	on	Ajax
In-Reply-To: <566797.97272.qm@web50210.mail.re2.yahoo.com>
References: <566797.97272.qm@web50210.mail.re2.yahoo.com>
Message-ID: <47BA5CCC.30004@magpie.com>

Susan Shemin wrote:
> Anyway, Ajax is usually used to open an external file into a div, and it 
> uses a form to send the request.  What I want to do is trigger a php 
> script to run when someone clicks a certain anchor URL.  I guess you 
> would call it my own stats attempt.  So I have no form, and nothing to 
> be displayed on the current page because the user is going to URL from 
> the click.
>  
> Please be gentle with me -- but what am I missing and is it at all 
> possible, Ajax or not?

Sure.  Here's an excerpt of something similar using xAjax in a project 
I'm working on now:

/* HTML */
<a href="javascript:void(null)"
    onclick="this.blur();
            div_off('id_add_note_off');
            xajax_load_contact_notes_server('id_view_note',
             'id_view_note_on', {$notes[i].contact_note_id});
            return false;">
   <img src="/images/icons/edit.gif" border="0" alt="edit"></a>


/* PHP */
function load_contact_notes_server($container_id, $div_id, $contact_note_id)
{
     global $trms;

     $ajax_response = new xajaxResponse();

     // Load vendor

     list($results, $message) = admin_get_contact_notes($trms, 
$contact_note_id, true);

     // ....

     $ajax_response->assign($container_id, 'innerHTML', 
$trms->fetch('view_contact_note.tpl'));
     $ajax_response->call('div_on', $div_id);

     return $ajax_response;
}



From susan_shemin at yahoo.com  Mon Feb 18 23:58:23 2008
From: susan_shemin at yahoo.com (Susan Shemin)
Date: Mon, 18 Feb 2008 20:58:23 -0800 (PST)
Subject: [nycphp-talk] javascript calling php function -- now question on
	Ajax
Message-ID: <622545.24402.qm@web50210.mail.re2.yahoo.com>

thanks, Mike and Ken

first off, I'm not using a form (so no POST); the link is in an anchor tag.  I could put a form around it, but that seems to me making a simple link complex.

I want to run this php code when the link is clicked 

 $webpage="";
 $link_clicked="";

Function capture_click($webpage,$link_clicked)
{

     $entry_date=date("m-d-y-H-i");

      $sql = "INSERT INTO click_details " .
             "SET webpage='$webpage', link_clicked='$link_clicked', entry_date='$entry_date'";
      $ok = mysql_query($sql);

      if ($ok) {
        //error checking
      }
}
?>

and then the anchor text (or how I guessed would work)

<a href=www.nyphp.org onclick="<?php capture_click(name_of_my_webpage,link_name); ?>";>info on PHP</a>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080218/b5f0cb3e/attachment.html>

From asmith at observer.com  Tue Feb 19 01:34:13 2008
From: asmith at observer.com (Austin Smith)
Date: Tue, 19 Feb 2008 01:34:13 -0500
Subject: [nycphp-talk] javascript calling php function -- now question on
	Ajax
In-Reply-To: <622545.24402.qm@web50210.mail.re2.yahoo.com>
References: <622545.24402.qm@web50210.mail.re2.yahoo.com>
Message-ID: <68a246880802182234u310c9eceie68d5fca0035ee92@mail.gmail.com>

Not to discourage you from using xAjax, which I've seen put to fine use, it
seems to me like you're adding Javascript where PHP would do the job just
fine, all by itself. Assuming that your anchor element is really going to
direct the user off the page, you might do well to implement something like
this:

<a href="redirect.php?website=http://www.nyphp.com&link=nyphp">NY PHP</a>

Then redirect.php would be the contents of your aforementioned code. You'd
also have to call your capture_click function yourself in the PHP code with
your two GET variables as arguments--and be sure to run them through
mysql_real_escape_string.

Plenty of sites use this method to track clicked links off-site, especially
when they monetize their clicks.

Have you considered a simple solution like Google Analytics? I'm no web
stats/SEO guru, but our sales and marketing people like it a lot... and it's
free.

Hope that helps a bit.
Austin

On Feb 18, 2008 11:58 PM, Susan Shemin <susan_shemin at yahoo.com> wrote:

> thanks, Mike and Ken
>
> first off, I'm not using a form (so no POST); the link is in an anchor
> tag.  I could put a form around it, but that seems to me making a simple
> link complex.
>
> I want to run this php code when the link is clicked
>
>  $webpage="";
>  $link_clicked="";
>
> Function capture_click($webpage,$link_clicked)
> {
>      $entry_date=date("m-d-y-H-i");
>
>       $sql = "INSERT INTO click_details " .
>              "SET webpage='$webpage', link_clicked='$link_clicked',
> entry_date='$entry_date'";
>       $ok = mysql_query($sql);
>       if ($ok) {
>         //error checking
>       }
> }
> ?>
>
> and then the anchor text (or how I guessed would work)
>
> <a href=www.nyphp.org onclick="<?php
> capture_click(name_of_my_webpage,link_name); ?>";>info on PHP</a>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080219/9eaaa21b/attachment.html>

From susan_shemin at yahoo.com  Tue Feb 19 01:55:03 2008
From: susan_shemin at yahoo.com (Susan Shemin)
Date: Mon, 18 Feb 2008 22:55:03 -0800 (PST)
Subject: [nycphp-talk] javascript calling php function -- now question on
	Ajax
Message-ID: <910453.23232.qm@web50208.mail.re2.yahoo.com>

thanks, Steve

I'll have to work through your example.  And thanks so much for pointing me to xAjax -- I'll look it over.


----- Original Message ----
From: Steve Manes <smanes at magpie.com>
To: NYPHP Talk <talk at lists.nyphp.org>
Sent: Monday, February 18, 2008 8:36:28 PM
Subject: Re: [nycphp-talk] javascript calling php function -- now question on Ajax

Susan Shemin wrote:
> Anyway, Ajax is usually used to open an external file into a div, and it 
> uses a form to send the request.  What I want to do is trigger a php 
> script to run when someone clicks a certain anchor URL.  I guess you 
> would call it my own stats attempt.  So I have no form, and nothing to 
> be displayed on the current page because the user is going to URL from 
> the click.
>  
> Please be gentle with me -- but what am I missing and is it at all 
> possible, Ajax or not?

Sure.  Here's an excerpt of something similar using xAjax in a project 
I'm working on now:

/* HTML */
<a href="javascript:void(null)"
    onclick="this.blur();
            div_off('id_add_note_off');
            xajax_load_contact_notes_server('id_view_note',
            'id_view_note_on', {$notes[i].contact_note_id});
            return false;">
  <img src="/images/icons/edit.gif" border="0" alt="edit"></a>


/* PHP */
function load_contact_notes_server($container_id, $div_id, $contact_note_id)
{
    global $trms;

    $ajax_response = new xajaxResponse();

    // Load vendor

    list($results, $message) = admin_get_contact_notes($trms, 
$contact_note_id, true);

    // ....

    $ajax_response->assign($container_id, 'innerHTML', 
$trms->fetch('view_contact_note.tpl'));
    $ajax_response->call('div_on', $div_id);

    return $ajax_response;
}

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080218/a2dab1be/attachment.html>

From kenrbnsn at rbnsn.com  Tue Feb 19 07:25:17 2008
From: kenrbnsn at rbnsn.com (Ken Robinson)
Date: Tue, 19 Feb 2008 07:25:17 -0500
Subject: [nycphp-talk] javascript calling php function -- now
	question on Ajax
In-Reply-To: <622545.24402.qm@web50210.mail.re2.yahoo.com>
References: <622545.24402.qm@web50210.mail.re2.yahoo.com>
Message-ID: <mailman.26.1363003730.25290.talk@lists.nyphp.org>

At 11:58 PM 2/18/2008, Susan Shemin wrote:
>thanks, Mike and Ken
>
>first off, I'm not using a form (so no POST); the link is in an 
>anchor tag.  I could put a form around it, but that seems to me 
>making a simple link complex.

You don't understand. The POST method is defined in the AJAX code you 
write, it has nothing to do with having a form or not.

>
>I want to run this php code when the link is clicked
>
>  $webpage="";
>  $link_clicked="";
>
>Function capture_click($webpage,$link_clicked)
>{
>      $entry_date=date("m-d-y-H-i");
>
>       $sql = "INSERT INTO click_details " .
>              "SET webpage='$webpage', link_clicked='$link_clicked', 
> entry_date='$entry_date'";
>       $ok = mysql_query($sql);
>       if ($ok) {
>         //error checking
>       }
>}
>?>
>
>and then the anchor text (or how I guessed would work)
>
><a href=www.nyphp.org onclick="<?php 
>capture_click(name_of_my_webpage,link_name); ?>";>info on PHP</a>

But, Austin, is correct, you don't need AJAX here.

Ken 



From smanes at magpie.com  Tue Feb 19 10:27:22 2008
From: smanes at magpie.com (Steve Manes)
Date: Tue, 19 Feb 2008 10:27:22 -0500
Subject: [nycphp-talk] javascript calling php function -- now	question
	on Ajax
In-Reply-To: <20080219122536.E3369439008@mail.magpie.com>
References: <622545.24402.qm@web50210.mail.re2.yahoo.com>
	<20080219122536.E3369439008@mail.magpie.com>
Message-ID: <47BAF55A.2020300@magpie.com>

Ken Robinson wrote:
> But, Austin, is correct, you don't need AJAX here.

That's true.  There are probably a dozen ways to handle this without 
Ajax.  One lightweight solution would be to have that onclick handler 
make a 1x1 image request (with query args) to a hidden DIV.


From chsnyder at gmail.com  Tue Feb 19 11:33:42 2008
From: chsnyder at gmail.com (csnyder)
Date: Tue, 19 Feb 2008 11:33:42 -0500
Subject: [nycphp-talk] javascript calling php function -- now question on
	Ajax
In-Reply-To: <622545.24402.qm@web50210.mail.re2.yahoo.com>
References: <622545.24402.qm@web50210.mail.re2.yahoo.com>
Message-ID: <b76252690802190833t9991681h17e4c223f4424d25@mail.gmail.com>

On Feb 18, 2008 11:58 PM, Susan Shemin <susan_shemin at yahoo.com> wrote:
>
> thanks, Mike and Ken
>
> first off, I'm not using a form (so no POST); the link is in an anchor tag.
> I could put a form around it, but that seems to me making a simple link
> complex.
>

The conceptual bit that you may be missing is that you can POST data
to a php script without using a form.

The javascript XMLHttpRequest object can make GET or POST requests in
the background, without any kind of user intervention.

The onclick event sends a background request to your script, then
sends the user on their way to the linked url. As far as I know you
don't even have to wait around for the response.

Disadvantage is that you have to learn how AJAX works. But the
advantage over a simple redirect script is that Google and others will
see your links as normal links.

-- 
Chris Snyder
http://chxo.com/


From susan_shemin at yahoo.com  Tue Feb 19 14:10:55 2008
From: susan_shemin at yahoo.com (Susan Shemin)
Date: Tue, 19 Feb 2008 11:10:55 -0800 (PST)
Subject: [nycphp-talk] javascript calling php function -- now question on
	Ajax
Message-ID: <655441.22711.qm@web50202.mail.re2.yahoo.com>

The most direct answer to my question ended up in my spam folder!  Because subsequent emails referred to Austin's reply, I went hunting for it, and there it was in spam.

I'm into keeping programming as simple as possible except where a more complex solution is warranted, and this is workable.

Thanks for all your replies!

Susan


----- Original Message ----
From: Austin Smith <asmith at observer.com>
To: NYPHP Talk <talk at lists.nyphp.org>
Sent: Monday, February 18, 2008 10:34:13 PM
Subject: Re: [nycphp-talk] javascript calling php function -- now question on Ajax

Not to discourage you from using xAjax, which I've seen put to fine use, it seems to me like you're adding Javascript where PHP would do the job just fine, all by itself. Assuming that your anchor element is really going to direct the user off the page, you might do well to implement something like this:

<a href="redirect.php?website=http://www.nyphp.com&link=nyphp">NY PHP</a>

Then redirect.php would be the contents of your aforementioned code. You'd also have to call your capture_click function yourself in the PHP code with your two GET variables as arguments--and be sure to run them through mysql_real_escape_string.

Plenty of sites use this method to track clicked links off-site, especially when they monetize their clicks.

Have you considered a simple solution like Google Analytics? I'm no web stats/SEO guru, but our sales and marketing people like it a lot... and it's free.

Hope that helps a bit.
Austin


On Feb 18, 2008 11:58 PM, Susan Shemin <susan_shemin at yahoo.com> wrote:

thanks, Mike and Ken
 
first off, I'm not using a form (so no POST); the link is in an anchor tag.  I could put a form around it, but that seems to me making a simple link complex.
 
I want to run this php code when the link is clicked 
 
 $webpage="";
 $link_clicked="";
 
Function capture_click($webpage,$link_clicked)
{

     $entry_date=date("m-d-y-H-i");
 
      $sql = "INSERT INTO click_details " .
             "SET webpage='$webpage', link_clicked='$link_clicked', entry_date='$entry_date'";
      $ok = mysql_query($sql);

      if ($ok) {
        //error checking
      }
}
?>

and then the anchor text (or how I guessed would work)
 
<a href=www.nyphp.org onclick="<?php capture_click(name_of_my_webpage,link_name); ?>";>info on PHP</a>

 




-----Inline Attachment Follows-----

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080219/41e1ff7d/attachment.html>

From cliff at pinestream.com  Tue Feb 19 16:04:30 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 19 Feb 2008 16:04:30 -0500
Subject: [nycphp-talk] Mod_rewrite problem
Message-ID: <C3E0AE8E.CDDA%cliff@pinestream.com>

I use the following to help work with SEO-friendly URLs:

RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php [L,QSA]

This works fine on my development machine in the main .htaccess file.

On the production machine, I do the same thing, except it?s in the main conf
file and there is no RewriteBase, since that is per dir context.

But on the prod. machine, the css and images do not appear. All files are
relative to root (/css/file, /images/file). Any ideas?

Cliff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080219/b4caef60/attachment.html>

From jcampbell1 at gmail.com  Tue Feb 19 16:45:42 2008
From: jcampbell1 at gmail.com (John Campbell)
Date: Tue, 19 Feb 2008 16:45:42 -0500
Subject: [nycphp-talk] Mod_rewrite problem
In-Reply-To: <C3E0AE8E.CDDA%cliff@pinestream.com>
References: <C3E0AE8E.CDDA%cliff@pinestream.com>
Message-ID: <8f0676b40802191345p12716cedw747355e98a571c0@mail.gmail.com>

In the .conf file are you putting the rules inside a <Directory>
directive?  As far as I know, <Direcory /path/to/folder/> works the
same as .htaccess, and you should try copying it exactly.

On Feb 19, 2008 4:04 PM, Cliff Hirsch <cliff at pinestream.com> wrote:
>
>  I use the following to help work with SEO-friendly URLs:
>
>  RewriteBase /
>  RewriteCond %{REQUEST_FILENAME} !-f
>  RewriteCond %{REQUEST_FILENAME} !-d
>  RewriteRule ^(.*)$ index.php [L,QSA]
>
>  This works fine on my development machine in the main .htaccess file.
>
>  On the production machine, I do the same thing, except it's in the main
> conf file and there is no RewriteBase, since that is per dir context.
>
>  But on the prod. machine, the css and images do not appear. All files are
> relative to root (/css/file, /images/file). Any ideas?


From cliff at pinestream.com  Tue Feb 19 17:10:13 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 19 Feb 2008 17:10:13 -0500
Subject: [nycphp-talk] Mod_rewrite problem
In-Reply-To: <8f0676b40802191345p12716cedw747355e98a571c0@mail.gmail.com>
Message-ID: <C3E0BDF5.CDEB%cliff@pinestream.com>

I didn't. I put it outside the dir directive. I tried moving it back to the
.htaccess file, and it works fine. This should be the same as putting it
inside the dir directive.

But I am still confused about why it is different when it's in the main
conf. I guess I just need to look at the logs to see what's happening.


On 2/19/08 4:45 PM, "John Campbell" <jcampbell1 at gmail.com> wrote:

> In the .conf file are you putting the rules inside a <Directory>
> directive?  As far as I know, <Direcory /path/to/folder/> works the
> same as .htaccess, and you should try copying it exactly.
> 
> On Feb 19, 2008 4:04 PM, Cliff Hirsch <cliff at pinestream.com> wrote:
>> 
>>  I use the following to help work with SEO-friendly URLs:
>> 
>>  RewriteBase /
>>  RewriteCond %{REQUEST_FILENAME} !-f
>>  RewriteCond %{REQUEST_FILENAME} !-d
>>  RewriteRule ^(.*)$ index.php [L,QSA]
>> 
>>  This works fine on my development machine in the main .htaccess file.
>> 
>>  On the production machine, I do the same thing, except it's in the main
>> conf file and there is no RewriteBase, since that is per dir context.
>> 
>>  But on the prod. machine, the css and images do not appear. All files are
>> relative to root (/css/file, /images/file). Any ideas?




From susan_shemin at yahoo.com  Fri Feb 22 03:07:20 2008
From: susan_shemin at yahoo.com (Susan Shemin)
Date: Fri, 22 Feb 2008 00:07:20 -0800 (PST)
Subject: [nycphp-talk] javascript calling php function
Message-ID: <183816.19610.qm@web50209.mail.re2.yahoo.com>

Austin, you rock!!  I got it to work perfectly using the redirect, and it's exactly what I needed.

Thanks to all of you, but I was looking for this type of simple and elegant (to quote a Pascal programming professor years ago) solution.

