 tags.

Ken 

From dmintz at davidmintz.org  Thu Oct 19 14:29:59 2006
From: dmintz at davidmintz.org (David Mintz)
Date: Thu, 19 Oct 2006 14:29:59 -0400 (EDT)
Subject: [nycphp-talk] DataObject implementation (was Re: Constructors
 and)
In-Reply-To: <7EB77E45-7E68-49C7-8AC8-EBC2D685B92B@sala.ca>
References: <3503e561a956764ef4b7e5dbe1398d70@jobsforge.com>
	<9D5F7096-CD8E-473A-BFAC-835DFE8E7E4C@sala.ca>

	<7EB77E45-7E68-49C7-8AC8-EBC2D685B92B@sala.ca>
Message-ID: 

On Thu, 19 Oct 2006, Dell Sala wrote:

>
> The other possibility is to look into existing DataObject frameworks
> that have already implemented the fancy stuff for you. I've used
> PEAR's DB_DataObject. It's a bit of a pain to get up an running, but
> it's solid. There are quite a few others -- here are a few:
>
> http://pear.php.net/package/DB_DataObject/
> http://propel.phpdb.org/trac/
> and CakePHP implements its own ActiveRecord  http://cakephp.org/
>

I was gonna say -- but didn't, for brevity's sake -- that I have spent
several+ hours with Cake, and it does seem mighty cool, yet I've run into
enough snags to wonder about the name. Like findAll() not fetching the
data that I need and having to write custom SQL anyway.

Then I looked at DB_DataObject and quickly noticed the pain part that you
refer to. I realize I don't quite get it and that's surely part of my
problem, but still I think the docs and examples on
http://pear.php.net/manual/en/package.database.db-dataobject.php are kind
of abstruse.

I might end up coming full circle and hand-coding a lot of stuff. I recall
the words of one great sage on this list:

"SQL is a language. Love it."

---
David Mintz
http://davidmintz.org/

En Nueva York el tr?nsito de la belleza a la desolaci?n sucede
siempre expeditivamente, como si el principio universal
de m?xima eficiencia hubiera aconsejado la supresi?n de
gradaciones intermedias.

  -- Antonio Mu?oz Molina, Ventanas de Manhattan

From skyline at publicmine.com  Thu Oct 19 14:31:41 2006
From: skyline at publicmine.com (Ben Sgro (sk))
Date: Thu, 19 Oct 2006 14:31:41 -0400
Subject: [nycphp-talk] Textarea formatting
References: <005301c6f3a2$03612ef0$6401a8c0@gamebox><007701c6f3a9$ec8f1360$6401a8c0@gamebox>
	<7.0.1.0.2.20061019142741.0603e598@rbnsn.com>
Message-ID: <008a01c6f3ac$d40b1b60$6401a8c0@gamebox>

Ken, 

Great, that's exactly what I need. 
Thanks all!

- Ben
----- Original Message ----- 
From: "Ken Robinson" 
To: "NYPHP Talk" 
Sent: Thursday, October 19, 2006 2:28 PM
Subject: Re: [nycphp-talk] Textarea formatting

At 02:10 PM 10/19/2006, Ben Sgro (sk) wrote:
>Felix,
>
>Sure, that is helpful, but what about tabs, lists and all the other 
>elements that could exist in an email message.
>I'm looking for a canned function or class that will do the work.

You can try displaying the text between  tags.

Ken 

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

From dmintz at davidmintz.org  Thu Oct 19 14:34:27 2006
From: dmintz at davidmintz.org (David Mintz)
Date: Thu, 19 Oct 2006 14:34:27 -0400 (EDT)
Subject: [nycphp-talk] DataObject implementation (was Re: Constructors
 and)
In-Reply-To: 
References: <3503e561a956764ef4b7e5dbe1398d70@jobsforge.com>
	<9D5F7096-CD8E-473A-BFAC-835DFE8E7E4C@sala.ca>

	<7EB77E45-7E68-49C7-8AC8-EBC2D685B92B@sala.ca>

Message-ID: 

PS: Don't want to seem too much of a whiner. DB_DataObject looks promising
and I want to figure it out. I am a little stuck on JOIN but if I come up
with an intelligent question I will take the liberty...

On Thu, 19 Oct 2006, David Mintz wrote:

> Then I looked at DB_DataObject and quickly noticed the pain part that you
> refer to. I realize I don't quite get it and that's surely part of my
> problem, but still I think the docs and examples on
> http://pear.php.net/manual/en/package.database.db-dataobject.php are kind
> of abstruse.

---
David Mintz
http://davidmintz.org/

En Nueva York el tr?nsito de la belleza a la desolaci?n sucede
siempre expeditivamente, como si el principio universal
de m?xima eficiencia hubiera aconsejado la supresi?n de
gradaciones intermedias.

  -- Antonio Mu?oz Molina, Ventanas de Manhattan

From r.mariotti at fdcx.net  Thu Oct 19 14:39:42 2006
From: r.mariotti at fdcx.net (R. Mariotti)
Date: Thu, 19 Oct 2006 14:39:42 -0400
Subject: [nycphp-talk] Image w/Text Methods??
Message-ID: <4537C66E.4030900@fdcx.net>

Fellow PHP'ers;

As a developer, most times for a professional site the graphical 
components might be conveniently delivered by the design person.  This 
makes for very easy reference and literally plug-in.

However, like today, there is often the occasion where someone desires a 
change in some of the text that is already part of an image.   The 
technique I usually use is to make a copy of the image then use gimp to 
cut-out the undesired portion then add the new text to the image and 
move it around finally flattening it, saving it then uploading to the 
site.  Most times it works reasonably well (sort of!)

But, the clarity and precision of these resulting images are certainly 
not up to the quality that the original displayed.  I don't know the 
real reason because I'm not a graphics designer/artist.  It appears that 
the fonts, even though anti-aliased, are not as sharp as the original.

So, what other techniques do most of you use to accomplish the same? 
Surely not everyone has an in-house graphics artist.  I know I never 
had.  What programs and/or techniques are customarily used to accomplish 
this feat?

While this is not entirely a php question, it certainly is php developer 
related so that's why I though of posting to this list.

Thank you all.

B

From jbaer at VillageVoice.com  Thu Oct 19 14:44:40 2006
From: jbaer at VillageVoice.com (Baer, Jon)
Date: Thu, 19 Oct 2006 14:44:40 -0400
Subject: [nycphp-talk] Image w/Text Methods??
In-Reply-To: <4537C66E.4030900@fdcx.net>
Message-ID: <4D2FAD9B00577645932AD7ED5FECA24503898D84@mail>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In some cases (depending on the complexity of the "images") you could
get away with just using a rich HTML editor like FckEditor
(http://www.fckeditor.net/) which would give them a WYSIWYG type and
feel over a given section.  You would give a cell a given background
template image and let them work around.  This of course does not give
you the Photoshop layering capabilities to a precise layout but like I
said depending on the complexity will leave them "happy enough" :-)

Also that editor supports upload + file browsing which is pretty nice.  

- - Jon

- -----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of R. Mariotti
Sent: Thursday, October 19, 2006 2:40 PM
To: talk at lists.nyphp.org
Subject: [nycphp-talk] Image w/Text Methods??

Fellow PHP'ers;

As a developer, most times for a professional site the graphical
components might be conveniently delivered by the design person.  This
makes for very easy reference and literally plug-in.

However, like today, there is often the occasion where someone desires a

change in some of the text that is already part of an image.   The 
technique I usually use is to make a copy of the image then use gimp to
cut-out the undesired portion then add the new text to the image and
move it around finally flattening it, saving it then uploading to the
site.  Most times it works reasonably well (sort of!)

But, the clarity and precision of these resulting images are certainly
not up to the quality that the original displayed.  I don't know the
real reason because I'm not a graphics designer/artist.  It appears that
the fonts, even though anti-aliased, are not as sharp as the original.

So, what other techniques do most of you use to accomplish the same? 
Surely not everyone has an in-house graphics artist.  I know I never
had.  What programs and/or techniques are customarily used to accomplish
this feat?

While this is not entirely a php question, it certainly is php developer
related so that's why I though of posting to this list.

Thank you all.

B
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (MingW32)

iD8DBQFFN8eY99e5DI8C/rsRAoYcAJ9QUtDd/B/3Fqi1IZ1nxvehgFEK6ACgpHmP
bTHtsmqZIbkLqT2gky9PqbA=
=ATqs
-----END PGP SIGNATURE-----

From bdailey at jaysec.com  Thu Oct 19 14:52:57 2006
From: bdailey at jaysec.com (Brian Dailey)
Date: Thu, 19 Oct 2006 14:52:57 -0400
Subject: [nycphp-talk] Image w/Text Methods??
In-Reply-To: <4537C66E.4030900@fdcx.net>
References: <4537C66E.4030900@fdcx.net>
Message-ID: <4537C989.2020608@jaysec.com>

One thing you might want to keep in mind is that the original file might 
have been done in Photoshop. If you replace the text with Gimp, the text 
may look a little different because each program has different ways of 
handling anti-aliasing.

In my experience, that sort of problem is best answered by keeping the 
original layered (PSD or Gimp equivalent) files on hand somewhere. That 
makes it infinitely easier (and less time consuming) to modify the image 
at a later date.

- Brian

R. Mariotti wrote:
> Fellow PHP'ers;
> 
> As a developer, most times for a professional site the graphical 
> components might be conveniently delivered by the design person.  This 
> makes for very easy reference and literally plug-in.
> 
> However, like today, there is often the occasion where someone desires a 
> change in some of the text that is already part of an image.   The 
> technique I usually use is to make a copy of the image then use gimp to 
> cut-out the undesired portion then add the new text to the image and 
> move it around finally flattening it, saving it then uploading to the 
> site.  Most times it works reasonably well (sort of!)
> 
> But, the clarity and precision of these resulting images are certainly 
> not up to the quality that the original displayed.  I don't know the 
> real reason because I'm not a graphics designer/artist.  It appears that 
> the fonts, even though anti-aliased, are not as sharp as the original.
> 
> So, what other techniques do most of you use to accomplish the same? 
> Surely not everyone has an in-house graphics artist.  I know I never 
> had.  What programs and/or techniques are customarily used to accomplish 
> this feat?
> 
> While this is not entirely a php question, it certainly is php developer 
> related so that's why I though of posting to this list.
> 
> Thank you all.
> 
> B
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> 
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
> 
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
> 
> 

From cliff at pinestream.com  Thu Oct 19 14:56:07 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Thu, 19 Oct 2006 14:56:07 -0400
Subject: [nycphp-talk] Textarea formatting
In-Reply-To: <008a01c6f3ac$d40b1b60$6401a8c0@gamebox>
Message-ID: <000001c6f3b0$3c616f90$12a8a8c0@HirschLaptop>

Ah, hate to be a killjoy, but does that mean you just echo that field
back to the screen? Big security hole. The tricky part is how to escape
the output while still allowing the special characters that you want.

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Ben Sgro (sk)
Sent: Thursday, October 19, 2006 1:32 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] Textarea formatting

Ken, 

Great, that's exactly what I need. 
Thanks all!

- Ben
----- Original Message ----- 
From: "Ken Robinson" 
To: "NYPHP Talk" 
Sent: Thursday, October 19, 2006 2:28 PM
Subject: Re: [nycphp-talk] Textarea formatting

At 02:10 PM 10/19/2006, Ben Sgro (sk) wrote:
>Felix,
>
>Sure, that is helpful, but what about tabs, lists and all the other 
>elements that could exist in an email message.
>I'm looking for a canned function or class that will do the work.

You can try displaying the text between  tags.

Ken 

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

From dell at sala.ca  Thu Oct 19 15:06:06 2006
From: dell at sala.ca (Dell Sala)
Date: Thu, 19 Oct 2006 15:06:06 -0400
Subject: [nycphp-talk] DataObject implementation (was Re: Constructors
	and)
In-Reply-To: 
References: <3503e561a956764ef4b7e5dbe1398d70@jobsforge.com>
	<9D5F7096-CD8E-473A-BFAC-835DFE8E7E4C@sala.ca>

	<7EB77E45-7E68-49C7-8AC8-EBC2D685B92B@sala.ca>

Message-ID: <7D0E56CF-AF33-41C1-8350-34CA757A16F5@sala.ca>

JOINs are a bear with the DataObject pattern. I basically never use  
the DB_DataObject::join() method. If I need a join, I just use the  
query() method instead. I think the documentation even recommends  
this for all but the simplest JOIN queries.

DB_DataObject was actually my first introduction to DataObjects  
(trial by fire!), and after using it for a while I really enjoy the  
simplicity of Darryl Patterson's article. Why not take a lightweight  
framework like he has described and just extend it as needed on a  
case-by-case basis?

-- Dell

On Oct 19, 2006, at 2:34 PM, David Mintz wrote:

> PS: Don't want to seem too much of a whiner. DB_DataObject looks  
> promising
> and I want to figure it out. I am a little stuck on JOIN but if I  
> come up
> with an intelligent question I will take the liberty...
>
> On Thu, 19 Oct 2006, David Mintz wrote:
>
>> Then I looked at DB_DataObject and quickly noticed the pain part  
>> that you
>> refer to. I realize I don't quite get it and that's surely part of my
>> problem, but still I think the docs and examples on
>> http://pear.php.net/manual/en/package.database.db-dataobject.php  
>> are kind
>> of abstruse.

From support at dailytechnology.net  Thu Oct 19 15:27:44 2006
From: support at dailytechnology.net (Brian Dailey)
Date: Thu, 19 Oct 2006 15:27:44 -0400
Subject: [nycphp-talk] IT Policies
Message-ID: 

Another "Ask the NYC PHP Crowd" question...

I've been given the responsibility of developing a policy for a small
(and growing) team of developers. By "policy" I mean defining how
"development" code becomes "live" code. The point is to minimize
problems in the program itself and the database behind it.

How do you balance flexibility with minimizing risk? I've talked to a
few of my fellow developers, and a few of them have talked about the
usefulness of code review. That seems to be good idea, as does
allowing only or two people to place development code on the live side
(less cooks in the kitchen).

Any suggestions on stuff I should think about?

- Brian

From ps at pswebcode.com  Thu Oct 19 15:38:29 2006
From: ps at pswebcode.com (Peter Sawczynec)
Date: Thu, 19 Oct 2006 15:38:29 -0400
Subject: [nycphp-talk] [OT]  Re:  Successor to the Web?
In-Reply-To: <200610191101.06658.arzala@gmail.com>
Message-ID: <004201c6f3b6$273cc7d0$6701a8c0@SUNCODE1>

Maybe the next big advance is not going to be in software, but in the pipe. 

A simple elegant cheaply manufactured ubiquitous massive wireless pipe 
(even faster, wider than fiber optic to the desktop) that will be always on 
the grid computing cloud network and handle anything. 

Simultaneously moving multiple DVD-quality streams, thousands of
personal/family bots, 
dozens of local desktop and/or network/internet applications blind to any
language or framework 
regardless of how bloated, intricate or overloaded with dependencies.

It is highly doubtful (and possibly not even desirable) that all the
disparate 
software standards, languages, applications, and techniques will be 100%
standardized 
and 100% interface abele. 

More likely I think in the future, more and more, entities like the
government, defense, 
banks, medical, brokers (likely, even wealthy individuals) will require --
absolutely must have -- 
their software written in a completely custom, highly-non-interfacing, 
enigmatic, highly-obscured language not in use anywhere else in the world.

I believe, in fact, that the US gov and defense already do write custom
software/apps 
with no known commercial equivilancy.

It is more likely that software will continue to branch and customize and
specialize moving 
more towards an infinite complexity handled by quantum and organic
processors allowing 
every person to get their own idiosyncratic signature language set of
instructions 
for their individual personal data storage and retreival all saved on a
single well-worn 
Life-ling multi-terabyte universal smart ID card that can maintain state
indefinately and 
only interfaces with the network when activated and plugged in or wiped.

Warmest regards, 

Peter Sawczynec 
Technology Director 
PSWebcode 
_Design & Interface 
_Ecommerce 
_Database Management 
646.316.3678 
ps at pswebcode.com 
www.pswebcode.com 

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of Anirudh Zala
Sent: Thursday, October 19, 2006 1:31 AM
To: NYPHP Talk
Subject: Re: [nycphp-talk] [OT] Re: Successor to the Web?

On Thursday 19 October 2006 03:03, inforequest wrote:
> Phil Duffy phil-at-bearingasset.com |nyphp dev/internal group use| wrote:
> > I am sorry if this question appears to be off-topic, but perhaps
> > someone can refer me to the correct forum.  I had programmed in
> > approximately a dozen languages previously before dabbling in PHP a
> > couple years ago.  Now that PHP 5 is truly object-oriented, I find it
> > to be the most powerful of the languages with which I am familiar.  As
> > remarkable as the Web is, I am coming to the conclusion that it has
> > some severe limitations for the kinds of complex applications that
> > were the standard in the client/server days.  I know that going back
> > to client/server is not the answer and suspect that somewhere someone
> > is working on an Internet-based system that could ultimately replace
> > the page-oriented Web.  Can anybody point me in that direction?
>
> Whatever works will replace the web, one piece at a time. Just because
> people didn't understand how free information (truthful or not) would
> change their lives (and so they adopted the web), people don't know what
> else they need, either. Somebody has to show it to them (one piece at a
> time).

Very true. People use web just as a part of fulfilling their requirements. 
That is why they don't pay much attention towards how they are being served.

As soon as their purposes are fulfilled, they stop using web and continue 
doing other stuffs. Since they are not much aware of technologies on which 
web applications have been built and running, we can't rely much on their  
opinion to bring changes. Hence it is mostly our efforts to make any changes

that we think it needs to bring.

>
> It seems you are saying you want to build complex applications, and
> don't think PHP/web is a good way to do that. Seems clear. But if you
> are trying to bring those complex apps to the people, people are (right
> now) using the web.
>
> > My primary concern with the Web is that it seems to be a force-fit of
> > page-orientation and statelessness to structured programming/object
> > orientation, which I find to be inherently task-oriented.
> > Applications that depend heavily upon related records require that
> > users perform all kinds of browses.  Under those circumstances,
> > managing communication among objects becomes a nightmare because it
> > requires the application programmer to predict communication paths to
> > objects and manually handle session variables that are not task-scoped
> > (they are by definition, session-scoped).  It appears to me that there
> > is a role for session variables, but it is not the task.
>
> Yes, doing it that way is hard. Much harder than it looks. Harder than
> people think it is. But it is also hard to travel around as a salesman,
> pitching Ginzu knives at mall cooking kiosks, flea markets, and Wal-mart
> stores 300 days per year. But somebody does that, and I met one guy who
> made a million bucks doing that in one year. All we see is some guy at
> the mall giving a great demo of a cheap knife cutting through a coke
> can. We have no idea how much work he does to bring that show around...
> and I doubt we care very much. As soon as he has a better way to cut out
> the middle man and keep 80% of his sales,  I'm sure he'll choose that
> method.
>
> > The force-fit described above is particularly apparent when
> > programming in an MVC and validate/process/display workflow
> > environment.  While many programmers have reservations about the need
> > for these disciplines, it has been my experience that they become
> > increasingly important as the size and complexity of an application
> > system increases.
>
> I think you're seeing programmers (technicians) relying on tools (which
> they have to do, to keep up). "The best tool for the job" , is sometimes
> really "the best avalable tool for the job, as the customer understands
> the job". As you know, there is a difference.
>
> > Any thoughts will be appreciated.
>
> You got em.
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

From skyline at publicmine.com  Thu Oct 19 15:43:38 2006
From: skyline at publicmine.com (Ben Sgro (sk))
Date: Thu, 19 Oct 2006 15:43:38 -0400
Subject: [nycphp-talk] IT Policies
References: 
Message-ID: <00a201c6f3b6$e0d990b0$6401a8c0@gamebox>

I think code reviews are great, they give people a change to highlight well 
done code and
point out errors and common pitfalls.

