http://frontrangephp.org/ FRPUG Forums en http://backend.userland.com/rss http://frontrangephp.org/forums?task=viewtopic&pid=96#96 96@http://frontrangephp.org/components/com_agora/ Topic: Contract job: PHP5 for 3 months Message: Hi All FRPUG members! Do you want to hear about job openings on this site? Please tell me!! If you do, please check out this one below. If not, please let me know and I will read tech topics instead of bugging you! ---------------------------- One of our favorite clients needs a strong PHP developer for their team. This position will start as a 3-month contract, but is likely to extend longer-term. The company is great and allows for plenty of room for creativity and new ideas, as well as room to learn. Even as a contractor, you are treated as an integral part of the team. The position will be responsible for designing and developing Web 2.0 applications in object oriented PHP5 from the ground-up. Since no structured framework is in place, very senior PHP 5 development skills using true object oriented practices are essential. The team is very collaborative and good communication skills and willingness to work closely in a tea Tue, 15 Dec 2009 16:23:06 -0700 http://frontrangephp.org/forums?task=viewtopic&pid=72#72 72@http://frontrangephp.org/components/com_agora/ Topic: PHP 5.2.9 Install on XP Pro IIS 5.1 - phpinfo( ) results incorrect Message: Gschimck, Thank you for your suggestion, I will look into Zend. I've sort of heard about it on various blogs but know nothing about it. Mon, 18 May 2009 11:59:27 -0600 http://frontrangephp.org/forums?task=viewtopic&pid=71#71 71@http://frontrangephp.org/components/com_agora/ Topic: PHP 5.2.9 Install on XP Pro IIS 5.1 - phpinfo( ) results incorrect Message: Thanks for all of your replies. I appreciate it. I've come to the conclusion, that, at least in my environment, "Loaded Configuration File" is reporting correctly but "Configuration File (php.ini) Path" is not. As an FYI, I posted my testing findings on PHP.com under Windows Install: http://us3.php.net/manual/en/install.windows.php. Mon, 18 May 2009 11:57:39 -0600 http://frontrangephp.org/forums?task=viewtopic&pid=70#70 70@http://frontrangephp.org/components/com_agora/ Topic: PHP 5.2.9 Install on XP Pro IIS 5.1 - phpinfo( ) results incorrect Message: This doesn't answer your manual install question, but it may solve your problem.. Have you considered Zend Server Community Edition? It's free and works with IIS. http://www.zend.com/products/server/downloads-all Sun, 17 May 2009 16:45:34 -0600 http://frontrangephp.org/forums?task=viewtopic&pid=69#69 69@http://frontrangephp.org/components/com_agora/ Topic: PHP 5.2.9 Install on XP Pro IIS 5.1 - phpinfo( ) results incorrect Message: [quote=cdjaco]fromtheranks, if nobody replies or it doesn't look like you've got an adequate answer by the time our next meeting rolls around on the 27th, I'll be sure to raise it then. Unfortunately I use a Linux development environment, so I haven't crossed the same territory you have. Cal[/quote] Thank you very much! I do appreciate it. I'm doing further research on this as well and hopefully will have a complete answer sooner than later. Initial findings, however, are that it is a "red herring", i.e. phpinfo() is not correctly reporting because it is "hard wired" into the function -- for some obscure reason. I still need to validate this. Thanks again. Thu, 14 May 2009 22:09:53 -0600 http://frontrangephp.org/forums?task=viewtopic&pid=68#68 68@http://frontrangephp.org/components/com_agora/ Topic: PHP 5.2.9 Install on XP Pro IIS 5.1 - phpinfo( ) results incorrect Message: fromtheranks, if nobody replies or it doesn't look like you've got an adequate answer by the time our next meeting rolls around on the 27th, I'll be sure to raise it then. Unfortunately I use a Linux development environment, so I haven't crossed the same territory you have. Cal Thu, 14 May 2009 16:50:07 -0600 http://frontrangephp.org/forums?task=viewtopic&pid=65#65 65@http://frontrangephp.org/components/com_agora/ Topic: PHP 5.2.9 Install on XP Pro IIS 5.1 - phpinfo( ) results incorrect Message: I've been in IT for years but I’m