Susan


----- Original Message ----
From: Austin Smith <asmith at observer.com>
To: NYPHP Talk <talk at lists.nyphp.org>
Sent: Monday, February 18, 2008 10:34:13 PM
Subject: Re: [nycphp-talk] javascript calling php function -- now question on Ajax

Not to discourage you from using xAjax, which I've seen put to fine use, it seems to me like you're adding Javascript where PHP would do the job just fine, all by itself. Assuming that your anchor element is really going to direct the user off the page, you might do well to implement something like this:

<a href="redirect.php?website=http://www.nyphp.com&link=nyphp">NY PHP</a>

Then redirect.php would be the contents of your aforementioned code. You'd also have to call your capture_click function yourself in the PHP code with your two GET variables as arguments--and be sure to run them through mysql_real_escape_string.

Plenty of sites use this method to track clicked links off-site, especially when they monetize their clicks.

Have you considered a simple solution like Google Analytics? I'm no web stats/SEO guru, but our sales and marketing people like it a lot... and it's free.

Hope that helps a bit.
Austin


On Feb 18, 2008 11:58 PM, Susan Shemin <susan_shemin at yahoo.com> wrote:

thanks, Mike and Ken
 
first off, I'm not using a form (so no POST); the link is in an anchor tag.  I could put a form around it, but that seems to me making a simple link complex.
 
I want to run this php code when the link is clicked 
 
 $webpage="";
 $link_clicked="";
 
Function capture_click($webpage,$link_clicked)
{

     $entry_date=date("m-d-y-H-i");
 
      $sql = "INSERT INTO click_details " .
             "SET webpage='$webpage', link_clicked='$link_clicked', entry_date='$entry_date'";
      $ok = mysql_query($sql);

      if ($ok) {
        //error checking
      }
}
?>

and then the anchor text (or how I guessed would work)
 
<a href=www.nyphp.org onclick="<?php capture_click(name_of_my_webpage,link_name); ?>";>info on PHP</a>

 




-----Inline Attachment Follows-----

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080222/2357f320/attachment.html>

From 1j0lkq002 at sneakemail.com  Fri Feb 22 04:13:40 2008
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Fri, 22 Feb 2008 01:13:40 -0800
Subject: [nycphp-talk] javascript calling php function
In-Reply-To: <183816.19610.qm@web50209.mail.re2.yahoo.com>
References: <183816.19610.qm@web50209.mail.re2.yahoo.com>
Message-ID: <8226-97725@sneakemail.com>

Susan Shemin susan_shemin-at-yahoo.com |nyphp dev/internal group use| 
wrote:

> Austin, you rock!!  I got it to work perfectly using the redirect, and 
> it's exactly what I needed.
>  
> Thanks to all of you, but I was looking for this type of simple and 
> elegant (to quote a Pascal programming professor years ago) solution.
>  
> Susan
>
Susan,

Just a warning that if possible your tracking script should limit its 
function to your known intended destinations else fail or whatever. 
Don't leave it "open" or you may find your site being utilized by others 
as a general purpose redirect proxy, often for less-than-honorable purposes.

-=john



-- 
-------------------------------------------------------------
Your web server traffic log file is the most important source of web business information available. Do you know where your logs are right now? Do you know who else has access to your log files? When they were last archived? Where those archives are? --John Andrews Competitive Webmaster and SEO Blogging at http://www.johnon.com



From emailradu_c at yahoo.com  Fri Feb 22 07:58:19 2008
From: emailradu_c at yahoo.com (Radu Cirimpei)
Date: Fri, 22 Feb 2008 04:58:19 -0800 (PST)
Subject: [nycphp-talk] php script
Message-ID: <788149.31365.qm@web63208.mail.re1.yahoo.com>

Hello,
If I use 'getenv("REMOTE_ADDR") ' for return the IP
address of the
 person visiting my site, what is the best to do? To
save in a variable, like '$ip = getenv("REMOTE_ADDR");
, then insert it in a database(MySQL),then take it
with a sql query and write it in another place saw
only by me?
<?php
$ip = getenv("REMOTE_ADDR") ;
?> -where can I place this? From the begin of
index.php?
Thank you very match!
Radu

       
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile.  Try it now.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080222/89ca3396/attachment.html>

From ashaw at polymerdb.org  Fri Feb 22 09:06:07 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Fri, 22 Feb 2008 09:06:07 -0500
Subject: [nycphp-talk] php script
In-Reply-To: <788149.31365.qm@web63208.mail.re1.yahoo.com>
References: <788149.31365.qm@web63208.mail.re1.yahoo.com>
Message-ID: <47BED6CF.70908@polymerdb.org>

Radu Cirimpei wrote:
> If I use 'getenv("REMOTE_ADDR") ' for return the IP
> address of the
> person visiting my site, what is the best to do? 
Hi Radu,

You can give us a little more detail, right?  Tell us, what are you 
trying to accomplish -- that is, /why/ do you need the remote address, 
and what are you going to use it for? 

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From guilhermeblanco at gmail.com  Fri Feb 22 09:19:54 2008
From: guilhermeblanco at gmail.com (Guilherme Blanco)
Date: Fri, 22 Feb 2008 11:19:54 -0300
Subject: [nycphp-talk] php script
In-Reply-To: <47BED6CF.70908@polymerdb.org>
References: <788149.31365.qm@web63208.mail.re1.yahoo.com>
	<47BED6CF.70908@polymerdb.org>
Message-ID: <bcb7aa500802220619g10103dq56c30e8b7a4cb23e@mail.gmail.com>

HI,


Th right way to store IPs is by converting them to long using ip2long.
By doing it, you can check if it is valid (returns false on failure)
and also enable you a by region search.

There are services like geocode, ip2country, geoip, etc that gives you
a database of countries with their ip2long ranges.
All you have to do then is to get the column and search in this
country db. You are able to do joins (and use a single query) instead
of retrieve, convert, another query.

Also, I use this code to retrieve the IP address of visitor (please
notice that this may not work 100% of times, but it's better than a
single REMOTE_ADDR):


function _getIp()
{
	// This function get the IP of an user, even when he's behind a simple proxy
	// List of possible ip sources, in order of priority
	$ip_sources = array(
		"HTTP_X_FORWARDED_FOR",
		"HTTP_X_FORWARDED",
		"HTTP_FORWARDED_FOR",
		"HTTP_FORWARDED",
		"HTTP_X_COMING_FROM",
		"HTTP_COMING_FROM",
		"REMOTE_ADDR",
	);

	foreach ( $ip_sources as $ip_source ) {
		if ( isset( $_SERVER[$ip_source] ) ) {
			$proxy_ip = $_SERVER[$ip_source];
			break;
		}
	}

	// If the ip is still not found, try the getenv() function without
	// error reporting. This will automatically provide a FALSE result
	// on failure
	$proxy_ip = ( isset( $proxy_ip ) ) ? $proxy_ip : @getenv("REMOTE_ADDR");

	// Return the IP found
	return $proxy_ip;
}



I hope my $0.02 helped you a bit.


Regards,

On Fri, Feb 22, 2008 at 11:06 AM, Allen Shaw <ashaw at polymerdb.org> wrote:
> Radu Cirimpei wrote:
>  > If I use 'getenv("REMOTE_ADDR") ' for return the IP
>  > address of the
>  > person visiting my site, what is the best to do?
>  Hi Radu,
>
>  You can give us a little more detail, right?  Tell us, what are you
>  trying to accomplish -- that is, /why/ do you need the remote address,
>  and what are you going to use it for?
>
>  - Allen
>
>  --
>  Allen Shaw
>  slidePresenter (http://slides.sourceforge.net)
>
>  _______________________________________________
>  New York PHP Community Talk Mailing List
>  http://lists.nyphp.org/mailman/listinfo/talk
>
>  NYPHPCon 2006 Presentations Online
>  http://www.nyphpcon.com
>
>  Show Your Participation in New York PHP
>  http://www.nyphp.org/show_participation.php
>



-- 
Guilherme Blanco - Web Developer
CBC - Certified Bindows Consultant
Cell Phone: +55 (16) 9166-6902
MSN: guilhermeblanco at hotmail.com
URL: http://blog.bisna.com
S?o Carlos - SP/Brazil

From chsnyder at gmail.com  Fri Feb 22 09:30:45 2008
From: chsnyder at gmail.com (csnyder)
Date: Fri, 22 Feb 2008 09:30:45 -0500
Subject: [nycphp-talk] javascript calling php function
In-Reply-To: <8226-97725@sneakemail.com>
References: <183816.19610.qm@web50209.mail.re2.yahoo.com>
	<8226-97725@sneakemail.com>
Message-ID: <b76252690802220630s1a2ed72cwf559f97590a86b54@mail.gmail.com>

On Fri, Feb 22, 2008 at 4:13 AM, inforequest <1j0lkq002 at sneakemail.com> wrote:
>
>  Just a warning that if possible your tracking script should limit its
>  function to your known intended destinations else fail or whatever.
>  Don't leave it "open" or you may find your site being utilized by others
>  as a general purpose redirect proxy, often for less-than-honorable purposes.
>
>  -=john
>

I was wondering about this, actually, but I also figured there must be
a bajillion other open redirect scripts out there.

Shouldn't it be okay to limit it to requests with a valid HTTP-REFERER
header? In other words, the redirect only works if the user clicked a
link on your site, not by following a link from some other site.


-- 
Chris Snyder
http://chxo.com/


From guilhermeblanco at gmail.com  Fri Feb 22 09:34:19 2008
From: guilhermeblanco at gmail.com (Guilherme Blanco)
Date: Fri, 22 Feb 2008 11:34:19 -0300
Subject: [nycphp-talk] javascript calling php function
In-Reply-To: <b76252690802220630s1a2ed72cwf559f97590a86b54@mail.gmail.com>
References: <183816.19610.qm@web50209.mail.re2.yahoo.com>
	<8226-97725@sneakemail.com>
	<b76252690802220630s1a2ed72cwf559f97590a86b54@mail.gmail.com>
Message-ID: <bcb7aa500802220634x299b36f7q6db204fc485f5043@mail.gmail.com>

Just one point...

NEVER trust HTTP_REFERER.

You can change the HTTP_REFERER in a simple curl request.
I didn't read the thread entirely, but suggest a user to check for
referer is never a good thing.


Regards.

On Fri, Feb 22, 2008 at 11:30 AM, csnyder <chsnyder at gmail.com> wrote:
> On Fri, Feb 22, 2008 at 4:13 AM, inforequest <1j0lkq002 at sneakemail.com> wrote:
>  >
>  >  Just a warning that if possible your tracking script should limit its
>  >  function to your known intended destinations else fail or whatever.
>  >  Don't leave it "open" or you may find your site being utilized by others
>  >  as a general purpose redirect proxy, often for less-than-honorable purposes.
>  >
>  >  -=john
>  >
>
>  I was wondering about this, actually, but I also figured there must be
>  a bajillion other open redirect scripts out there.
>
>  Shouldn't it be okay to limit it to requests with a valid HTTP-REFERER
>  header? In other words, the redirect only works if the user clicked a
>  link on your site, not by following a link from some other site.
>
>
>  --
>  Chris Snyder
>  http://chxo.com/
>
>
> _______________________________________________
>  New York PHP Community Talk Mailing List
>  http://lists.nyphp.org/mailman/listinfo/talk
>
>  NYPHPCon 2006 Presentations Online
>  http://www.nyphpcon.com
>
>  Show Your Participation in New York PHP
>  http://www.nyphp.org/show_participation.php
>



-- 
Guilherme Blanco - Web Developer
CBC - Certified Bindows Consultant
Cell Phone: +55 (16) 9166-6902
MSN: guilhermeblanco at hotmail.com
URL: http://blog.bisna.com
S?o Carlos - SP/Brazil

From emailradu_c at yahoo.com  Fri Feb 22 09:42:11 2008
From: emailradu_c at yahoo.com (Radu Cirimpei)
Date: Fri, 22 Feb 2008 06:42:11 -0800 (PST)
Subject: [nycphp-talk] php script
In-Reply-To: <47BED6CF.70908@polymerdb.org>
Message-ID: <730984.24421.qm@web63211.mail.re1.yahoo.com>

Hi Allen,
  I need the remote address first for  "now how", then for site security, for my good information, and so on, never a bad behavior!
  Radu

Allen Shaw <ashaw at polymerdb.org> wrote:
  Radu Cirimpei wrote:
> If I use 'getenv("REMOTE_ADDR") ' for return the IP
> address of the
> person visiting my site, what is the best to do? 
Hi Radu,

You can give us a little more detail, right? Tell us, what are you 
trying to accomplish -- that is, /why/ do you need the remote address, 
and what are you going to use it for? 

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php


       
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile.  Try it now.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080222/c9d08ffe/attachment.html>

From chsnyder at gmail.com  Fri Feb 22 10:09:35 2008
From: chsnyder at gmail.com (csnyder)
Date: Fri, 22 Feb 2008 10:09:35 -0500
Subject: [nycphp-talk] javascript calling php function
In-Reply-To: <bcb7aa500802220634x299b36f7q6db204fc485f5043@mail.gmail.com>
References: <183816.19610.qm@web50209.mail.re2.yahoo.com>
	<8226-97725@sneakemail.com>
	<b76252690802220630s1a2ed72cwf559f97590a86b54@mail.gmail.com>
	<bcb7aa500802220634x299b36f7q6db204fc485f5043@mail.gmail.com>
Message-ID: <b76252690802220709ib725faay926c97cb27a61eef@mail.gmail.com>

On Fri, Feb 22, 2008 at 9:34 AM, Guilherme Blanco
<guilhermeblanco at gmail.com> wrote:
> Just one point...
>
>  NEVER trust HTTP_REFERER.
>
>  You can change the HTTP_REFERER in a simple curl request.
>  I didn't read the thread entirely, but suggest a user to check for
>  referer is never a good thing.
>

Right, you can't trust the referer if you fear scripted attacks.

John, is that what you were talking about, or was it something more
abstract and seo-related?

I was picturing people using the open redirect to take advantage of
your page rank by causing your site to link to theirs.

-- 
Chris Snyder
http://chxo.com/


From chsnyder at gmail.com  Fri Feb 22 10:15:32 2008
From: chsnyder at gmail.com (csnyder)
Date: Fri, 22 Feb 2008 10:15:32 -0500
Subject: [nycphp-talk] javascript calling php function
In-Reply-To: <b76252690802220709ib725faay926c97cb27a61eef@mail.gmail.com>
References: <183816.19610.qm@web50209.mail.re2.yahoo.com>
	<8226-97725@sneakemail.com>
	<b76252690802220630s1a2ed72cwf559f97590a86b54@mail.gmail.com>
	<bcb7aa500802220634x299b36f7q6db204fc485f5043@mail.gmail.com>
	<b76252690802220709ib725faay926c97cb27a61eef@mail.gmail.com>
Message-ID: <b76252690802220715u4b361527x950d726255799518@mail.gmail.com>

> On Fri, Feb 22, 2008 at 9:34 AM, Guilherme Blanco
>  <guilhermeblanco at gmail.com> wrote:
>   but suggest a user to check for referer is never a good thing.


And since you said never, there are plenty of cases where a referer
check can be used to stop abuse.

Consider misappropriation of images as an example: if an img tag on
someone else's popular site points to an image on yours, and they are
leaching your bandwidth, you can stop it by requiring a valid referer
for that image. This is because the vast majority of hits for that
image are coming from web browsers, not curl scripts.

Anytime you are trying to control browser behavior, as opposed to
scripted behaviours, you can "trust" the referer.


From ashaw at polymerdb.org  Fri Feb 22 10:15:36 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Fri, 22 Feb 2008 10:15:36 -0500
Subject: [nycphp-talk] php script
In-Reply-To: <730984.24421.qm@web63211.mail.re1.yahoo.com>
References: <730984.24421.qm@web63211.mail.re1.yahoo.com>
Message-ID: <47BEE718.6040509@polymerdb.org>

Radu Cirimpei wrote:
> I need the remote address first for  "now how", then for site 
> security, for my good information, and so on, never a bad behavior!
Hi Radu,

I didn't mean to question your motives -- sorry if it sounded that way.  
But you asked "what is the best to do?", and the answer is going to be 
"it depends on what your goals are." 

For example, you wrote:
> If I use 'getenv("REMOTE_ADDR") ' for return the IP
> address of the
> person visiting my site, what is the best to do? To
> save in a variable, like '$ip = getenv("REMOTE_ADDR");
Why store it in a variable?  This is probably not necessary unless you 
plan to access the value many times over the course of the script, in 
which case calling getenv() many times is a waste of processing power.
> , then insert it in a database(MySQL),
Why store it in the database?  If you want to access it again later, a 
database may be the best place to keep it, but you might also just as 
well keep it in a file somewhere.  Either way, if you don't store it 
somewhere on disk it will be gone later. 
> then take it
> with a sql query and write it in another place saw
> only by me?
I would expect the database is seen only by you.  If it's not, you may 
have trouble finding another place that is.  Either way, you probably 
don't need to write it to two places -- pick the best one and use that.
> <?php
> $ip = getenv("REMOTE_ADDR") ;
> ?> -where can I place this? From the begin of
> index.php?
That depends on the structure of your script.  I would recommend that 
you define that variable just before it's used, not necessarily at the 
top of your script.  Again, it totally depends on the logical flow of 
your scripts.

Feel free to add more detail -- I or someone else here may be able to 
give you more specific answers.