Plus people can't sneak kludges in as easily.

Having a document that states comment style, code style etc can help as 
well.
At my previous job it was required all new highers read the doc.
Having code reviews made sure the guidelines laid out in the doc where 
followed.

As you stated, speaking to the other developers to find out what the 
standards will be is the best idea,
they hopefully you can avoid disagreements with what style will be 
used..since those involved will be
able to voice their opinions.

Less cooks is better, unless it means people are waiting to check stuff in 
on live.
If they have a development server that mimics live then its not really a 
problem,
they can test and feel pretty condfident about their code before they check 
it in.

If you dont have a development server that mimics the live server, I would 
get one ASAP.

good luck!

- Ben
----- Original Message ----- 
From: "Brian Dailey" 
To: 
Sent: Thursday, October 19, 2006 3:27 PM
Subject: [nycphp-talk] IT Policies

Another "Ask the NYC PHP Crowd" question...

I've been given the responsibility of developing a policy for a small
(and growing) team of developers. By "policy" I mean defining how
"development" code becomes "live" code. The point is to minimize
problems in the program itself and the database behind it.

How do you balance flexibility with minimizing risk? I've talked to a
few of my fellow developers, and a few of them have talked about the
usefulness of code review. That seems to be good idea, as does
allowing only or two people to place development code on the live side
(less cooks in the kitchen).

Any suggestions on stuff I should think about?

- Brian
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

From jface at mercenarylabs.com  Thu Oct 19 15:50:03 2006
From: jface at mercenarylabs.com (Jonathan Face)
Date: Thu, 19 Oct 2006 15:50:03 -0400
Subject: [nycphp-talk] IT Policies
In-Reply-To: <00a201c6f3b6$e0d990b0$6401a8c0@gamebox>
References: 
	<00a201c6f3b6$e0d990b0$6401a8c0@gamebox>
Message-ID: <4537D6EB.3050204@mercenarylabs.com>

In this vein, determine a standard syntax for variable naming.

IE, $this_variable versus $thisVariable.

Less confusing that way.

Ben Sgro (sk) wrote:

>I think code reviews are great, they give people a change to highlight well 
>done code and
>point out errors and common pitfalls.
>
>Plus people can't sneak kludges in as easily.
>
>Having a document that states comment style, code style etc can help as 
>well.
>At my previous job it was required all new highers read the doc.
>Having code reviews made sure the guidelines laid out in the doc where 
>followed.
>
>As you stated, speaking to the other developers to find out what the 
>standards will be is the best idea,
>they hopefully you can avoid disagreements with what style will be 
>used..since those involved will be
>able to voice their opinions.
>
>Less cooks is better, unless it means people are waiting to check stuff in 
>on live.
>If they have a development server that mimics live then its not really a 
>problem,
>they can test and feel pretty condfident about their code before they check 
>it in.
>
>If you dont have a development server that mimics the live server, I would 
>get one ASAP.
>
>good luck!
>
>- Ben
>----- Original Message ----- 
>From: "Brian Dailey" 
>To: 
>Sent: Thursday, October 19, 2006 3:27 PM
>Subject: [nycphp-talk] IT Policies
>
>
>Another "Ask the NYC PHP Crowd" question...
>
>I've been given the responsibility of developing a policy for a small
>(and growing) team of developers. By "policy" I mean defining how
>"development" code becomes "live" code. The point is to minimize
>problems in the program itself and the database behind it.
>
>How do you balance flexibility with minimizing risk? I've talked to a
>few of my fellow developers, and a few of them have talked about the
>usefulness of code review. That seems to be good idea, as does
>allowing only or two people to place development code on the live side
>(less cooks in the kitchen).
>
>Any suggestions on stuff I should think about?
>
>- Brian
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>
>NYPHPCon 2006 Presentations Online
>http://www.nyphpcon.com
>
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>
>NYPHPCon 2006 Presentations Online
>http://www.nyphpcon.com
>
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>

From ramons at gmx.net  Thu Oct 19 18:38:56 2006
From: ramons at gmx.net (David Krings)
Date: Thu, 19 Oct 2006 18:38:56 -0400
Subject: [nycphp-talk] Textarea formatting
In-Reply-To: 
References: <005301c6f3a2$03612ef0$6401a8c0@gamebox>

Message-ID: <4537FE80.90806@gmx.net>

And for XHTML that would be 
.

Felix Shnir wrote:
> Well, if you are talking about displaying in HTML then you should 
> replace \n\r with a 

>
> Felix.

From ramons at gmx.net  Thu Oct 19 18:56:50 2006
From: ramons at gmx.net (David Krings)
Date: Thu, 19 Oct 2006 18:56:50 -0400
Subject: [nycphp-talk] Textarea formatting
In-Reply-To: <007701c6f3a9$ec8f1360$6401a8c0@gamebox>
References: <005301c6f3a2$03612ef0$6401a8c0@gamebox>	
	<007701c6f3a9$ec8f1360$6401a8c0@gamebox>
Message-ID: <453802B2.2070405@gmx.net>

Hi,

    you can't display tab in HTML and the textarea box takes just plain 
ASCII. So any fancy spacing, indenting or such will either be stripped 
or shown as single spaces. And HTML also cannot display an arry of 
simple white space. You would need to convert that to non-breaking 
spaces. But isn't there a function that translates all kinds of things 
to the equivalent HTML code?

Ben Sgro (sk) wrote:
> Felix,
>  
> Sure, that is helpful, but what about tabs, lists and all the other 
> elements that could exist in an email message.
> I'm looking for a canned function or class that will do the work.
>  
> Thanks.
>  
> - Ben
>  
> ....some code.....
> $details   = str_replace("\n\r", "
", $cellSet[0]['info']);

From ramons at gmx.net  Thu Oct 19 19:12:12 2006
From: ramons at gmx.net (David Krings)
Date: Thu, 19 Oct 2006 19:12:12 -0400
Subject: [nycphp-talk] IT Policies
In-Reply-To: 
References: 
Message-ID: <4538064C.5060301@gmx.net>

Hi,

    so you want to create high quality software. That is not only a task 
of developing. You want to address quality issues way before writing or 
even testing code. That would be during the design phase. Does the 
application design specify explicitly things such as input checking 
(what to check and what is to be considered OK), user interface design, 
modularization as much as possible, and things like that. Also, you want 
to tell your developers that any code passed on to QA has to be tested 
against a good set of test cases by the developer. Claiming that it 
compiles is not sufficient. Also, you want to come up with some coding 
convention and demand fully commented source code (which means comments 
for each line that have a code word or an operation in them). Also, see 
that you ideally get a tester to developer ratio of 1:1, not 1:20 as it 
is common in most places. I think 1:3 is reasonable (one tester for 
three developers). Include the testers, the developers, support, and 
customers in the design decisions. None of your developers will use the 
software on a regular basis, your customers will, so they have to say 
what flies and what not.

 From my experience, when the developer isn't absolutely and entirely 
sure that the code delivered is good code, there is no reason to make a 
tester suffer. And listen to the people at the front line, mainly 
support and the customers themselves. Uh, and get developers who know 
the industry and not just the latest tricks in coding. You can get to 
that by giving the developers plenty of training. And, put the 
developers into the support department for at least one day each month. 
Nothing straightens out a developer more than a bitching customer. Most 
developers need to experience the pain first hand to be convinced that 
their code is crap.

Besides that, you can read my MS thesis about just this topic. ;)

David K.

Brian Dailey wrote:
> Another "Ask the NYC PHP Crowd" question...
>
> I've been given the responsibility of developing a policy for a small
> (and growing) team of developers. By "policy" I mean defining how
> "development" code becomes "live" code. The point is to minimize
> problems in the program itself and the database behind it.
>
> How do you balance flexibility with minimizing risk? I've talked to a
> few of my fellow developers, and a few of them have talked about the
> usefulness of code review. That seems to be good idea, as does
> allowing only or two people to place development code on the live side
> (less cooks in the kitchen).
>
> Any suggestions on stuff I should think about?
>
> - Brian
>
>
>   

From randalrust at gmail.com  Thu Oct 19 21:28:36 2006
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 19 Oct 2006 21:28:36 -0400
Subject: [nycphp-talk] Help converting MySQL datetime to month
Message-ID: 

I have a function that does what I want, I just find it hard to
believe that there isn't something better. So any pointers would be
greatly appreciated.

function convertDatetime($value){
	$value=explode(" ", $value);
	$value=explode("-", $value[0]);
	$y=$value[0];
	$m=$value[1];
	$d=$value[2];
	switch($m){
		case '01':
			$m='January';
			break;
		case '02':
			$m='February';
			break;
		case '03':
			$m='March';
			break;
		case '04':
			$m='April';
			break;
		case '05':
			$m='May';
			break;
		case '06':
			$m='June';
			break;
		case '07':
			$m='July';
			break;
		case '08':
			$m='August';
			break;
		case '09':
			$m='September';
			break;
		case '10':
			$m='October';
			break;
		case '11':
			$m='November';
			break;
		case '12':
			$m='December';
			break;
		}
	$dt=$m.' '.$d.', '.$y;
	$value=$dt;
	return $value;
	}

-- 
Randal Rust
R.Squared Communications
www.r2communications.com

From chsnyder at gmail.com  Thu Oct 19 21:39:49 2006
From: chsnyder at gmail.com (csnyder)
Date: Thu, 19 Oct 2006 21:39:49 -0400
Subject: [nycphp-talk] Help converting MySQL datetime to month
In-Reply-To: 
References: 
Message-ID: 

On 10/19/06, Randal Rust  wrote:
> I have a function that does what I want, I just find it hard to
> believe that there isn't something better. So any pointers would be
> greatly appreciated.

linux/unix only I think:

function convertDatetime($value){
  return date( 'F d, Y', strtotime( $value ) );
}

-- 
Chris Snyder
http://chxo.com/

From randalrust at gmail.com  Thu Oct 19 21:52:21 2006
From: randalrust at gmail.com (Randal Rust)
Date: Thu, 19 Oct 2006 21:52:21 -0400
Subject: [nycphp-talk] Help converting MySQL datetime to month
In-Reply-To: 
References: 

Message-ID: 

On 10/19/06, csnyder  wrote:

> linux/unix only I think:
>
> function convertDatetime($value){
>   return date( 'F d, Y', strtotime( $value ) );
> }

thanks, chris.

it works on windows too:) at least it's working here.

-- 
Randal Rust
R.Squared Communications
www.r2communications.com

From support at dailytechnology.net  Thu Oct 19 23:17:43 2006
From: support at dailytechnology.net (Brian Dailey)
Date: Thu, 19 Oct 2006 23:17:43 -0400
Subject: [nycphp-talk] IT Policies
In-Reply-To: 
References: 
	<4538064C.5060301@gmx.net>

Message-ID: 

So, David, where can I get a copy of your thesis? :P

- Brian

>
> On 10/19/06, David Krings  wrote:
> > Hi,
> >
> >     so you want to create high quality software. That is not only a task
> > of developing. You want to address quality issues way before writing or
> > even testing code. That would be during the design phase. Does the
> > application design specify explicitly things such as input checking
> > (what to check and what is to be considered OK), user interface design,
> > modularization as much as possible, and things like that. Also, you want
> > to tell your developers that any code passed on to QA has to be tested
> > against a good set of test cases by the developer. Claiming that it
> > compiles is not sufficient. Also, you want to come up with some coding
> > convention and demand fully commented source code (which means comments
> > for each line that have a code word or an operation in them). Also, see
> > that you ideally get a tester to developer ratio of 1:1, not 1:20 as it
> > is common in most places. I think 1:3 is reasonable (one tester for
> > three developers). Include the testers, the developers, support, and
> > customers in the design decisions. None of your developers will use the
> > software on a regular basis, your customers will, so they have to say
> > what flies and what not.
> >
> >  From my experience, when the developer isn't absolutely and entirely
> > sure that the code delivered is good code, there is no reason to make a
> > tester suffer. And listen to the people at the front line, mainly
> > support and the customers themselves. Uh, and get developers who know
> > the industry and not just the latest tricks in coding. You can get to
> > that by giving the developers plenty of training. And, put the
> > developers into the support department for at least one day each month.
> > Nothing straightens out a developer more than a bitching customer. Most
> > developers need to experience the pain first hand to be convinced that
> > their code is crap.
> >
> > Besides that, you can read my MS thesis about just this topic. ;)
> >
> > David K.
> >
> > Brian Dailey wrote:
> > > Another "Ask the NYC PHP Crowd" question...
> > >
> > > I've been given the responsibility of developing a policy for a small
> > > (and growing) team of developers. By "policy" I mean defining how
> > > "development" code becomes "live" code. The point is to minimize
> > > problems in the program itself and the database behind it.
> > >
> > > How do you balance flexibility with minimizing risk? I've talked to a
> > > few of my fellow developers, and a few of them have talked about the
> > > usefulness of code review. That seems to be good idea, as does
> > > allowing only or two people to place development code on the live side
> > > (less cooks in the kitchen).
> > >
> > > Any suggestions on stuff I should think about?
> > >
> > > - Brian
> > >
> > >
> > >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
>

From jonbaer at jonbaer.com  Thu Oct 19 23:57:58 2006
From: jonbaer at jonbaer.com (Jon Baer)
Date: Thu, 19 Oct 2006 23:57:58 -0400
Subject: [nycphp-talk] Help converting MySQL datetime to month
In-Reply-To: 
References: 
Message-ID: <5F07C901-34AC-4C35-8994-579B6280E6F3@jonbaer.com>

You can also now do it directly in MySQL ... might be available as  
UDF on older versions.

mysql> select monthname('2006-10-19') as month;
+---------+
| month   |
+---------+
| October |
+---------+
1 row in set (0.00 sec)

- Jon

On Oct 19, 2006, at 9:28 PM, Randal Rust wrote:

> I have a function that does what I want, I just find it hard to
> believe that there isn't something better. So any pointers would be
> greatly appreciated.
>
> function convertDatetime($value){
> 	$value=explode(" ", $value);
> 	$value=explode("-", $value[0]);
> 	$y=$value[0];
> 	$m=$value[1];
> 	$d=$value[2];
> 	switch($m){
> 		case '01':
> 			$m='January';
> 			break;
> 		case '02':
> 			$m='February';
> 			break;
> 		case '03':
> 			$m='March';
> 			break;
> 		case '04':
> 			$m='April';
> 			break;
> 		case '05':
> 			$m='May';
> 			break;
> 		case '06':
> 			$m='June';
> 			break;
> 		case '07':
> 			$m='July';
> 			break;
> 		case '08':
> 			$m='August';
> 			break;
> 		case '09':
> 			$m='September';
> 			break;
> 		case '10':
> 			$m='October';
> 			break;
> 		case '11':
> 			$m='November';
> 			break;
> 		case '12':
> 			$m='December';
> 			break;
> 		}
> 	$dt=$m.' '.$d.', '.$y;
> 	$value=$dt;
> 	return $value;
> 	}
>
> -- 
> Randal Rust
> R.Squared Communications
> www.r2communications.com
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

From 1j0lkq002 at sneakemail.com  Fri Oct 20 00:28:50 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Thu, 19 Oct 2006 21:28:50 -0700
Subject: [nycphp-talk] Image w/Text Methods??
In-Reply-To: <4537C66E.4030900@fdcx.net>
References: <4537C66E.4030900@fdcx.net>
Message-ID: <18495-61168@sneakemail.com>

I feel your pain, but I have to either be able to get it done myself or 
have a really good relationship with an always-online and willing PS expert.

It's really a client problem, so having a friend anxious to quote 
on-demand work is probably the best way to go. Why should it be "free"?

R. Mariotti r.mariotti-at-fdcx.net |nyphp dev/internal group use| wrote:

>Fellow PHP'ers;
>
>As a developer, most times for a professional site the graphical 
>components might be conveniently delivered by the design person.  This 
>makes for very easy reference and literally plug-in.
>
>However, like today, there is often the occasion where someone desires a 
>change in some of the text that is already part of an image.   The 
>technique I usually use is to make a copy of the image then use gimp to 
>cut-out the undesired portion then add the new text to the image and 
>move it around finally flattening it, saving it then uploading to the 
>site.  Most times it works reasonably well (sort of!)
>
>But, the clarity and precision of these resulting images are certainly 
>not up to the quality that the original displayed.  I don't know the 
>real reason because I'm not a graphics designer/artist.  It appears that 
>the fonts, even though anti-aliased, are not as sharp as the original.
>
>So, what other techniques do most of you use to accomplish the same? 
>Surely not everyone has an in-house graphics artist.  I know I never 
>had.  What programs and/or techniques are customarily used to accomplish 
>this feat?
>
>While this is not entirely a php question, it certainly is php developer 
>related so that's why I though of posting to this list.
>
>Thank you all.
>
>B
>

From 1j0lkq002 at sneakemail.com  Fri Oct 20 00:33:05 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Thu, 19 Oct 2006 21:33:05 -0700
Subject: [nycphp-talk] IT Policies
In-Reply-To: 
References: 	<4538064C.5060301@gmx.net>	

Message-ID: <15719-83749@sneakemail.com>

Brian Dailey support-at-dailytechnology.net |nyphp dev/internal group 
use| wrote:

>So, David, where can I get a copy of your thesis? :P
>
>- Brian
>
>  
>
I'd like to read it as well. Thanks for offering.

I think that a code review stage is great if done right, because it can 
create a quality expectation that basically reminds people to "fix it or 
it will never pass code review". On the flip side, it's a significant 
management program and you have to expect it to take time if itis 
expected to be worthwhile.

One of those things... "why do we have that cop on the corner? He just 
stands there all day long doing nothing...."

From ken at secdat.com  Fri Oct 20 11:46:45 2006
From: ken at secdat.com (Kenneth Downs)
Date: Fri, 20 Oct 2006 11:46:45 -0400
Subject: [nycphp-talk] First Demo App for Tuesday Presentation
Message-ID: <4538EF65.3020700@secdat.com>

We have put up a demo app that demonstrates Andromeda.  The URL is:

http://dhost2.secdat.com/demo_peds

The username and password are both "guest".  Please feel free to look 
around.  Feel free to make any changes you want to, beat it up, etc.

This guest user is actually an "admin" user, so you have full powers in 
the app, short of creating new users.

We will be looking at the code used to produce this app at the 
presentation on Tuesday.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From ken at secdat.com  Fri Oct 20 11:54:11 2006
From: ken at secdat.com (Kenneth Downs)
Date: Fri, 20 Oct 2006 11:54:11 -0400
Subject: [nycphp-talk] Second demo site pending...
Message-ID: <4538F123.4050101@secdat.com>

...we also will have a time tracking program available for demo.  The 
programmer is actually tweaking a few things now, and it will likely be 
online later today or tomorrow.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From rotsen at gmail.com  Fri Oct 20 11:58:02 2006
From: rotsen at gmail.com (=?ISO-8859-1?Q?N=E9stor?=)
Date: Fri, 20 Oct 2006 08:58:02 -0700
Subject: [nycphp-talk] Second demo site pending...
In-Reply-To: <4538F123.4050101@secdat.com>
References: <4538F123.4050101@secdat.com>
Message-ID: 

I look at the site and it looks good!!!

