IRC Networks
Irc Logs Stats
Start date: 2007-09-27 02:48:27
Last update: 2008-10-24 20:19:38
Channels: 41
Logged Lines: 6230436
Size: 1982.48 MB
Powered by
Channel Info
Network: freenodeChannel: #php |
Search in www.irclog.org
Log from #php at freenode 2006-06-19
Pages: < Prev
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
Next >
[10:44]<afc>but after ... not recompiled ...
[10:44]<fyguwdrg>touqen: i did
[10:44]<afc>god this is so confusing i wish i could just drop a mysql.jar in /commons/lib and get it over with
[10:44]<tjufgg>AFC: You're lack of clarity led me to believe one thing which I corrected.
[10:45]<fyguwdrg>touqen: i just upload to my webpage, and try it
[10:45]<tjufgg>linuxman: Where did you do something with the result of that query?
[10:45]<tjufgg>I don't see the $query variable being used anywhere in this paste.
[10:46]<tjufgg>AFC: Anyway, check the slackware package repo for a php5-mysqlxxx package which provides the mysql extension for php
[10:46]<fyguwdrg>line 63
[10:46]<tjufgg>...
[10:46]<tjufgg>You assign it.
[10:46]<tjufgg>That's it.
[10:47]<tjufgg>That's not using the variable.
[10:47]<tjufgg>That's assigning the variable.
[10:47]<afc>Touqen - > I did check that , doesn't seem to know anything beyound php and mysql packages
[10:48]<fyguwdrg>k
[10:49]<fyguwdrg>i feel dumb
[10:49]<fyguwdrg>okay ding ding i see what your saying
[10:49]<fyguwdrg>so i can use the query variable now?
[10:49]<cryggrvyjg>time to work on either my blog or adding comments to news items.... * decides what to code next*
[10:50]<cryggrvyjg>comments or blog?
[10:52]<fyguwdrg>Touqen: you there
[10:52]<tjufgg>yes
[10:53]<tjufgg>AFC: view phpinfo and tell me what the configure line was
[10:53]<tjufgg>kainnation: are you asking?
[10:53]<tjufgg>If you are, flip a coin
[10:53]<tjufgg>linuxman: Do you know what you need to do yet?
[10:53]<afc>one second looking for it on the slow server
[10:53]<fyguwdrg>touqen: no i been up for 17 hours, can you guide me in the right direction
[10:54]<hrfn000>i have a problem with a php page... i am getting a zero sized reply from the web server. no errors, nothing! what could be the problem?
[10:54]<tjufgg>linuxman: Go to sleep
[10:54]<tjufgg>Do _NOT_ code while tired.
[10:54]<tjufgg>It's pointless.
[10:54]<fyguwdrg>lol yea
[10:54]<tjufgg>Hal9000: It could be a lot of things.
[10:55]<fyguwdrg>Touqen: im just trying to get this done, and im off to bed
[10:55]<hrfn000>damn :P
[10:55]<yffusyjgynn>hey, how would I stop people from accessing a page? I am using this page with my AJAX login form, but I don't want real people accessing it just this script
[10:55]<tjufgg>illusionize: check if they are logged in?
[10:55]<yffusyjgynn>that is what the script does, but I don't want anyone accessing it at all
[10:56]<afc>Toquen - > I don't have a phpinfo file on my system ... maybee php.ini ?
[10:56]<fyguwdrg>Touqen: what do i need to do?
[10:56]<yffusyjgynn>so it is a script that JUST checks if the username is there blah blah blah, the usual stuff
[10:56]<tjufgg>AFC: ugh
[10:56]<tjufgg>phpinfo isn't a file
[10:56]<tjufgg>phpinfo() <-- php function
[10:56]<yffusyjgynn>so I don't want people getting into it and compromising it
[10:56]<afc>oh ... i'm not a php guy so i didn't know
[10:56]<tjufgg>uh, deny access to it via htaccess?