Best Luck,
Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From rolan at omnistep.com  Fri Feb 22 11:47:37 2008
From: rolan at omnistep.com (Rolan Yang)
Date: Fri, 22 Feb 2008 11:47:37 -0500
Subject: [nycphp-talk] javascript calling php function
In-Reply-To: <b76252690802220709ib725faay926c97cb27a61eef@mail.gmail.com>
References: <183816.19610.qm@web50209.mail.re2.yahoo.com>	<8226-97725@sneakemail.com>	<b76252690802220630s1a2ed72cwf559f97590a86b54@mail.gmail.com>	<bcb7aa500802220634x299b36f7q6db204fc485f5043@mail.gmail.com>
	<b76252690802220709ib725faay926c97cb27a61eef@mail.gmail.com>
Message-ID: <47BEFCA9.8040400@omnistep.com>

csnyder wrote:
> Right, you can't trust the referer if you fear scripted attacks.
>
> John, is that what you were talking about, or was it something more
> abstract and seo-related?
>
> I was picturing people using the open redirect to take advantage of
> your page rank by causing your site to link to theirs.
>
>   

Your paranoia is well justified. Open redirects are exploited by 
unsavory people in a number of ways. I came across a phishing email 
recently posing as a fake "Paypal confirmation". In the page was a link 
which appeared to point at aol.com (some 1/2 internet savvy people 
glance at the url to see if it points to a "reputable" site before 
clicking away on it). The aol.com link led to a well constructed 
imitation of the Paypal login page which was intended to maliciously 
steal accounts. Here is an example of the link:

http://www.aol.com/redir.adp?_e_t=ap&_a_v=2.0&_a_i=100124311x1116601028x1077500809&_url=http://www.nyphp.org

If you want to peek at a copy of the original phishing mail, check out 
http://www.datawhorehouse.com/0day/paypalphish

The safer thing for Susan to do would probably be to put all the valid 
redirect URL's in an array like:

redir.php:

<?php
$validURLS=array('
    0=>'www.mysite.com',
    1=>'www.yahoo.com',
    2=>'www.nyphp.org',
    3=>'www.php.net'
);

// some code to store hit in db logs goes here

header('Location: http://'.intval($_GET['r']));
?>

~Rolan



~Rolan


From matt at atopia.net  Fri Feb 22 11:53:16 2008
From: matt at atopia.net (Matt Juszczak)
Date: Fri, 22 Feb 2008 11:53:16 -0500 (EST)
Subject: [nycphp-talk] Best way to develop a PHP web system?
Message-ID: <20080222115055.J38008@mercury.atopia.net>

Hey folks,

I've finally removed myself from all mailing lists that I was on EXCEPT 
the NY*.* lists, so now I can stop sending my emails to /dev/null and 
actually be engaged again without getting 500+ messages a day :)

Anyway, I have a question that I'm hoping some people can assist me with. 
I need to design an account portal for my personal company.  Basically, 
I'd like to:

- Have basic login/logout functionality, change password, etc.
- Have a module system with access control (this user can access this 
module, etc.)
- Be able to import my existing HTML template into this system.

I could design my own, as it would be fairly straight forward to write 
something like this, but I'm wondering if others have pulled this off 
using open source software or another easy solution?  I don't want to go 
TOO complex if I don't have to.

Thanks!

-Matt


From asmith at observer.com  Fri Feb 22 12:00:29 2008
From: asmith at observer.com (Austin Smith)
Date: Fri, 22 Feb 2008 12:00:29 -0500
Subject: [nycphp-talk] Best way to develop a PHP web system?
In-Reply-To: <20080222115055.J38008@mercury.atopia.net>
References: <20080222115055.J38008@mercury.atopia.net>
Message-ID: <68a246880802220900j4c764a5he9cc00c08e4eb38f@mail.gmail.com>

I'd advocate Drupal. It's not perfect, and I don't love doing serious
development with it, but for ease of use and choice of modules, it's pretty
hard to beat.

On Fri, Feb 22, 2008 at 11:53 AM, Matt Juszczak <matt at atopia.net> wrote:

> Hey folks,
>
> I've finally removed myself from all mailing lists that I was on EXCEPT
> the NY*.* lists, so now I can stop sending my emails to /dev/null and
> actually be engaged again without getting 500+ messages a day :)
>
> Anyway, I have a question that I'm hoping some people can assist me with.
> I need to design an account portal for my personal company.  Basically,
> I'd like to:
>
> - Have basic login/logout functionality, change password, etc.
> - Have a module system with access control (this user can access this
> module, etc.)
> - Be able to import my existing HTML template into this system.
>
> I could design my own, as it would be fairly straight forward to write
> something like this, but I'm wondering if others have pulled this off
> using open source software or another easy solution?  I don't want to go
> TOO complex if I don't have to.
>
> Thanks!
>
> -Matt
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080222/00987a12/attachment.html>

From aarong at thinkcomputer.com  Fri Feb 22 12:04:41 2008
From: aarong at thinkcomputer.com (Aaron Greenspan)
Date: Fri, 22 Feb 2008 09:04:41 -0800
Subject: [nycphp-talk] Re: Best way to develop a PHP web system?
In-Reply-To: <200802221700.m1MH0RrE017066@kermit.thinkcomputer.com>
References: <200802221700.m1MH0RrE017066@kermit.thinkcomputer.com>
Message-ID: <47BF00A9.9020709@thinkcomputer.com>

Matt,

You should take a look at our Lampshade framework. It's open-source and 
free for personal use.

http://www.thinkcomputer.com/software/lampshade/index.html

If you download the framework and the starter kit, I think you'll 
probably have your application up and running in under an hour with all 
of the features you described (authentication; security levels; HTML 
templates).

Let me know if you have any questions.

Aaron

Aaron Greenspan
President & CEO
Think Computer Corporation

http://www.thinkcomputer.com


From dorgan at donaldorgan.com  Fri Feb 22 12:05:58 2008
From: dorgan at donaldorgan.com (Donald J Organ IV)
Date: Fri, 22 Feb 2008 12:05:58 -0500
Subject: [nycphp-talk] Best way to develop a PHP web system?
In-Reply-To: <20080222115055.J38008@mercury.atopia.net>
References: <20080222115055.J38008@mercury.atopia.net>
Message-ID: <47BF00F6.7070305@donaldorgan.com>

Check out the Andromeda Database Framework, 
http://www.andromeda-project.org/  I believe it will handle all your 
needs and then some.

Matt Juszczak wrote:
> Hey folks,
>
> I've finally removed myself from all mailing lists that I was on 
> EXCEPT the NY*.* lists, so now I can stop sending my emails to 
> /dev/null and actually be engaged again without getting 500+ messages 
> a day :)
>
> Anyway, I have a question that I'm hoping some people can assist me 
> with. I need to design an account portal for my personal company.  
> Basically, I'd like to:
>
> - Have basic login/logout functionality, change password, etc.
> - Have a module system with access control (this user can access this 
> module, etc.)
> - Be able to import my existing HTML template into this system.
>
> I could design my own, as it would be fairly straight forward to write 
> something like this, but I'm wondering if others have pulled this off 
> using open source software or another easy solution?  I don't want to 
> go TOO complex if I don't have to.
>
> Thanks!
>
> -Matt
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php



From jmcgraw1 at gmail.com  Fri Feb 22 12:07:54 2008
From: jmcgraw1 at gmail.com (Jake McGraw)
Date: Fri, 22 Feb 2008 12:07:54 -0500
Subject: [nycphp-talk] Re: Best way to develop a PHP web system?
In-Reply-To: <47BF00A9.9020709@thinkcomputer.com>
References: <200802221700.m1MH0RrE017066@kermit.thinkcomputer.com>
	<47BF00A9.9020709@thinkcomputer.com>
Message-ID: <e065b8610802220907j7d999276r104b098094c6d4fd@mail.gmail.com>

Currently working with Zend Framework, most every framework does what
you're talking about, but I like Zend because:

a. You can very easily use individual components without loading the
entire library
b. Your application is organized in a very simple manner
c. Zend Studio has Zend Framework built in
d. Very well documented at framework.zend.com
e. It's Zend, so you can rest assured it's not going anywhere for awhile

- jake

On Fri, Feb 22, 2008 at 12:04 PM, Aaron Greenspan
<aarong at thinkcomputer.com> wrote:
> Matt,
>
>  You should take a look at our Lampshade framework. It's open-source and
>  free for personal use.
>
>  http://www.thinkcomputer.com/software/lampshade/index.html
>
>  If you download the framework and the starter kit, I think you'll
>  probably have your application up and running in under an hour with all
>  of the features you described (authentication; security levels; HTML
>  templates).
>
>  Let me know if you have any questions.
>
>  Aaron
>
>  Aaron Greenspan
>  President & CEO
>  Think Computer Corporation
>
>  http://www.thinkcomputer.com
>
>
> _______________________________________________
>  New York PHP Community Talk Mailing List
>  http://lists.nyphp.org/mailman/listinfo/talk
>
>  NYPHPCon 2006 Presentations Online
>  http://www.nyphpcon.com
>
>  Show Your Participation in New York PHP
>  http://www.nyphp.org/show_participation.php
>


From matt at atopia.net  Fri Feb 22 12:09:32 2008
From: matt at atopia.net (Matt Juszczak)
Date: Fri, 22 Feb 2008 12:09:32 -0500 (EST)
Subject: [nycphp-talk] Best way to develop a PHP web system?
In-Reply-To: <47BF00F6.7070305@donaldorgan.com>
References: <20080222115055.J38008@mercury.atopia.net>
	<47BF00F6.7070305@donaldorgan.com>
Message-ID: <20080222120908.C39454@mercury.atopia.net>

How hard is it to take something like this and adapt it to an existing 
HTML layout?  I don't mind RTFM, but I want to make sure if I invest the 
time it can do what I want.

On Fri, 22 Feb 2008, Donald J Organ IV wrote:

> Check out the Andromeda Database Framework, http://www.andromeda-project.org/ 
> I believe it will handle all your needs and then some.
>
> Matt Juszczak wrote:
>> Hey folks,
>> 
>> I've finally removed myself from all mailing lists that I was on EXCEPT the 
>> NY*.* lists, so now I can stop sending my emails to /dev/null and actually 
>> be engaged again without getting 500+ messages a day :)
>> 
>> Anyway, I have a question that I'm hoping some people can assist me with. I 
>> need to design an account portal for my personal company.  Basically, I'd 
>> like to:
>> 
>> - Have basic login/logout functionality, change password, etc.
>> - Have a module system with access control (this user can access this 
>> module, etc.)
>> - Be able to import my existing HTML template into this system.
>> 
>> I could design my own, as it would be fairly straight forward to write 
>> something like this, but I'm wondering if others have pulled this off using 
>> open source software or another easy solution?  I don't want to go TOO 
>> complex if I don't have to.
>> 
>> Thanks!
>> 
>> -Matt
>> _______________________________________________
>> New York PHP Community Talk Mailing List
>> http://lists.nyphp.org/mailman/listinfo/talk
>> 
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>> 
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
> !DSPAM:47bf0145393039274818253!
>


From asmith at observer.com  Fri Feb 22 12:29:17 2008
From: asmith at observer.com (Austin Smith)
Date: Fri, 22 Feb 2008 12:29:17 -0500
Subject: [nycphp-talk] Best way to develop a PHP web system?
In-Reply-To: <20080222120908.C39454@mercury.atopia.net>
References: <20080222115055.J38008@mercury.atopia.net>
	<47BF00F6.7070305@donaldorgan.com>
	<20080222120908.C39454@mercury.atopia.net>
Message-ID: <68a246880802220929r43c4dc56va95fca8934643043@mail.gmail.com>

Hoping to find something interesting and new in the Open Source community, I
downloaded Lampshade... and it's not open source by any definition I know.
Open source means you can change the source code and then distribute your
changes, the source code is freely available (not "up to the owner" whether
to distribute or not) and doesn't discriminate between uses of the software
(personal vs. corporate, government, and academic use for example).

I'm sure the software is just fine, but calling it open source (even if you
secretly mean something different by "open-source") is misleading and
potentially damaging to the vast communities that created the components of
LAMP in the first place. "Open Source" means more than just "can view and
edit the source." Lampshade is Shareware.

I would give +1 to Zend, which I've had great success with, but for a portal
site, you may have to do too much heavy lifting with Zend. I still advocate
Drupal, which will be easy to create a custom layout for, has a massive
community, and a very good book.

Austin

On Fri, Feb 22, 2008 at 12:09 PM, Matt Juszczak <matt at atopia.net> wrote:

> How hard is it to take something like this and adapt it to an existing
> HTML layout?  I don't mind RTFM, but I want to make sure if I invest the
> time it can do what I want.
>
> On Fri, 22 Feb 2008, Donald J Organ IV wrote:
>
> > Check out the Andromeda Database Framework,
> http://www.andromeda-project.org/
> > I believe it will handle all your needs and then some.
> >
> > Matt Juszczak wrote:
> >> Hey folks,
> >>
> >> I've finally removed myself from all mailing lists that I was on EXCEPT
> the
> >> NY*.* lists, so now I can stop sending my emails to /dev/null and
> actually
> >> be engaged again without getting 500+ messages a day :)
> >>
> >> Anyway, I have a question that I'm hoping some people can assist me
> with. I
> >> need to design an account portal for my personal company.  Basically,
> I'd
> >> like to:
> >>
> >> - Have basic login/logout functionality, change password, etc.
> >> - Have a module system with access control (this user can access this
> >> module, etc.)
> >> - Be able to import my existing HTML template into this system.
> >>
> >> I could design my own, as it would be fairly straight forward to write
> >> something like this, but I'm wondering if others have pulled this off
> using
> >> open source software or another easy solution?  I don't want to go TOO
> >> complex if I don't have to.
> >>
> >> Thanks!
> >>
> >> -Matt
> >> _______________________________________________
> >> New York PHP Community Talk Mailing List
> >> http://lists.nyphp.org/mailman/listinfo/talk
> >>
> >> NYPHPCon 2006 Presentations Online
> >> http://www.nyphpcon.com
> >>
> >> Show Your Participation in New York PHP
> >> http://www.nyphp.org/show_participation.php
> >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
> >
> > !DSPAM:47bf0145393039274818253!
> >
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080222/f38adf62/attachment.html>

From david at davidmintz.org  Fri Feb 22 13:07:17 2008
From: david at davidmintz.org (David Mintz)
Date: Fri, 22 Feb 2008 13:07:17 -0500
Subject: [nycphp-talk] Best way to develop a PHP web system?
In-Reply-To: <68a246880802220929r43c4dc56va95fca8934643043@mail.gmail.com>
References: <20080222115055.J38008@mercury.atopia.net>
	<47BF00F6.7070305@donaldorgan.com>
	<20080222120908.C39454@mercury.atopia.net>
	<68a246880802220929r43c4dc56va95fca8934643043@mail.gmail.com>
Message-ID: <721f1cc50802221007h4e7e9f2ej5fbe77a0af134854@mail.gmail.com>

I sometimes wonder -- and I know we are drifting OT here -- what to do where
you need both Zend Framework and something like Drupal to co-exist on one
site. ZF for your custom database type stuff, Drupal for CMS. Sure, easy to
install both independently, but how to keep the look (view, template,
what-have-you) in sync on both without going nuts?

On Fri, Feb 22, 2008 at 12:29 PM, Austin Smith <asmith at observer.com> wrote:

> <snip/>
> I would give +1 to Zend, which I've had great success with, but for a
> portal site, you may have to do too much heavy lifting with Zend. I still
> advocate Drupal, which will be easy to create a custom layout for, has a
> massive community, and a very good book.
>
> Austin
>
>
> On Fri, Feb 22, 2008 at 12:09 PM, Matt Juszczak <matt at atopia.net> wrote:
>
> > How hard is it to take something like this and adapt it to an existing
> > HTML layout?  I don't mind RTFM, but I want to make sure if I invest the
> > time it can do what I want.<snip/>
> >
>
-- 
David Mintz
http://davidmintz.org/

The subtle source is clear and bright
The tributary streams flow through the darkness
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080222/8d105ff7/attachment.html>

From asmith at observer.com  Fri Feb 22 13:15:15 2008
From: asmith at observer.com (Austin Smith)
Date: Fri, 22 Feb 2008 13:15:15 -0500
Subject: [nycphp-talk] Best way to develop a PHP web system?
In-Reply-To: <721f1cc50802221007h4e7e9f2ej5fbe77a0af134854@mail.gmail.com>
References: <20080222115055.J38008@mercury.atopia.net>
	<47BF00F6.7070305@donaldorgan.com>
	<20080222120908.C39454@mercury.atopia.net>
	<68a246880802220929r43c4dc56va95fca8934643043@mail.gmail.com>
	<721f1cc50802221007h4e7e9f2ej5fbe77a0af134854@mail.gmail.com>
Message-ID: <68a246880802221015t49e557dahebf91c2eb83202b3@mail.gmail.com>

I think it'd be quite difficult to make them work well _together_ but if you
just wanted access to the same database, it wouldn't be so bad. The problem
is really on Drupal's end... they make everything quite modular, which is
nice, but the DB layer is not so modular. If you wanted to integrate Zend
Framework components into a custom Drupal module, that wouldn't be so bad
either. You can really code Drupal modules however you want as long as you
implement the right Drupal hooks.

Systems other than Drupal and Zend, I'm not so sure. I wouldn't want to try
to integrate Symfony with either, that's for sure.