Good job!!!

On 10/20/06, Kenneth Downs  wrote:
>
> ...we also will have a time tracking program available for demo.  The
> programmer is actually tweaking a few things now, and it will likely be
> online later today or tomorrow.
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From ken at secdat.com  Fri Oct 20 11:58:08 2006
From: ken at secdat.com (Kenneth Downs)
Date: Fri, 20 Oct 2006 11:58:08 -0400
Subject: [nycphp-talk] Slides for Oct 24th now available for preview
Message-ID: <4538F210.5040508@secdat.com>

If you would like a preview of the slides for Tuesday's presentation, 
here is a direct link:

http://www.secdat.com/NYPHP-2004.10.19.odp

Please note the slides refer to two demo apps.  The doctor's office app 
is up, but the time billing will be later today or tomorrow.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From rotsen at gmail.com  Fri Oct 20 12:03:00 2006
From: rotsen at gmail.com (=?ISO-8859-1?Q?N=E9stor?=)
Date: Fri, 20 Oct 2006 09:03:00 -0700
Subject: [nycphp-talk] Slides for Oct 24th now available for preview
In-Reply-To: <4538F210.5040508@secdat.com>
References: <4538F210.5040508@secdat.com>
Message-ID: 

Kenneth,

what do you open a .odp file with?

:-)

On 10/20/06, Kenneth Downs  wrote:
>
> If you would like a preview of the slides for Tuesday's presentation,
> here is a direct link:
>
> http://www.secdat.com/NYPHP-2004.10.19.odp
>
> Please note the slides refer to two demo apps.  The doctor's office app
> is up, but the time billing will be later today or tomorrow.
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From ken at secdat.com  Fri Oct 20 12:09:04 2006
From: ken at secdat.com (Kenneth Downs)
Date: Fri, 20 Oct 2006 12:09:04 -0400
Subject: [nycphp-talk] Slides for Oct 24th now available for preview
In-Reply-To: 
References: <4538F210.5040508@secdat.com>

Message-ID: <4538F4A0.7060902@secdat.com>

N?stor wrote:
> Kenneth,
>
> what do you open a .odp file with?
OpenOffice. 
>
> :-)
>
> On 10/20/06, *Kenneth Downs* > 
> wrote:
>
>     If you would like a preview of the slides for Tuesday's presentation,
>     here is a direct link:
>
>     http://www.secdat.com/NYPHP-2004.10.19.odp
>
>     Please note the slides refer to two demo apps.  The doctor's
>     office app
>     is up, but the time billing will be later today or tomorrow.
>
>
>     _______________________________________________
>     New York PHP Community Talk Mailing List
>     http://lists.nyphp.org/mailman/listinfo/talk
>
>     NYPHPCon 2006 Presentations Online
>     http://www.nyphpcon.com
>
>     Show Your Participation in New York PHP
>     http://www.nyphp.org/show_participation.php
>
>
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From phil at bearingasset.com  Fri Oct 20 13:15:43 2006
From: phil at bearingasset.com (Phil Duffy)
Date: Fri, 20 Oct 2006 13:15:43 -0400
Subject: [nycphp-talk] Successor to the Web?
In-Reply-To: <001f01c6f2bd$f4d81360$6701a8c0@SUNCODE1>
Message-ID: <20061020171610.01A4EA88AA@virtu.nyphp.org>

I would like to express my appreciation to those in the NYPHP community (I
counted 13 responses) who responded to my question about a potential
successor to the Web.  It will take me a while to analyze these responses,
but the picture that was communicated was already useful to me.

I found the references provided by Dan Krook particularly useful for my
purposes:

Ajax and REST, Part 1: Advantages of the Ajax/REST architectural style for
immersive Web applications
http://www.ibm.com/developerworks/web/library/wa-ajaxarch/

Some more information about REST principles:

http://en.wikipedia.org/wiki/Representational_State_Transfer

My goal was to check my development direction, to be sure that I had not
become too attached to my current set of development tools only to find that
serious successors were already emerging and the work I was doing would soon
become obsolete.  My impression at this point is that my general direction
is reasonable, but requires some modification.

I should have described the application characteristics in more detail.
They must run over the Internet or a public equivalent.  They must blend
content management with data management.  Perhaps this is one of the reasons
that I seem to be encountering force-fits because as at least one
contributor to this discussion pointed out, the Web is stateless by design
intent.

If I have encountered some difficulties in dealing with statelessness for
the applications I am developing, it is not because of any difficulties I am
encountering in PHP.  I am impressed with PHP, but it is not the whole
picture.

Again, many thanks for the contributions that were made to this discussion.
They have saved me a great deal of research effort.

Phil Duffy

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From chsnyder at gmail.com  Fri Oct 20 14:47:17 2006
From: chsnyder at gmail.com (csnyder)
Date: Fri, 20 Oct 2006 14:47:17 -0400
Subject: [nycphp-talk] First Demo App for Tuesday Presentation
In-Reply-To: <4538EF65.3020700@secdat.com>
References: <4538EF65.3020700@secdat.com>
Message-ID: 

On 10/20/06, Kenneth Downs  wrote:
> We have put up a demo app that demonstrates Andromeda.  The URL is:
>
> http://dhost2.secdat.com/demo_peds
>
> The username and password are both "guest".  Please feel free to look
> around.  Feel free to make any changes you want to, beat it up, etc.
>
> This guest user is actually an "admin" user, so you have full powers in
> the app, short of creating new users.
>
> We will be looking at the code used to produce this app at the
> presentation on Tuesday.
>

Please don't hate me, Ken, but your sample application is vulnerable
to cross-site scripting attacks. It seems you're not properly escaping
values in forms?

Or at least, not in this form:
http://dhost2.secdat.com/demo_peds/index.php?gp_skey=6

-- 
Chris Snyder
http://chxo.com/

From agfische at email.smith.edu  Fri Oct 20 15:17:51 2006
From: agfische at email.smith.edu (Aaron Fischer)
Date: Fri, 20 Oct 2006 15:17:51 -0400
Subject: [nycphp-talk] Unsetting array elements
Message-ID: <453920DF.4070903@email.smith.edu>

Hi,

I'd like to cycle through an array and destroy some elements (and leave 
some intact).  What's the "best" way to do that?

Here's what I put together so far (which shows my array ignorance)  =)

 "yes" , "name" => "joe" , "sort" => "ascending")

while (list ($k, $v) = each ($test))
	{
		if ($k == "auth") {}
		else { unset($k[$v]); }
	}

?>

That produces an error because of the unset($k[$v]; line.

Thanks!

-Aaron

From kenrbnsn at rbnsn.com  Fri Oct 20 15:32:22 2006
From: kenrbnsn at rbnsn.com (Ken Robinson)
Date: Fri, 20 Oct 2006 15:32:22 -0400
Subject: [nycphp-talk] Unsetting array elements
In-Reply-To: <453920DF.4070903@email.smith.edu>
References: <453920DF.4070903@email.smith.edu>
Message-ID: <7.0.1.0.2.20061020153011.0be80718@rbnsn.com>

At 03:17 PM 10/20/2006, Aaron Fischer wrote:
>Hi,
>
>I'd like to cycle through an array and destroy some elements (and leave
>some intact).  What's the "best" way to do that?
>
>Here's what I put together so far (which shows my array ignorance)  =)
>
>
>$test=array("auth" => "yes" , "name" => "joe" , "sort" => "ascending")
>
>while (list ($k, $v) = each ($test))
>         {
>                 if ($k == "auth") {}
>                 else { unset($k[$v]); }
>         }
>
>?>
>
>That produces an error because of the unset($k[$v]; line.

You need to unset the index in the test array not in the $k array, so 
the unset line should look like:
                 else  unset($test[$k]);

Ken

From agfische at email.smith.edu  Fri Oct 20 15:48:49 2006
From: agfische at email.smith.edu (Aaron Fischer)
Date: Fri, 20 Oct 2006 15:48:49 -0400
Subject: [nycphp-talk] Unsetting array elements
In-Reply-To: <453920DF.4070903@email.smith.edu>
References: <453920DF.4070903@email.smith.edu>
Message-ID: <45392821.8020206@email.smith.edu>

I fixed that line and it's working now:

else { unset($test[$k]); }

However I would be interested to hear if anyone thinks there is a better 
or more efficient approach to how I am doing it.

Cheers,

-Aaron

Aaron Fischer wrote:
> Hi,
> 
> I'd like to cycle through an array and destroy some elements (and leave 
> some intact).  What's the "best" way to do that?
> 
> Here's what I put together so far (which shows my array ignorance)  =)
> 
>  
> $test=array("auth" => "yes" , "name" => "joe" , "sort" => "ascending")
> 
> while (list ($k, $v) = each ($test))
> 	{
> 		if ($k == "auth") {}
> 		else { unset($k[$v]); }
> 	}
> 
> ?>
> 
> That produces an error because of the unset($k[$v]; line.
> 
> Thanks!
> 
> -Aaron
> _______________________________________________

From ken at secdat.com  Fri Oct 20 15:49:21 2006
From: ken at secdat.com (Kenneth Downs)
Date: Fri, 20 Oct 2006 15:49:21 -0400
Subject: [nycphp-talk] First Demo App for Tuesday Presentation
In-Reply-To: 
References: <4538EF65.3020700@secdat.com>

Message-ID: <45392841.2080209@secdat.com>

csnyder wrote:
> On 10/20/06, Kenneth Downs  wrote:
>   
>> We have put up a demo app that demonstrates Andromeda.  The URL is:
>>
>> http://dhost2.secdat.com/demo_peds
>>
>> The username and password are both "guest".  Please feel free to look
>> around.  Feel free to make any changes you want to, beat it up, etc.
>>
>> This guest user is actually an "admin" user, so you have full powers in
>> the app, short of creating new users.
>>
>> We will be looking at the code used to produce this app at the
>> presentation on Tuesday.
>>
>>     
>
> Please don't hate me, Ken, but your sample application is vulnerable
> to cross-site scripting attacks. It seems you're not properly escaping
> values in forms?
>   
As an open-source developer, I'm always happy when somebody reviews and 
comments :)
> Or at least, not in this form:
> http://dhost2.secdat.com/demo_peds/index.php?gp_skey=6
>
>   
You are right.  We do "escape when sending", and the htmlentities() call 
was missing from the library routine.

Thanks, good catch, it is fixed now.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From agfische at email.smith.edu  Fri Oct 20 16:02:07 2006
From: agfische at email.smith.edu (Aaron Fischer)
Date: Fri, 20 Oct 2006 16:02:07 -0400
Subject: [nycphp-talk] Unsetting array elements
In-Reply-To: <7.0.1.0.2.20061020153011.0be80718@rbnsn.com>
References: <453920DF.4070903@email.smith.edu>
	<7.0.1.0.2.20061020153011.0be80718@rbnsn.com>
Message-ID: <45392B3F.8060908@email.smith.edu>

Thanks Ken.  Unfortunately I figured that out AFTER I sent the original 
question.  =)

-Aaron

Ken Robinson wrote:
> At 03:17 PM 10/20/2006, Aaron Fischer wrote:
> 
>>Hi,
>>
>>I'd like to cycle through an array and destroy some elements (and leave
>>some intact).  What's the "best" way to do that?
>>
>>Here's what I put together so far (which shows my array ignorance)  =)
>>
>>>
>>$test=array("auth" => "yes" , "name" => "joe" , "sort" => "ascending")
>>
>>while (list ($k, $v) = each ($test))
>>        {
>>                if ($k == "auth") {}
>>                else { unset($k[$v]); }
>>        }
>>
>>?>
>>
>>That produces an error because of the unset($k[$v]; line.
> 
> 
> 
> You need to unset the index in the test array not in the $k array, so 
> the unset line should look like:
>                  else  unset($test[$k]);
> 
> Ken
> 
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> 
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
> 
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

From chsnyder at gmail.com  Fri Oct 20 16:05:57 2006
From: chsnyder at gmail.com (csnyder)
Date: Fri, 20 Oct 2006 16:05:57 -0400
Subject: [nycphp-talk] First Demo App for Tuesday Presentation
In-Reply-To: <45392841.2080209@secdat.com>
References: <4538EF65.3020700@secdat.com>

	<45392841.2080209@secdat.com>
Message-ID: 

On 10/20/06, Kenneth Downs  wrote:
>  Thanks, good catch, it is fixed now.

Good to know. That's one of the big advantages of using a framework,
fix the code in one place and the entire app is secured.

Otherwise it might have been a long weekend, putting all those
htmlentities() calls in, eh?

See you Tuesday.

-- 
Chris Snyder
http://chxo.com/

From brian at mexny.com  Fri Oct 20 17:20:03 2006
From: brian at mexny.com (brian at mexny.com)
Date: Fri, 20 Oct 2006 14:20:03 -0700
Subject: [nycphp-talk] PHP page to Excel
Message-ID: <1161379203.45393d83896eb@webmail.mexny.com>

Guess what, i'm crazy for this, The company where i work wanna to pass the php
page that gimme the results to a excel sheet, and the second request is they
want the exactly colors, formats, width column, height column, etc that excel
offers.

I just want to know if somebody could gimme any idea to do this..i want to
create a button that convert me php results into a excel sheet exactly as they
need.

thank u so much.

From ajai at bitblit.net  Fri Oct 20 17:34:26 2006
From: ajai at bitblit.net (Ajai Khattri)
Date: Fri, 20 Oct 2006 17:34:26 -0400 (EDT)
Subject: [nycphp-talk] PHP page to Excel
In-Reply-To: <1161379203.45393d83896eb@webmail.mexny.com>
References: <1161379203.45393d83896eb@webmail.mexny.com>
Message-ID: <32223.64.124.21.211.1161380066.squirrel@webmail.bitblit.net>

> Guess what, i'm crazy for this, The company where i work wanna to pass
> the php page that gimme the results to a excel sheet, and the second
> request is they want the exactly colors, formats, width column, height
> column, etc that excel offers.
>
> I just want to know if somebody could gimme any idea to do this..i want
> to create a button that convert me php results into a excel sheet
> exactly as they need.

http://pear.php.net/package/Spreadsheet_Excel_Writer

-- 
Aj.
Systems Administrator / Developer

From craig at juxtadigital.com  Fri Oct 20 17:42:17 2006
From: craig at juxtadigital.com (Craig Thomas)
Date: Fri, 20 Oct 2006 17:42:17 -0400
Subject: [nycphp-talk] PHP page to Excel
In-Reply-To: <32223.64.124.21.211.1161380066.squirrel@webmail.bitblit.net>
References: <1161379203.45393d83896eb@webmail.mexny.com>
	<32223.64.124.21.211.1161380066.squirrel@webmail.bitblit.net>
Message-ID: <453942B9.6080609@juxtadigital.com>

Ajai Khattri wrote:
>> Guess what, i'm crazy for this, The company where i work wanna to pass
>> the php page that gimme the results to a excel sheet, and the second
>> request is they want the exactly colors, formats, width column, height
>> column, etc that excel offers.
>>
>> I just want to know if somebody could gimme any idea to do this..i want
>> to create a button that convert me php results into a excel sheet
>> exactly as they need.
> 
> 
> http://pear.php.net/package/Spreadsheet_Excel_Writer

+1

Also just forcing a download using html tables and content-type 
application/excel can work with excel and openoffice-calc. The 's 
are the columns.  This is not as full featured and robust as the PEAR 
package, but does seem to work for simple, single sheet spreadsheets. 
And it's fast to code if you already have the html tables ready (:

From vugranam at us.ibm.com  Sat Oct 21 06:38:46 2006
From: vugranam at us.ibm.com (Vugranam Sreedhar)
Date: Sat, 21 Oct 2006 06:38:46 -0400
Subject: [nycphp-talk] thread-safety analysis...
In-Reply-To: <8F794CE1-13E4-4735-A6C8-7A32BC2B23B0@gmail.com>
Message-ID: 

I have studying thread-safety issue with PHP and Apache2.  I know PHP does
not have a thread model (like Java). I cannot seem to find real
document/code
that clearly explains the problem. I am looking at building tool that will
scan PHP code and tell me whether it is thread-safe or not. Would anyone be
interested in such a tool ;-)

With regards,

Sreedhar

-------------------------------------------------------------------------------------------------------------------

Research Staff Member
TJ Watson Research Center
T/L 863-7325
Ext: 914-784-7325

From edwardpotter at gmail.com  Sat Oct 21 09:05:38 2006
From: edwardpotter at gmail.com (edward potter)
Date: Sat, 21 Oct 2006 09:05:38 -0400
Subject: [nycphp-talk] XML.com: Introducing OpenLaszlo (is it the new thang?)
	:-)
Message-ID: 

yipes!  Has anyone played with this yet? Can I hook it into mySQL?

"OpenLaszlo is an open source platform for creating zero-install web
applications with the user interface capabilities of desktop client
software.

OpenLaszlo programs are written in XML and JavaScript and
transparently compiled to Flash and soon DHTML. The OpenLaszlo APIs
provide animation, layout, data binding, server communication, and
declarative UI. An OpenLaszlo application can be as short as a single
source file, or factored into multiple files that define reusable
classes and libraries.

OpenLaszlo is write once run everywhere. An OpenLaszlo application
developed on one machine will run on all leading Web browsers on all
leading desktop operating systems."

more info here;
http://www.xml.com/pub/a/2006/10/11/introducing-open-laszlo.html

-- 
the Blog: http://www.utopiaparkway.com
the Karma: http://www.coderswithconscience.com
the Projects: http://flickr.com/photos/86842405 at N00/
the Store: http://astore.amazon.com/httpwwwutopic-20

From mwithington at PLMresearch.com  Sat Oct 21 09:17:08 2006
From: mwithington at PLMresearch.com (Mark Withington)
Date: Sat, 21 Oct 2006 09:17:08 -0400
Subject: [nycphp-talk] XML.com: Introducing OpenLaszlo (is it the new
	t	hang?):-)
Message-ID: <1F3CD8DDFB6A9B4C9B8DD06E4A7DE35801692AF1@network.PLMresearch.com>

FYI - if you're near Boston next Tuesday or Wednesday the AJAX Experience
(and OpenLaszlo) is showing.  Alternatively, BostonPHP is hosting an AJAX
presentation 10/25 @ 6:30 where Max Carlson (Co-Founder OpenLaszlo.org) will
provide and update on his 2/06 presentation:

The Road to AJAX - In the past, OpenLaszlo been regarded as a Flash-only
tool. In fact, OpenLaszlo is a powerful language for rich, custom
declarative user interface programming that's been under development for
over 5 years. It's a powerful framework, and it has an exciting future as a
single (OpenSource) language that can target Flash, DHTML and soon,other
runtimes. 

In this talk Max will talk about the process of making OpenLaszlo a
runtime-independent platform, including the first year of AJAX. He will give
an overview of the current multi-runtime architecture, including techniques
for using and extending it. See an overview of the language, and talk about
the future of OpenLaszlo as an AJAX platform.

