Jump to content

Destramic

Members
  • Posts

    969
  • Joined

  • Last visited

Everything posted by Destramic

  1. you case should look like this surly case 'post': return (isset($this->_p[$name]) ? TRUE : FALSE; break; case 'get': return (isset($this->_g[$name]) ? TRUE : FALSE; break; unless i missed something in your code? or even better public function is_set($name, $type="POST") { $method = $_{$type}; if (in_array($name, $method)) { return true; } return false; } try using something like this...should work...although i'm doubting myself on $method variable and cant test code at the moment. Fingers Crossed but have a look at the manual http://php.net/manual/en/language.oop5.php
  2. maybe something like this? <script> dw_Tooltip.content_vars = { L1: { <?php $get_all_photos = mysqli_query($db, "select * from photos WHERE user_id='1'"); $photo_urls = array(); while ($photo = mysqli_fetch_array($get_all_photos)) { $photo_urls[] = $photo['url']; ?> img: '<?php echo $photo['url']; ?>', txt: '<?php echo $photo['capture']; ?>' <?php } ?> } } </script> <?php foreach ($photo_urls as $url){ ?> <a href='' class="showTip L1"><img src="<?php echo $url; ?>"/></a> <?php } ?>
  3. hey guys i've changed my port on my apache to 8080 to stop any conflict with other applications, but now have to put port on end of address for localhost to work. ie. 127.0.0.1:8080 or http://localhost:8080 i know this may sound a bit silly but is there a way of using a virual host so that i can just execute http://localhost and it connect to http://localhost:8080? thank you
  4. ok well i think im getting somewhere now...although im trying to include a .conf file to the servers .conf file im using: Include /var/www/vhosts/system/bisi.bid/conf/vhost.conf but returns error Syntax error on line 1 of /var/www/vhosts/system/bisi.bid/conf/vhost.conf: now if i try to alter direcory to customer config then it says directory/file not found so i know what i'm trying to include is right but just getting errors. my server uses plesk 12 and i've done what it says in the manual. any ideas what the problem could be? thank you
  5. im able to put apache directives when using using my plesk contol panel so i added this line LoadModule geoip_module /usr/local/apache/modules/mod_geoip.so but im getting a error: Syntax error on line 1 of /var/www/vhosts/system/bisi.bid/conf/vhost.conf: Cannot load /usr/local/apache/modules/mod_geoip.so into server: /usr/local/apache/modules/mod_geoip.so: cannot open shared object file: No such file or directory but i've installed geo_ip module using putty...what do you suggest i do now?
  6. ok well the log said: so i removed these lines from the .htaccess LoadModule geoip_module /usr/local/apache/modules/mod_geoip.so GeoIPEnable On GeoIPDBFile /usr/share/GeoIP/GeoIP.dat MemoryCache these are the modules on the server so im guessing i have installed the geoip module properly...what do you suggest i do please to get it installed? thank you
  7. hey guys im after a but of help regarding installing the geo ip module...now im sorry of its in the wrong forum but i couldnt see where to put it but hopefully someone can help. now i read a few tutorials copied and pasted a few lines into putty and my server has a 500 internal server error on it...so ive really messed it up. i logged into putty and used the following commands mkdir /usr/share/GeoIP cd /usr/share/GeoIP wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz gzip -d GeoIP.dat.gz wget http://www.sohailriaz.com/downloads/custom_opt_mod-mod_geoip.tar.gz tar -zxvf custom_opt_mod-mod_geoip.tar.gz service httpd restart .htaccess ------- LoadModule geoip_module /usr/local/apache/modules/mod_geoip.so GeoIPEnable On GeoIPDBFile /usr/share/GeoIP/GeoIP.dat MemoryCache any advise on how i can repair my server and what it is i have done wrong please? thank you guys
  8. ok thanks but is it possible to get my results from the database like so:
  9. hey guys, i have a bit of a strange question and dont know if what im asking can actually be done with mysql but here goes. basically i have a table like so: items -------------------- item_id category sub_category sub_sub_category name price --------------------- now what im after is a result like so: category sub_cat sub_sub_cat [consoles] => [accessories] => [headsets] => [0] => ('name' => 'item1', 'price' => '10.00') now ive seen a query which converts to json (but didnt work) but would be great if its possible to do what i want it to do SELECT CONCAT("[", GROUP_CONCAT( CONCAT("{username:'",username,"'"), CONCAT(",email:'",email),"'}") ) ,"]") AS json FROM users; any advise would be great thank you
  10. i'm not a great fan of passwords being changed on demand either but thought it may help security...but thank you for you views and help guys...gonna go with looping it and checking it through a loop cheers
  11. hey guys i want to pick you brains regarding user password records please. what im trying to achieve is when the user changes his/her password in 6 months time that its not the same as previous passwords. when a user registers i use password_hash() for the password and insert into users database table...now i want to keep a record of passwords in my password_records table. 1. do i save the password (not hashed) so i can compare in later in the future? or 2. save the hashed password in the password records and do a foreach loop of the password hashes using password_verify()? may seem transparent to go with the lata, but any advise or a better solution would be great. thank guys
  12. well ive been fiddling about with for a few days now to see if i can accually get a result which returns my country...reason being because i get a city result when searching on maxmind and other geo ip site. i've even tried this: SELECT l.country, l.city, l.postal_code, l.latitude, l.longitude, l.dma_code, l.area_code FROM blocks b INNER JOIN locations l ON b.location_id = l.location_id WHERE MBRCONTAINS(b.ip_polygon, POINTFROMWKB(POINT(INET_ATON('95.146.187.2'), 0))); is there any other methods of me getting the users city?...if not a suppose i could go down the route of the user inputting it. and when searching locations table for my city "Cwmbran" i can find it, but my longitude and latitude from my ip is like 1 out on each thank you
  13. thank you...although i havent got the geoip extension installed on my localhost/server so im uable to use it....thats why i went down the route of mysql. here is the query i'm using...but when using it doesnt return a city (which is the main reason i need this) SELECT l.country, l.region, l.city, l.postal_code, l.longitude, l.latitude, l.dma_code, l.area_code FROM blocks b JOIN locations l ON l.location_id = b.location_id WHERE INET_ATON('95.146.187.2') BETWEEN b.ip_start AND b.ip_end LIMIT 1 now ive downloaded the free blocks and locations....how am i able to get what i need?...do i need to pay for the service with maxmind? thank you for your help
  14. that worked beautifully thank you...and yeah i meant CSV. what im trying to achive is: 1. to get longitude and latitude via users ip 2. and to get city by longitude and latitude i've tried to google for sql querys but couldnt find what i was after if you coud help or point me in the right direction. thanks again
  15. hey guys ive decided to use geoip via my database on my server. now i've download blocks.cvs and location.cvs from: http://geolite.maxmind.com/download/geoip/database/GeoLiteCity_CSV/GeoLiteCity-latest.zip but when trying to load block.cvs in excel it says: does anyone know of another source where i can that/these files from please? thank you
  16. thanks for your posts guys...cronix that was just what i was after ...cheers
  17. first of all...its good to see the site back . my question guys is i'm wondering is there a way of getting the column number when reading a .cvs file? ie. a, b, c, d, aa, ab etc? $row = 1; if (($handle = fopen($file, "r")) !== FALSE) { while (($data = fgetcsv($handle, 1000, ",")) !== FALSE) { $num = count($data); echo "<p> $num fields in line $row: <br /></p>\n"; $row++; for ($c=0; $c < $num; $c++) { //echo $data[$c] . "<br />\n"; } } fclose($handle); } now $num counts the columns...but i want to convert that into a alphabetical column...is there a easy solution? thanks guys
  18. Your right...I've just made something so simple complex...that's what you get for looking a other people's ideas and thinking it's the best way. I'm gonna remove most of the crap and just have it as you say...one token for a whole session...thanks again for your help
  19. Destramic

