Comments for Jelly and Custard http://www.jellyandcustard.com Web Development Blog Mon, 12 May 2008 12:31:39 +0000 http://wordpress.org/?v=2.0.2 Comment on Raw POST Data in PHP by Shai Mishali http://www.jellyandcustard.com/2006/01/05/raw-post-data-in-php/#comment-28397 Wed, 16 Apr 2008 08:35:05 +0000 http://www.jellyandcustard.com/2006/01/05/raw-post-data-in-php/#comment-28397 If talking about an HTML form, a submit button MUST be present in order to send the form's post data. Or a "submit" type input or a "image" (which is a submit in the form of an image) You can hide it if it bothers you: Cheers, Shai. If talking about an HTML form, a submit button MUST be present in order to send the form's post data.

Or a "submit" type input or a "image" (which is a submit in the form of an image)

You can hide it if it bothers you:

Cheers,
Shai.

]]> Comment on Email Header Injection in PHP by Graham http://www.jellyandcustard.com/2006/02/24/email-header-injection-in-php/#comment-28026 Fri, 04 Apr 2008 06:41:38 +0000 http://www.jellyandcustard.com/2006/02/24/email-header-injection-in-php/#comment-28026 I have also found it useful to collect the IP address of people who respond using my forms and creating a list of IP addresses that attempt to break the sanitisation, and then: <code> $IP_addr = $_SERVER['REMOTE_ADDR']; $banlist = fopen("badIP.txt", "r"); $badips = ""; while ( $data = fgets($banlist) ) { $badips .= $data . ";"; } if ( strstr($badips, $IP_addr) ) die(); </code> I have also found it useful to collect the IP address of people who respond using my forms and creating a list of IP addresses that attempt to break the sanitisation, and then:


$IP_addr = $_SERVER['REMOTE_ADDR'];
$banlist = fopen("badIP.txt", "r");
$badips = "";
while ( $data = fgets($banlist) ) {
$badips .= $data . ";";
}
if ( strstr($badips, $IP_addr) ) die();

]]> Comment on Using DirectoryIterator to List Files in PHP by Tims Blog » Blog Archive » Whoops http://www.jellyandcustard.com/2006/05/18/using-directoryiterator-to-list-files-in-php/#comment-27768 Fri, 28 Mar 2008 17:00:30 +0000 http://www.jellyandcustard.com/2006/05/18/using-directoryiterator-to-list-files-in-php/#comment-27768 [...] using directoryiterator to list files in php [...] […] using directoryiterator to list files in php […]

]]> Comment on Installing PECL Modules by Installing PECL Extensions | Burlymike.com 3.2 http://www.jellyandcustard.com/2006/01/19/installing-pecl-modules/#comment-27693 Wed, 26 Mar 2008 20:08:29 +0000 http://www.jellyandcustard.com/2006/01/19/installing-pecl-modules/#comment-27693 [...] Great guide here. What is the difference then all the other guides out there? Most other guides fail to mention this portion of the installation process: You will need to activate the extension by editting your php.ini and add: [...] […] Great guide here. What is the difference then all the other guides out there? Most other guides fail to mention this portion of the installation process: You will need to activate the extension by editting your php.ini and add: […]

]]> Comment on PHP, cURL, HTTP PUT, SSL and Basic Authentication by Christopher Vrooman http://www.jellyandcustard.com/2006/01/02/php-curl-http-put-ssl-and-basic-authentication/#comment-27312 Mon, 17 Mar 2008 23:15:28 +0000 http://www.jellyandcustard.com/2006/01/02/php-curl-http-put-ssl-and-basic-authentication/#comment-27312 Maybe a dumb question, but let's say I want to send a cURL encoded username:password to my server. How do I then retrieve that information so I can verify it? I've seen a hundred tutorials on how to send information the username and password via cURL, but not one on how to deal with that from the server side. I tried var_dump'ing $GLOBALS and the information isn't in any of PHP's superglobal arrays. Any clues on how to receive the information that cURL is sending? Maybe a dumb question, but let's say I want to send a cURL encoded username:password to my server. How do I then retrieve that information so I can verify it?

I've seen a hundred tutorials on how to send information the username and password via cURL, but not one on how to deal with that from the server side.

I tried var_dump'ing $GLOBALS and the information isn't in any of PHP's superglobal arrays. Any clues on how to receive the information that cURL is sending?

]]> Comment on Using DirectoryIterator to List Files in PHP by Luke http://www.jellyandcustard.com/2006/05/18/using-directoryiterator-to-list-files-in-php/#comment-27207 Sat, 15 Mar 2008 21:21:13 +0000 http://www.jellyandcustard.com/2006/05/18/using-directoryiterator-to-list-files-in-php/#comment-27207 When is that RecursiveDirectoryIterator article coming? When is that RecursiveDirectoryIterator article coming?

]]> Comment on Regular Expressions in PHP by Jerry http://www.jellyandcustard.com/2006/06/13/regular-expressions-in-php/#comment-27158 Sat, 15 Mar 2008 04:35:21 +0000 http://www.jellyandcustard.com/2006/06/13/regular-expressions-in-php/#comment-27158 Great post on regex. Thanks! Great post on regex. Thanks!

]]> Comment on Retrieve valid entries for a MySQL ENUM/SET column by Passerby http://www.jellyandcustard.com/2005/11/23/retrieve-valid-entries-for-a-mysql-enumset-column/#comment-26768 Wed, 05 Mar 2008 15:46:11 +0000 http://www.jellyandcustard.com/2005/11/23/retrieve-valid-entries-for-a-mysql-enumset-column/#comment-26768 None of the solutions suggest prior to this post have worked for me, so I came up with this: preg_replace("/'\)$/", '', preg_replace("/^(enum&#124;set)\('/", '', $fields)) Note: I'm using PHP 5.2.0 with mysqli functions This function is a great idea though. Thanks for sharing. None of the solutions suggest prior to this post have worked for me, so I came up with this:

preg_replace("/')$/", '', preg_replace("/^(enum|set)('/", '', $fields))

Note: I'm using PHP 5.2.0 with mysqli functions

This function is a great idea though. Thanks for sharing.

]]> Comment on Phone Numbers: Input, Storage and Formatting by Chris Pink http://www.jellyandcustard.com/2006/03/11/phone-numbers-input-storage-and-formatting/#comment-26503 Thu, 28 Feb 2008 18:41:11 +0000 http://www.jellyandcustard.com/2006/03/11/phone-numbers-input-storage-and-formatting/#comment-26503 You missed the backslash in the preg_replace line, should read; $phone = preg_replace("/[^\d]/",'',$phone); I consider it a triumph i realised this (eventually) You missed the backslash in the preg_replace line, should read;

$phone = preg_replace("/[^d]/",'',$phone);

I consider it a triumph i realised this (eventually)

]]> Comment on Using DirectoryIterator to List Files in PHP by jon http://www.jellyandcustard.com/2006/05/18/using-directoryiterator-to-list-files-in-php/#comment-25939 Mon, 18 Feb 2008 23:08:27 +0000 http://www.jellyandcustard.com/2006/05/18/using-directoryiterator-to-list-files-in-php/#comment-25939 What if I want the directories in a directory? Does DirectoryIterator only return the files? What if I want the directories in a directory? Does DirectoryIterator only return the files?

]]>