All BostonPHP events are free as in "beer" and open [to all] as in "source".
More info here
(http://www.bostonphp.org/component/option,com_gigcal/task,details/gigcal_gi
gs_id,21/)

Hope you can make it,

Mark

-------------------------------------------
Mark L. Withington
Benevolent Dictator and acting President
BostonPHP.org
"supporting the PHP/OSS community"
PO Box 1354
Plymouth, MA  02362
o: 800-310-3992 ext. 704
f: 508-746-4973
v: 508-746-2383/508-570-2285
m: 508-801-0181
http://www.BostonPHP.org
AIM: BostonPHP 

> -----Original Message-----
> From: talk-bounces at lists.nyphp.org
> [mailto:talk-bounces at lists.nyphp.org]On Behalf Of edward potter
> Sent: Saturday, October 21, 2006 9:06 AM
> To: NYPHP Talk
> Subject: [nycphp-talk] XML.com: Introducing OpenLaszlo (is it the new
> thang?):-)
>
>
> yipes!  Has anyone played with this yet? Can I hook it into mySQL?
>
> "OpenLaszlo is an open source platform for creating zero-install web
> applications with the user interface capabilities of desktop client
> software.
>
> OpenLaszlo programs are written in XML and JavaScript and
> transparently compiled to Flash and soon DHTML. The OpenLaszlo APIs
> provide animation, layout, data binding, server communication, and
> declarative UI. An OpenLaszlo application can be as short as a single
> source file, or factored into multiple files that define reusable
> classes and libraries.
>
> OpenLaszlo is write once run everywhere. An OpenLaszlo application
> developed on one machine will run on all leading Web browsers on all
> leading desktop operating systems."
>
> more info here;
> http://www.xml.com/pub/a/2006/10/11/introducing-open-laszlo.html
>
> --
> the Blog: http://www.utopiaparkway.com
> the Karma: http://www.coderswithconscience.com
> the Projects: http://flickr.com/photos/86842405 at N00/
> the Store: http://astore.amazon.com/httpwwwutopic-20
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
> 

From lists at danhorning.com  Sat Oct 21 09:35:49 2006
From: lists at danhorning.com (Dan Horning)
Date: Sat, 21 Oct 2006 09:35:49 -0400
Subject: [nycphp-talk] XML.com: Introducing OpenLaszlo (is it the new	t
 hang?):-)
In-Reply-To: <1F3CD8DDFB6A9B4C9B8DD06E4A7DE35801692AF1@network.PLMresearch.com>
References: <1F3CD8DDFB6A9B4C9B8DD06E4A7DE35801692AF1@network.PLMresearch.com>
Message-ID: <453A2235.6060000@danhorning.com>

out of personal curiosity,
why aren't they using their own dev tool for their own front end? 
http://www.openlaszlo.org/
If for flash it's great then that's awesome by itself, but what 
applications has it been used in?
the demos are pretty awesome, but all seem to revolve around flash.

has anyone actually used it that's on this list? what's your dev 
timeline been with OpenLaszlo vs other frameworks?
I really like the concepts behind OpenLaszlo and would like to chat with 
a few people who've used it.

-dan horning

Mark Withington wrote:
> FYI - if you're near Boston next Tuesday or Wednesday the AJAX Experience
> (and OpenLaszlo) is showing.  Alternatively, BostonPHP is hosting an AJAX
> presentation 10/25 @ 6:30 where Max Carlson (Co-Founder OpenLaszlo.org) will
> provide and update on his 2/06 presentation:
>
> The Road to AJAX - In the past, OpenLaszlo been regarded as a Flash-only
> tool. In fact, OpenLaszlo is a powerful language for rich, custom
> declarative user interface programming that's been under development for
> over 5 years. It's a powerful framework, and it has an exciting future as a
> single (OpenSource) language that can target Flash, DHTML and soon,other
> runtimes. 
>
> In this talk Max will talk about the process of making OpenLaszlo a
> runtime-independent platform, including the first year of AJAX. He will give
> an overview of the current multi-runtime architecture, including techniques
> for using and extending it. See an overview of the language, and talk about
> the future of OpenLaszlo as an AJAX platform.
>
> All BostonPHP events are free as in "beer" and open [to all] as in "source".
> More info here
> (http://www.bostonphp.org/component/option,com_gigcal/task,details/gigcal_gi
> gs_id,21/)
>
> Hope you can make it,
>
> Mark
>
> -------------------------------------------
> Mark L. Withington
> Benevolent Dictator and acting President
> BostonPHP.org
> "supporting the PHP/OSS community"
> PO Box 1354
> Plymouth, MA  02362
> o: 800-310-3992 ext. 704
> f: 508-746-4973
> v: 508-746-2383/508-570-2285
> m: 508-801-0181
> http://www.BostonPHP.org
> AIM: BostonPHP 
>
>
>   
>> -----Original Message-----
>> From: talk-bounces at lists.nyphp.org
>> [mailto:talk-bounces at lists.nyphp.org]On Behalf Of edward potter
>> Sent: Saturday, October 21, 2006 9:06 AM
>> To: NYPHP Talk
>> Subject: [nycphp-talk] XML.com: Introducing OpenLaszlo (is it the new
>> thang?):-)
>>
>>
>> yipes!  Has anyone played with this yet? Can I hook it into mySQL?
>>
>> "OpenLaszlo is an open source platform for creating zero-install web
>> applications with the user interface capabilities of desktop client
>> software.
>>
>> OpenLaszlo programs are written in XML and JavaScript and
>> transparently compiled to Flash and soon DHTML. The OpenLaszlo APIs
>> provide animation, layout, data binding, server communication, and
>> declarative UI. An OpenLaszlo application can be as short as a single
>> source file, or factored into multiple files that define reusable
>> classes and libraries.
>>
>> OpenLaszlo is write once run everywhere. An OpenLaszlo application
>> developed on one machine will run on all leading Web browsers on all
>> leading desktop operating systems."
>>
>> more info here;
>> http://www.xml.com/pub/a/2006/10/11/introducing-open-laszlo.html
>>
>> --
>> the Blog: http://www.utopiaparkway.com
>> the Karma: http://www.coderswithconscience.com
>> the Projects: http://flickr.com/photos/86842405 at N00/
>> the Store: http://astore.amazon.com/httpwwwutopic-20
>> _______________________________________________
>> New York PHP Community Talk Mailing List
>> http://lists.nyphp.org/mailman/listinfo/talk
>>
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>>
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>>
>>     
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   

-- 
Dan Horning - danhorning.com
American Digital Services - americandigitalservices.com
Where you are only limited by imagination.
1-866-493-4218 (direct) / 1-800-863-3854 (main number)

From lists at zaunere.com  Sat Oct 21 10:04:20 2006
From: lists at zaunere.com (Hans Zaunere)
Date: Sat, 21 Oct 2006 10:04:20 -0400
Subject: [nycphp-talk] thread-safety analysis...
In-Reply-To: 
Message-ID: <001e01c6f519$d24e1d40$2002a8c0@MobileZ>

Hi,

Vugranam Sreedhar wrote on Saturday, October 21, 2006 6:39 AM:
> I have studying thread-safety issue with PHP and Apache2.  I know PHP
> does not have a thread model (like Java). I cannot seem to find real
> document/code
> that clearly explains the problem. I am looking at building tool that
> will scan PHP code and tell me whether it is thread-safe or not.
> Would anyone be interested in such a tool ;-)

Others on this list can perhaps provide more detail, but here's a run
down...

PHP cannot do threading itself - it can only fork().  However, PHP's core
itself can be compiled to run in a threaded environment (for instance under
Apache 2's various MPMs).  So PHP itself isn't creating threads - Apache is
handling user requests in a threaded manner, which in turn makes PHP run in
a threaded way.

The problem really is not thread safe code written in the PHP language, but
rather the environment in which PHP runs in.  Now PHP can be compiled for
thread safety (TSRM, for instance http://us2.php.net/tsrm).  However,
because PHP is often linked against so many external libraries
(gd/jpeg/xml/etc) it cannot be considered safe to execute in a threaded
environment.  This is the real problem and one of PHP's greatest strengths
and unfortunate faults.

So, writing an application that scans PHP code for thread safety wouldn't be
useful.  However, writing an application that would scan the C code of the
libraries used in PHP's extensions, would be of great value - then we could
determine which PHP configuration combinations are thread safe, and which
are not.  For instance, I had once run PHP only with the MySQL and Oracle
extensions compiled, under Apache 2 with threading - it was stable for
years.  Rasmus had once started to document which libraries were thread safe
and which were not, but I think it hasn't been actively maintained.

Hopefully this somewhat clarifies a confusing issue.

---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com

From mwithington at PLMresearch.com  Sat Oct 21 11:50:53 2006
From: mwithington at PLMresearch.com (Mark Withington)
Date: Sat, 21 Oct 2006 11:50:53 -0400
Subject: [nycphp-talk] XML.com: Introducing OpenLaszlo (is it the new	t	
	hang?):-)
Message-ID: <1F3CD8DDFB6A9B4C9B8DD06E4A7DE35801692AFA@network.PLMresearch.com>

Dan,

Please see my brother's response (principal on the Openlaszlo team) below.

Mark

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Thanks.  My 2 cents below.  Feel free to forward back to your list  
(which I am not on).

> From: talk-bounces at lists.nyphp.org
> [mailto:talk-bounces at lists.nyphp.org]On Behalf Of Dan Horning
> Subject: Re: [nycphp-talk] XML.com: Introducing OpenLaszlo (is it  
> the new
> t hang?):-)
>
> out of personal curiosity,
> why aren't they using their own dev tool for their own front end?
> http://www.openlaszlo.org/

Openlaszlo is for creating web apps, not web sites.  The clock on the  
home page is an openlaszlo app embedded in an html page.  The  
openlaszlo site is just using appropriate (open source) technology  
for the task at hand.

If you want to see a site with larger openlaszlo applications, you  
should visit the [commercial website](http://www.laszlosystems.com/)  
to see some of the customers that are using the technology and their  
applications.  To see a full 'web 2.0'-style application running in  
openlaszlo, sign up for a free [LaszloMail](http://www.laszlomail.com/ 
lzmail/) account and try it out.

> If for flash it's great then that's awesome by itself, but what
> applications has it been used in?
> the demos are pretty awesome, but all seem to revolve around flash.

The current runtime is the SWF player, yes, but there is no Flash in  
the demos, they are all built from straight Openlaszlo.  Openlaszlo's  
strength is to build rich web clients, which can be backed by any xml  
content management system, such as php+sql.

If you go to the [demos](http://www.openlaszlo.org/demos), you can  
see previews of several of the demos that run _either_ in Flash or  
DHTML.  Look for the links that say 'Launch Flash Application' and  
'Launch DHTML Application'.  This is the same source code, compiled  
to run either on the Flash player or in browser DHTML.  (You can   
tell the difference by right-clicking over the app -- you will see  
either the Flash player menu or the browser menu.)

> has anyone actually used it that's on this list? what's your dev
> timeline been with OpenLaszlo vs other frameworks?
> I really like the concepts behind OpenLaszlo and would like to chat  
> with
> a few people who've used it.

Try the [introduction](http://tinyurl.com/ympnpx).  Join the [mailing  
list](mailto:laszlo-user-request at openlaszlo.org).

One last thing:  The article on xml.com by Pillai is a great article,  
but it focuses on using the Eclipse-based IDE for laszlo, which is  
not _required_ to develop openlaszlo.  You can develop openlaszlo  
with any text editor (an xml-aware one is useful), the download from  
the openlaszlo site, and your favorite web browser.  It is very easy  
to just edit your openlaszlo source, save it out, and reload the page  
in your browser to see how it works.

P T Withington
OpenLazslo.ORG                       
mailto:ptw at openlaszlo.org      skype:ptwithy     aim:ptw at mac.com

> -----Original Message-----
> From: talk-bounces at lists.nyphp.org
> [mailto:talk-bounces at lists.nyphp.org]On Behalf Of Dan Horning
> Sent: Saturday, October 21, 2006 9:36 AM
> To: NYPHP Talk
> Subject: Re: [nycphp-talk] XML.com: Introducing OpenLaszlo (is 
> it the new
> t hang?):-)
> 
> 
> out of personal curiosity,
> why aren't they using their own dev tool for their own front end? 
> http://www.openlaszlo.org/
> If for flash it's great then that's awesome by itself, but what 
> applications has it been used in?
> the demos are pretty awesome, but all seem to revolve around flash.
> 
> has anyone actually used it that's on this list? what's your dev 
> timeline been with OpenLaszlo vs other frameworks?
> I really like the concepts behind OpenLaszlo and would like 
> to chat with 
> a few people who've used it.
> 
> -dan horning
> 
> 
> Mark Withington wrote:
> > FYI - if you're near Boston next Tuesday or Wednesday the 
> AJAX Experience
> > (and OpenLaszlo) is showing.  Alternatively, BostonPHP is 
> hosting an AJAX
> > presentation 10/25 @ 6:30 where Max Carlson (Co-Founder 
> OpenLaszlo.org) will
> > provide and update on his 2/06 presentation:
> >
> > The Road to AJAX - In the past, OpenLaszlo been regarded as 
> a Flash-only
> > tool. In fact, OpenLaszlo is a powerful language for rich, custom
> > declarative user interface programming that's been under 
> development for
> > over 5 years. It's a powerful framework, and it has an 
> exciting future as a
> > single (OpenSource) language that can target Flash, DHTML 
> and soon,other
> > runtimes. 
> >
> > In this talk Max will talk about the process of making OpenLaszlo a
> > runtime-independent platform, including the first year of 
> AJAX. He will give
> > an overview of the current multi-runtime architecture, 
> including techniques
> > for using and extending it. See an overview of the 
> language, and talk about
> > the future of OpenLaszlo as an AJAX platform.
> >
> > All BostonPHP events are free as in "beer" and open [to 
> all] as in "source".
> > More info here
> > 
> (http://www.bostonphp.org/component/option,com_gigcal/task,det
> ails/gigcal_gi
> > gs_id,21/)
> >
> > Hope you can make it,
> >
> > Mark
> >
> > -------------------------------------------
> > Mark L. Withington
> > Benevolent Dictator and acting President
> > BostonPHP.org
> > "supporting the PHP/OSS community"
> > PO Box 1354
> > Plymouth, MA  02362
> > o: 800-310-3992 ext. 704
> > f: 508-746-4973
> > v: 508-746-2383/508-570-2285
> > m: 508-801-0181
> > http://www.BostonPHP.org
> > AIM: BostonPHP 
> >
> >
> >   
> >> -----Original Message-----
> >> From: talk-bounces at lists.nyphp.org
> >> [mailto:talk-bounces at lists.nyphp.org]On Behalf Of edward potter
> >> Sent: Saturday, October 21, 2006 9:06 AM
> >> To: NYPHP Talk
> >> Subject: [nycphp-talk] XML.com: Introducing OpenLaszlo (is 
> it the new
> >> thang?):-)
> >>
> >>
> >> yipes!  Has anyone played with this yet? Can I hook it into mySQL?
> >>
> >> "OpenLaszlo is an open source platform for creating 
> zero-install web
> >> applications with the user interface capabilities of desktop client
> >> software.
> >>
> >> OpenLaszlo programs are written in XML and JavaScript and
> >> transparently compiled to Flash and soon DHTML. The OpenLaszlo APIs
> >> provide animation, layout, data binding, server communication, and
> >> declarative UI. An OpenLaszlo application can be as short 
> as a single
> >> source file, or factored into multiple files that define reusable
> >> classes and libraries.
> >>
> >> OpenLaszlo is write once run everywhere. An OpenLaszlo application
> >> developed on one machine will run on all leading Web 
> browsers on all
> >> leading desktop operating systems."
> >>
> >> more info here;
> >> http://www.xml.com/pub/a/2006/10/11/introducing-open-laszlo.html
> >>
> >> --
> >> the Blog: http://www.utopiaparkway.com
> >> the Karma: http://www.coderswithconscience.com
> >> the Projects: http://flickr.com/photos/86842405 at N00/
> >> the Store: http://astore.amazon.com/httpwwwutopic-20
> >> _______________________________________________
> >> New York PHP Community Talk Mailing List
> >> http://lists.nyphp.org/mailman/listinfo/talk
> >>
> >> NYPHPCon 2006 Presentations Online
> >> http://www.nyphpcon.com
> >>
> >> Show Your Participation in New York PHP
> >> http://www.nyphp.org/show_participation.php
> >>
> >>     
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >   
> 
> 
> -- 
> Dan Horning - danhorning.com
> American Digital Services - americandigitalservices.com
> Where you are only limited by imagination.
> 1-866-493-4218 (direct) / 1-800-863-3854 (main number)
> 
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> 
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
> 
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
> 

From paul at devonianfarm.com  Sat Oct 21 22:29:15 2006
From: paul at devonianfarm.com (Paul Houle)
Date: Sat, 21 Oct 2006 22:29:15 -0400
Subject: [nycphp-talk] thread-safety analysis...
In-Reply-To: <001e01c6f519$d24e1d40$2002a8c0@MobileZ>
References: <001e01c6f519$d24e1d40$2002a8c0@MobileZ>
Message-ID: <453AD77B.8080906@devonianfarm.com>

Hans Zaunere wrote:
> The problem really is not thread safe code written in the PHP language, but
> rather the environment in which PHP runs in.  Now PHP can be compiled for
> thread safety (TSRM, for instance http://us2.php.net/tsrm).  However,
> because PHP is often linked against so many external libraries
> (gd/jpeg/xml/etc) it cannot be considered safe to execute in a threaded
> environment.  This is the real problem and one of PHP's greatest strengths
> and unfortunate faults.
>   
    This is also a problem for Perl,  Python and many other languages 
which are advertised as thread-safe.  Java runtimes are threadsafe 
because of a general xenophobia:  the Java runtimes link in a limited 
number of C libraries,  and Java programmers don't really believe in 
linking in C libraries...  Though I have to admit that I've had good 
luck linking Java to Fortran.

    Lacking threads,  the big disadvantage of PHP is that it consumes 
more memory.  Data structures need to be replicated for each copy of 
PHP.  That said,  RAM is getting cheaper,  and PHP is parsimonious in 
it's memory use,  so most of us do just fine running PHP in processes 
instead of threads.

From cliff at pinestream.com  Sun Oct 22 07:08:11 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Sun, 22 Oct 2006 07:08:11 -0400
Subject: [nycphp-talk] Is serializing object/arrays for MySQL reliable?
Message-ID: <000901c6f5ca$5d0fe700$12a8a8c0@HirschLaptop>

Is serializing/unserializing object/arrays for storage/retrieval in a
MySQL db truly reliable? It would be awfully handy, but the PHP manual
notes list various issues that make me wary.

Cliff
_______________________________
Pinestream Communications, Inc.
Publisher of Semiconductor Times & Telecom Trends
52 Pine Street, Weston, MA 02493 USA
Tel: 781.647.8800, Fax: 781.647.8825
http://www.pinestream.com  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From vugranam at us.ibm.com  Sun Oct 22 07:23:53 2006
From: vugranam at us.ibm.com (Vugranam Sreedhar)
Date: Sun, 22 Oct 2006 07:23:53 -0400
Subject: [nycphp-talk] thread-safety analysis...
In-Reply-To: <001e01c6f519$d24e1d40$2002a8c0@MobileZ>
Message-ID: 

Thanks for the explanation...This definitely clarifies many things to me.
Now supposing PHP 7 or greater decides to become multithreading (as Java)
What do you think will be the main issues in the legacy PHP3 to PHP6 with
respect to multithreading ;-)

With regards,

Sreedhar

-------------------------------------------------------------------------------------------------------------------

Research Staff Member
TJ Watson Research Center
T/L 863-7325
Ext: 914-784-7325

             "Hans Zaunere"                                                
                                                                      To 
             Sent by:                  "'NYPHP Talk'"                      
             talk-bounces at list                       
             s.nyphp.org                                                cc 

                                                                   Subject 
             10/21/2006 10:04          Re: [nycphp-talk] thread-safety      
             AM                        analysis...                         