On Fri, Feb 22, 2008 at 1:07 PM, David Mintz <david at davidmintz.org> wrote:

> I sometimes wonder -- and I know we are drifting OT here -- what to do
> where you need both Zend Framework and something like Drupal to co-exist on
> one site. ZF for your custom database type stuff, Drupal for CMS. Sure, easy
> to install both independently, but how to keep the look (view, template,
> what-have-you) in sync on both without going nuts?
>
> On Fri, Feb 22, 2008 at 12:29 PM, Austin Smith <asmith at observer.com>
> wrote:
>
> > <snip/>
> > I would give +1 to Zend, which I've had great success with, but for a
> > portal site, you may have to do too much heavy lifting with Zend. I still
> > advocate Drupal, which will be easy to create a custom layout for, has a
> > massive community, and a very good book.
> >
> > Austin
> >
> >
> > On Fri, Feb 22, 2008 at 12:09 PM, Matt Juszczak <matt at atopia.net> wrote:
> >
> > > How hard is it to take something like this and adapt it to an existing
> > > HTML layout?  I don't mind RTFM, but I want to make sure if I invest
> > > the
> > > time it can do what I want.<snip/>
> > >
> >
> --
> David Mintz
> http://davidmintz.org/
>
> The subtle source is clear and bright
> The tributary streams flow through the darkness
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080222/a40519c2/attachment.html>

From jmcgraw1 at gmail.com  Fri Feb 22 13:49:51 2008
From: jmcgraw1 at gmail.com (Jake McGraw)
Date: Fri, 22 Feb 2008 13:49:51 -0500
Subject: [nycphp-talk] Best way to develop a PHP web system?
In-Reply-To: <68a246880802221015t49e557dahebf91c2eb83202b3@mail.gmail.com>
References: <20080222115055.J38008@mercury.atopia.net>
	<47BF00F6.7070305@donaldorgan.com>
	<20080222120908.C39454@mercury.atopia.net>
	<68a246880802220929r43c4dc56va95fca8934643043@mail.gmail.com>
	<721f1cc50802221007h4e7e9f2ej5fbe77a0af134854@mail.gmail.com>
	<68a246880802221015t49e557dahebf91c2eb83202b3@mail.gmail.com>
Message-ID: <e065b8610802221049hc045626v2b79489b912c98c5@mail.gmail.com>

Zend components can be used completely independent from the Zend
Framework, in your Drupal boot strapper:

require_once 'Zend/Loader.php';

function __autoload($class) {
  if (strpos($class,'Zend')!==FALSE) {
    Zend_Loader::loadClass($class);
  }
}

You can then go to town with Zend in Drupal, or any framework for that matter.

- jake

On Fri, Feb 22, 2008 at 1:15 PM, Austin Smith <asmith at observer.com> wrote:
> I think it'd be quite difficult to make them work well _together_ but if you
> just wanted access to the same database, it wouldn't be so bad. The problem
> is really on Drupal's end... they make everything quite modular, which is
> nice, but the DB layer is not so modular. If you wanted to integrate Zend
> Framework components into a custom Drupal module, that wouldn't be so bad
> either. You can really code Drupal modules however you want as long as you
> implement the right Drupal hooks.
>
> Systems other than Drupal and Zend, I'm not so sure. I wouldn't want to try
> to integrate Symfony with either, that's for sure.
>
>
>
> On Fri, Feb 22, 2008 at 1:07 PM, David Mintz <david at davidmintz.org> wrote:
>
> > I sometimes wonder -- and I know we are drifting OT here -- what to do
> where you need both Zend Framework and something like Drupal to co-exist on
> one site. ZF for your custom database type stuff, Drupal for CMS. Sure, easy
> to install both independently, but how to keep the look (view, template,
> what-have-you) in sync on both without going nuts?
> >
> >
> > On Fri, Feb 22, 2008 at 12:29 PM, Austin Smith <asmith at observer.com>
> wrote:
> >
> > > <snip/>
> > >
> > > I would give +1 to Zend, which I've had great success with, but for a
> portal site, you may have to do too much heavy lifting with Zend. I still
> advocate Drupal, which will be easy to create a custom layout for, has a
> massive community, and a very good book.
> > >
> > > Austin
> > >
> > >
> > >
> > >
> > >
> > >
> > > On Fri, Feb 22, 2008 at 12:09 PM, Matt Juszczak <matt at atopia.net> wrote:
> > >
> > > >
> > > > How hard is it to take something like this and adapt it to an existing
> > > > HTML layout?  I don't mind RTFM, but I want to make sure if I invest
> the
> > > > time it can do what I want.<snip/>
> > > >
> > >
> >
> > --
> > David Mintz
> > http://davidmintz.org/
> >
> > The subtle source is clear and bright
> > The tributary streams flow through the darkness
>
>
> _______________________________________________
>  New York PHP Community Talk Mailing List
>  http://lists.nyphp.org/mailman/listinfo/talk
>
>  NYPHPCon 2006 Presentations Online
>  http://www.nyphpcon.com
>
>  Show Your Participation in New York PHP
>  http://www.nyphp.org/show_participation.php
>


From susan_shemin at yahoo.com  Fri Feb 22 14:18:18 2008
From: susan_shemin at yahoo.com (Susan Shemin)
Date: Fri, 22 Feb 2008 11:18:18 -0800 (PST)
Subject: [nycphp-talk] javascript calling php function
Message-ID: <415989.60015.qm@web50206.mail.re2.yahoo.com>

love your insight into this and the clear example you gave!  

I tried to get the header code to work, but it wouldn't execute the php code, so I went to my saved books on devx/Safari and got some code from the PHP Cookbook about using a form with hidden variables to send the user to the clicked link, and all works well now.  (and I'll add the acceptable urls code now)

example from PHP Cookbook, section 8.3.4:

<html>
  <body onload="document.getElementById('redirectForm').submit()">
    <form id='redirectForm' method='POST' action='/done.html'>
      <input type='hidden' name='status' value='complete'/>
      <input type='hidden' name='id' value='0u812'/>
      <input type='submit' value='Please Click Here To Continue'/>
    </form>
  </body>
</html>

and just changed the action to where the user is to go and commented out the submit input line so the button wouldn't show and put my php code after the body tag.

Susan


----- Original Message ----
From: Rolan Yang <rolan at omnistep.com>
To: NYPHP Talk <talk at lists.nyphp.org>
Sent: Friday, February 22, 2008 8:47:37 AM
Subject: Re: [nycphp-talk] javascript calling php function

csnyder wrote:
> Right, you can't trust the referer if you fear scripted attacks.
>
> John, is that what you were talking about, or was it something more
> abstract and seo-related?
>
> I was picturing people using the open redirect to take advantage of
> your page rank by causing your site to link to theirs.
>
>  

Your paranoia is well justified. Open redirects are exploited by 
unsavory people in a number of ways. I came across a phishing email 
recently posing as a fake "Paypal confirmation". In the page was a link 
which appeared to point at aol.com (some 1/2 internet savvy people 
glance at the url to see if it points to a "reputable" site before 
clicking away on it). The aol.com link led to a well constructed 
imitation of the Paypal login page which was intended to maliciously 
steal accounts. Here is an example of the link:

http://www.aol.com/redir.adp?_e_t=ap&_a_v=2.0&_a_i=100124311x1116601028x1077500809&_url=http://www.nyphp.org

If you want to peek at a copy of the original phishing mail, check out 
http://www.datawhorehouse.com/0day/paypalphish

The safer thing for Susan to do would probably be to put all the valid 
redirect URL's in an array like:

redir.php:

<?php
$validURLS=array('
    0=>'www.mysite.com',
    1=>'www.yahoo.com',
    2=>'www.nyphp.org',
    3=>'www.php.net'
);

// some code to store hit in db logs goes here

header('Location: http://'.intval($_GET['r']));
?>

~Rolan



~Rolan
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080222/83621b4a/attachment.html>

From ramons at gmx.net  Fri Feb 22 19:49:45 2008
From: ramons at gmx.net (David Krings)
Date: Fri, 22 Feb 2008 19:49:45 -0500
Subject: Position of variable definitions [was: Re: [nycphp-talk] php script]
In-Reply-To: <47BEE718.6040509@polymerdb.org>
References: <730984.24421.qm@web63211.mail.re1.yahoo.com>
	<47BEE718.6040509@polymerdb.org>
Message-ID: <47BF6DA9.6070000@gmx.net>

Allen Shaw wrote:
> That depends on the structure of your script.  I would recommend that 
> you define that variable just before it's used, not necessarily at the 
> top of your script.  Again, it totally depends on the logical flow of 
> your scripts.

This is from a different thread and it caught my attention. I spend some 
considerable time in programming courses (not that it really helped, but that 
is a different story) and each and every time the instructors or authors drove 
home that one has to define and initialize variables and that this has to be 
done before doing anything else.

When I started with PHP I was reminded at my Commodore BASIC V2 programming. 
Need a variable? Go ahead and take one whenever needed. Until the scripts got 
a bit longer and the number of variables got a bit bigger that was OK. I 
forgot what exactly happened, but it probably was something abot 0, NULL, 
empty string, and FALSE not being the same. Anyhow, I got convinced the hard 
way that declaring (initializing? defining?) variables with smartly selected 
values (values that either make things work in a default manner or that cause 
the script to crash if not set correctly later) is a must.

The script doesn't care where that happens, but since I was always made 
believe that it had to be at the top (although I found that to be troublesome 
at times with session_start() not working right if it isn't the first thing 
done). My scripts usually (OK, I sometimes get lazy, but I try to stick to it) 
start off like that:

<?php
// ======================================
// This script gets called from
// - welcome.php
// - start.php
// and expects firts name and last name
// as strings via $_POST
// This script checks the input and if
// passed writes the strings to the db
// This script calls
// - connect2db
// This script returns / passes
// - success/failure string of db insert
// ======================================

// Start session
session_start();

// ======================================
// Define variables
// ======================================

// From $_POST
$firstname = "";			// Text string for first name, limited to 50 chars
$lastname = "";				// Text string for last name, limited to 50 chars

// For script
$errflag = true;			// Flag used for evalutation of input, true = error exists
$dblink = "";				// DB link
$insertquerysuccess = "Failed!";	// Return string
......


I guess you get the concept. It is a pain in the rear to keep up with it and 
maintain it, but even after months not looking at a script I know what the 
script does, what goes into it, what comes out of it, what calls it, and what 
gets called. So besides the blahblah at the top the first few dozen lines 
contain all the variable definitions. Allen suggests to "define that variable 
just before it's used, not necessarily at the top of your script". Allen or 
someone else, what is the benefit of doing it that way? What happens when you 
need to know which variables are used in a script? When you document the 
script and have to note which variables are input and which ones are output? 
Or if you know you used a variable, but do not know the name, how would you 
find it?
Allen also wrote "Again, it totally depends on the logical flow of your 
scripts". Why/when would the location of variable definitions depend on the 
logical flow of the script?

Am I missing something? Do I make my life more difficult than necessary? Is 
all the stuff the instructors said just BS? Why do I ask all these questions?

Any answers/discussions are greatly appreciated. Just to point out, I do not 
claim that my way is better. Which is why I ask if there is something better.

David


From tedd at sperling.com  Sat Feb 23 10:01:35 2008
From: tedd at sperling.com (tedd)
Date: Sat, 23 Feb 2008 10:01:35 -0500
Subject: Position of variable definitions [was: Re: [nycphp-talk] php
	script]
In-Reply-To: <47BF6DA9.6070000@gmx.net>
References: <730984.24421.qm@web63211.mail.re1.yahoo.com>
	<47BEE718.6040509@polymerdb.org> <47BF6DA9.6070000@gmx.net>
Message-ID: <p06240806c3e5e10b6052@[192.168.1.102]>

At 7:49 PM -0500 2/22/08, David Krings wrote:
>This is from a different thread and it caught my attention. I spend 
>some considerable time in programming courses (not that it really 
>helped, but that is a different story) and each and every time the 
>instructors or authors drove home that one has to define and 
>initialize variables and that this has to be done before doing 
>anything else.

No disrespect meant, but instructors teach, not program, for a living.

My dentist used to say, "Floss only the teeth you want to keep."

I say, "Document the code you want to reuse." Simple enough concept.

Where and how you document is up to you -- whatever makes your work easier.

If you work for a team, then have a group-think and come up with a 
formula that best fits with everyone's habits.

As for defining/initialize variables before they are used, in some 
languages that's required and others it isn't. But in both cases, 
variables names mean more than where they appear, IMO.

But above everything else, program for yourself. Make your code a 
thing of beauty. Something that others (including teachers) can use 
as examples of what should be done.

Cheers,

tedd
-- 
-------
http://sperling.com  http://ancientstones.com  http://earthstones.com


From ashaw at polymerdb.org  Mon Feb 25 11:36:56 2008
From: ashaw at polymerdb.org (Allen Shaw)
Date: Mon, 25 Feb 2008 10:36:56 -0600
Subject: Position of variable definitions [was: Re: [nycphp-talk] php
	script]
In-Reply-To: <47BF6DA9.6070000@gmx.net>
References: <730984.24421.qm@web63211.mail.re1.yahoo.com>	<47BEE718.6040509@polymerdb.org>
	<47BF6DA9.6070000@gmx.net>
Message-ID: <47C2EEA8.6050903@polymerdb.org>

David Krings wrote:
> Allen suggests to "define that variable just before it's used, not 
> necessarily at the top of your script". Allen or someone else, what is 
> the benefit of doing it that way? What happens when you need to know 
> which variables are used in a script? When you document the script and 
> have to note which variables are input and which ones are output? Or 
> if you know you used a variable, but do not know the name, how would 
> you find it?
This is a coding style that works for me, which I picked up from Steve 
McConell's book, /Code Complete: A Practical Handbook of Software 
Construction/.  I have no idea if that reference carries any weight with 
most folks, but I found some sense in the argument he presented for 
initializing variables as they are used, which is essentially that in 
maintaining the code it's helpful to be able to look up a few lines and 
confirm that the variable was initialized, edit the initialization, 
remove it, etc.  There's no "right way to do it," of course, but I do 
find this style to be very convenient and to lend itself to ease of 
maintenance. 

I'm not sure how often you actually need a list of all the variables 
used in a script.  For objects and functions you do need to know the 
properties, parameters, return values and such, sure.  Go ahead and 
document those clearly at the top, preferably using some standardized 
documentation method (phpDoc, doxygen, etc.).  But the temporary 
variables used within a function or method are usually only relevant in 
the lines where they're being used.  Document them where you use them, 
and save yourself the nightmare of keeping a single comprehensive 
doc-block up to date.
> Allen also wrote "Again, it totally depends on the logical flow of 
> your scripts". Why/when would the location of variable definitions 
> depend on the logical flow of the script?
If he needs to use that value in the beginning of his script, he'll have 
to define it there.  Where it's used is determined by how he wants the 
script to work.  I still recommend defining/initializing/documenting it 
as close as possible to the place it's used.

- Allen

-- 
Allen Shaw
slidePresenter (http://slides.sourceforge.net)



From ramons at gmx.net  Mon Feb 25 12:51:57 2008
From: ramons at gmx.net (David Krings)
Date: Mon, 25 Feb 2008 12:51:57 -0500
Subject: Position of variable definitions [was: Re: [nycphp-talk]
	php	script]
In-Reply-To: <47C2EEA8.6050903@polymerdb.org>
References: <730984.24421.qm@web63211.mail.re1.yahoo.com>	<47BEE718.6040509@polymerdb.org>	<47BF6DA9.6070000@gmx.net>
	<47C2EEA8.6050903@polymerdb.org>
Message-ID: <47C3003D.2050302@gmx.net>

Allen Shaw wrote:
> But the temporary 
> variables used within a function or method are usually only relevant in 
> the lines where they're being used.  Document them where you use them, 
> and save yourself the nightmare of keeping a single comprehensive 
> doc-block up to date.

That is indeed a pretty good argument and I will let it sink for a while, but 
I can't come up with any disadvantages to that.

>> Allen also wrote "Again, it totally depends on the logical flow of 
>> your scripts". Why/when would the location of variable definitions 
>> depend on the logical flow of the script?
> If he needs to use that value in the beginning of his script, he'll have 
> to define it there.  Where it's used is determined by how he wants the 
> script to work.  I still recommend defining/initializing/documenting it 
> as close as possible to the place it's used.

Oh, ok, that is what you meant.


Thanks for the response, very helpful.


David


From mitch.pirtle at gmail.com  Tue Feb 26 15:01:45 2008
From: mitch.pirtle at gmail.com (Mitch Pirtle)
Date: Tue, 26 Feb 2008 15:01:45 -0500
Subject: Position of variable definitions [was: Re: [nycphp-talk] php
	script]
In-Reply-To: <47C3003D.2050302@gmx.net>
References: <730984.24421.qm@web63211.mail.re1.yahoo.com>
	<47BEE718.6040509@polymerdb.org> <47BF6DA9.6070000@gmx.net>
	<47C2EEA8.6050903@polymerdb.org> <47C3003D.2050302@gmx.net>
Message-ID: <330532b60802261201p41ce8dadn89350c72c9c23108@mail.gmail.com>

Another consideration is in what kind of environment(s) your code will
be running, and who will be working on it. I've seen MVC-centric
frameworks take the approach of putting a method at the top of every
model that basically sets the variables that might be used by that
model, and then call them from a getVariable() or some such method
later to ensure the context is consistent. As well, this has been used
as a (kludge-like, IMHO) solution for creating codebases that need to
support PHP4 and PHP5; and basically provides a model-based namespace
and avoids the "whups, no constructors in this PHP version" problem.

The only thing I like about the concept is that you know where all
your public variables are, and it forces you to think long enough
about your variables to have an edumucated opinion on how you
implement your model.

-- Mitch


From cliff at pinestream.com  Tue Feb 26 17:46:15 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 26 Feb 2008 17:46:15 -0500
Subject: [nycphp-talk] Charsets are still driving me nuts
Message-ID: <C3EA00E7.D216%cliff@pinestream.com>

I have been validating textareas using ctype_print; however, I am starting
to get user errors. It?s amazing how many people cut and paste from MS Word.
So what appears to be simple text and a reasonably valid string actually
contains stuff that ctype_print does not like.

Does anyone use this function? Any better ideas for validating general text
areas? Just use the php filter function sanitizing control characters? Other
ideas for validation and dealing with cut ?n paste user input?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080226/a7fe931f/attachment.html>

From danielc at analysisandsolutions.com  Tue Feb 26 19:06:45 2008
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Tue, 26 Feb 2008 19:06:45 -0500
Subject: [nycphp-talk] Charsets are still driving me nuts
In-Reply-To: <C3EA00E7.D216%cliff@pinestream.com>
References: <C3EA00E7.D216%cliff@pinestream.com>
Message-ID: <20080227000645.GA23398@panix.com>

Hi Cliff:

On Tue, Feb 26, 2008 at 05:46:15PM -0500, Cliff Hirsch wrote:
> It?s amazing how many people cut and paste from MS Word.

