premiso
Members-
Posts
6,951 -
Joined
-
Last visited
-
Days Won
2
Everything posted by premiso
-
My site is fully based on JS, I do not offer alternatives lol, at least for login/registration/control panel. If regular users have it disabled, too bad for them, it is a site requirement. For mobile based browsing I plan to have a limited functionality site setup.
-
Warning: Cannot modify header information - headers already sent..
premiso replied to pneudralics's topic in PHP Coding Help
Really, this error is pretty self explanatory. You have output before a header call. Why it may work on WAMP and not production, WAMP may have a setting in .htaccess or apache to buffer the output, similar to ob_start before sending it to the browser, which would be like a bandaid on the issue. I would suggest following the actual rules for header calls and re-do your code appropriately. -
Yea, that is actually what brought this up. I had to do some network training and they had Encryption using public/private key. It got me thinking of ways I could secure my site better. But if it will only be "marginally" better (I had thought of that because JS would require the salt to be figured out/no salt). I may still try it, if I come across the time. I guess my main focus was trying to create something secure without the need for SSL, cause I know if the certificate is not signed/verified, you get that dumb warning everytime someone goes to your secure domain. I do appreciate your comments/insight! It does make me think a bit more about it. I am sure there is no other "securer" method than SSL, or else that would be used. But basically doing it my way would give me a "false" sense of security. Thanks Daniel!
-
You need to add mysql_real_escape_string to the string input going into the DB. The reason it worked on your old server, was chances are it had "Magic Quotes" (see this function for more information/links to more information) get_magic_quotes_gpc turned on. The new server does not, which is the better/preferred way for them to be turned off. Fix the code and it will work. EDIT: Added the "string" portion to the above thanks PFM for reminding of that lol!
-
lol, too cheap for SSL. I just thought it would be a good project to do, and I was just curious if it would make anything safer or not. Really the data I am protecting is nothing more than addresses/email addresses. If I was handling CC information etc, I would definitely get an SSL Certificate. I just know my code is vunerable right now and I am looking into beefing it up.
-
Thinking about it, I would agree. All the problems people had were because no one had drivers for Vista, which would be a problem for any new operating system on a PC.
-
As they say, "There is more than 1 way to skin a cat."
-
You sure do, it is all about the "scope". You could store them in session or make them global. <?php function test() { echo $a; // should echo nothing } function test2($a) { echo $a; // should echo out $a } function test3() { global $a; echo $a; // should echo out $a } global $a; $a = "test<br />"; test(); test2($a); test3(); ?> Hope that helps you to understand better. EDIT: For more information google or look in the PHP Manual for "Variable Scope" it should do a better explanation than I can give.
-
[SOLVED] scandir() with a for loop Function not working
premiso replied to emma57573's topic in PHP Coding Help
Wrong forum buddy, did you not see the: This is NOT a help forum! right below this forum? -
lol I remember my school used DeepFreeze. I was in a programming class and needed to "install" software. I watched my teacher type it in and memorized it. So yea, any computer I would use had Rainbow6 and MPlayer installed on it, so did my friends computers. It was fun playing games all class period! My teacher kept removing it once a week and could never figure out how it got put on there. She always suspected me but could never prove it. Ah the joys of the teen school years.
-
Hey, I am creating a login system and have been looking into using Javascript to hash user information on the client side and sending it over, so the data cannot really be sniffed by packet sniffers. (Not that I have had this happen but yea). I plan to use it on the registration form just for the Password. When a user logins, it will hash both the password and username. I plan to do an SHA1 hash and send it to my script, which in return would do a new SHA1 hash that is salted of that hash for the password (the password would be stored in the same fashion) and then hash the username from the database and check against that. If they match, they are logged in. I think this may be overkill, but it also sounds like a fun project for me to do. I was wondering if anyone had any thoughts on why this would not work or any possible flaws in doing this? I would also want to implement a hash check on the registration and or login form(s), if the hash does not match, reject the form. This would, hopefully prevent bots from registering or someone trying to bruteforce my system. The idea would be to have a hidden input field with a random name (stored in session) and hash re-generated for each "attempt". Along with the above I will have a lock out of account after x attempts for x minutes. If an IP is seen hitting more than 1 account within x amount of minutes and getting passwords wrong, that IP is then temporarily banned for 20 minutes or so. Well just wanted to see if I am overkilling it, or if that is good security measure to make sure my site is not hacked and my users information is safe. Thanks for your responses!