             Please respond to                                             
                NYPHP Talk                                                 

Hi,

Vugranam Sreedhar wrote on Saturday, October 21, 2006 6:39 AM:
> I have studying thread-safety issue with PHP and Apache2.  I know PHP
> does not have a thread model (like Java). I cannot seem to find real
> document/code
> that clearly explains the problem. I am looking at building tool that
> will scan PHP code and tell me whether it is thread-safe or not.
> Would anyone be interested in such a tool ;-)

Others on this list can perhaps provide more detail, but here's a run
down...

PHP cannot do threading itself - it can only fork().  However, PHP's core
itself can be compiled to run in a threaded environment (for instance under
Apache 2's various MPMs).  So PHP itself isn't creating threads - Apache is
handling user requests in a threaded manner, which in turn makes PHP run in
a threaded way.

The problem really is not thread safe code written in the PHP language, but
rather the environment in which PHP runs in.  Now PHP can be compiled for
thread safety (TSRM, for instance http://us2.php.net/tsrm).  However,
because PHP is often linked against so many external libraries
(gd/jpeg/xml/etc) it cannot be considered safe to execute in a threaded
environment.  This is the real problem and one of PHP's greatest strengths
and unfortunate faults.

So, writing an application that scans PHP code for thread safety wouldn't
be
useful.  However, writing an application that would scan the C code of the
libraries used in PHP's extensions, would be of great value - then we could
determine which PHP configuration combinations are thread safe, and which
are not.  For instance, I had once run PHP only with the MySQL and Oracle
extensions compiled, under Apache 2 with threading - it was stable for
years.  Rasmus had once started to document which libraries were thread
safe
and which were not, but I think it hasn't been actively maintained.

Hopefully this somewhat clarifies a confusing issue.

---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

From vugranam at us.ibm.com  Sun Oct 22 07:35:11 2006
From: vugranam at us.ibm.com (Vugranam Sreedhar)
Date: Sun, 22 Oct 2006 07:35:11 -0400
Subject: [nycphp-talk] thread-safety analysis...
In-Reply-To: <453AD77B.8080906@devonianfarm.com>
Message-ID: 

Thanks for the nice explanation... Would PHP ever become multithreaded...
Since Apache 2+ will continue to course of multithreading I am
sure PHP will eventually have to catch up the multithreading direction...

With regards,

Sreedhar

-------------------------------------------------------------------------------------------------------------------

Research Staff Member
TJ Watson Research Center
T/L 863-7325
Ext: 914-784-7325

             Paul Houle                                                    
                                                                  To 
             Sent by:                  NYPHP Talk    
             talk-bounces at list                                          cc 
             s.nyphp.org                                                   
                                                                   Subject 
                                       Re: [nycphp-talk] thread-safety      
             10/21/2006 10:29          analysis...                         
             PM                                                            

             Please respond to                                             
                NYPHP Talk                                                 

Hans Zaunere wrote:
> The problem really is not thread safe code written in the PHP language,
but
> rather the environment in which PHP runs in.  Now PHP can be compiled for
> thread safety (TSRM, for instance http://us2.php.net/tsrm).  However,
> because PHP is often linked against so many external libraries
> (gd/jpeg/xml/etc) it cannot be considered safe to execute in a threaded
> environment.  This is the real problem and one of PHP's greatest
strengths
> and unfortunate faults.
>
    This is also a problem for Perl,  Python and many other languages
which are advertised as thread-safe.  Java runtimes are threadsafe
because of a general xenophobia:  the Java runtimes link in a limited
number of C libraries,  and Java programmers don't really believe in
linking in C libraries...  Though I have to admit that I've had good
luck linking Java to Fortran.

    Lacking threads,  the big disadvantage of PHP is that it consumes
more memory.  Data structures need to be replicated for each copy of
PHP.  That said,  RAM is getting cheaper,  and PHP is parsimonious in
it's memory use,  so most of us do just fine running PHP in processes
instead of threads.
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

From lists at zaunere.com  Sun Oct 22 10:53:16 2006
From: lists at zaunere.com (Hans Zaunere)
Date: Sun, 22 Oct 2006 10:53:16 -0400
Subject: [nycphp-talk] thread-safety analysis...
In-Reply-To: <453AD77B.8080906@devonianfarm.com>
Message-ID: <00b101c6f5e9$ceb71d50$650aa8c0@MobileZ>

Hi Paul,

Paul Houle wrote on Saturday, October 21, 2006 10:29 PM:
> Hans Zaunere wrote:
> > The problem really is not thread safe code written in the PHP
> > language, but rather the environment in which PHP runs in.  Now PHP
> > can be compiled for thread safety (TSRM, for instance
> > http://us2.php.net/tsrm).  However, because PHP is often linked
> > against so many external libraries (gd/jpeg/xml/etc) it cannot be
> > considered safe to execute in a threaded environment.  This is the
> > real problem and one of PHP's greatest strengths and unfortunate
> > faults.  
> > 
>     This is also a problem for Perl,  Python and many other languages
> which are advertised as thread-safe.  Java runtimes are threadsafe
> because of a general xenophobia:  the Java runtimes link in a limited
> number of C libraries,  and Java programmers don't really believe in
> linking in C libraries...  Though I have to admit that I've had good
> luck linking Java to Fortran.

Agreed; Java is threaded, from the ground up for the most part.

>     Lacking threads,  the big disadvantage of PHP is that it consumes
> more memory.  Data structures need to be replicated for each copy of
> PHP.  That said,  RAM is getting cheaper,  and PHP is parsimonious in
> it's memory use,  so most of us do just fine running PHP in processes
> instead of threads.

This I disagree with.  One of the primary reasons Java is built to be
threaded from the ground up is that it has to be.  I couldn't imagine having
a separate process instance of Java for every request - there isn't a server
on the planet with that much RAM - whereas PHP/Apache can happily live in
15-25mb of RAM or less.  Long story short, PHP is fair lighter than Java,
threads or no threads.

But there are certainly other advantages of threads, and I do hope that in
the near future core PHP configurations can begin to take advantage of them.
While creating threads in PHP isn't as important in my opinion for the
typical web application, being able to run in a thread-aware environment,
could be.

Unfortunately, this is a chicken and egg problem, since no one wants to put
the development time in until they see some justification... oh wait, I
covered this once already:

http://www.zend.com/zend/week/week217.php

---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com

From lists at zaunere.com  Sun Oct 22 12:00:49 2006
From: lists at zaunere.com (Hans Zaunere)
Date: Sun, 22 Oct 2006 12:00:49 -0400
Subject: [nycphp-talk] Is serializing object/arrays for MySQL reliable?
In-Reply-To: <000901c6f5ca$5d0fe700$12a8a8c0@HirschLaptop>
Message-ID: <00b501c6f5f3$3df60830$650aa8c0@MobileZ>

Hi Cliff,

Cliff Hirsch wrote on Sunday, October 22, 2006 7:08 AM:
> Is serializing/unserializing object/arrays for storage/retrieval in a
> MySQL db truly reliable? It would be awfully handy, but the PHP
> manual notes list various issues that make me wary.  

I would frankly recommend against it.  While it's possible if you're
careful, there can be a lot of surprises, such as:

-- unserialized objects aren't quite what you may expect them to be (ie, the
definition of the class either has changed or doesn't exist)

-- it's slow

-- it doesn't give you any type of normalization - ie, the object's data is
relationally useless - and you end up having to do text matching to find
anything

There are some other options, that may be better:

http://us3.php.net/wddx

Although it has it's downfalls too.  End of the day, I'd try to avoid
serializing objects - serializing arrays and scalar types, though not
optimized in PHP (ie, slow), is much more reliable.

---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com

From paul at devonianfarm.com  Sun Oct 22 13:08:04 2006
From: paul at devonianfarm.com (Paul Houle)
Date: Sun, 22 Oct 2006 13:08:04 -0400
Subject: [nycphp-talk] thread-safety analysis...
In-Reply-To: <00b101c6f5e9$ceb71d50$650aa8c0@MobileZ>
References: <00b101c6f5e9$ceb71d50$650aa8c0@MobileZ>
Message-ID: <453BA574.4060609@devonianfarm.com>

Hans Zaunere wrote:
> This I disagree with.  One of the primary reasons Java is built to be
> threaded from the ground up is that it has to be.  I couldn't imagine having
> a separate process instance of Java for every request - there isn't a server
> on the planet with that much RAM - whereas PHP/Apache can happily live in
> 15-25mb of RAM or less.  Long story short, PHP is fair lighter than Java,
> threads or no threads
    In the limit of low load and small memory consumption per process,  
you're right.  Java often takes 50 MB to just get started.  Under the 
real-world circumstances of most developers,  PHP is remarkably 
efficient.  In most cases,  my understanding is that PHP burns up about 
2 M per process -- it takes 25 of those to equal an idle Java process,  
and you can still fit 1000 processes in 2 GB,  a typical amount of 
memory for a small server.

    When considering details,  it gets more complicated.  It's not just 
a matter of the cost of the runtime system,  but also the cost of memory 
that your application uses.  In a language like Java,  you can create a 
really big data structure,  say,  200 MB in RAM;  you might load it out 
of a file when your application starts.  Thousands of threads can share 
that data structure,  getting excellent performance with low memory 
consumption.  This is one way Java can win for large systems.

    Java has it's own problems that surface in large systems.  Java uses 
16-bit characters internally,  which is a bad choice.  Java puffs up 
English text by a factor of two,  but can't handle Chinese text 
correctly.  In my book,  Lucene is a toy.  When I'm handling 5 GB of 
text,  I dont need to have my storage requirements doubled.

From danielc at analysisandsolutions.com  Mon Oct 23 08:20:48 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Mon, 23 Oct 2006 08:20:48 -0400
Subject: [nycphp-talk] Successor to the Web?
In-Reply-To: <20061018125434.E74CEA8774@virtu.nyphp.org>
References: <20061018125434.E74CEA8774@virtu.nyphp.org>
Message-ID: <20061023122048.GB16099@panix.com>

Phil:

XUL and JSON.  Allows creation of a light but quite powerful client 
that communicates via JSON over HTTP to a PHP backend.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409

From cliff at pinestream.com  Mon Oct 23 08:35:07 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Mon, 23 Oct 2006 08:35:07 -0400
Subject: [nycphp-talk] Is serializing object/arrays for MySQL reliable?
In-Reply-To: <00b501c6f5f3$3df60830$650aa8c0@MobileZ>
Message-ID: <005001c6f69f$acdc75c0$12a8a8c0@HirschLaptop>

Thanks. Sounds like it would be wise to go with a more conventional
approach.

-----Original Message-----
 Subject: Re: [nycphp-talk] Is serializing object/arrays for MySQL
reliable?

Hi Cliff,

Cliff Hirsch wrote on Sunday, October 22, 2006 7:08 AM:
> Is serializing/unserializing object/arrays for storage/retrieval in a
> MySQL db truly reliable? It would be awfully handy, but the PHP
> manual notes list various issues that make me wary.  

I would frankly recommend against it.  While it's possible if you're
careful, there can be a lot of surprises, such as:

-- unserialized objects aren't quite what you may expect them to be (ie,
the
definition of the class either has changed or doesn't exist)

-- it's slow

-- it doesn't give you any type of normalization - ie, the object's data
is
relationally useless - and you end up having to do text matching to find
anything

There are some other options, that may be better:

http://us3.php.net/wddx

Although it has it's downfalls too.  End of the day, I'd try to avoid
serializing objects - serializing arrays and scalar types, though not
optimized in PHP (ie, slow), is much more reliable.

---
Hans Zaunere / President / New York PHP
   www.nyphp.org  /  www.nyphp.com

From chsnyder at gmail.com  Mon Oct 23 11:03:58 2006
From: chsnyder at gmail.com (csnyder)
Date: Mon, 23 Oct 2006 11:03:58 -0400
Subject: [nycphp-talk] Is serializing object/arrays for MySQL reliable?
In-Reply-To: <00b501c6f5f3$3df60830$650aa8c0@MobileZ>
References: <000901c6f5ca$5d0fe700$12a8a8c0@HirschLaptop>
	<00b501c6f5f3$3df60830$650aa8c0@MobileZ>
Message-ID: 

> Cliff Hirsch wrote:
> Is serializing/unserializing object/arrays for storage/retrieval in a
> MySQL db truly reliable? It would be awfully handy, but the PHP
> manual notes list various issues that make me wary.

I do this to allow for an extendable data model. Aside from the usual
indexed fields (title, created, author) content tables also get a php
field, that stores a serialized standard object. When the record is
loaded, the php field is converted into a property on the object:
$object->local. So developers can write business logic that sets
$object->local->color, and that will persist and be available every
time the object is loaded.

As Hans points out, you have to be careful, and it isn't particularly
portable, but it has benefits in the areas of rapid prototyping and
systems that can adapt to changing needs.

Hans Zaunere wrote:
> -- unserialized objects aren't quite what you may expect them to be (ie, the
> definition of the class either has changed or doesn't exist)

Using standard objects is a good idea.

> -- it's slow

No doubt.

> -- it doesn't give you any type of normalization - ie, the object's data is
> relationally useless - and you end up having to do text matching to find
> anything

Yep. And you end up writing a function to generate a carefully crafted
LIKE statement to match key=value:

  function phplike( $key, $value ) {
    $like = '%"'.$this->esc($key).'";s:'.strlen($value).':"'.$this->esc($value).'"%';
    return $like;
  }

There is an understanding that local properties aren't going to be
indexed by the database, so aren't really useful in queries. The brute
force method encoded above is only for situations where you _really_
need to lookup objects by local property.

Not for the feint of heart, but also very useful.

-- 
Chris Snyder
http://chxo.com/

From danielc at analysisandsolutions.com  Mon Oct 23 11:25:04 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Mon, 23 Oct 2006 11:25:04 -0400
Subject: [nycphp-talk] Eval question
In-Reply-To: <20061012141811.98762.qmail@web53314.mail.yahoo.com>
References: <20061012141811.98762.qmail@web53314.mail.yahoo.com>
Message-ID: <20061023152503.GA672@panix.com>

On Thu, Oct 12, 2006 at 07:18:11AM -0700, LK wrote:
>   $x = 3;
>   $y = 4;
>   $calc_str = '$x * $y';
>   eval("echo \"$calc_str\";");

> I want to evaluate the expression $x * $y (x times y). But when I run it 
> thru the eval() function it returns "3 * 4" instead of "12".

Because you are asking PHP to evaluate the quoted string.  What you want 
to do is:

eval("echo $calc_str;");

BUT, you are hereby warned that eval() is generaly a very bad idea for 
security reasons.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409

From alex at pilgrimstudio.com  Mon Oct 23 09:19:12 2006
From: alex at pilgrimstudio.com (Alexander)
Date: Mon, 23 Oct 2006 13:19:12 +0000
Subject: [nycphp-talk] Is serializing object/arrays for MySQL reliable?
In-Reply-To: <000901c6f5ca$5d0fe700$12a8a8c0@HirschLaptop>
References: <000901c6f5ca$5d0fe700$12a8a8c0@HirschLaptop>
Message-ID: <453CC150.1090807@pilgrimstudio.com>

We are using MySQL5 to store serialized and compressed(gzip) page state 
data for the PRADO framework. After some magic with tables and 
application configuration, everything is working smooth and 
fast(knocking on the wood :)

Before, we were saving uncompressed serialized objects, size of which 
were reaching 100kb. We've faced no major problems with that, except 
for(of course) performance issue...

Cliff Hirsch wrote:
>
> Is serializing/unserializing object/arrays for storage/retrieval in a 
> MySQL db truly reliable? It would be awfully handy, but the PHP manual 
> notes list various issues that make me wary.
>
>  
>
> Cliff
>
> _______________________________
> *Pinestream Communications, Inc.*
> Publisher of /Semiconductor Times/ & /Telecom Trends/
> 52 Pine Street, Weston, MA 02493 USA
> Tel: 781.647.8800, Fax: 781.647.8825
> http://www.pinestream.com 
>
>  
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   

From danielc at analysisandsolutions.com  Mon Oct 23 13:37:14 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Mon, 23 Oct 2006 13:37:14 -0400
Subject: [nycphp-talk] Is serializing object/arrays for MySQL reliable?
In-Reply-To: <000901c6f5ca$5d0fe700$12a8a8c0@HirschLaptop>
References: <000901c6f5ca$5d0fe700$12a8a8c0@HirschLaptop>
Message-ID: <20061023173714.GA28824@panix.com>

Hi Cliff:

On Sun, Oct 22, 2006 at 07:08:11AM -0400, Cliff Hirsch wrote:
> Is serializing/unserializing object/arrays for storage/retrieval in a
> MySQL db truly reliable?

Depends on what you're doing.  We use them to store history.  For example, 
our update method finds the diff between the old and new data.  The diff 
contains the old values that are about to be changed, in an associative 
array format with column names as the keys.  We then serialize that and 
store it in a history table along with the record id and table name.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409

From dcech at phpwerx.net  Mon Oct 23 13:58:35 2006
From: dcech at phpwerx.net (Dan Cech)
Date: Mon, 23 Oct 2006 13:58:35 -0400
Subject: [nycphp-talk] Is serializing object/arrays for MySQL reliable?
In-Reply-To: <20061023173714.GA28824@panix.com>
References: <000901c6f5ca$5d0fe700$12a8a8c0@HirschLaptop>
	<20061023173714.GA28824@panix.com>
Message-ID: <453D02CB.4030005@phpwerx.net>

Daniel Convissor wrote:
> Hi Cliff:
> 
> On Sun, Oct 22, 2006 at 07:08:11AM -0400, Cliff Hirsch wrote:
>> Is serializing/unserializing object/arrays for storage/retrieval in a
>> MySQL db truly reliable?
> 
> Depends on what you're doing.  We use them to store history.  For example, 
> our update method finds the diff between the old and new data.  The diff 
> contains the old values that are about to be changed, in an associative 
> array format with column names as the keys.  We then serialize that and 
> store it in a history table along with the record id and table name.

This is a pretty common use of serialized data, and one it is fairly
well suited to.

That said, I tend to use a simple xml format for storing these kinds of
fields, for a few reasons.

1. UTF-8 encoding is easy in XML
2. XML is easy to read/edit manually if needed
3. It's harder to break and when you do, easier to fix

Dan

From ken at secdat.com  Mon Oct 23 14:31:03 2006
From: ken at secdat.com (Kenneth Downs)
Date: Mon, 23 Oct 2006 14:31:03 -0400
Subject: [nycphp-talk] Is serializing object/arrays for MySQL reliable?
In-Reply-To: <453D02CB.4030005@phpwerx.net>
References: <000901c6f5ca$5d0fe700$12a8a8c0@HirschLaptop>	<20061023173714.GA28824@panix.com>
	<453D02CB.4030005@phpwerx.net>
Message-ID: <453D0A67.2080900@secdat.com>

Dan Cech wrote:
> Daniel Convissor wrote:
>   
>> Hi Cliff:
>>
>> On Sun, Oct 22, 2006 at 07:08:11AM -0400, Cliff Hirsch wrote:
>>     
>>> Is serializing/unserializing object/arrays for storage/retrieval in a
>>> MySQL db truly reliable?
>>>       
>> Depends on what you're doing.  We use them to store history.  For example, 
>> our update method finds the diff between the old and new data.  The diff 
>> contains the old values that are about to be changed, in an associative 
>> array format with column names as the keys.  We then serialize that and 
>> store it in a history table along with the record id and table name.
>>     
>
> This is a pretty common use of serialized data, and one it is fairly
> well suited to.
>
> That said, I tend to use a simple xml format for storing these kinds of
> fields, for a few reasons.
>
> 1. UTF-8 encoding is easy in XML
> 2. XML is easy to read/edit manually if needed
> 3. It's harder to break and when you do, easier to fix
>
>   
I suppose somebody should chime in and point out that you can also store 
the historical data in POTS (plain old tables), on the theory that 
tabular information works best in tables.  Easier to write, easier to read.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From tboyden at supercoups.com  Mon Oct 23 16:35:33 2006
From: tboyden at supercoups.com (Timothy Boyden)
Date: Mon, 23 Oct 2006 16:35:33 -0400
Subject: [nycphp-talk] FPDI
Message-ID: 

Does anyone have a link to a forum or newsgroup for support and or
questions on the FPDI library?