a newbie at setting up a blog site. Background: Right now I’m in the middle of manually installing PHP 5.2.9 (rather than using the .MSI) on XP Pro SP3 using IIS 5.1. I’ve verified IIS 5.1 and MMC 3.0 and already installed MySQL 5.1, and FileZilla. I'm using ISAPI instead of CGI, by the way. This is a dev machine, the final web site will get pushed to a host but I want to do the development/learning locally. The reason I’m sticking with IIS is that my host does not support Apache, so WAMP / Xampp is out. Issue: No matter what I do I can't get phpinfo() to properly report the location of the “Configuration File Path”. It seems "glued to" C:\WINDOWS. I’ve researched this until my fingers are nubs (starting with but not limited to the PHP site) but I’m not coming up with anything that works. Here’s what I’ve done: I've: 1. Included PHP Wed, 13 May 2009 12:59:59 -0600 http://frontrangephp.org/forums?task=viewtopic&pid=47#47 47@http://frontrangephp.org/components/com_agora/ Topic: Verifying data Message: I can get you started. If you need more assistance, please let me know and I'll keep digging. Clearly not a straight forward example, but it is a nice integration piece to have available in joomla. You're going to have to squirrel into the JUtility methods yourself to see the nuts and bolts. Check out /modules/mod_login/tmpl/default.php Line 75 (of my 1.5.9 install) [quote][/quote] Produce the following in the rendered page... [quote][/quote] The form.token is a reference to /libraries/joomla/html/html/form.php [quote]return '';[/quote] /libraries/joomla/environment/request.php line 435 has the function checkToken. [quote]function checkToken( $method = 'post' ) { $token = JUtility::getToken(); if(!JRequest::getVar( $token, '', $method, 'alnum' )) { $session = JFactory::getSession(); if($session->isNew()) { //Redirect to login screen global $mainframe; $return = JRoute::_('index.php'); ; $mainframe->redirect($return, JTex Mon, 30 Mar 2009 21:23:20 -0600 http://frontrangephp.org/forums?task=viewtopic&pid=46#46 46@http://frontrangephp.org/components/com_agora/ Topic: Verifying data Message: I haven't had a chance to look for this, but can you point me toward the file I should be looking in? Mon, 30 Mar 2009 08:18:19 -0600 http://frontrangephp.org/forums?task=viewtopic&pid=45#45 45@http://frontrangephp.org/components/com_agora/ Topic: Verifying data Message: You can find a full example of that by observing the way that joomla seeds its forms. Wed, 25 Mar 2009 22:13:05 -0600 http://frontrangephp.org/forums?task=viewtopic&pid=40#40 40@http://frontrangephp.org/components/com_agora/ Topic: Verifying data Message: I've always used md5 hashes... as long as you add a private "salt", they are pretty bullet proof unless someone has access to your source code... Although pretty much anything can be spoofed if you dedicate enough time, so I don't think there is a perfect method.. On your form you could do something like this: "> if($_POST['token']==md5(date('mdyh').'s4ltg0e$h3r3')){ } That at least guarantees that the 'attacker' was on your form within the hour.... (The token changes hourly).. Obviously this is an overly simplistic example, and you should probably create the token a little differently.. Another good example is to use the PHP Session ID, so that way the token will stay unique per session, and they are forced to at least accept cookies from your site. Wed, 25 Mar 2009 07:34:44 -0600 http://frontrangephp.org/forums?task=viewtopic&pid=39#39 39@http://frontrangephp.org/components/com_agora/ Topic: Verifying data Message: Does anyone know of a good method to verify that data coming into your script comes from a) inside your site and b) from a particular script? I've got two pages with forms that will send email messages, and I want to be able to differentiate between those sources. I want to use the same script to send email, basing the email format on which particular script sent data into the mail script. I've read that HTTP_REFERER is not to be trusted because it can be easily spoofed. [Edited by Cal -- added subject since the topic was hard to click on otherwise] Mon, 23 Mar 2009 16:06:49 -0600