-
Basically the index.php inside of "something" folder has code in it that checks if p issset in $_GET data, then probably a case/switch statement it determines what to display. No, links have to follow the standard HTML format.
-
<a href="link.php?item=1">link1</a> <a href="link.php?item=2">link2</a> link.php code <?php if (isset($_GET['item'])) { $item = (int)$_GET['item']; }else { $item = 1; } switch ($item) { default: case 1: // item 1 coding here. break; case 2: // item 2 coding here break; } ?>
-
Funny how they do not bother to read every entry, they would have learned that a while ago.
-
You can still find torrents of Longhorn out there to try it out on VMWare. The last version I tried it was pretty cool, from what I remember. That was in like 02 or 03. But here is a quote from wikipedia http://en.wikipedia.org/wiki/Windows_Vista They wanted to make Vista more "secure". Anyways, yea. Kinda fun to find the original builds of longhorn and see what vista originally was.
-
You do know they have been developing Vista since XP was released. It was codenamed Longhorn. In about 05 they canned the code cause they realized it was too much for the public and then coded Vista in out a year, which explains all the issues. Instead of taking the time to finesse Longhorn and get it nice, they just wanted a simple product and yea. Thus Vista was born. Longhorn was pretty cool, it was extremely customizable, I guess M$ thought that it was too much power to give a user and decided to limit it with a re-code called Vista.
-
Fresh installs are always better. But I guess I should have noted, I have never used Vista for more than 15 minutes. So yea, I guess I cannot accurately compare the two. It looked the same, as far as functionality, no clue. I just hope my work goes to Windows 7 instead of Vista! Vista to me is the same as ME was, just a bridge for Microsoft to milk more money between 2 decent OS's.
-
Stole what I was going to write! Anyways, if this is the same on Ubuntu as on Vista, it sounds to be more of an actual sound card issue. My 2cents is that they gave you a bad motherboard or as they would call it a "refurbished" mother board. It sucks, but since it is still warrantied and they screwed up. I would send it back and have them fix it. However, if the harddrive is easy to remove. I would remove that to make sure you data stays with you. It should not void the warranty, unless the harddrive is insane to get to. If not that, then do a backup to an external drive. If you can, and you are capable at working on computers, see if you can just request the part. I know Dell will allow you to do Parts Only replacements and you just have to send back the old part within 10-days. You can find a service manual online for how to take the laptop apart. The hardest part will be keeping track of the screws, but all in all it should not be too hard.
-
Did you try it? That looks like the right place to me.
-
One of these days, when I feel like it I will switch back to Linux. I was on Linux till no games worked on it, that bothered me. For me, it was Debian all the way. A note, I did DL Windows 7, same thing as vista. I did not notice a difference in the two. Maybe someone else did? Anyways, I hate the display style windows is going to and plan to, instead of complain, just switch back to Debian.
-
What laptop are you using? Model/Make
-
$postname = "image" . $id; $postsize = "size" . $id; Do that, unless "image" and "size" were constants. That is the only spot I would see that would "cause" issues. Not sure why it is IE specific...
-
You must have a line break before the end. Try this: $product_html = (strlen($product_html) > ? str_replace("\n", "...\n", $product_html) : $product_html; And see if that fixes it.
-
mmm no, you are looking at the wrong function. $product_html = str_replace( '{product_name}', shopMakeHtmlSafe(substr($product_name,0,), $product_html ); $product_html = (strlen($product_html) > ? $product_html . "..." : $product_html; Should get you what you want. That is called, concatenation. The ? and : are the Ternary operators which work like a IF/ELSE statement, just shortened.