I'm using the FPDI library to encrypt existing PDF documents on the fly
but they all ouput to A4 or Letter size pages rather than the size of
the original document (3" x 8"). I need help to figure out how to change
the size of the outputted document.

Thanks,

Tim

--------------------------- 
Timothy Boyden 
Network Administrator 
tboyden at supercoups.com 

SuperCoups(r) | 350 Revolutionary Drive | E. Taunton, MA 02718 
508-977-2034  | www.supercoups.com   
---------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From tboyden at supercoups.com  Mon Oct 23 16:35:33 2006
From: tboyden at supercoups.com (Timothy Boyden)
Date: Mon, 23 Oct 2006 16:35:33 -0400
Subject: [nycphp-talk] FPDI
Message-ID: 

Does anyone have a link to a forum or newsgroup for support and or
questions on the FPDI library?

I'm using the FPDI library to encrypt existing PDF documents on the fly
but they all ouput to A4 or Letter size pages rather than the size of
the original document (3" x 8"). I need help to figure out how to change
the size of the outputted document.

Thanks,

Tim

--------------------------- 
Timothy Boyden 
Network Administrator 
tboyden at supercoups.com 

SuperCoups(r) | 350 Revolutionary Drive | E. Taunton, MA 02718 
508-977-2034  | www.supercoups.com   
---------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From jonbaer at jonbaer.com  Mon Oct 23 21:01:22 2006
From: jonbaer at jonbaer.com (Jon Baer)
Date: Mon, 23 Oct 2006 21:01:22 -0400
Subject: [nycphp-talk] Successor to the Web?
In-Reply-To: <20061023122048.GB16099@panix.com>
References: <20061018125434.E74CEA8774@virtu.nyphp.org>
	<20061023122048.GB16099@panix.com>
Message-ID: 

Yeah if Songbird doesn't convince you, nothing will ... perfect  
model ...

http://www.songbirdnest.com

On Oct 23, 2006, at 8:20 AM, Daniel Convissor wrote:

> Phil:
>
> XUL and JSON.  Allows creation of a light but quite powerful client
> that communicates via JSON over HTTP to a PHP backend.
>
> --Dan
>
> -- 
>  T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
>             data intensive web and database programming
>                 http://www.AnalysisAndSolutions.com/
>  4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

From ken at secdat.com  Mon Oct 23 22:04:42 2006
From: ken at secdat.com (Kenneth Downs)
Date: Mon, 23 Oct 2006 22:04:42 -0400
Subject: [nycphp-talk] DataObject implementation (was Re: Constructors
 and)
In-Reply-To: 
References: <3503e561a956764ef4b7e5dbe1398d70@jobsforge.com>	<9D5F7096-CD8E-473A-BFAC-835DFE8E7E4C@sala.ca>		<7EB77E45-7E68-49C7-8AC8-EBC2D685B92B@sala.ca>

Message-ID: <453D74BA.80208@secdat.com>

David Mintz wrote:
> On Thu, 19 Oct 2006, Dell Sala wrote:
>
>   
>> The other possibility is to look into existing DataObject frameworks
>> that have already implemented the fancy stuff for you. I've used
>> PEAR's DB_DataObject. It's a bit of a pain to get up an running, but
>> it's solid. There are quite a few others -- here are a few:
>>
>> http://pear.php.net/package/DB_DataObject/
>> http://propel.phpdb.org/trac/
>> and CakePHP implements its own ActiveRecord  http://cakephp.org/
>>
>>     
>
> I was gonna say -- but didn't, for brevity's sake -- that I have spent
> several+ hours with Cake, and it does seem mighty cool, yet I've run into
> enough snags to wonder about the name. Like findAll() not fetching the
> data that I need and having to write custom SQL anyway.
>   
I'm at pains to ask at this point if we should question some of the 
basic assumptions of the MVC model.

Underneath MVC is usually an ORM philosophy, whether it is stated or 
implied.  The ORM philosophy tries to cast tables into OO terms, and 
IMHO this is why the approach tends to produce at least as much work as 
it eliminates.

In fact, the data tables are fully encapsulated by the database server 
and do not need to be encapsulated further into classes.  Doing so 
introduces obfuscations which then must be un-obfuscated, so author ends 
up doing work to do accomplish an unnecessary goal, which then requires 
further work to undo. 

By contrast, a generalized query-by-form is far easier to write by 
approaching it as a simple function that need only know a table name, 
and the column types and widths.  It does the same thing for every table 
otherwise.  You can put it into a class if you like, but it works just 
as well as a library routine.

As an example of this, check out one of the apps we will be demoing at 
Tuesday's Andromeda presentation:

http://dhost2.secdat.com/demo_peds

Username and password are both "guest".

Look at the menu on the left, skip the first two entries 
"ProcedureDiagnosis X Ref" and "Claims" and look at the next few 
entries, "Procedure Codes", "Prodedure Groups" and so forth.  Each of 
these tables is pure zero-code, not even a three-line class declaration 
went into any of them.

Other more interesting tables are much lower on the menu, particularly 
"Carriers", which contains real data, and "Families".  We're loading 
fake data to the "Families" and "Family Members" also.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From rotsen at gmail.com  Mon Oct 23 19:58:59 2006
From: rotsen at gmail.com (=?ISO-8859-1?Q?N=E9stor?=)
Date: Mon, 23 Oct 2006 16:58:59 -0700
Subject: [nycphp-talk] FILE()
Message-ID: 

I am trying to create a file that will print a web page
and using the following code the below statement contains the
sam einformation:
  $from = $_SERVER['HTTP_REFERER'];
  print "refer=|" . $_SERVER['HTTP_REFERER'] . "|
\n";
  print "from=|" . $from . "|
\n";
---
  refer=|http://maggie.sdcwa.org/eng/project/view_project.phtml|
  form=|http://maggie.sdcwa.org/eng/project/view_project.phtml|

The problem is that if I use the code below to read the file then
$lines is empty.
  $lines = file("$from");

If I use the code below, $lines contains the file:
  $lines = file('
http://maggie.sdcwa.org/eng/project/client_view_project.phtml');

I do not know why it will read the file when I spell the actual URL compare
compare to when I read the URL using the $_SERVER['HTTP_REFERER'].

Thanks,

N?stor ;-)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From gayatri_delphi at yahoo.co.in  Tue Oct 24 01:53:28 2006
From: gayatri_delphi at yahoo.co.in (Gayatri Delphi)
Date: Tue, 24 Oct 2006 06:53:28 +0100 (BST)
Subject: [nycphp-talk] Hi all
Message-ID: <20061024055328.25872.qmail@web7802.mail.in.yahoo.com>

Hi all,

  Let me introduce first.  I am Sinu from India. I am working as Senior Software Engineer in an US based company . 

  I have more than 6 years of experience in developing softwares in Delphi . 

  I started with Delphi 1 and now I am working in Delphi 7.

  I have worked in different domains like Finance , Hospital Management , Hotel management , 

  Remitter processing , Admin and ITS(Intelligent Transport Systems).

  I have already developed many freelance projects. 

  I am interested to take any more freelance work in Delphi. 

  Kindly let me know if any of you have any specific work.

  Regards,
  Sinu

---------------------------------
 Find out what India is talking about on  - Yahoo! Answers India 
 Send FREE SMS to your friend's mobile from Yahoo! Messenger Version 8. Get it NOW
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From ken at secdat.com  Tue Oct 24 09:22:24 2006
From: ken at secdat.com (Kenneth Downs)
Date: Tue, 24 Oct 2006 09:22:24 -0400
Subject: [nycphp-talk] Tonight: bring wireless, smartphone, get account
Message-ID: <453E1390.7000802@secdat.com>

For tonight's demo of Andromeda, we will have a wireless router and you 
will be able to connect into the demo apps if you have a wireless adapter.

One of our demos, a time tracker, works much better if you have a login 
account.  If you want to get an account just email the list with a 
desired userid before 3:30pm and we'll have the account created when the 
show begins. 
Or you can get to the show early, and we will be creating accounts from 
6:15pm - 6:30pm.

Also, we will be demonstrating *very* limited smartphone stuff if time 
permits.  If you have a wi-fi enabled smartphone bring that along too 
and you can see a thing or two.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From codebowl at gmail.com  Tue Oct 24 09:29:27 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Tue, 24 Oct 2006 09:29:27 -0400
Subject: [nycphp-talk] Tonight: bring wireless, smartphone, get account
In-Reply-To: <453E1390.7000802@secdat.com>
References: <453E1390.7000802@secdat.com>
Message-ID: <8d9a42800610240629q604a8f86pc786b654b5e97a78@mail.gmail.com>

which Andromeda are you going to demo tonight?  Is there a url?

I wont be able to attend but am curious and may checkout the slides once
done ;D

Thanks,
-- 
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
http://www.codebowl.com/
Blog: http://www.josephcrawford.com/
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From ken at secdat.com  Tue Oct 24 09:43:20 2006
From: ken at secdat.com (Kenneth Downs)
Date: Tue, 24 Oct 2006 09:43:20 -0400
Subject: [nycphp-talk] Tonight: bring wireless, smartphone, get account
In-Reply-To: <8d9a42800610240629q604a8f86pc786b654b5e97a78@mail.gmail.com>
References: <453E1390.7000802@secdat.com>
	<8d9a42800610240629q604a8f86pc786b654b5e97a78@mail.gmail.com>
Message-ID: <453E1878.1090307@secdat.com>

Joseph Crawford wrote:
> which Andromeda are you going to demo tonight?  Is there a url?
The url is: http://docs.secdat.com

The slides are here:

http://www.secdat.com/NYPHP-2004.10.19.odp

they will be altered slightly this afternoon, but not substantially.

>
> I wont be able to attend but am curious and may checkout the slides 
> once done ;D
>
> Thanks,
> -- 
> Joseph Crawford Jr.
> Zend Certified Engineer
> Codebowl Solutions, Inc.
> http://www.codebowl.com/
> Blog: http://www.josephcrawford.com/
> 1-802-671-2021
> codebowl at gmail.com 
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From dell at sala.ca  Tue Oct 24 09:51:13 2006
From: dell at sala.ca (Dell Sala)
Date: Tue, 24 Oct 2006 09:51:13 -0400
Subject: [nycphp-talk] DataObject implementation (was Re: Constructors
	and)
In-Reply-To: <453D74BA.80208@secdat.com>
References: <3503e561a956764ef4b7e5dbe1398d70@jobsforge.com>	<9D5F7096-CD8E-473A-BFAC-835DFE8E7E4C@sala.ca>		<7EB77E45-7E68-49C7-8AC8-EBC2D685B92B@sala.ca>

	<453D74BA.80208@secdat.com>
Message-ID: <5CCA4D59-1A3A-4E70-A26D-EE2461F17F6E@sala.ca>

Kenneth Downs wrote:

> I'm at pains to ask at this point if we should question some of the  
> basic assumptions of the MVC model.
>
> Underneath MVC is usually an ORM philosophy, whether it is stated  
> or implied.  The ORM philosophy tries to cast tables into OO terms,  
> and IMHO this is why the approach tends to produce at least as much  
> work as it eliminates.

To be honest, I've really just fallen into an MVC approach as I've  
learned, so I can't really compare it to anything other than the  
chaotic php/sql/html I used to write when I got started. I suppose I  
agree that ORM and MVC may not save time in the short-term, but I've  
found it can have a huge impact on the maintainability of my code. It  
does not mean I write less code -- it just gives me structured  
buckets to put it in. I also find the code becomes very expressive  
with MVC and ORM. I can glance at it 6 months later and know exactly  
what I was trying to do.

> In fact, the data tables are fully encapsulated by the database  
> server and do not need to be encapsulated further into classes.   
> Doing so introduces obfuscations which then must be un-obfuscated,  
> so author ends up doing work to do accomplish an unnecessary goal,  
> which then requires further work to undo.

This is interesting. I've thought about this before, but haven't  
heard anyone else express it. But a table is just data, no? I've  
found it useful to wrap tables in classes so that I can attach  
business logic to them.

> By contrast, a generalized query-by-form is far easier to write by  
> approaching it as a simple function that need only know a table  
> name, and the column types and widths.  It does the same thing for  
> every table otherwise.  You can put it into a class if you like,  
> but it works just as well as a library routine.

I can't quite visualize it. I'm looking forward to seeing some  
examples at your presentation this evening. I'm always look for a  
better way...

-- Dell

From ken at secdat.com  Tue Oct 24 11:19:17 2006
From: ken at secdat.com (Kenneth Downs)
Date: Tue, 24 Oct 2006 11:19:17 -0400
Subject: [nycphp-talk] DataObject implementation (was Re: Constructors
 and)
In-Reply-To: <5CCA4D59-1A3A-4E70-A26D-EE2461F17F6E@sala.ca>
References: <3503e561a956764ef4b7e5dbe1398d70@jobsforge.com>	<9D5F7096-CD8E-473A-BFAC-835DFE8E7E4C@sala.ca>		<7EB77E45-7E68-49C7-8AC8-EBC2D685B92B@sala.ca>		<453D74BA.80208@secdat.com>
	<5CCA4D59-1A3A-4E70-A26D-EE2461F17F6E@sala.ca>
Message-ID: <453E2EF5.2030403@secdat.com>

Dell Sala wrote:
>> In fact, the data tables are fully encapsulated by the database  
>> server and do not need to be encapsulated further into classes.   
>> Doing so introduces obfuscations which then must be un-obfuscated,  
>> so author ends up doing work to do accomplish an unnecessary goal,  
>> which then requires further work to undo.
>>     
>
> This is interesting. I've thought about this before, but haven't  
> heard anyone else express it. But a table is just data, no? I've  
> found it useful to wrap tables in classes so that I can attach  
> business logic to them.
>   
A table is, at minimum, data.  But the table is also the most natural 
home of biz logic.  You can attach triggers (server-side programs) that 
automatically fire on the three actions of insert, update, delete, and 
these triggers can contain all of your business logic.

Consider this: code attached to the table is as simple as the world can 
get.  Any other situation, such as putting the code out in the web 
layer, is a *complication*, and will always have drawbacks.  The first 
is of course that your database is now helpless to defend itself against 
rogue apps.  This is very important because the better the businessman 
you are, the more likely your software will be deployed by an IT 
department that demands access to the database.  The second big problem 
is the ORM classes will always be more complex than the triggers they 
are by definition oxy-moronic: code that is by definition always 
attached to a specific table, yet by no possible mechanism can be 
positively synchronized with that table.   Thirdly of course is 
performance, since application code is farther away from the server than 
trigger code, many functions will be forever doomed to be slower.

Now, if you are on mySQL, some or much of this may not be possible.  
This explains why people will say that mySQL, despite ongoing 
improvements, is not a "real" database.

So why don't people do it this way?  Several reasons.  First, they 
simply don't know they can.  There is a second reason that is more 
justifiable, which is that it turns out to be a royal PITA to diddle 
around with triggers the way we do so effortlessly with our piles of PHP 
files.  Another reason, which is harder to get into in an email, is an 
inclination to remain "platform independent" by avoiding coding in the 
proprietary language of a server product.   Coders don't want their biz 
logic "locked" into Oracle syntax, or Postgres syntax, and so forth.

The Andromeda solution is to store the database spec in a plaintext file 
and to generate the table definitions and triggers.  This gives the 
Andromeda programmer:

-> Simple editing of biz rules in a text file
-> Platform independence, as we can generate SQL for multiple back-ends 
(this is only true in principle, we target only PostgreSQL at this time)
-> All biz logic in the web server, its natural home
-> All kinds of whiz-bang install/upgrade stuff
-> Huge reduction in coding

Hope this helps, and looking forward to seeing you this evening!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From ken at secdat.com  Tue Oct 24 11:55:57 2006
From: ken at secdat.com (Kenneth Downs)
Date: Tue, 24 Oct 2006 11:55:57 -0400
Subject: [nycphp-talk] Final slides now available for download
Message-ID: <453E378D.3070909@secdat.com>

The final version of tonight's slides are available here:

http://www.secdat.com/NYPHP-2004.10.19.odp

-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From rolan at omnistep.com  Tue Oct 24 13:11:25 2006
From: rolan at omnistep.com (Rolan Yang)
Date: Tue, 24 Oct 2006 13:11:25 -0400
Subject: [nycphp-talk] Final slides now available for download
In-Reply-To: <453E378D.3070909@secdat.com>
References: <453E378D.3070909@secdat.com>
Message-ID: <453E493D.7090102@omnistep.com>

Just installed open office now so I'm not sure if the problem is on my 
end, but when I open the document, all I see is a blank page.

~Rolan

Kenneth Downs wrote:
> The final version of tonight's slides are available here:
>
> http://www.secdat.com/NYPHP-2004.10.19.odp
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   

From andrew at plexpod.com  Tue Oct 24 13:15:31 2006
From: andrew at plexpod.com (Andrew Yochum)
Date: Tue, 24 Oct 2006 13:15:31 -0400
Subject: [nycphp-talk] Final slides now available for download
In-Reply-To: <453E493D.7090102@omnistep.com>
References: <453E378D.3070909@secdat.com> <453E493D.7090102@omnistep.com>
Message-ID: <453E4A33.2040603@plexpod.com>

Kenneth,

Perhaps you can generate a neutral version? HTML or PDF?

Andrew

Rolan Yang wrote:
> Just installed open office now so I'm not sure if the problem is on my 
> end, but when I open the document, all I see is a blank page.
>
> ~Rolan
>
> Kenneth Downs wrote:
>   
>> The final version of tonight's slides are available here:
>>
>> http://www.secdat.com/NYPHP-2004.10.19.odp
>>
>>
>> _______________________________________________
>> New York PHP Community Talk Mailing List
>> http://lists.nyphp.org/mailman/listinfo/talk
>>
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>>
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>>   
>>     
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   

From ken at secdat.com  Tue Oct 24 13:25:10 2006
From: ken at secdat.com (Kenneth Downs)
Date: Tue, 24 Oct 2006 13:25:10 -0400
Subject: [nycphp-talk] Final slides now available for download
In-Reply-To: <453E493D.7090102@omnistep.com>
References: <453E378D.3070909@secdat.com> <453E493D.7090102@omnistep.com>
Message-ID: <453E4C76.6030705@secdat.com>

Rolan Yang wrote:
> Just installed open office now so I'm not sure if the problem is on my 
> end, but when I open the document, all I see is a blank page.
>   

I've saved a PDF: 

http://www.secdat.com/NYPHP-2004.10.19.pdf

But for my own curiosity, what version of OOo?  Linux or Win?