[10:57]<fyguwdrg>afc: it displayes your php.ini info
[10:57]<yffusyjgynn>does that mean that this script can still get to it?
[10:57]<tjufgg>still get to what?
[10:57]<afc>so I can see that info in php.ini right ? what should i be looking for
[10:57]<fyguwdrg>lol
[10:57]<tjufgg>AFC: Actually you can't.
[10:57]<afc>here's the thing , i'm trying to install dotproject ... and it's telling me mysql support is not installed
[10:57]<tjufgg>The configure line isn't in php.ini
[10:58]<yffusyjgynn>well I am using AJAX to access this script that checks if the username exists, but I don't want people to get to that script. So if I deny access to the script will the login still be able to access the script to check if the username exists and what not
[10:58]<fyguwdrg>afc: just insert <?PHP phpinfo() ?> on a page, and upload it to your web-server, then view it.
[10:58]<tjufgg>illusionize: oh nope
[10:58]<2nzzd__>illusionize: you could of course limit the source's IP..
[10:58]<tjufgg>illusionize: You can't really block access to it because ajax requests come from the clients browser
[10:59]<afc>ok done thanks
[10:59]<afc>so what do i look for
[10:59]<tjufgg>thereby all your clients have to be able to access it
[10:59]<tjufgg>the ./configure line afc
[10:59]<fyguwdrg>Touqen: was you gonna tell me what i needed to do, sorry man not trying to sound demanding :_
[10:59]<tjufgg>for the 3rd time
[10:59]<afc>yes it's huge
[10:59]<yffusyjgynn>ah damn
[10:59]<tjufgg>AFC: pastebin it
[10:59]<svyffnz>mail send through contact forms on our machine are suddenly received as (we think) raw base64 strings: VGhpcyBpcy...etc. Any ideas what could have caused this?
[10:59]<yffusyjgynn>so how would I secure it and stop people from compromising it, just make sure they are only accessing the right bits?
[10:59]<tjufgg>stiller: probably your mta is misconfigured
[11:00]<tjufgg>stiller: enable mail logging in your mta
[11:00]<afc>http://pastebin.com/717930
[11:00]<svyffnz>Touqen: ok, we'll try that.
[11:00]<tjufgg>illusionize: How exactly could they compromise it?
[11:00]<yffusyjgynn>hmmmm, good question
[11:00]<yffusyjgynn>hold on
[11:00]<yffusyjgynn>I will go check
[11:01]<yffusyjgynn>it uses $_GET to get the username and password through the XMLHttpRequest() function, then it just checks them
[11:01]<tjufgg>illusionize: okay so how can' that be compromised exactly?
[11:01]<yffusyjgynn>yeah I don't really know, I thought there might be something I am overlooking
[11:02]<tjufgg>linuxman: what's not to see? After you make a query you fetch data from it in some way shape or form...
[11:02]<tjufgg>So do that.
[11:02]<tjufgg>AFC: From what I can see, it expects the mysql/mysqli shared libs which should be installed when you install mysql (using slackware's packages)
[11:03]<afc>mysql is installed and running
[11:03]<afc>but the dotprojecct installer file is saying support is not available
[11:03]<tjufgg>using the slackware package?
[11:04]<fyguwdrg>TOUQEN: So i need to print() it?
[11:04]<fyguwdrg>after query
[11:04]<tjufgg>print what after query?
[11:04]<afc>yes
[11:04]<afc>using the slackware package
[11:05]<tjufgg>AFC: Have you restarted apache since installing mysql?
[11:05]<fyguwdrg>Touqen: What am i sussposed to do I connected to the db selected table, and tried to echo the .row from mysql
[11:05]<fyguwdrg>and its not working
[11:06]<tjufgg>You do know how to retrieve data from a resultset right?
[11:07]<alnr>linuxman: after you run a query, you have to access the rows and fields. look at mysql_fetch_array