Tell me about it.  Here's what we use:

function replace_fancy_characters($in) {
    static $search, $replace;

    if (isset($search) == false) {
        $search = array(
            '/\x96/',
            '/\x97/',
            '/\x91/',
            '/\x92/',
            '/\x93/',
            '/\x94/',
            '/\x85/',
            '/\x95/',
            '/\x09/',
            '/\xBC/',
            '/\xBD/',
            '/\xBE/',
        );

        $replace = array(
            '-',
            '--',
            "'",
            "'",
            '"',
            '"',
            '...',
            '*',
            ' ',
            '1/4',
            '1/2',
            '3/4',
        );
    }
    return preg_replace($search, $replace, $in);
}


See you,

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409


From maxarbos at yahoo.com  Tue Feb 26 23:17:23 2008
From: maxarbos at yahoo.com (Bill P.)
Date: Tue, 26 Feb 2008 20:17:23 -0800 (PST)
Subject: [nycphp-talk] Frameworks... CodeIgnite and Symfony
Message-ID: <765156.34330.qm@web90603.mail.mud.yahoo.com>

I am looking into using a framework for new projects.
Most of my projects are larger CMS / User Authentication type sites that allow a main site admin and sub admins edit/add content to a site. There are also private member sections that the site admin can add and remove users from. 

Currently, I have use Pear MDB2 and Log for good portions of the sites. 
Most of the sites seem to be following the same overall structure, but still need the flexibility to have custom functions and such.

So this being said, I am thinking that switching to a framework would be a good next step to be able to use. I like the idea of people working on the same functionality and using tested code to create more stable and reliable applications.

I am looking at CodeIgnite and Symfony.
If anyone has used both and has any feedback, that would be great.
I also want to know if sites using either of these will be able to handle heavy load and traffic?

Thanks.
Bill




       
---------------------------------
Looking for last minute shopping deals?  Find them fast with Yahoo! Search.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080226/0834fd82/attachment.html>

From bob.siegel at verizon.net  Wed Feb 27 00:19:23 2008
From: bob.siegel at verizon.net (Bob/Jules)
Date: Tue, 26 Feb 2008 23:19:23 -0600 (CST)
Subject: [nycphp-talk] Charsets are still driving me nuts
Message-ID: <26423148.1612561204089563129.JavaMail.root@vms064.mailsrvcs.net>

I am new to PHP, but I did two CMS systems in ColdFusion, so I can give you the approach I used.

Enter each "funny" character into the form and save the field (textareas in mine).
Then see what binary character(s) come back.
Then code to replace them with more conventional characters, or the html &---; codes in your app.

Attached is the zipped CF routine which might help tho you can't use it directly.
BTW, "&" in CF is for concatenation (. in php).

This problem drove also crazy for a while as the users were pasting not from Word, but from Pagemaker or something.  To add to it, I got different returned char(s) on the production server than on my box at home, which is why there are TWO sets of CF Replace()s.

Good luck!


>Charsets are still driving me nutsI have been validating textareas using ctype_print; however, I am starting to get user errors. It?s amazing how many people cut and paste from MS Word. So what appears to be simple text and a reasonably valid string actually contains stuff that ctype_print does not like.
>
>Does anyone use this function? Any better ideas for validating general text areas? Just use the php filter function sanitizing control characters? Other ideas for validation and dealing with cut ?n paste user input?
>
>
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>
>NYPHPCon 2006 Presentations Online
>http://www.nyphpcon.com
>
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php


Robert Jules Siegel
ColdFusion and PHP Web programming
-------------- next part --------------
A non-text attachment was scrubbed...
Name: FUNNIES.ZIP
Type: application/octet-stream
Size: 687 bytes
Desc: not available
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080226/a8cebdd7/attachment.obj>

From cliff at pinestream.com  Wed Feb 27 08:45:29 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Wed, 27 Feb 2008 08:45:29 -0500
Subject: [nycphp-talk] Frameworks... CodeIgnite and Symfony
In-Reply-To: <765156.34330.qm@web90603.mail.mud.yahoo.com>
Message-ID: <C3EAD3A9.D258%cliff@pinestream.com>

On 2/26/08 11:17 PM, "Bill P." <maxarbos at yahoo.com> wrote:
> I am looking at CodeIgnite and Symfony.
> I also want to know if sites using either of these will be able to handle
> heavy load and traffic?
> 
> Thanks.
> Bill
> 
Look for feedback from Nate of Cake fame. He really likes Symphony ? not!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080227/36f70636/attachment.html>

From ferencz.attila at gmail.com  Wed Feb 27 08:49:41 2008
From: ferencz.attila at gmail.com (Attila, Ferencz-Csibi)
Date: Wed, 27 Feb 2008 14:49:41 +0100
Subject: [nycphp-talk] Frameworks... CodeIgnite and Symfony
In-Reply-To: <C3EAD3A9.D258%cliff@pinestream.com>
References: <765156.34330.qm@web90603.mail.mud.yahoo.com>
	<C3EAD3A9.D258%cliff@pinestream.com>
Message-ID: <894e56a90802270549j37248b01x580c3a08d06aedb9@mail.gmail.com>

Hi,

yes - symphony is used as base framework for del.icio.us site.

A.

On Wed, Feb 27, 2008 at 2:45 PM, Cliff Hirsch <cliff at pinestream.com> wrote:

>  On 2/26/08 11:17 PM, "Bill P." <maxarbos at yahoo.com> wrote:
>
> I am looking at CodeIgnite and Symfony.
> I also want to know if sites using either of these will be able to handle
> heavy load and traffic?
>
> Thanks.
> Bill
>
> Look for feedback from Nate of Cake fame. He really likes Symphony ? not!
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080227/3bbbebbc/attachment.html>

From vel.pillai at gmail.com  Wed Feb 27 10:01:22 2008
From: vel.pillai at gmail.com (Vel Pillai)
Date: Wed, 27 Feb 2008 10:01:22 -0500
Subject: [nycphp-talk] Frameworks... CodeIgnite and Symfony
In-Reply-To: <894e56a90802270549j37248b01x580c3a08d06aedb9@mail.gmail.com>
References: <765156.34330.qm@web90603.mail.mud.yahoo.com>
	<C3EAD3A9.D258%cliff@pinestream.com>
	<894e56a90802270549j37248b01x580c3a08d06aedb9@mail.gmail.com>
Message-ID: <7dddc6030802270701p3ced54b3r9ed954ddeb137169@mail.gmail.com>

With personal experiencem  I can CodeIgniter is a light weight and fast.
Scaling really comes to writing good code and knowing your enemy,
bottlenecks.
Bloated and inefficiently written sql queries seem to be the number one
problem of site performance.

-Vel

On Wed, Feb 27, 2008 at 8:49 AM, Attila, Ferencz-Csibi <
ferencz.attila at gmail.com> wrote:

> Hi,
>
> yes - symphony is used as base framework for del.icio.us site.
>
> A.
>
> On Wed, Feb 27, 2008 at 2:45 PM, Cliff Hirsch <cliff at pinestream.com>
> wrote:
>
> >  On 2/26/08 11:17 PM, "Bill P." <maxarbos at yahoo.com> wrote:
> >
> > I am looking at CodeIgnite and Symfony.
> > I also want to know if sites using either of these will be able to
> > handle heavy load and traffic?
> >
> > Thanks.
> > Bill
> >
> > Look for feedback from Nate of Cake fame. He really likes Symphony ?
> > not!
> >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
>
>
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080227/4e57dc45/attachment.html>

From rmarscher at beaffinitive.com  Wed Feb 27 17:23:11 2008
From: rmarscher at beaffinitive.com (Rob Marscher)
Date: Wed, 27 Feb 2008 17:23:11 -0500
Subject: [nycphp-talk] Charsets are still driving me nuts
In-Reply-To: <C3EA00E7.D216%cliff@pinestream.com>
References: <C3EA00E7.D216%cliff@pinestream.com>
Message-ID: <459E5F07-662F-47E2-8F86-B6EEB85E4D6D@beaffinitive.com>

On Feb 26, 2008, at 5:46 PM, Cliff Hirsch wrote:
> I have been validating textareas using ctype_print; however, I am  
> starting to get user errors. It?s amazing how many people cut and  
> paste from MS Word. So what appears to be simple text and a  
> reasonably valid string actually contains stuff that ctype_print  
> does not like.
>
> Does anyone use this function? Any better ideas for validating  
> general text areas? Just use the php filter function sanitizing  
> control characters? Other ideas for validation and dealing with cut  
> ?n paste user input?

Are you using utf-8 encoding?  What do you need to validate/sanitize  
with the textareas?  That the input is using the correct character  
set?  Need to strip html from it?  I've had pretty good luck with  
using utf-8 and having text cut and pasted from MS Word come through  
fine.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080227/6094ac53/attachment.html>

From lk613m at yahoo.com  Wed Feb 27 18:08:53 2008
From: lk613m at yahoo.com (LK)
Date: Wed, 27 Feb 2008 15:08:53 -0800 (PST)
Subject: [nycphp-talk] HTML to PDF converter
Message-ID: <195230.98426.qm@web53310.mail.re2.yahoo.com>

Hello,

Does anyone know of an "industrial strength" HTML to PDF converter that can be launched from PHP script? I've tried some open source libraries like 

html2php ( http://sourceforge.net/projects/html2fpdf ), 
dompdf ( http://www.digitaljunkies.ca/dompdf/ ), 
HTML_ToPDF ( http://www.rustyparts.com/pdf.php ) 

but the problem is that they either crash or don't generate a faithful reproduction of the original html. Need something that does a professional job and runs on Linux.

Thanks

Leo K.


      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080227/7d216b6c/attachment.html>

From asmith at observer.com  Wed Feb 27 18:14:32 2008
From: asmith at observer.com (Austin Smith)
Date: Wed, 27 Feb 2008 18:14:32 -0500
Subject: [nycphp-talk] HTML to PDF converter
In-Reply-To: <195230.98426.qm@web53310.mail.re2.yahoo.com>
References: <195230.98426.qm@web53310.mail.re2.yahoo.com>
Message-ID: <68a246880802271514s73cb09ccg9c01dba75925fd6e@mail.gmail.com>

I've used Open Office with unoconv --
http://dag.wieers.com/home-made/unoconv/

Our PHP scripts which needed access to the routine just backticked the
command, like `python unoconv document.html -o pdf` though that command may
be a bit off. Very, very nice output, and it would accept nearly any
document format, so we used it (primarily, actually) to convert document
formats to HTML for full text searching.

On Wed, Feb 27, 2008 at 6:08 PM, LK <lk613m at yahoo.com> wrote:

> Hello,
>
> Does anyone know of an "industrial strength" HTML to PDF converter that
> can be launched from PHP script? I've tried some open source libraries like
>
> html2php ( http://sourceforge.net/projects/html2fpdf ),
> dompdf ( http://www.digitaljunkies.ca/dompdf/ ),
> HTML_ToPDF ( http://www.rustyparts.com/pdf.php )
>
> but the problem is that they either crash or don't generate a faithful
> reproduction of the original html. Need something that does a professional
> job and runs on Linux.
>
> Thanks
>
> Leo K.
>
> ------------------------------
> Looking for last minute shopping deals? Find them fast with Yahoo! Search.<http://us.rd.yahoo.com/evt=51734/*http://tools.search.yahoo.com/newsearch/category.php?category=shopping>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080227/a5b8f1e4/attachment.html>

From anoland at indigente.net  Wed Feb 27 20:16:11 2008
From: anoland at indigente.net (Adrian Noland)
Date: Wed, 27 Feb 2008 20:16:11 -0500
Subject: [nycphp-talk] Frameworks... CodeIgnite and Symfony
In-Reply-To: <7dddc6030802270701p3ced54b3r9ed954ddeb137169@mail.gmail.com>
References: <765156.34330.qm@web90603.mail.mud.yahoo.com>
	<C3EAD3A9.D258%cliff@pinestream.com>
	<894e56a90802270549j37248b01x580c3a08d06aedb9@mail.gmail.com>
	<7dddc6030802270701p3ced54b3r9ed954ddeb137169@mail.gmail.com>
Message-ID: <1d8a0e930802271716q40d6f96ei6fa606b66ccd5cbe@mail.gmail.com>

Paul M. Jones has a presentation with some benchmarks on it.
Download slides here: http://paul-m-jones.com/?p=266#comments


On 2/27/08, Vel Pillai <vel.pillai at gmail.com> wrote:
>
> With personal experiencem  I can CodeIgniter is a light weight and fast.
> Scaling really comes to writing good code and knowing your enemy,
> bottlenecks.
> Bloated and inefficiently written sql queries seem to be the number one
> problem of site performance.
>
> -Vel
>
> On Wed, Feb 27, 2008 at 8:49 AM, Attila, Ferencz-Csibi <
> ferencz.attila at gmail.com> wrote:
>
> > Hi,
> >
> > yes - symphony is used as base framework for del.icio.us site.
> >
> > A.
> >
> > On Wed, Feb 27, 2008 at 2:45 PM, Cliff Hirsch <cliff at pinestream.com>
> > wrote:
> >
> > >  On 2/26/08 11:17 PM, "Bill P." <maxarbos at yahoo.com> wrote:
> > >
> > > I am looking at CodeIgnite and Symfony.
> > > I also want to know if sites using either of these will be able to
> > > handle heavy load and traffic?
> > >
> > > Thanks.
> > > Bill
> > >
> > > Look for feedback from Nate of Cake fame. He really likes Symphony ?
> > > not!
> > >
> > > _______________________________________________
> > > New York PHP Community Talk Mailing List
> > > http://lists.nyphp.org/mailman/listinfo/talk
> > >
> > > NYPHPCon 2006 Presentations Online
> > > http://www.nyphpcon.com
> > >
> > > Show Your Participation in New York PHP
> > > http://www.nyphp.org/show_participation.php
> > >
> >
> >
> >
> >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080227/6bf305a3/attachment.html>

From dorgan at donaldorgan.com  Wed Feb 27 20:24:55 2008
From: dorgan at donaldorgan.com (Donald J Organ IV)
Date: Wed, 27 Feb 2008 20:24:55 -0500
Subject: [nycphp-talk] Frameworks... CodeIgnite and Symfony
In-Reply-To: <1d8a0e930802271716q40d6f96ei6fa606b66ccd5cbe@mail.gmail.com>
References: <765156.34330.qm@web90603.mail.mud.yahoo.com>	<C3EAD3A9.D258%cliff@pinestream.com>	<894e56a90802270549j37248b01x580c3a08d06aedb9@mail.gmail.com>	<7dddc6030802270701p3ced54b3r9ed954ddeb137169@mail.gmail.com>
	<1d8a0e930802271716q40d6f96ei6fa606b66ccd5cbe@mail.gmail.com>
Message-ID: <47C60D67.8050101@donaldorgan.com>

An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080227/9299d072/attachment.html>

From cliff at pinestream.com  Wed Feb 27 20:35:56 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Wed, 27 Feb 2008 20:35:56 -0500
Subject: [nycphp-talk] Charsets are still driving me nuts
In-Reply-To: <459E5F07-662F-47E2-8F86-B6EEB85E4D6D@beaffinitive.com>
Message-ID: <C3EB7A2C.D2E9%cliff@pinestream.com>

b 26, 2008, at 5:46 PM, Cliff Hirsch wrote:
 I have been validating textareas using ctype_print
>> 
> Are you using utf-8 encoding?  What do you need to validate/sanitize with the
> textareas?  That the input is using the correct character set?  Need to strip
> html from it?  I've had pretty good luck with using utf-8 and having text cut
> and pasted from MS Word come through fine.

I have been waffling between 8859-1 and utf-8. Regarding validating a text
area ? good question. No stripping necessary. I though ctype_print looked
good ? any reasonable printable character. Maybe textarea doesn?t need to be
validated/sanitized if everything is escaping properly? I thought the
browser took care of the charset, but don?t know for sure.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080227/a40741df/attachment.html>

From ramons at gmx.net  Wed Feb 27 21:56:20 2008
From: ramons at gmx.net (David Krings)
Date: Wed, 27 Feb 2008 21:56:20 -0500
Subject: [nycphp-talk] HTML to PDF converter
In-Reply-To: <195230.98426.qm@web53310.mail.re2.yahoo.com>
References: <195230.98426.qm@web53310.mail.re2.yahoo.com>
Message-ID: <47C622D4.8050108@gmx.net>

LK wrote:
> Hello,
>  
> Does anyone know of an "industrial strength" HTML to PDF converter that 
> can be launched from PHP script? I've tried some open source libraries like
>  
> html2php ( http://sourceforge.net/projects/html2fpdf ),
> dompdf ( http://www.digitaljunkies.ca/dompdf/ ),
> HTML_ToPDF ( http://www.rustyparts.com/pdf.php )
>  
> but the problem is that they either crash or don't generate a faithful 
> reproduction of the original html. Need something that does 
> a professional job and runs on Linux.
>  
> Thanks
>  
> Leo K.


A week or so ago I read on the MadCap forums that someone recommended using 
Prince. It supposedly takes the HTML and CSS and makes a PDF out of it. I 
haven't had time so far to take a look at it.