> ~Rolan
>
> Kenneth Downs wrote:
>   
>> The final version of tonight's slides are available here:
>>
>> http://www.secdat.com/NYPHP-2004.10.19.odp
>>
>>
>> _______________________________________________
>> New York PHP Community Talk Mailing List
>> http://lists.nyphp.org/mailman/listinfo/talk
>>
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>>
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>>   
>>     
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From ken at secdat.com  Tue Oct 24 13:38:22 2006
From: ken at secdat.com (Kenneth Downs)
Date: Tue, 24 Oct 2006 13:38:22 -0400
Subject: [nycphp-talk] PDF slides are posted
In-Reply-To: <453E4A33.2040603@plexpod.com>
References: <453E378D.3070909@secdat.com> <453E493D.7090102@omnistep.com>
	<453E4A33.2040603@plexpod.com>
Message-ID: <453E4F8E.1070800@secdat.com>

Andrew Yochum wrote:
> Kenneth,
>
> Perhaps you can generate a neutral version? HTML or PDF?
>   
Yup, that occurred to me as soon as I saw Rolan's trouble.  It is at:

http://www.secdat.com/NYPHP-2004.10.19.pdf

> Andrew
>
> Rolan Yang wrote:
>   
>> Just installed open office now so I'm not sure if the problem is on my 
>> end, but when I open the document, all I see is a blank page.
>>
>> ~Rolan
>>
>> Kenneth Downs wrote:
>>   
>>     
>>> The final version of tonight's slides are available here:
>>>
>>> http://www.secdat.com/NYPHP-2004.10.19.odp
>>>
>>>
>>> _______________________________________________
>>> New York PHP Community Talk Mailing List
>>> http://lists.nyphp.org/mailman/listinfo/talk
>>>
>>> NYPHPCon 2006 Presentations Online
>>> http://www.nyphpcon.com
>>>
>>> Show Your Participation in New York PHP
>>> http://www.nyphp.org/show_participation.php
>>>   
>>>     
>>>       
>> _______________________________________________
>> New York PHP Community Talk Mailing List
>> http://lists.nyphp.org/mailman/listinfo/talk
>>
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>>
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>>   
>>     
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From natrindex at yahoo.com  Tue Oct 24 14:30:39 2006
From: natrindex at yahoo.com (charlie wang)
Date: Tue, 24 Oct 2006 11:30:39 -0700 (PDT)
Subject: [nycphp-talk] Tonight's meeting
Message-ID: <20061024183039.71929.qmail@web90413.mail.mud.yahoo.com>

I RSVPed a few minutes ago. It says I should RSVPed yesterday before  3PM. Am I too late for today's meeting. I don't want drive 2 hour from  upstate to NYC and then blocked out of door by IBM security.

  Thanks in advance for any advise.

  Charlie

---------------------------------
How low will we go? Check out Yahoo! Messenger?s low  PC-to-Phone call rates.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From ken at secdat.com  Tue Oct 24 14:56:05 2006
From: ken at secdat.com (Kenneth Downs)
Date: Tue, 24 Oct 2006 14:56:05 -0400
Subject: [nycphp-talk] Tonight's meeting
In-Reply-To: <20061024183039.71929.qmail@web90413.mail.mud.yahoo.com>
References: <20061024183039.71929.qmail@web90413.mail.mud.yahoo.com>
Message-ID: <453E61C5.2010300@secdat.com>

charlie wang wrote:
> I RSVPed a few minutes ago. It says I should RSVPed yesterday before 
> 3PM. Am I too late for today's meeting. I don't want drive 2 hour from 
> upstate to NYC and then blocked out of door by IBM security.
>
> Thanks in advance for any advise.
I have forgotten to RSVP at least once myself, I showed photo ID and 
they let me in.
>
>
> Charlie
>
> ------------------------------------------------------------------------
> How low will we go? Check out Yahoo! Messenger's low PC-to-Phone call 
> rates. 
>  
>
>
>  
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From rolan at omnistep.com  Tue Oct 24 15:18:39 2006
From: rolan at omnistep.com (Rolan Yang)
Date: Tue, 24 Oct 2006 15:18:39 -0400
Subject: [nycphp-talk] Final slides now available for download
In-Reply-To: <453E4C76.6030705@secdat.com>
References: <453E378D.3070909@secdat.com> <453E493D.7090102@omnistep.com>
	<453E4C76.6030705@secdat.com>
Message-ID: <453E670F.3080104@omnistep.com>

win.

Kenneth Downs wrote:
> Rolan Yang wrote:
>> Just installed open office now so I'm not sure if the problem is on my 
>> end, but when I open the document, all I see is a blank page.
>>   
>
> I've saved a PDF: 
>
> http://www.secdat.com/NYPHP-2004.10.19.pdf
>
> But for my own curiosity, what version of OOo?  Linux or Win?
>

From rolan at omnistep.com  Tue Oct 24 15:58:41 2006
From: rolan at omnistep.com (Rolan Yang)
Date: Tue, 24 Oct 2006 15:58:41 -0400
Subject: [nycphp-talk] Final slides now available for download
In-Reply-To: <453E670F.3080104@omnistep.com>
References: <453E378D.3070909@secdat.com>
	<453E493D.7090102@omnistep.com>	<453E4C76.6030705@secdat.com>
	<453E670F.3080104@omnistep.com>
Message-ID: <453E7071.7090105@omnistep.com>

The presentation opened up fine in linux.

~Rolan

Rolan Yang wrote:
> win.
>
> Kenneth Downs wrote:
>   
>> Rolan Yang wrote:
>>     
>>> Just installed open office now so I'm not sure if the problem is on my 
>>> end, but when I open the document, all I see is a blank page.
>>>   
>>>       
>> I've saved a PDF: 
>>
>> http://www.secdat.com/NYPHP-2004.10.19.pdf
>>
>> But for my own curiosity, what version of OOo?  Linux or Win?
>>
>>     
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>   

From rotsen at gmail.com  Tue Oct 24 19:39:41 2006
From: rotsen at gmail.com (=?ISO-8859-1?Q?N=E9stor?=)
Date: Tue, 24 Oct 2006 16:39:41 -0700
Subject: [nycphp-talk] PROBLEM: passing variables to FILE()
Message-ID: 

HI people,

I am trying to read a file using "file" and I am passing the following
string
for the input file parameter:
http://maggie.sdcwa.org/eng/list/client_find_project_list.phtml?proj_name=CATHODICPROTECTION
OF RAMONA PIPELINE PHASE 2&show=1

phpinfo shows:
_GET["proj_name"] CATHODIC
_SERVER["SERVER_PROTOCOL"] PROTECTION OF RAMONA PIPELINE PHASE 2&show=1
HTTP/1.0
Somehow the variables data being passed as an argument are split.

Anyone ran into this before?

thanks,

N?stor :-)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From danielc at analysisandsolutions.com  Tue Oct 24 20:53:43 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Tue, 24 Oct 2006 20:53:43 -0400
Subject: [nycphp-talk] FILE()
In-Reply-To: 
References: 
Message-ID: <20061025005342.GA5463@panix.com>

Hi Nestor:

On Mon, Oct 23, 2006 at 04:58:59PM -0700, N?stor wrote:
>  $from = $_SERVER['HTTP_REFERER'];
>  print "refer=|" . $_SERVER['HTTP_REFERER'] . "|
\n";
>  print "from=|" . $from . "|
\n";
> ---
>  refer=|http://maggie.sdcwa.org/eng/project/view_project.phtml|
>  form=|http://maggie.sdcwa.org/eng/project/view_project.phtml|
> 
> The problem is that if I use the code below to read the file then
> $lines is empty.
>  $lines = file("$from");

First, let me say this is a VERY VERY VERY bad idea for security 
reasons.  Never use user input for stuff like that.

Second, from the typos you have above, it is clear your example shown 
here is produced by typing rather than not copying and pasting.  So we 
can't diagnose what's really happening.

Third, putting the quotes around $from in that last line is not 
necessary.

Fourth, it seems like it's actually working because the call to file() 
is not throwing an error, right?  [Or are you going to pull one of 
those "Oh, yeah, I forgot to say, the Check Engine light is on" 
situations that happened on "Car Talk" a few weeks ago?]  Thus if 
$lines is empty, the file is empty.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409

From michael.southwell at nyphp.org  Tue Oct 24 23:15:30 2006
From: michael.southwell at nyphp.org (Michael Southwell)
Date: Tue, 24 Oct 2006 23:15:30 -0400
Subject: [nycphp-talk] PROBLEM: passing variables to FILE()
In-Reply-To: 
References: 
Message-ID: <6.2.3.4.2.20061024231306.027ff950@pop.nyphp.com>

An HTML attachment was scrubbed...
URL: 

From kenrbnsn at rbnsn.com  Tue Oct 24 23:21:34 2006
From: kenrbnsn at rbnsn.com (Ken Robinson)
Date: Tue, 24 Oct 2006 23:21:34 -0400
Subject: [nycphp-talk] PROBLEM: passing variables to FILE()
In-Reply-To: <6.2.3.4.2.20061024231306.027ff950@pop.nyphp.com>
References: 
	<6.2.3.4.2.20061024231306.027ff950@pop.nyphp.com>
Message-ID: <7.0.1.0.2.20061024231943.09ea7888@rbnsn.com>

At 11:15 PM 10/24/2006, Michael Southwell wrote:
>At 07:39 PM 10/24/2006, you wrote:
>>HI people,
>>
>>I am trying to read a file using "file" and I am passing the following string
>>for the input file parameter:
>>http://maggie.sdcwa.org/eng/list/client_find_project_list.phtml?proj_name=CATHODIC 
>>PROTECTION OF RAMONA PIPELINE PHASE 2&show=1
>>
>>phpinfo shows:
>>_GET["proj_name"] CATHODIC
>>
>>_SERVER["SERVER_PROTOCOL"] PROTECTION OF RAMONA PIPELINE PHASE 
>>2&show=1 HTTP/1.0
>>
>>Somehow the variables data being passed as an argument are split.
>
>You can't pass a space, so you need to replace all spaces in the 
>argument with the html entity equivalent, in this case %20, before 
>you try to pass it.  You can do this with str_replace().

No, you shouldn't use the htmlentities() function, since that will 
not encode spaces. You should use the urlencode() function, since that will.

Ken 

From gayatri_delphi at yahoo.co.in  Wed Oct 25 03:03:33 2006
From: gayatri_delphi at yahoo.co.in (Gayatri Delphi)
Date: Wed, 25 Oct 2006 08:03:33 +0100 (BST)
Subject: [nycphp-talk] Interested in freelance work : Delphi
In-Reply-To: <453E1390.7000802@secdat.com>
Message-ID: <20061025070333.91536.qmail@web7811.mail.in.yahoo.com>

Hi Adam ,

  I would like to talk to you regarding the freelance work. Can you send me your email id. 

  Regards,
  Sinu

Kenneth Downs  wrote:  For tonight's demo of Andromeda, we will have a wireless router and you 
will be able to connect into the demo apps if you have a wireless adapter.

One of our demos, a time tracker, works much better if you have a login 
account. If you want to get an account just email the list with a 
desired userid before 3:30pm and we'll have the account created when the 
show begins. 
Or you can get to the show early, and we will be creating accounts from 
6:15pm - 6:30pm.

Also, we will be demonstrating *very* limited smartphone stuff if time 
permits. If you have a wi-fi enabled smartphone bring that along too 
and you can see a thing or two.
begin:vcard
fn:Kenneth Downs
n:Downs;Kenneth 
adr;dom:;;347 Main Street;East Setauket;NY;11733
email;internet:ken at secdat.com
tel;work:631-689-7200
tel;fax:631-689-0527
tel;cell:631-379-0010
x-mozilla-html:FALSE
url:http://www.secdat.com
version:2.1
end:vcard

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

---------------------------------
 Find out what India is talking about on  - Yahoo! Answers India 
 Send FREE SMS to your friend's mobile from Yahoo! Messenger Version 8. Get it NOW
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From rotsen at gmail.com  Wed Oct 25 10:53:39 2006
From: rotsen at gmail.com (=?ISO-8859-1?Q?N=E9stor?=)
Date: Wed, 25 Oct 2006 07:53:39 -0700
Subject: [nycphp-talk] FILE()
In-Reply-To: <20061025005342.GA5463@panix.com>
References: 
	<20061025005342.GA5463@panix.com>
Message-ID: 

Daniel thanks for your help.

I can tell you that this is not user input but I was printing
variable to try to debug the problem.

I do not know what typos you are referring to since those lines
of code worked, can you tell me what typos you are talking about.

Putting the quotes around the $form is not necessary but is not ilegal.

The problem I found in calling the "FIle($file)".  $file will include a file
to
check for session information and it will send the page to a login page.
I found the problem as soon as I went home when I was thinking about it
while eating dinner (ha, ha,..)

Thanks for your help,

N?stor :-)

On 10/24/06, Daniel Convissor  wrote:
>
> Hi Nestor:
>
> On Mon, Oct 23, 2006 at 04:58:59PM -0700, N?stor wrote:
> >  $from = $_SERVER['HTTP_REFERER'];
> >  print "refer=|" . $_SERVER['HTTP_REFERER'] . "|
\n";
> >  print "from=|" . $from . "|
\n";
> > ---
> >  refer=|http://maggie.sdcwa.org/eng/project/view_project.phtml|
> >  form=|http://maggie.sdcwa.org/eng/project/view_project.phtml|
> >
> > The problem is that if I use the code below to read the file then
> > $lines is empty.
> >  $lines = file("$from");
>
> First, let me say this is a VERY VERY VERY bad idea for security
> reasons.  Never use user input for stuff like that.
>
> Second, from the typos you have above, it is clear your example shown
> here is produced by typing rather than not copying and pasting.  So we
> can't diagnose what's really happening.
>
> Third, putting the quotes around $from in that last line is not
> necessary.
>
> Fourth, it seems like it's actually working because the call to file()
> is not throwing an error, right?  [Or are you going to pull one of
> those "Oh, yeah, I forgot to say, the Check Engine light is on"
> situations that happened on "Car Talk" a few weeks ago?]  Thus if
> $lines is empty, the file is empty.
>
> --Dan
>
> --
> T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
>             data intensive web and database programming
>                 http://www.AnalysisAndSolutions.com/
> 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From rotsen at gmail.com  Wed Oct 25 11:38:50 2006
From: rotsen at gmail.com (=?ISO-8859-1?Q?N=E9stor?=)
Date: Wed, 25 Oct 2006 08:38:50 -0700
Subject: [nycphp-talk] PROBLEM: passing variables to FILE()
In-Reply-To: <7.0.1.0.2.20061024231943.09ea7888@rbnsn.com>
References: 
	<6.2.3.4.2.20061024231306.027ff950@pop.nyphp.com>
	<7.0.1.0.2.20061024231943.09ea7888@rbnsn.com>
Message-ID: 

Michael + Ken

Using urlencode did the trick.  I was surprise that $_GET will urldecode
the variables automatically.

Thanks!!!!

N?stor :-)

On 10/24/06, Ken Robinson  wrote:
>
> At 11:15 PM 10/24/2006, Michael Southwell wrote:
> >At 07:39 PM 10/24/2006, you wrote:
> >>HI people,
> >>
> >>I am trying to read a file using "file" and I am passing the following
> string
> >>for the input file parameter:
> >>
> http://maggie.sdcwa.org/eng/list/client_find_project_list.phtml?proj_name=CATHODIC
> >>PROTECTION OF RAMONA PIPELINE PHASE 2&show=1
> >>
> >>phpinfo shows:
> >>_GET["proj_name"] CATHODIC
> >>
> >>_SERVER["SERVER_PROTOCOL"] PROTECTION OF RAMONA PIPELINE PHASE
> >>2&show=1 HTTP/1.0
> >>
> >>Somehow the variables data being passed as an argument are split.
> >
> >You can't pass a space, so you need to replace all spaces in the
> >argument with the html entity equivalent, in this case %20, before
> >you try to pass it.  You can do this with str_replace().
>
> No, you shouldn't use the htmlentities() function, since that will
> not encode spaces. You should use the urlencode() function, since that
> will.
>
> Ken
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From chsnyder at gmail.com  Wed Oct 25 13:59:10 2006
From: chsnyder at gmail.com (csnyder)
Date: Wed, 25 Oct 2006 13:59:10 -0400
Subject: [nycphp-talk] FILE()
In-Reply-To: 
References: 
	<20061025005342.GA5463@panix.com>

Message-ID: 

On 10/25/06, N?stor  wrote:

> I can tell you that this is not user input but I was printing
> variable to try to debug the problem.

HTTP_REFERER is considered user input, becuase it is built from HTTP
headers. Just make sure you implicitly trust anybody who is able to
execute the script. One could send a referrer that looks like
"file:///etc/passwd" or something.

There's no reason that $lines = file( $from ) wouldn't work, provided
$from is actually set. So either this is a PHP bug, which is
_extremely_ unlikely, or you have a typo somewhere in your code. Are
you sure you didn't set $form? Are you sure that the referrer is being
sent? Are you checking for an error raised by the file() call?

-- 
Chris Snyder
http://chxo.com/

From suzerain at suzerain.com  Wed Oct 25 14:34:28 2006
From: suzerain at suzerain.com (Marc Antony Vose)
Date: Wed, 25 Oct 2006 14:34:28 -0400
Subject: [nycphp-talk] user input (was Re:  FILE() )
In-Reply-To: 
References: 
	<20061025005342.GA5463@panix.com>

Message-ID: <450023D8-2562-4D3A-B3AD-05F861CFBFB9@suzerain.com>

Hey Chris:

Just wondering about this...what kind of filter would you recommend  
passing over the HTTP_REFERER in order to verify it's (reasonably)  
kosher?

Cheers,

Marc
http://www.suzerain.com

Le 25 oct. 06 ? 13:59, csnyder a ?crit :

> On 10/25/06, N?stor  wrote:
>
>> I can tell you that this is not user input but I was printing
>> variable to try to debug the problem.
>
> HTTP_REFERER is considered user input, becuase it is built from HTTP
> headers. Just make sure you implicitly trust anybody who is able to
> execute the script. One could send a referrer that looks like
> "file:///etc/passwd" or something.
>
> There's no reason that $lines = file( $from ) wouldn't work, provided
> $from is actually set. So either this is a PHP bug, which is
> _extremely_ unlikely, or you have a typo somewhere in your code. Are
> you sure you didn't set $form? Are you sure that the referrer is being
> sent? Are you checking for an error raised by the file() call?
>
> -- 
> Chris Snyder
> http://chxo.com/
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

From chsnyder at gmail.com  Wed Oct 25 15:01:29 2006
From: chsnyder at gmail.com (csnyder)
Date: Wed, 25 Oct 2006 15:01:29 -0400
Subject: [nycphp-talk] user input (was Re: FILE() )
In-Reply-To: <450023D8-2562-4D3A-B3AD-05F861CFBFB9@suzerain.com>
References: 
	<20061025005342.GA5463@panix.com>

	<450023D8-2562-4D3A-B3AD-05F861CFBFB9@suzerain.com>
Message-ID: 

On 10/25/06, Marc Antony Vose  wrote:
> Hey Chris:
>
> Just wondering about this...what kind of filter would you recommend
> passing over the HTTP_REFERER in order to verify it's (reasonably)
> kosher?
>
> Cheers,
>
> Marc
> http://www.suzerain.com
>

At minimum you'd want to make sure the referrer starts with "http://"
or "https://", which will cut off local filesystem access. Include
ftp:// if you need to, but who passes ftp urls in the referrer?

If your server can potentially access other systems inside a firewall,
it would be a darn good idea to write some sort of host-based
blacklist, with localhost included. Being comprehensive could be
difficult, maybe just better to disallow LAN access to any server that
runs this kind of code.

Of course, if the value is output into markup, you want to convert it
using htmlentities().

Anyone think of anything else?

