php

Restrict file access from PHP -> Java Applet

I'm writing a portal in PHP that allows users to upload DICOM images, and allow users of the same group to view those DICOM images through a Java Applet. The html code to display images through the viewer looks like this: <APPLET archive=radscaper.jar codebase=./ code=com.divinev.radscaper.Main.class width=100% height=100%> <PARAM NAME=...

'echo' or drop out of 'programming' write HTML then start PHP code again

For the most part, when I want to display some HTML code to be actually rendered I would use a 'close PHP' tag, write the HTML, then open the PHP again. eg <?php // some php code ?> <p>HTML that I want displayed</p> <?php // more php code ?> But I have seen lots of people who would just use echo instead, so they would have done the ab...

PHP Timezone problem

I am in Albuquerque, NM. I am trying to update some stamps every time I put an entry into a database. Here is what I use. date_default_timezone_set("US/Mountain"); $stamp =mktime(); //$stamp = gmmktime(); $time = date("H:i:s",$stamp);$date = date("Y-m-d",$stamp); My local time is 12:15 PM but what I get is 18:15PM instead. If you...

SWF (using XML) only working locally, not on home server or web hosting server

Hi, I use a main SWF file, which has some animations. It uses xml from a .php file which specifies several items, e.g. images and other SWFs to be used in the main SWF. Locally everything works perfectly, but when invoking it via my home server, or hosting provider it doesn't work anymore and I don't get why. All links are relative and c...

I think my PHP app is being session hijacked?

Hi there, I have a php site that lets registered users login (with a valid passord) and sets up a session based on their UserID. However I'm pretty sure thisis being hijacked and I've found "new" files on my server I didn't put there. My site cleans all user input for SQL injections and XSS but this keeps happening. Has anyone got any i...

need a regex for matching repeating lines of symbols (example: ------------- or *****************)

I want to be able to remove linebreaks etc that people make by using recurring characters, for example: **************************************************** ---------------------------------------------------- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ etc i'd like to not have to specify which characters it will match, maybe all that are NOT \w ...

What is the best way to identify which form has been submitted?

Currently, when I design my forms, I like to keep the name of the submit button equal to the id of the form. Then, in my php, I just do if(isset($_POST['submitName'])) in order to check if a form has been submitted and which form has been submitted. Firstly, are there any security problems or design flaws with this method? One problem ...

need to loop through a PHP array in JavaScript

Hi guys, For example I have a PHP array, such as this one <?php $s= array('a','b','c','d','e','f') ; ?> And I need to loop through it in JavaScript, any ideas how do I do that? for ( i=0 ; i < <?php echo sizeof($s) ?> ; i++) { document.write('<?php echo $s [somehow need to get the 'i' value into here] ?>'); } Any suggestions? Thank...

PHP Session code work differently on two servers

I have some code which works fine on one server but is giving a session header warning: Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent on another. I have checked the php.ini settings on the two servers and they are identical. I know that the warning message is supposed to s...

Alternative to header_remove

I know that header_remove doesn't work in php versions < 5.3 and I use 5.2.1. I am looking for an alternative to header_remove to remove the X-Powered-By header. I tried using header("X-Powered-By: "); but it still generates a blank header. I tried using Header unset X-Powered-By in .htaccess, but for some reason it's not working. I am ...

MySQL Workbench vs phpMyAdmin

I've only used phpMyAdmin but then I stumbled upon MySQL Workbench that looks promising. I wonder if someone has tried it out and could give your thoughts about it compared to phpMyAdmin. Could it replace phpMyAdmin completely? ...

Password protect user image album

Hi Im making i photo sharint site I want to give the ability for my users to prevent the public to acces their albums with a password. Then they can give the password to the ones they want to be able to see it. To password protect their albums. Im thinking something like this, cant test it on this computer, should work ok. but as im ...

would like to create a .php file that reads an .xml file and delivers xml output from the .xml file

I know it sounds weird but I need it for a workaround. So some link in an ActionScript links for a .php file. As I am unable to edit this link in the AS I need some workaround. I have the xml and the .php file needs to output that exact xml code. How can this be done. Ultimately I would like to create a .php script that outputs xml. Whe...

CodeIgniter Unable to Access Error Message Error

Hi, I've created this registration form for registering new users to a website using CodeIgniter. My problem is, whenever I enter a username that already exists in my database, instead of giving me my error message which explains this to the user, it instead gives me this error message: Unable to access an error message corresponding...

Handling multiple HTTP requests from one source (e.g. a hacker)

I have a script to handle http requests. I'm trying to think of some of the security issues I might have with it. My biggest concern at the moment is how I can manage multiple requests from the same source over and over. For instance someone trying to shut down my system. Do I need to be concerned or will Apache handle this issue. If no...

How do I create a no-javascript url hash handler for my website?

Ok, I'm not sure how this is normally done. But I've got a script that basically empties a div of content and then loads content from a div from a separate webpage, without reloading the current page. This works great. It's taken from this example actually, from net tuts (great site btw) http://nettuts.s3.amazonaws.com/011_jQuerySite/s...

Free java or flash file browser for photogallery

Hi. I'm about to develop a small web gallery, where it's supposed to be possible to upload several pictures at a time and then add some info abut the pictures.So I need a free java or flash local file browser that can pass me some info of the pictures that gets uploaded so that I can create some SQL entries for each picture. The platfo...

What a robust and easy way to encrypt a string with key without using Open SSL?

I don't want to use Open SSL or any very big none-built-in libraries for this. I only want to be able to encrypt a string with a key so you can't decrypt it without it. By the way, i already did a long search on stackoverflow and i've checked out those unsecure ways but i want something robust like md5 (which can be decrypted with a ke...

PHP gallery, thumbnail listing

Hi everyone, I am planning a dynamic PHP photo gallery and having difficulty deciding on the best way to display the thumbnails after they have been retrieved via MySQL. I considered using an inline unordered list but this resulted in the thumbs being stacked one on top of the other (touching). Also tried a table but not sure how I woul...

(?p=home) includes pages not working

I have setup a new server and copyed my website on to it and the follow dont work (?p=home) includes pages. Code: if(isset($HTTP_GET_VARS['p'])) { $page = $HTTP_GET_VARS['p']; } else { $page = 'home'; } switch($page) { case 'home': require('home.php'); break; case 'login': require('login.php'); break...