David


From randalrust at gmail.com  Thu Feb 28 07:44:57 2008
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 28 Feb 2008 07:44:57 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
Message-ID: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>

we are getting hundreds of hits per minute from what appear to be fake
IP addresses. i am currently writing a script that will send these
requests to an error page prior to making the database connection.

i am doing an explode() on the $_SERVER['REMOTE_HOST]  to get the
first part of the IP. Does that make sense?

this is only temporary fix. i'll need to come up with something more permanent.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From dipeshjr at yahoo.com  Thu Feb 28 08:04:30 2008
From: dipeshjr at yahoo.com (DIPESH RABADIYA)
Date: Thu, 28 Feb 2008 05:04:30 -0800 (PST)
Subject: [nycphp-talk] Urgent: Help in Defending Attack
Message-ID: <794117.30387.qm@web52803.mail.re2.yahoo.com>

just try with $_SERVER['REMOTE_ADDR'] it gives ip of client machine

----- Original Message ----
From: Randal Rust <randalrust at gmail.com>
To: NYPHP Talk <talk at lists.nyphp.org>
Sent: Thursday, February 28, 2008 4:44:57 AM
Subject: [nycphp-talk] Urgent: Help in Defending Attack

we are getting hundreds of hits per minute from what appear to be fake
IP addresses. i am currently writing a script that will send these
requests to an error page prior to making the database connection.

i am doing an explode() on the $_SERVER['REMOTE_HOST]  to get the
first part of the IP. Does that make sense?

this is only temporary fix. i'll need to come up with something more permanent.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php






      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080228/e57a90ab/attachment.html>

From randalrust at gmail.com  Thu Feb 28 08:08:05 2008
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 28 Feb 2008 08:08:05 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <794117.30387.qm@web52803.mail.re2.yahoo.com>
References: <794117.30387.qm@web52803.mail.re2.yahoo.com>
Message-ID: <a9caffe50802280508p7f1ce5ach5bdb563c56549be6@mail.gmail.com>

> just try with $_SERVER['REMOTE_ADDR'] it gives ip of client machine

yeah, that's what i meant. however, i was trying to get around using
the full IP.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From guilhermeblanco at gmail.com  Thu Feb 28 08:18:34 2008
From: guilhermeblanco at gmail.com (Guilherme Blanco)
Date: Thu, 28 Feb 2008 10:18:34 -0300
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <a9caffe50802280508p7f1ce5ach5bdb563c56549be6@mail.gmail.com>
References: <794117.30387.qm@web52803.mail.re2.yahoo.com>
	<a9caffe50802280508p7f1ce5ach5bdb563c56549be6@mail.gmail.com>
Message-ID: <bcb7aa500802280518x31e040eay2d2ee14394b8ba5b@mail.gmail.com>

Randal... try this one...

function getClientIp()
{
	// This function get the IP of an user, even when he's behind a simple proxy
	// List of possible ip sources, in order of priority
	$ip_sources = array(
	"HTTP_X_FORWARDED_FOR",
	"HTTP_X_FORWARDED",
	"HTTP_FORWARDED_FOR",
	"HTTP_FORWARDED",
	"HTTP_X_COMING_FROM",
	"HTTP_COMING_FROM",
	"REMOTE_ADDR",
	);

	foreach ($ip_sources as $ip_source) {
		if (isset($_SERVER[$ip_source])) {
			$proxy_ip = $_SERVER[$ip_source];
			break;
		}
	}

	// If the ip is still not found, try the getenv() function without
	// error reporting. This will automatically provide a FALSE result
	// on failure
	$proxy_ip = (isset($proxy_ip)) ? $proxy_ip : @getenv("REMOTE_ADDR");

	// Return the IP found
	return $proxy_ip;
}


This can help you to retrieve the right requester ip.
Later give me some feedback if it worked, please.


Regards,


On Thu, Feb 28, 2008 at 10:08 AM, Randal Rust <randalrust at gmail.com> wrote:
> > just try with $_SERVER['REMOTE_ADDR'] it gives ip of client machine
>
>  yeah, that's what i meant. however, i was trying to get around using
>  the full IP.
>
>
>
>  --
>  Randal Rust
>  R.Squared Communications
>  www.r2communications.com
>  _______________________________________________
>  New York PHP Community Talk Mailing List
>  http://lists.nyphp.org/mailman/listinfo/talk
>
>  NYPHPCon 2006 Presentations Online
>  http://www.nyphpcon.com
>
>  Show Your Participation in New York PHP
>  http://www.nyphp.org/show_participation.php
>



-- 
Guilherme Blanco - Web Developer
CBC - Certified Bindows Consultant
Cell Phone: +55 (16) 9166-6902
MSN: guilhermeblanco at hotmail.com
URL: http://blog.bisna.com
S?o Carlos - SP/Brazil

From david at davidmintz.org  Thu Feb 28 09:59:14 2008
From: david at davidmintz.org (David Mintz)
Date: Thu, 28 Feb 2008 09:59:14 -0500
Subject: [nycphp-talk] Frameworks... CodeIgnite and Symfony
In-Reply-To: <47C60D67.8050101@donaldorgan.com>
References: <765156.34330.qm@web90603.mail.mud.yahoo.com>
	<C3EAD3A9.D258%cliff@pinestream.com>
	<894e56a90802270549j37248b01x580c3a08d06aedb9@mail.gmail.com>
	<7dddc6030802270701p3ced54b3r9ed954ddeb137169@mail.gmail.com>
	<1d8a0e930802271716q40d6f96ei6fa606b66ccd5cbe@mail.gmail.com>
	<47C60D67.8050101@donaldorgan.com>
Message-ID: <721f1cc50802280659h7a15cbffgd0c7f4a4515b5ce3@mail.gmail.com>

Since this is a religious debate, I propose that we slaughter anyone who
disagrees.

Hopefully the Zend Framework will be the last man standing.

On Wed, Feb 27, 2008 at 8:24 PM, Donald J Organ IV <dorgan at donaldorgan.com>
wrote:

>  All this talk about frameworks and no one has mentioned the framework
> made by a NY local(Ken Downs)....Andromeda
>
> There have been some great updates in this framework lately.
> Check it out  http://www.andromeda-project.org
>
>
>
>
>
> Adrian Noland wrote:
>
> Paul M. Jones has a presentation with some benchmarks on it.
> Download slides here: http://paul-m-jones.com/?p=266#comments
>
>
> On 2/27/08, Vel Pillai <vel.pillai at gmail.com> wrote:
> >
> > With personal experiencem  I can CodeIgniter is a light weight and fast.
> >
> > Scaling really comes to writing good code and knowing your enemy,
> > bottlenecks.
> > Bloated and inefficiently written sql queries seem to be the number one
> > problem of site performance.
> >
> > -Vel
> >
> > On Wed, Feb 27, 2008 at 8:49 AM, Attila, Ferencz-Csibi <
> > ferencz.attila at gmail.com> wrote:
> >
> > > Hi,
> > >
> > > yes - symphony is used as base framework for del.icio.us site.
> > >
> > > A.
> > >
> > >  On Wed, Feb 27, 2008 at 2:45 PM, Cliff Hirsch <cliff at pinestream.com>
> > > wrote:
> > >
> > > >  On 2/26/08 11:17 PM, "Bill P." <maxarbos at yahoo.com> wrote:
> > > >
> > > > I am looking at CodeIgnite and Symfony.
> > > > I also want to know if sites using either of these will be able to
> > > > handle heavy load and traffic?
> > > >
> > > > Thanks.
> > > > Bill
> > > >
> > > >  Look for feedback from Nate of Cake fame. He really likes Symphony
> > > > ? not!
> > > >
> > > >  _______________________________________________
> > > > New York PHP Community Talk Mailing List
> > > > http://lists.nyphp.org/mailman/listinfo/talk
> > > >
> > > > NYPHPCon 2006 Presentations Online
> > > > http://www.nyphpcon.com
> > > >
> > > > Show Your Participation in New York PHP
> > > > http://www.nyphp.org/show_participation.php
> > > >
> > >
> > >
> > >
> > >
> > > _______________________________________________
> > > New York PHP Community Talk Mailing List
> > > http://lists.nyphp.org/mailman/listinfo/talk
> > >
> > > NYPHPCon 2006 Presentations Online
> > > http://www.nyphpcon.com
> > >
> > > Show Your Participation in New York PHP
> > > http://www.nyphp.org/show_participation.php
> > >
> >
> >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
>
> ------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing Listhttp://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Onlinehttp://www.nyphpcon.com
>
> Show Your Participation in New York PHPhttp://www.nyphp.org/show_participation.php
>
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



-- 
David Mintz
http://davidmintz.org/

The subtle source is clear and bright
The tributary streams flow through the darkness
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080228/dfad339c/attachment.html>

From cliff at pinestream.com  Thu Feb 28 10:33:32 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Thu, 28 Feb 2008 10:33:32 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
Message-ID: <C3EC3E7C.D32A%cliff@pinestream.com>

On 2/28/08 7:44 AM, "Randal Rust" <randalrust at gmail.com> wrote:

> we are getting hundreds of hits per minute from what appear to be fake
> IP addresses. i am currently writing a script that will send these
> requests to an error page prior to making the database connection.
> 
> i am doing an explode() on the $_SERVER['REMOTE_HOST]  to get the
> first part of the IP. Does that make sense?
> 
> this is only temporary fix. i'll need to come up with something more
> permanent.

What kind of hit? Does the url have "attack" strings? Check out phpids --
might help.




From brian at realm3.com  Thu Feb 28 10:35:04 2008
From: brian at realm3.com (Brian D.)
Date: Thu, 28 Feb 2008 10:35:04 -0500
Subject: [nycphp-talk] Frameworks... CodeIgnite and Symfony
In-Reply-To: <721f1cc50802280659h7a15cbffgd0c7f4a4515b5ce3@mail.gmail.com>
References: <765156.34330.qm@web90603.mail.mud.yahoo.com>
	<C3EAD3A9.D258%cliff@pinestream.com>
	<894e56a90802270549j37248b01x580c3a08d06aedb9@mail.gmail.com>
	<7dddc6030802270701p3ced54b3r9ed954ddeb137169@mail.gmail.com>
	<1d8a0e930802271716q40d6f96ei6fa606b66ccd5cbe@mail.gmail.com>
	<47C60D67.8050101@donaldorgan.com>
	<721f1cc50802280659h7a15cbffgd0c7f4a4515b5ce3@mail.gmail.com>
Message-ID: <c7c53eda0802280735h11390f8ekc7b71c35316d4049@mail.gmail.com>

Here's to hoping that, whatever your chosen framework is, it remains
to be supported for a long, long time to come by legions of great
open-source programmers.

(What scares me the most about any framework is the likelyhood of
eventual abandonment.)

On Thu, Feb 28, 2008 at 9:59 AM, David Mintz <david at davidmintz.org> wrote:
> Since this is a religious debate, I propose that we slaughter anyone who
> disagrees.
>
> Hopefully the Zend Framework will be the last man standing.
>
>
>
> On Wed, Feb 27, 2008 at 8:24 PM, Donald J Organ IV <dorgan at donaldorgan.com>
> wrote:
>
> >
> > All this talk about frameworks and no one has mentioned the framework made
> by a NY local(Ken Downs)....Andromeda
> >
> > There have been some great updates in this framework lately.
> > Check it out  http://www.andromeda-project.org
> >
> >
> >
> >
> >
> > Adrian Noland wrote:
> >
> >
> >
> > Paul M. Jones has a presentation with some benchmarks on it.
> > Download slides here: http://paul-m-jones.com/?p=266#comments
> >
> >
> >
> > On 2/27/08, Vel Pillai <vel.pillai at gmail.com> wrote:
> > > With personal experiencem  I can CodeIgniter is a light weight and fast.
> > > Scaling really comes to writing good code and knowing your enemy,
> bottlenecks.
> > > Bloated and inefficiently written sql queries seem to be the number one
> problem of site performance.
> > >
> > > -Vel
> > >
> > >
> > >
> > > On Wed, Feb 27, 2008 at 8:49 AM, Attila, Ferencz-Csibi
> <ferencz.attila at gmail.com> wrote:
> > >
> > > > Hi,
> > > >
> > > > yes - symphony is used as base framework for del.icio.us site.
> > > >
> > > > A.
> > > >
> > > >
> > > >
> > > >
> > > > On Wed, Feb 27, 2008 at 2:45 PM, Cliff Hirsch <cliff at pinestream.com>
> wrote:
> > > >
> > > > >
> > > > >
> > > > >
> > > > > On 2/26/08 11:17 PM, "Bill P." <maxarbos at yahoo.com> wrote:
> > > > >
> > > > > I am looking at CodeIgnite and Symfony.
> > > > > I also want to know if sites using either of these will be able to
> handle heavy load and traffic?
> > > > >
> > > > > Thanks.
> > > > > Bill
> > > > >
> > > > > Look for feedback from Nate of Cake fame. He really likes Symphony ?
> not!
> > > > > _______________________________________________
> > > > > New York PHP Community Talk Mailing List
> > > > > http://lists.nyphp.org/mailman/listinfo/talk
> > > > >
> > > > > NYPHPCon 2006 Presentations Online
> > > > > http://www.nyphpcon.com
> > > > >
> > > > > Show Your Participation in New York PHP
> > > > > http://www.nyphp.org/show_participation.php
> > > > >
> > > >
> > > >
> > > >
> > > >
> > > > _______________________________________________
> > > > New York PHP Community Talk Mailing List
> > > > http://lists.nyphp.org/mailman/listinfo/talk
> > > >
> > > > NYPHPCon 2006 Presentations Online
> > > > http://www.nyphpcon.com
> > > >
> > > > Show Your Participation in New York PHP
> > > > http://www.nyphp.org/show_participation.php
> > > >
> > >
> > >
> > > _______________________________________________
> > > New York PHP Community Talk Mailing List
> > > http://lists.nyphp.org/mailman/listinfo/talk
> > >
> > > NYPHPCon 2006 Presentations Online
> > > http://www.nyphpcon.com
> > >
> > > Show Your Participation in New York PHP
> > > http://www.nyphp.org/show_participation.php
> > >
> >
> > ________________________________
>
> >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
> >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
>
>
>
> --
> David Mintz
> http://davidmintz.org/
>
> The subtle source is clear and bright
> The tributary streams flow through the darkness
> _______________________________________________
>  New York PHP Community Talk Mailing List
>  http://lists.nyphp.org/mailman/listinfo/talk
>
>  NYPHPCon 2006 Presentations Online
>  http://www.nyphpcon.com
>
>  Show Your Participation in New York PHP
>  http://www.nyphp.org/show_participation.php
>



-- 
realm3 web applications [realm3.com]
freelance consulting, application development
(917) 512-3594


From randalrust at gmail.com  Thu Feb 28 10:41:44 2008
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 28 Feb 2008 10:41:44 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <C3EC3E7C.D32A%cliff@pinestream.com>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
	<C3EC3E7C.D32A%cliff@pinestream.com>
Message-ID: <a9caffe50802280741x660c4e41o58b1afd7229efafd@mail.gmail.com>

On Thu, Feb 28, 2008 at 10:33 AM, Cliff Hirsch <cliff at pinestream.com> wrote:

>  What kind of hit? Does the url have "attack" strings? Check out phpids --
>  might help.

here is what i know:

1. got up this AM and was getting error messages that there are too
many connections to the database
2. the hosting company looked at the server logs and sent me this:

7-0 28568 0/1/1 W 0.08 5 0 0.0 0.01 0.01 64.185.201.77
ohiohistorycentral.org GET /entry.php?rec=891 HTTP/1.0
8-0 28573 0/1/1 W 0.00 4 0 0.0 0.04 0.04 210.89.51.41
ohiohistorycentral.org GET /entry.php?rec=271 HTTP/1.0
9-0 28574 0/2/2 W 0.08 3 0 0.0 0.05 0.05 82.87.19.8
ohiohistorycentral.org GET /entry.php?rec=271 HTTP/1.0
10-0 28575 0/0/0 W 0.00 4 0 0.0 0.00 0.00 58.0.11.65
ohiohistorycentral.org GET /entry.php?rec=1090 HTTP/1.0
11-0 28576 0/0/0 W 0.00 4 0 0.0 0.00 0.00 88.147.165.40
ohiohistorycentral.org GET /entry.php?rec=2127 HTTP/1.0
12-0 28581 0/0/0 W 0.00 3 0 0.0 0.00 0.00 68.193.145.89
ohiohistorycentral.org GET /entry.php?rec=271 HTTP/1.0
13-0 28582 0/0/0 W 0.00 3 0 0.0 0.00 0.00 125.99.16.48
ohiohistorycentral.org GET /entry.php?rec=271 HTTP/1.0
14-0 28583 0/0/0 W 0.00 3 0 0.0 0.00 0.00 58.0.11.65
ohiohistorycentral.org GET /entry.php?rec=1090 HTTP/1.0
15-0 28584 0/0/0 W 0.00 2 0 0.0 0.00 0.00 125.99.16.48
ohiohistorycentral.org GET /entry.php?rec=271 HTTP/1.0
16-0 28585 0/2/2 W 0.08 2 0 0.0 0.03 0.03 127.0.0.1
localhost.localdomain GET /dsm-server-status HTTP/1.0

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From randalrust at gmail.com  Thu Feb 28 10:44:36 2008
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 28 Feb 2008 10:44:36 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <a9caffe50802280741x660c4e41o58b1afd7229efafd@mail.gmail.com>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
	<C3EC3E7C.D32A%cliff@pinestream.com>
	<a9caffe50802280741x660c4e41o58b1afd7229efafd@mail.gmail.com>
Message-ID: <a9caffe50802280744v5223fc8cx79d292f56454da6a@mail.gmail.com>

On Thu, Feb 28, 2008 at 10:41 AM, Randal Rust <randalrust at gmail.com> wrote:

>  >  What kind of hit? Does the url have "attack" strings? Check out phpids --
>  >  might help.

it is targeted entirely to the one page on the site. if i take it
down, everything works fine.

problem is, that's *the* most important page on the site.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From randalrust at gmail.com  Thu Feb 28 10:50:42 2008
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 28 Feb 2008 10:50:42 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <bcb7aa500802280518x31e040eay2d2ee14394b8ba5b@mail.gmail.com>
References: <794117.30387.qm@web52803.mail.re2.yahoo.com>
	<a9caffe50802280508p7f1ce5ach5bdb563c56549be6@mail.gmail.com>
	<bcb7aa500802280518x31e040eay2d2ee14394b8ba5b@mail.gmail.com>
Message-ID: <a9caffe50802280750t7350e4cag7de0b2fc7025f36c@mail.gmail.com>

On Thu, Feb 28, 2008 at 8:18 AM, Guilherme Blanco
<guilhermeblanco at gmail.com> wrote:

> Randal... try this one...