    CSRF

    hey guys, i was introuduced the the world of csrf a little while ago by a member of PHP Freaks, beofore hand i had'nt a clue...so i decided to read a little more into and created a class to deal with generating tokens and ensuring the site is free from CSRF. now my understanding is that a CSRF can be made from clicking on sponsers, images and basically anything that can cause a request to another site/domain. now with the script allows the user to have multipule tokens and a new token is generated everytime when filling a form or whatever, allowing user to have more than one tab open. I'm just a little concerned that a CSRF attack can still be made this way as a new token is made on each form page. when creating a form i do this: <input name="csrf_token" type="hidden" value="12345" /> then on post im able to do something like this: $token = $csrf->get_token(); // token for input if ($csrf->is_safe($post->csrf_token) && form->is_valid()) { echo "safe" } else { echo "unsafe"; } here is my class <?php namespace Security; use Session\Session as Session; use Security\SSL; class CSRF { protected $_expiration = "3600"; public function get_token($expiration = null) { $ssl = new SSL; $token = $ssl->random_string(20); $session = new Session; $session->start(); if ($expiration === null) { $expiration = $this->_expiration; } else if (!is_numeric($expiration)) { // error } if (!$session->offset_exists('csrf_token')) { $session->csrf_token = array(); } $expiration = time() + $expiration; $session->append('csrf_token', array('token' => $token, 'expiration' => $expiration )); return $csrf_token; } protected function token_exists($token) { $session = new Session; $session->start(); $csrf_token = $session->csrf_token; $result = false; foreach ($csrf_token as $key => $array) { if (time() > $array['expiration']) { $session->offset_unset('csrf_token', $key); } else if ($array['expiration'] > time()&& $array['token'] === $token) { $session->offset_unset('csrf_token', $key); $result = true; } } return $result; } public function is_safe($token) { if ($this->token_exists($token)) { return true; } return false; } } any advise would be greatful, thank you
  20. thank you for the great information guys...i've just decided to go with a cheap one for now and possible with time, users and more money i think i'll be worth investing in a EV certificate. sorry for the delay in reply
  21. was a simple as me connecting to the wrong db!...silly me...thank you for your reply and help
  22. buying a multi domain was a big misunderstanding...just a single domain will be sufficient. ok well i looked into each certificate a bit more, and obvious the more you pay the better it is. now as my site is a working progress and may not possibly work i think a cheap cheap one would be ok for now...and then maybe purchase a comodo-ev-sgc-ssl in time? but regarding the ev green adress bar...some certificates come with and some don't...isnt the green bar like a reinsurance to the user that the site is actually secure? thanks for your help guys...much appreciated
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.