>  function getClientIp()

event if i can run this function, how am i going to get the IP?

i can't dump it into the DB, and the mailserver is down as well.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From dcech at phpwerx.net  Thu Feb 28 11:00:35 2008
From: dcech at phpwerx.net (Dan Cech)
Date: Thu, 28 Feb 2008 11:00:35 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <a9caffe50802280744v5223fc8cx79d292f56454da6a@mail.gmail.com>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>	<C3EC3E7C.D32A%cliff@pinestream.com>	<a9caffe50802280741x660c4e41o58b1afd7229efafd@mail.gmail.com>
	<a9caffe50802280744v5223fc8cx79d292f56454da6a@mail.gmail.com>
Message-ID: <47C6DAA3.3010700@phpwerx.net>

Randal Rust wrote:
> it is targeted entirely to the one page on the site. if i take it
> down, everything works fine.
> 
> problem is, that's *the* most important page on the site.

To me this doesn't really sound like an attack.  Unless you're getting 
thousands of hits from the same IP it's more likely that your site has 
just reached the point where its resource requirements exceed the 
capacity allocated to it.

It sounds to me like you have an efficiency issue, most likely your 
database connections are not being properly torn down after each page 
view leading to multiple connections hanging around and gumming up your 
mysql connection pool.

Are you using persistent connections? Are you on a shared (vhost) box?

If you answered yes to both questions, you have found your problem. 
You'll end up with a persistent connection for every webserver thread, 
most of which will actually be servicing requests for other sites *but 
still using up one of your connections*.

If you are using non-persistent connections you might want to try 
registering a shutdown function to explicitly tear down the db 
connection, or switching to persistent connections (if you are on a 
dedicated host).

Dan


From randalrust at gmail.com  Thu Feb 28 11:08:02 2008
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 28 Feb 2008 11:08:02 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <47C6DAA3.3010700@phpwerx.net>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
	<C3EC3E7C.D32A%cliff@pinestream.com>
	<a9caffe50802280741x660c4e41o58b1afd7229efafd@mail.gmail.com>
	<a9caffe50802280744v5223fc8cx79d292f56454da6a@mail.gmail.com>
	<47C6DAA3.3010700@phpwerx.net>
Message-ID: <a9caffe50802280808h39c0d1d5ua028464ff5361df4@mail.gmail.com>

On Thu, Feb 28, 2008 at 11:00 AM, Dan Cech <dcech at phpwerx.net> wrote:

>  To me this doesn't really sound like an attack.  Unless you're getting
>  thousands of hits from the same IP

they are different IPs, and when i do a lookup on many of them, i get
*invalid IP range* on them.

> it's more likely that your site has
>  just reached the point where its resource requirements exceed the
>  capacity allocated to it.

i do believe that is a possibility.

>  Are you using persistent connections?

honestly, i can't say. we use the adodb abstraction layer to do all of
our database calls. my understanding was that adodb terminated the
connection when it is finished doing it's job.

> Are you on a shared (vhost) box?

dedicated.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From guilhermeblanco at gmail.com  Thu Feb 28 11:08:05 2008
From: guilhermeblanco at gmail.com (Guilherme Blanco)
Date: Thu, 28 Feb 2008 13:08:05 -0300
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <a9caffe50802280750t7350e4cag7de0b2fc7025f36c@mail.gmail.com>
References: <794117.30387.qm@web52803.mail.re2.yahoo.com>
	<a9caffe50802280508p7f1ce5ach5bdb563c56549be6@mail.gmail.com>
	<bcb7aa500802280518x31e040eay2d2ee14394b8ba5b@mail.gmail.com>
	<a9caffe50802280750t7350e4cag7de0b2fc7025f36c@mail.gmail.com>
Message-ID: <bcb7aa500802280808x6928cf43v3b8a5b003c5ba0e7@mail.gmail.com>

You're received an spider attack.

The first thing to do is to disable the access to this page. Create a
robots.txt in your main website and disallow it.
You can take an example by accessing www.google.com/robots.txt

The second stage is to prevent bad spiders from read the robots as its
destination router.


One thing that can help you is a quick read of my portuguese talk I
gave at PHP Conference Brazil 2007 to know a bit more about it. Google
can easily translate it to you. Here is the URL:
http://www.prophp.com.br/downloads/phpconf2007/spiders_crawlers_no_php.zip


Also, you can change your entry.php to _entry.php, and ask a JS
confirmation at the beginning of the page... if user click yes,
redirect... not, move to 404. This will lead the spider bot into a
crazy situation and will go down in this request. By subsequenting
going down, the spider can stop. Try this one...


Regards,

On Thu, Feb 28, 2008 at 12:50 PM, Randal Rust <randalrust at gmail.com> wrote:
> On Thu, Feb 28, 2008 at 8:18 AM, Guilherme Blanco
>  <guilhermeblanco at gmail.com> wrote:
>
>  > Randal... try this one...
>
>  >  function getClientIp()
>
>  event if i can run this function, how am i going to get the IP?
>
>  i can't dump it into the DB, and the mailserver is down as well.
>
>  --
>
>
> Randal Rust
>  R.Squared Communications
>  www.r2communications.com
>  _______________________________________________
>  New York PHP Community Talk Mailing List
>  http://lists.nyphp.org/mailman/listinfo/talk
>
>  NYPHPCon 2006 Presentations Online
>  http://www.nyphpcon.com
>
>  Show Your Participation in New York PHP
>  http://www.nyphp.org/show_participation.php
>



-- 
Guilherme Blanco - Web Developer
CBC - Certified Bindows Consultant
Cell Phone: +55 (16) 9166-6902
MSN: guilhermeblanco at hotmail.com
URL: http://blog.bisna.com
S?o Carlos - SP/Brazil

From guilhermeblanco at gmail.com  Thu Feb 28 11:09:25 2008
From: guilhermeblanco at gmail.com (Guilherme Blanco)
Date: Thu, 28 Feb 2008 13:09:25 -0300
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <bcb7aa500802280808x6928cf43v3b8a5b003c5ba0e7@mail.gmail.com>
References: <794117.30387.qm@web52803.mail.re2.yahoo.com>
	<a9caffe50802280508p7f1ce5ach5bdb563c56549be6@mail.gmail.com>
	<bcb7aa500802280518x31e040eay2d2ee14394b8ba5b@mail.gmail.com>
	<a9caffe50802280750t7350e4cag7de0b2fc7025f36c@mail.gmail.com>
	<bcb7aa500802280808x6928cf43v3b8a5b003c5ba0e7@mail.gmail.com>
Message-ID: <bcb7aa500802280809h3b0e0b1dj846050825c5878e6@mail.gmail.com>

Also, you can check for the USER_AGENT the attacker is using. if it's
not any known, redirect to 404.
But this is perfectly overwritable via curl... so don't trust too much this one.



Regards,

On Thu, Feb 28, 2008 at 1:08 PM, Guilherme Blanco
<guilhermeblanco at gmail.com> wrote:
> You're received an spider attack.
>
>  The first thing to do is to disable the access to this page. Create a
>  robots.txt in your main website and disallow it.
>  You can take an example by accessing www.google.com/robots.txt
>
>  The second stage is to prevent bad spiders from read the robots as its
>  destination router.
>
>
>  One thing that can help you is a quick read of my portuguese talk I
>  gave at PHP Conference Brazil 2007 to know a bit more about it. Google
>  can easily translate it to you. Here is the URL:
>  http://www.prophp.com.br/downloads/phpconf2007/spiders_crawlers_no_php.zip
>
>
>  Also, you can change your entry.php to _entry.php, and ask a JS
>  confirmation at the beginning of the page... if user click yes,
>  redirect... not, move to 404. This will lead the spider bot into a
>  crazy situation and will go down in this request. By subsequenting
>  going down, the spider can stop. Try this one...
>
>
>  Regards,
>
>
>
>  On Thu, Feb 28, 2008 at 12:50 PM, Randal Rust <randalrust at gmail.com> wrote:
>  > On Thu, Feb 28, 2008 at 8:18 AM, Guilherme Blanco
>  >  <guilhermeblanco at gmail.com> wrote:
>  >
>  >  > Randal... try this one...
>  >
>  >  >  function getClientIp()
>  >
>  >  event if i can run this function, how am i going to get the IP?
>  >
>  >  i can't dump it into the DB, and the mailserver is down as well.
>  >
>  >  --
>  >
>  >
>  > Randal Rust
>  >  R.Squared Communications
>  >  www.r2communications.com
>  >  _______________________________________________
>  >  New York PHP Community Talk Mailing List
>  >  http://lists.nyphp.org/mailman/listinfo/talk
>  >
>  >  NYPHPCon 2006 Presentations Online
>  >  http://www.nyphpcon.com
>  >
>  >  Show Your Participation in New York PHP
>  >  http://www.nyphp.org/show_participation.php
>  >
>
>
>
>
>
> --
>  Guilherme Blanco - Web Developer
>  CBC - Certified Bindows Consultant
>  Cell Phone: +55 (16) 9166-6902
>  MSN: guilhermeblanco at hotmail.com
>  URL: http://blog.bisna.com
>  S?o Carlos - SP/Brazil
>



-- 
Guilherme Blanco - Web Developer
CBC - Certified Bindows Consultant
Cell Phone: +55 (16) 9166-6902
MSN: guilhermeblanco at hotmail.com
URL: http://blog.bisna.com
S?o Carlos - SP/Brazil

From matt at atopia.net  Thu Feb 28 11:09:59 2008
From: matt at atopia.net (=?utf-8?B?TWF0dCBKdXN6Y3phaw==?=)
Date: Thu, 28 Feb 2008 16:09:59 +0000
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <a9caffe50802280808h39c0d1d5ua028464ff5361df4@mail.gmail.com>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com><C3EC3E7C.D32A%cliff@pinestream.com><a9caffe50802280741x660c4e41o58b1afd7229efafd@mail.gmail.com><a9caffe50802280744v5223fc8cx79d292f56454da6a@mail.gmail.com><47C6DAA3.3010700@phpwerx.net><a9caffe50802280808h39c0d1d5ua028464ff5361df4@mail.gmail.com>
Message-ID: <1370039817-1204214996-cardhu_decombobulator_blackberry.rim.net-909700143-@bxe006.bisx.prod.on.blackberry>

Mod throttle in apache for the win.  I haven't read this thread yet but I will when I get to work. 
Matt 

-----Original Message-----
From: "Randal Rust" <randalrust at gmail.com>

Date: Thu, 28 Feb 2008 11:08:02 
To:"NYPHP Talk" <talk at lists.nyphp.org>
Subject: Re: [nycphp-talk] Urgent: Help in Defending Attack


On Thu, Feb 28, 2008 at 11:00 AM, Dan Cech <dcech at phpwerx.net> wrote:

>  To me this doesn't really sound like an attack.  Unless you're getting
>  thousands of hits from the same IP

they are different IPs, and when i do a lookup on many of them, i get
*invalid IP range* on them.

> it's more likely that your site has
>  just reached the point where its resource requirements exceed the
>  capacity allocated to it.

i do believe that is a possibility.

>  Are you using persistent connections?

honestly, i can't say. we use the adodb abstraction layer to do all of
our database calls. my understanding was that adodb terminated the
connection when it is finished doing it's job.

> Are you on a shared (vhost) box?

dedicated.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php


!DSPAM:47c6dc6f68512071265797!

From jellicle at gmail.com  Thu Feb 28 11:10:14 2008
From: jellicle at gmail.com (Michael Sims)
Date: Thu, 28 Feb 2008 11:10:14 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <a9caffe50802280741x660c4e41o58b1afd7229efafd@mail.gmail.com>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
	<C3EC3E7C.D32A%cliff@pinestream.com>
	<a9caffe50802280741x660c4e41o58b1afd7229efafd@mail.gmail.com>
Message-ID: <200802281110.14312.jellicle@gmail.com>

On February 28, 2008, Randal Rust wrote:
> On Thu, Feb 28, 2008 at 10:33 AM, Cliff Hirsch <cliff at pinestream.com> 
wrote:
> >  What kind of hit? Does the url have "attack" strings? Check out phpids
> > -- might help.
>
> here is what i know:
>
> 1. got up this AM and was getting error messages that there are too
> many connections to the database
> 2. the hosting company looked at the server logs and sent me this:
>
> 7-0 28568 0/1/1 W 0.08 5 0 0.0 0.01 0.01 64.185.201.77
> ohiohistorycentral.org GET /entry.php?rec=891 HTTP/1.0

You know, all modern browsers - for the last ten years - use http/1.1 rather 
than 1.0.  So you can probably just discard all http/1.0 requests as being 
clearly the work of machines rather than humans.

> 16-0 28585 0/2/2 W 0.08 2 0 0.0 0.03 0.03 127.0.0.1
> localhost.localdomain GET /dsm-server-status HTTP/1.0

Your monitoring software will stop working if you do.

Also, if you're running a niche site which it appears you are, feel free to 
ban areas of the world that annoy you.  I see you have requests coming in 
from Mumbai, Japan, Spain, etc.  It seems unlikely that these are people 
actually interested in the history of Ohio.  So feel free, at the server or 
Apache level, to just deny requests from large swathes of the IP address 
space.  You won't lose many (or any) legitimate viewers.

You should solve this problem at the server or Apache level (or higher), not 
at the PHP level.  I don't know how much control you have over the server, 
but if it's your machine, you can use, e.g., hosts.deny to block IP address 
ranges that annoy you.


Michael Sims



From randalrust at gmail.com  Thu Feb 28 11:17:38 2008
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 28 Feb 2008 11:17:38 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <bcb7aa500802280808x6928cf43v3b8a5b003c5ba0e7@mail.gmail.com>
References: <794117.30387.qm@web52803.mail.re2.yahoo.com>
	<a9caffe50802280508p7f1ce5ach5bdb563c56549be6@mail.gmail.com>
	<bcb7aa500802280518x31e040eay2d2ee14394b8ba5b@mail.gmail.com>
	<a9caffe50802280750t7350e4cag7de0b2fc7025f36c@mail.gmail.com>
	<bcb7aa500802280808x6928cf43v3b8a5b003c5ba0e7@mail.gmail.com>
Message-ID: <a9caffe50802280817l2ede678ck7d2811ea611b5dc7@mail.gmail.com>

On Thu, Feb 28, 2008 at 11:08 AM, Guilherme Blanco
<guilhermeblanco at gmail.com> wrote:

> You're received an spider attack.

ok, makes sense.

>  The first thing to do is to disable the access to this page.

we have been doing that on and off.

> Create a  robots.txt in your main website and disallow it.

you mean disallow all access to entry.php? we do have a robots.txt file.

>  http://www.prophp.com.br/downloads/phpconf2007/spiders_crawlers_no_php.zip

thanks, i will definitely take a look.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From matt at atopia.net  Thu Feb 28 11:23:26 2008
From: matt at atopia.net (=?utf-8?B?TWF0dCBKdXN6Y3phaw==?=)
Date: Thu, 28 Feb 2008 16:23:26 +0000
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <a9caffe50802280808h39c0d1d5ua028464ff5361df4@mail.gmail.com>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com><C3EC3E7C.D32A%cliff@pinestream.com><a9caffe50802280741x660c4e41o58b1afd7229efafd@mail.gmail.com><a9caffe50802280744v5223fc8cx79d292f56454da6a@mail.gmail.com><47C6DAA3.3010700@phpwerx.net><a9caffe50802280808h39c0d1d5ua028464ff5361df4@mail.gmail.com>
Message-ID: <1631178106-1204215803-cardhu_decombobulator_blackberry.rim.net-293749862-@bxe006.bisx.prod.on.blackberry>

Easy to figure out.... 

"show global variables like '%max%'; 

What is the value of that which is returned?

Also, run the same, except replace variables with status.  What is returned?


-----Original Message-----
From: "Randal Rust" <randalrust at gmail.com>

Date: Thu, 28 Feb 2008 11:08:02 
To:"NYPHP Talk" <talk at lists.nyphp.org>
Subject: Re: [nycphp-talk] Urgent: Help in Defending Attack


On Thu, Feb 28, 2008 at 11:00 AM, Dan Cech <dcech at phpwerx.net> wrote:

>  To me this doesn't really sound like an attack.  Unless you're getting
>  thousands of hits from the same IP

they are different IPs, and when i do a lookup on many of them, i get
*invalid IP range* on them.

> it's more likely that your site has
>  just reached the point where its resource requirements exceed the
>  capacity allocated to it.

i do believe that is a possibility.

>  Are you using persistent connections?

honestly, i can't say. we use the adodb abstraction layer to do all of
our database calls. my understanding was that adodb terminated the
connection when it is finished doing it's job.

> Are you on a shared (vhost) box?

dedicated.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php


!DSPAM:47c6dc6f68512071265797!

From randalrust at gmail.com  Thu Feb 28 11:29:21 2008
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 28 Feb 2008 11:29:21 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <200802281110.14312.jellicle@gmail.com>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
	<C3EC3E7C.D32A%cliff@pinestream.com>
	<a9caffe50802280741x660c4e41o58b1afd7229efafd@mail.gmail.com>
	<200802281110.14312.jellicle@gmail.com>
Message-ID: <a9caffe50802280829j347bac94u995e2e35a97f574f@mail.gmail.com>

On Thu, Feb 28, 2008 at 11:10 AM, Michael Sims <jellicle at gmail.com> wrote:

>  You know, all modern browsers - for the last ten years - use http/1.1 rather
>  than 1.0.  So you can probably just discard all http/1.0 requests as being
>  clearly the work of machines rather than humans.

ok. but how will that affect google or other SEs trying to crawl the site?

>  Also, if you're running a niche site which it appears you are, feel free to
>  ban areas of the world that annoy you.

yeah, i'm considering that.

>  You should solve this problem at the server or Apache level (or higher), not
>  at the PHP level.

that's what the ultimate goal would be. i was trying to put a quick
fix in place.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From cliff at pinestream.com  Thu Feb 28 11:43:11 2008
From: cliff at pinestream.com (Cliff Hirsch)
Date: Thu, 28 Feb 2008 11:43:11 -0500
Subject: [nycphp-talk] Frameworks... CodeIgnite and Symfony
In-Reply-To: <c7c53eda0802280735h11390f8ekc7b71c35316d4049@mail.gmail.com>
Message-ID: <C3EC4ECF.D344%cliff@pinestream.com>

On 2/28/08 10:35 AM, "Brian D." <brian at realm3.com> wrote:
> (What scares me the most about any framework is the likelyhood of
> eventual abandonment.)

Indeed.




From maxarbos at yahoo.com  Thu Feb 28 11:52:53 2008
From: maxarbos at yahoo.com (Bill P.)
Date: Thu, 28 Feb 2008 08:52:53 -0800 (PST)
Subject: [nycphp-talk] Frameworks... CodeIgnite and Symfony
In-Reply-To: <c7c53eda0802280735h11390f8ekc7b71c35316d4049@mail.gmail.com>
Message-ID: <278186.9056.qm@web90611.mail.mud.yahoo.com>

Yeah, that is why I am choosing between these two. Looking for number of people and activity involved in the projects.

I am leaning towards Symfony for the admin generation.

Havent tried any yet though.



"Brian D." <brian at realm3.com> wrote: Here's to hoping that, whatever your chosen framework is, it remains
to be supported for a long, long time to come by legions of great
open-source programmers.

(What scares me the most about any framework is the likelyhood of
eventual abandonment.)

On Thu, Feb 28, 2008 at 9:59 AM, David Mintz  wrote:
> Since this is a religious debate, I propose that we slaughter anyone who
> disagrees.
>
> Hopefully the Zend Framework will be the last man standing.
>
>
>
> On Wed, Feb 27, 2008 at 8:24 PM, Donald J Organ IV 
> wrote:
>
> >
> > All this talk about frameworks and no one has mentioned the framework made
> by a NY local(Ken Downs)....Andromeda
> >
> > There have been some great updates in this framework lately.
> > Check it out  http://www.andromeda-project.org
> >
> >
> >
> >
> >
> > Adrian Noland wrote:
> >
> >
> >
> > Paul M. Jones has a presentation with some benchmarks on it.
> > Download slides here: http://paul-m-jones.com/?p=266#comments
> >
> >
> >
> > On 2/27/08, Vel Pillai  wrote:
> > > With personal experiencem  I can CodeIgniter is a light weight and fast.
> > > Scaling really comes to writing good code and knowing your enemy,
> bottlenecks.
> > > Bloated and inefficiently written sql queries seem to be the number one
> problem of site performance.
> > >
> > > -Vel
> > >
> > >
> > >
> > > On Wed, Feb 27, 2008 at 8:49 AM, Attila, Ferencz-Csibi
>  wrote:
> > >
> > > > Hi,
> > > >
> > > > yes - symphony is used as base framework for del.icio.us site.
> > > >
> > > > A.
> > > >
> > > >
> > > >
> > > >
> > > > On Wed, Feb 27, 2008 at 2:45 PM, Cliff Hirsch 
> wrote:
> > > >
> > > > >
> > > > >
> > > > >
> > > > > On 2/26/08 11:17 PM, "Bill P."  wrote:
> > > > >
> > > > > I am looking at CodeIgnite and Symfony.
> > > > > I also want to know if sites using either of these will be able to
> handle heavy load and traffic?
> > > > >
> > > > > Thanks.
> > > > > Bill
> > > > >
> > > > > Look for feedback from Nate of Cake fame. He really likes Symphony ?
> not!
> > > > > _______________________________________________
> > > > > New York PHP Community Talk Mailing List
> > > > > http://lists.nyphp.org/mailman/listinfo/talk
> > > > >
> > > > > NYPHPCon 2006 Presentations Online
> > > > > http://www.nyphpcon.com
> > > > >
> > > > > Show Your Participation in New York PHP
> > > > > http://www.nyphp.org/show_participation.php
> > > > >
> > > >
> > > >
> > > >
> > > >
> > > > _______________________________________________
> > > > New York PHP Community Talk Mailing List
> > > > http://lists.nyphp.org/mailman/listinfo/talk
> > > >
> > > > NYPHPCon 2006 Presentations Online
> > > > http://www.nyphpcon.com
> > > >
> > > > Show Your Participation in New York PHP
> > > > http://www.nyphp.org/show_participation.php
> > > >
> > >
> > >
> > > _______________________________________________
> > > New York PHP Community Talk Mailing List
> > > http://lists.nyphp.org/mailman/listinfo/talk
> > >
> > > NYPHPCon 2006 Presentations Online
> > > http://www.nyphpcon.com
> > >
> > > Show Your Participation in New York PHP
> > > http://www.nyphp.org/show_participation.php
> > >
> >
> > ________________________________
>
> >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
> >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
>
>
>
> --
> David Mintz
> http://davidmintz.org/
>
> The subtle source is clear and bright
> The tributary streams flow through the darkness
> _______________________________________________
>  New York PHP Community Talk Mailing List
>  http://lists.nyphp.org/mailman/listinfo/talk
>
>  NYPHPCon 2006 Presentations Online
>  http://www.nyphpcon.com
>
>  Show Your Participation in New York PHP
>  http://www.nyphp.org/show_participation.php
>



-- 
realm3 web applications [realm3.com]
freelance consulting, application development
(917) 512-3594
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php


       
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile.  Try it now.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080228/fba34964/attachment.html>

From ioplex at gmail.com  Thu Feb 28 11:58:42 2008
From: ioplex at gmail.com (Michael B Allen)
Date: Thu, 28 Feb 2008 11:58:42 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
Message-ID: <78c6bd860802280858mfaa6338y9bb4215d408d8086@mail.gmail.com>

On 2/28/08, Randal Rust <randalrust at gmail.com> wrote:
> we are getting hundreds of hits per minute from what appear to be fake
>  IP addresses. i am currently writing a script that will send these
>  requests to an error page prior to making the database connection.
>
>  i am doing an explode() on the $_SERVER['REMOTE_HOST]  to get the
>  first part of the IP. Does that make sense?
>
>  this is only temporary fix. i'll need to come up with something more permanent.

Hi Randal,

I've never personally had an issue like this but I have a few ideas for you.

First, looking at the IPs isn't going to do you any good if they truly
are random. It just means their spoofed.

To the very end of the script being hit, try add the following for a
few minutes:

sleep(5);

If you're lucky, the HTTP client isn't smart enough not to wait for
the response. Look at the logs and see if the requests are still
coming in as frequently. If they are not it is one or maybe a few
clients and definitely an attack of some kind. If it does not slow
things down, either the HTTP client isn't waiting for the response or
it's a distributed attack or it's not actually an attack at all and
you're just popular today.

You might also try:

flush();
sleep(1);

This shouldn't bother regular users but if it's a single client this
might help (or might not).

Then, with some breathing room in place you need to look at:

* The GET request string
* QUERY_STRING parameters
* The USER_AGENT string
* headers

Get a packet capture like:

# tcpdump -s 0 -w out.pcap port 80

and look at the whole request in WireShark. Try to identify the
pattern. Then compose a small function called 'is_annoying' that tests
for that pattern and replace your stop gap code with it:

if (is_annoying()) {
    sleep(10);
    die();
}

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/


From matt at atopia.net  Thu Feb 28 12:15:04 2008
From: matt at atopia.net (Matt Juszczak)
Date: Thu, 28 Feb 2008 12:15:04 -0500 (EST)
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <78c6bd860802280858mfaa6338y9bb4215d408d8086@mail.gmail.com>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
	<78c6bd860802280858mfaa6338y9bb4215d408d8086@mail.gmail.com>
Message-ID: <20080228121437.B14236@mercury.atopia.net>

Michael:

I urge you to consider mod_throttle for apache.

-Matt



From randalrust at gmail.com  Thu Feb 28 12:21:27 2008
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 28 Feb 2008 12:21:27 -0500
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <20080228121437.B14236@mercury.atopia.net>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
	<78c6bd860802280858mfaa6338y9bb4215d408d8086@mail.gmail.com>
	<20080228121437.B14236@mercury.atopia.net>
Message-ID: <a9caffe50802280921h3f73c504uad436fdecf12e857@mail.gmail.com>

On Thu, Feb 28, 2008 at 12:15 PM, Matt Juszczak <matt at atopia.net> wrote:

>  I urge you to consider mod_throttle for apache.

so what you are saying is to use mod_throttle to limit the amount of
bandwidth that is available to each user?

this is on a dedicated server, and from what i can tell, mod_throttle
can limit bandwidth based on the virtual host or the user, whichever
you prefer.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com


From matt at atopia.net  Thu Feb 28 12:24:07 2008
From: matt at atopia.net (Matt Juszczak)
Date: Thu, 28 Feb 2008 12:24:07 -0500 (EST)
Subject: [nycphp-talk] Urgent: Help in Defending Attack
In-Reply-To: <a9caffe50802280921h3f73c504uad436fdecf12e857@mail.gmail.com>
References: <a9caffe50802280444u1ac70240pfd6537b713234027@mail.gmail.com>
	<78c6bd860802280858mfaa6338y9bb4215d408d8086@mail.gmail.com>
	<20080228121437.B14236@mercury.atopia.net>
	<a9caffe50802280921h3f73c504uad436fdecf12e857@mail.gmail.com>
Message-ID: <20080228122321.H15244@mercury.atopia.net>

> so what you are saying is to use mod_throttle to limit the amount of
> bandwidth that is available to each user?
>
> this is on a dedicated server, and from what i can tell, mod_throttle
> can limit bandwidth based on the virtual host or the user, whichever
> you prefer.

Only allow X requests per second from a specific IP or a specific /28, 
etc.


From paulcheung at tiscali.co.uk  Thu Feb 28 14:11:18 2008
From: paulcheung at tiscali.co.uk (PaulCheung)
Date: Thu, 28 Feb 2008 19:11:18 -0000
Subject: [nycphp-talk] PHP/MySQL environment problem??
Message-ID: <001801c87a3d$b54f3580$0200a8c0@X9183>

PHP problem environmental controlsThe application is a classic traditional computer applications of add, update and read selected record.  The add record routine lines up the next record to be added by checking what the last record added number was.
The application was developed on  "localhost", Windows environment, and all working as expected, adding, updating and reading records up to a preset maximum of 100.

Then thethe whole application was transfered into its' "production environment" on my web space, Linux environment for testing. Everything works fine for the first record only. I cannot add  records thereafter. I have "desk checked" the coding and with the exception of the MySQL database parameters (host, user, password and database). All coding remains the same.

I cannot understand what is wrong is it because of the different operating environments or could it be something else? Has anybody got any ideas



. 

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080228/93293445/attachment.html>

From dorgan at donaldorgan.com  Thu Feb 28 14:19:46 2008
From: dorgan at donaldorgan.com (Donald J Organ IV)
Date: Thu, 28 Feb 2008 14:19:46 -0500
Subject: [nycphp-talk] PHP/MySQL environment problem??
In-Reply-To: <001801c87a3d$b54f3580$0200a8c0@X9183>
References: <001801c87a3d$b54f3580$0200a8c0@X9183>
Message-ID: <47C70952.60807@donaldorgan.com>

An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080228/3bee8c24/attachment.html>

From chsnyder at gmail.com  Thu Feb 28 15:56:01 2008
From: chsnyder at gmail.com (csnyder)
Date: Thu, 28 Feb 2008 15:56:01 -0500
Subject: [nycphp-talk] PHP/MySQL environment problem??
In-Reply-To: <001801c87a3d$b54f3580$0200a8c0@X9183>
References: <001801c87a3d$b54f3580$0200a8c0@X9183>
Message-ID: <b76252690802281256x4dba4b2ao531c00181479a9ba@mail.gmail.com>

On Thu, Feb 28, 2008 at 2:11 PM, PaulCheung <paulcheung at tiscali.co.uk> wrote:

> The application is a classic traditional computer applications of add,
> update and read selected record.  The add record routine lines up the next
> record to be added by checking what the last record added number was.

Does the database user have SELECT permission on the table in question?

Are the database schemas the same?

-- 
Chris Snyder
http://chxo.com/


From rolan at omnistep.com  Fri Feb 29 14:56:51 2008
From: rolan at omnistep.com (Rolan Yang)
Date: Fri, 29 Feb 2008 14:56:51 -0500
Subject: [nycphp-talk] PHP/MySQL environment problem??
In-Reply-To: <001801c87a3d$b54f3580$0200a8c0@X9183>
References: <001801c87a3d$b54f3580$0200a8c0@X9183>
Message-ID: <47C86383.1080609@omnistep.com>

Might not be your exact problem, but I once had some issues porting of 
the the data from one machine to another. The auto increment was failing 
with a "duplicate index" error, but I could not find any duplicate 
indices. There was, however, a 0 value in the indexed column, which upon 
removal, fixed the issue. I think the table was initially populated and 
then maybe later converted to an auto-increment type without throwing an 
error. But, when I did an export and import into another machine, it 
kept failing.

~Rolan

PaulCheung wrote:
> The application is a classic traditional computer applications of add, 
> update and read selected record. The add record routine lines up the 
> next record to be added by checking what the last record added number was.
>
> The application was developed on ?localhost?, Windows environment, and 
> all working as expected, adding, updating and reading records up to a 
> preset maximum of 100.
>
> Then thethe whole application was transfered into its' ?production 
> environment? on my web space, Linux environment for testing. 
> Everything works fine for the first record only. I cannot add records 
> thereafter. I have ?desk checked? the coding and with the exception of 
> the MySQL database parameters (host, user, password and database). All 
> coding remains the same.
>
> I cannot understand what is wrong is it because of the different 
> operating environments or could it be something else? Has anybody got 
> any ideas
>
> .
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php


From marco.neumann at gmail.com  Fri Feb 29 15:18:27 2008
From: marco.neumann at gmail.com (Marco Neumann)
Date: Fri, 29 Feb 2008 15:18:27 -0500
Subject: [nycphp-talk] The New York Semantic Web Meetup: Semantic Wikis,
	March 13
Message-ID: <844a8dbf0802291218p85e2ca2n3f2a7e1ec3426a91@mail.gmail.com>

The New York Semantic Web Meetup
http://semweb.meetup.com/25/

Topic:
    Semantic Wikis

When
    Thursday, March 13, 2008 at 6:30 PM

Where
    Robert Half Technology
    245 Park Avenue 25th Floor
    New York , NY 10167

Expected Attendees
    35 people ? 30 Yes, 5 Maybe
    There's still room for 15 more.

Organized by
    Marco Neumann

Speaker:

 Sergey Chernyshev
 Director of Web Systems, truTV

 Yaron Koren
 Semantic Forms

Description:

The Semantic MediaWiki (SMW) allows users to add structured data to
MediaWiki pages through simple wikitext markup that identifies
relations between pages and attribute values of pages. With this
information, SMW can help to search, organize, browse, evaluate, and
share the wiki's content.

Semantic MediaWiki
http://semantic-mediawiki.org/

Semantic Forms are an extension, based around Semantic MediaWiki, that
allows users to create forms for adding and editing pages that use
templates to store semantic data. Forms are defined using editable
text files, written in a custom markup language, that are then parsed
on-the-fly when a form is needed.

Semantic Forms
http://www.mediawiki.org/wiki/Extension:Semantic_Forms

MediaWiki is a free software wiki package originally written for
Wikipedia. It is now used by several other projects of the non-profit
Wikimedia Foundation and by many other wikis.

MediaWiki
http://www.mediawiki.org/


From nynj.tech at hotmail.com  Fri Feb 29 16:18:34 2008
From: nynj.tech at hotmail.com (chad qian)
Date: Fri, 29 Feb 2008 16:18:34 -0500
Subject: [nycphp-talk] error message when I run
	http://localhost/phpmyadmin/index.php
Message-ID: <BLU126-W2683E0A29FADFCFBCF8C79E8140@phx.gbl>


Hi,
I install apache,php5,mysql6 and phpmyadmin on windows.
When I run http://localhost/phpmyadmin/index.php,
I get the error message 
"phpmyadmin Error
Cannot load mysql extension. Please check your PHP configuration. - Documentation"
 
How to solve this problem?
 
Thanks!
chad
_________________________________________________________________
Need to know the score, the latest news, or you need your Hotmail?-get your "fix".
http://www.msnmobilefix.com/Default.aspx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080229/8d9f581a/attachment.html>

From ps at sun-code.com  Fri Feb 29 16:28:24 2008
From: ps at sun-code.com (Peter Sawczynec)
Date: Fri, 29 Feb 2008 16:28:24 -0500
Subject: [Norton AntiSpam] [nycphp-talk] error message when I run
	http://localhost/phpmyadmin/index.php
In-Reply-To: <BLU126-W2683E0A29FADFCFBCF8C79E8140@phx.gbl>
References: <BLU126-W2683E0A29FADFCFBCF8C79E8140@phx.gbl>
Message-ID: <003201c87b1a$0450a7e0$0cf1f7a0$@com>

First thing would be to check that your version of phpMyAdmin is 

compatible with MySQL 6. -Peter

 

 

From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of chad qian
Sent: Friday, February 29, 2008 4:19 PM
To: talk at lists.nyphp.org
Subject: [Norton AntiSpam] [nycphp-talk] error message when I run
http://localhost/phpmyadmin/index.php

 

Hi,
I install apache,php5,mysql6 and phpmyadmin on windows.
When I run http://localhost/phpmyadmin/index.php,
I get the error message 
"phpmyadmin Error
Cannot load  <http://php.net/mysql> mysql extension. Please check your
PHP configuration. -
<http://localhost/phpmyadmin/Documentation.html#faqmysql> Documentation"
 
How to solve this problem?
 
Thanks!

chad

  _____  

Need to know the score, the latest news, or you need your HotmailR-get
your "fix". Check it out. <http://www.msnmobilefix.com/Default.aspx> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20080229/914c6539/attachment.html>