-- 
Chris Snyder
http://chxo.com/

From gatzby3jr at gmail.com  Wed Oct 25 16:07:34 2006
From: gatzby3jr at gmail.com (Brian O'Connor)
Date: Wed, 25 Oct 2006 16:07:34 -0400
Subject: [nycphp-talk] Eval question
In-Reply-To: <20061023152503.GA672@panix.com>
References: <20061012141811.98762.qmail@web53314.mail.yahoo.com>
	<20061023152503.GA672@panix.com>
Message-ID: <29da5d150610251307h6e29a7d7xa2986d3b9e085463@mail.gmail.com>

Is it a bad idea with user input, or in general?  And if in general, why so?

On 10/23/06, Daniel Convissor  wrote:
>
>
> On Thu, Oct 12, 2006 at 07:18:11AM -0700, LK wrote:
> >   $x = 3;
> >   $y = 4;
> >   $calc_str = '$x * $y';
> >   eval("echo \"$calc_str\";");
>
> > I want to evaluate the expression $x * $y (x times y). But when I run it
> > thru the eval() function it returns "3 * 4" instead of "12".
>
> Because you are asking PHP to evaluate the quoted string.  What you want
> to do is:
>
> eval("echo $calc_str;");
>
> BUT, you are hereby warned that eval() is generaly a very bad idea for
> security reasons.
>
> --Dan
>
> --
> T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
>             data intensive web and database programming
>                 http://www.AnalysisAndSolutions.com/
> 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>

-- 
Brian O'Connor
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From tom at supertom.com  Wed Oct 25 16:20:25 2006
From: tom at supertom.com (Tom Melendez)
Date: Wed, 25 Oct 2006 16:20:25 -0400
Subject: [nycphp-talk] Eval question
In-Reply-To: <29da5d150610251307h6e29a7d7xa2986d3b9e085463@mail.gmail.com>
References: <20061012141811.98762.qmail@web53314.mail.yahoo.com>
	<20061023152503.GA672@panix.com>
	<29da5d150610251307h6e29a7d7xa2986d3b9e085463@mail.gmail.com>
Message-ID: <117286890610251320p1c52dabj10d534c66db1df2@mail.gmail.com>

When I'm faced with using an eval, I usually stop and ask myself "How
did I end up in this situation?".  The answer tends to be that I made
a mistake or assumption earlier on that now has forced me into needing
an eval to continue.

I don't think eval is bad, but rather, it is a glaring reminder of the
mistake I made previously.  Nonetheless, it is there, and there may be
valid reasons for using it depending on your situation.

Tom
http://www.liphp.org

On 10/25/06, Brian O'Connor  wrote:
> Is it a bad idea with user input, or in general?  And if in general, why so?
>
> On 10/23/06, Daniel Convissor <
> danielc at analysisandsolutions.com> wrote:
> >
> > On Thu, Oct 12, 2006 at 07:18:11AM -0700, LK wrote:
> > >   $x = 3;
> > >   $y = 4;
> > >   $calc_str = '$x * $y';
> > >   eval("echo \"$calc_str\";");
> >
> > > I want to evaluate the expression $x * $y (x times y). But when I run it
> > > thru the eval() function it returns "3 * 4" instead of "12".
> >
> > Because you are asking PHP to evaluate the quoted string.  What you want
> > to do is:
> >
> > eval("echo $calc_str;");
> >
> > BUT, you are hereby warned that eval() is generaly a very bad idea for
> > security reasons.
> >
> > --Dan
> >
> > --
> > T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
> >             data intensive web and database programming
> >                  http://www.AnalysisAndSolutions.com/
> > 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
>
>
>
> --
> Brian O'Connor
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>

From natrindex at yahoo.com  Wed Oct 25 19:15:12 2006
From: natrindex at yahoo.com (charlie wang)
Date: Wed, 25 Oct 2006 16:15:12 -0700 (PDT)
Subject: [nycphp-talk] Tonight's meeting
In-Reply-To: <453E61C5.2010300@secdat.com>
Message-ID: <20061025231512.10243.qmail@web90402.mail.mud.yahoo.com>

Hi, Kenneth:

I didn't make it last night. I reviewed your slides. It's very interesting. Could you give me a username/password to access the online demo.

I'm chemist working for a small manufacturer in upstate. I also write software for my company using PHP and mySQL. I believe your system has very good application small business environment.

I wish could attend your future presentation.

Regards,

Chunlin Wang, Ph.D.

Kenneth Downs  wrote:           charlie wang wrote: I RSVPed a few minutes ago. It says I should RSVPed yesterday before 3PM. Am I too late for today's meeting. I don't want drive 2 hour from upstate to NYC and then blocked out of door by IBM security.

 Thanks in advance for any advise.
  I have forgotten to RSVP at least once myself, I showed photo ID and they let me in.

 Charlie

---------------------------------
How low will we go? Check out Yahoo! Messenger?s low  PC-to-Phone call rates.      

---------------------------------
 _______________________________________________ New York PHP Community Talk Mailing List http://lists.nyphp.org/mailman/listinfo/talk  NYPHPCon 2006 Presentations Online http://www.nyphpcon.com  Show Your Participation in New York PHP http://www.nyphp.org/show_participation.php 

 begin:vcard
fn:Kenneth  Downs
n:Downs;Kenneth 
adr;dom:;;347 Main Street;East Setauket;NY;11733
email;internet:ken at secdat.com
tel;work:631-689-7200
tel;fax:631-689-0527
tel;cell:631-379-0010
x-mozilla-html:FALSE
url:http://www.secdat.com
version:2.1
end:vcard

_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

---------------------------------
Do you Yahoo!?
 Get on board. You're invited to try the new Yahoo! Mail.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From danielc at analysisandsolutions.com  Wed Oct 25 21:46:18 2006
From: danielc at analysisandsolutions.com (Daniel Convissor)
Date: Wed, 25 Oct 2006 21:46:18 -0400
Subject: [nycphp-talk] FILE()
In-Reply-To: 
References: 
	<20061025005342.GA5463@panix.com>

Message-ID: <20061026014618.GA15659@panix.com>

On Wed, Oct 25, 2006 at 07:53:39AM -0700, N?stor wrote:
> 
> I do not know what typos you are referring to since those lines
> of code worked, can you tell me what typos you are talking about.

 print "refer=|" . $_SERVER['HTTP_REFERER'] . "|
\n";
 print "from=|" . $from . "|
\n";
         ^^

 refer=|http://maggie.sdcwa.org/eng/project/view_project.phtml| 
 form=|http://maggie.sdcwa.org/eng/project/view_project.phtml|
  ^^

> Putting the quotes around the $form is not necessary but is not ilegal.

Didn't say it was.  It's just wasteful.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409

From jonbaer at jonbaer.com  Wed Oct 25 23:55:16 2006
From: jonbaer at jonbaer.com (Jon Baer)
Date: Wed, 25 Oct 2006 23:55:16 -0400
Subject: [nycphp-talk] Native MySQL driver in PHP6
Message-ID: 

Ahh more of the "if its not broke fix it anyway to add more  
confusion" PHP :-)

Well Im sure the licensing thing is one item left to be resolved but  
these are 2 nice improvements ...

http://www.planetmysql.org/kaj/?p=69

     *   we intend to add support for client-side query caching in  
the PHP driver for MySQL, probably already to MySQL 5.1 Community Server
     * we intend to add support for a Prepared Statements cache to  
the PHP driver for MySQL, also implemented on the MySQL Server

Is that a memory-based cache being discussed or file-based?  Has  
anyone tried the memcache/MySQL engine?

- Jon

From ken at secdat.com  Thu Oct 26 12:00:45 2006
From: ken at secdat.com (Kenneth Downs)
Date: Thu, 26 Oct 2006 12:00:45 -0400
Subject: [nycphp-talk] Tonight's meeting
In-Reply-To: <20061025231512.10243.qmail@web90402.mail.mud.yahoo.com>
References: <20061025231512.10243.qmail@web90402.mail.mud.yahoo.com>
Message-ID: <4540DBAD.40102@secdat.com>

charlie wang wrote:
> Hi, Kenneth:
>
> I didn't make it last night. I reviewed your slides. It's very 
> interesting. Could you give me a username/password to access the 
> online demo.
Hello Chunlin,

You can use the username "jones" and password "jones" for the demo at 
this site:

dhost2.secdat.com/demo_time

You can also look at the medical billing program if you like, it has 
quite a bit more going on, the username and password are both "guest" 
and it is here:

dhost2.secdat.com/demo_peds

Don't hesitate to email me if you have any questions about the system.

>
> I'm chemist working for a small manufacturer in upstate. I also write 
> software for my company using PHP and mySQL. I believe your system has 
> very good application small business environment.
>
> I wish could attend your future presentation.
>
> Regards,
>
>
> Chunlin Wang, Ph.D.
>
> */Kenneth Downs /* wrote:
>
>     charlie wang wrote:
>>     I RSVPed a few minutes ago. It says I should RSVPed yesterday
>>     before 3PM. Am I too late for today's meeting. I don't want drive
>>     2 hour from upstate to NYC and then blocked out of door by IBM
>>     security.
>>
>>     Thanks in advance for any advise.
>     I have forgotten to RSVP at least once myself, I showed photo ID
>     and they let me in.
>>
>>
>>     Charlie
>>     ------------------------------------------------------------------------
>>     How low will we go? Check out Yahoo! Messenger's low PC-to-Phone
>>     call rates.
>>     
>>
>>       
>>     ------------------------------------------------------------------------
>>      _______________________________________________ New York PHP Community Talk Mailing List http://lists.nyphp.org/mailman/listinfo/talk  NYPHPCon 2006
>>      Presentations Online http://www.nyphpcon.com  Show Your Participation in New York PHP http://www.nyphp.org/show_participation.php  
>
>     begin:vcard
>     fn:Kenneth Downs
>     n:Downs;Kenneth
>     adr;dom:;;347 Main Street;East Setauket;NY;11733
>     email;internet:ken at secdat.com
>     tel;work:631-689-7200
>     tel;fax:631-689-0527
>     tel;cell:631-379-0010
>     x-mozilla-html:FALSE
>     url:http://www.secdat.com
>     version:2.1
>     end:vcard
>
>     _______________________________________________
>     New York PHP Community Talk Mailing List
>     http://lists.nyphp.org/mailman/listinfo/talk
>
>     NYPHPCon 2006 Presentations Online
>     http://www.nyphpcon.com
>
>     Show Your Participation in New York PHP
>     http://www.nyphp.org/show_participation.php
>
>
> ------------------------------------------------------------------------
> Do you Yahoo!?
> Get on board. You're invited 
>  
> to try the new Yahoo! Mail.
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From greg.rundlett at gmail.com  Thu Oct 26 22:26:55 2006
From: greg.rundlett at gmail.com (Greg Rundlett)
Date: Thu, 26 Oct 2006 22:26:55 -0400
Subject: [nycphp-talk] PDF slides are posted
In-Reply-To: <453E4F8E.1070800@secdat.com>
References: <453E378D.3070909@secdat.com> <453E493D.7090102@omnistep.com>
	<453E4A33.2040603@plexpod.com> <453E4F8E.1070800@secdat.com>
Message-ID: <5e2aaca40610261926i4526677uab865736b96c4c0d@mail.gmail.com>

> Perhaps you can generate a neutral version? HTML or PDF?
>
>  http://www.secdat.com/NYPHP-2004.10.19.pdf
>
>
>  The final version of tonight's slides are available here:
>
> http://www.secdat.com/NYPHP-2004.10.19.odp

The slideshow opens just fine on my system using OpenOffice 2 -- just fyi
http://www.openoffice.org/

From abracadabra13 at gmail.com  Fri Oct 27 10:18:24 2006
From: abracadabra13 at gmail.com (AbraCadab Ra)
Date: Fri, 27 Oct 2006 10:18:24 -0400
Subject: [nycphp-talk] Textarea formatting
In-Reply-To: <453802B2.2070405@gmx.net>
References: <005301c6f3a2$03612ef0$6401a8c0@gamebox>

	<007701c6f3a9$ec8f1360$6401a8c0@gamebox> <453802B2.2070405@gmx.net>
Message-ID: <316533590610270718v439cc691ha3d5ac6a763fde00@mail.gmail.com>

I had a similar issue and this is the solution i came up with. I have often
wondered if this is the right way of doing it or not, but I'm by far not a
PHP guru, just learning.

before inserting into the database I encode the data using the
htmlspecialchars() function.

$encReq = htmlspecialchars($req, ENT_QUOTES);

when I'm displaying it back to the user i had to use the following function
to convert it back into HTML.

function unhtmlspecialchars( $string )
{
    $string = str_replace ( '&', '&', $string );
    $string = str_replace ( ''', '\'', $string );
    $string = str_replace ( '"', '"', $string );
    $string = str_replace ( '<', '<', $string );
    $string = str_replace ( '>', '>', $string );

    return $string;
}

This is something i came across after doing some reading though the PHP
manual and some of the user comments on the subject.

If anything knows of a more effective and efficient method, I'd love to know
about it.

Thanks,
Yusuf.

On 10/19/06, David Krings  wrote:
>
> Hi,
>
>     you can't display tab in HTML and the textarea box takes just plain
> ASCII. So any fancy spacing, indenting or such will either be stripped
> or shown as single spaces. And HTML also cannot display an arry of
> simple white space. You would need to convert that to non-breaking
> spaces. But isn't there a function that translates all kinds of things
> to the equivalent HTML code?
>
> Ben Sgro (sk) wrote:
> > Felix,
> >
> > Sure, that is helpful, but what about tabs, lists and all the other
> > elements that could exist in an email message.
> > I'm looking for a canned function or class that will do the work.
> >
> > Thanks.
> >
> > - Ben
> >
> > ....some code.....
> > $details   = str_replace("\n\r", "
", $cellSet[0]['info']);
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From shiflett at php.net  Fri Oct 27 10:27:37 2006
From: shiflett at php.net (Chris Shiflett)
Date: Fri, 27 Oct 2006 10:27:37 -0400
Subject: [nycphp-talk] Textarea formatting
In-Reply-To: <316533590610270718v439cc691ha3d5ac6a763fde00@mail.gmail.com>
References: <005301c6f3a2$03612ef0$6401a8c0@gamebox>		<007701c6f3a9$ec8f1360$6401a8c0@gamebox>
	<453802B2.2070405@gmx.net>
	<316533590610270718v439cc691ha3d5ac6a763fde00@mail.gmail.com>
Message-ID: <45421759.1010909@php.net>

AbraCadab Ra wrote:
> before inserting into the database I encode the data using the
> htmlspecialchars() function.
> 
> $encReq = htmlspecialchars($req, ENT_QUOTES);
> 
> when I'm displaying it back to the user i had to use the
> following function to convert it back into HTML.

Sounds like you're trying to write this:

http://php.net/html_entity_decode

When you think you need to remove the escaping from something, you're
almost always doing something wrong.

Escaping preserves data in another context, so if you ever need to
remove it, it's a good indication that either you didn't need it in the
first place, or you've chosen the wrong escaping function for a
particular context (e.g., htmlspecialchars() for an SQL query).

Hope that helps.

Chris

-- 
Chris Shiflett
http://shiflett.org/

From codebowl at gmail.com  Sun Oct 29 17:21:02 2006
From: codebowl at gmail.com (Joseph Crawford)
Date: Sun, 29 Oct 2006 17:21:02 -0500
Subject: [nycphp-talk] PHP Throwdown
Message-ID: <8d9a42800610291421g6824b4c0l6455c234c00d5d6e@mail.gmail.com>

Guys,
check this out it may be of interest to you.

Please digg this so it get's to the front page and get's some exposure.  I
am still in the air as to whether or not i will join in but sounds fun ;)
http://www.josephcrawford.com/2006/10/29/php-throwdown-you-got-what-it-takes/

-- 
Joseph Crawford Jr.
Zend Certified Engineer
Codebowl Solutions, Inc.
http://www.codebowl.com/
Blog: http://www.josephcrawford.com/
1-802-671-2021
codebowl at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From tuon1 at netzero.net  Mon Oct 30 18:21:24 2006
From: tuon1 at netzero.net (tuon1 at netzero.net)
Date: Mon, 30 Oct 2006 23:21:24 GMT
Subject: [nycphp-talk] Mysql question!
Message-ID: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>

An embedded and charset-unspecified text was scrubbed...
Name: not available
URL: 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From edwardpotter at gmail.com  Mon Oct 30 18:52:04 2006
From: edwardpotter at gmail.com (edward potter)
Date: Mon, 30 Oct 2006 18:52:04 -0500
Subject: [nycphp-talk] Mysql question!
In-Reply-To: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>
References: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>
Message-ID: 

The overhead of a table that you may not use is about zero.  Why not
just create the table and assume it's already there. That way you can
forget the test all together.

Just another crazy idea!  :-)

-ed

On 10/30/06, tuon1 at netzero.net  wrote:
>
>
> Hi, everybody!
>
> I want to ask you all to help me out in solving my database question.
>
> Here is what I want to accomplish:
>
> I want to add my users, one by one, to my Mysql database via a registration
> form.
>
> When a user fills out a registration form, my script should gather all the
> information
>
> and add them to the database. I pretty much got all that part working, but I
> want my
>
> script to check to see whether a table exists or not. If it doesn't exist,
> my script
>
> should create a table and then proceed to add the information to the
> database;
>
> and if it does exist, then it should not create one and proceed to use the
> existed table.
>
> 1) Is there a php function that take care of this job that I can use?
>
> I tried to use: if exists(mytablename)
>
> but, it doesn't work.
>
> Here is my code: (some codes are left out for illustration purpose.)
>
>  include("dbinfo.inc.php");
>   class TableInfo
>        {
>         function _construct()    //A Constructor
>            {
>             /* Initialize database */
>             mysql_connect($localhost,$username,$password);
>             @mysql_select_db($database) or die( "Unable to select
> database");
>             if exists(!Customer_Info)  //Here it doesn't work, error!!!!
>                {
>                 $query = "CREATE TABLE Customer_Info
>                 (
>                  FirstNameCol VARCHAR(15) NOT NULL,
>                  LastNameCol VARCHAR(20) NOT NULL,
>                  AddressCol VARCHAR(40) NOT NULL,
>                  CityCol VARCHAR(20) NOT NULL,
>                  StateCol VARCHAR(20) NOT NULL,
>                  ZipCodeCol INT(5) NOT NULL,
>                  AreaCodeCol INT(3) NOT NULL,
>                  PhoneCol INT(15) NOT NULL,
>                  EmailCol VARCHAR(30) NOT NULL,
>                  LoginNameCol VARCHAR(20) NOT NULL,
>                  PasswordCol VARCHAR(20) NOT NULL
>                 )";
>                 mysql_query($query);
>                }
>
>         //Add new customer to database
>         function AddNewCustomer($FirstName, $LastName, $Address,
>                                 $City, $State, $ZipCode,
>                                 $AreaCode, $Phone, $Email,
>                                 $WebsiteURL, $LoginName, $Password
>                                )
>            {
>                 $query = 'INSERT INTO Customer_Info (FirstNameCol,
>            LastNameCol, AddressCol, CityCol, StateCol,
>                                 ZipCodeCol, AreaCodeCol, PhoneCol,
>                                 EmailCol, WebsiteURLCol,
>            LoginNameCol, PasswordCol
>                                )
>     VALUES ("'. $FirstName . '", "' . $LastName . '",
>                      "' . $Address . '", "' . $City . '",
>       "' . $State . '", "' . $ZipCode . '",
>       "' . $AreaCode . '", "' . $Phone . '",
>       "' . $Email . '",
>       "' . $WebsiteURL . '", "' . $LoginName . '",
>                      "' . SHA1($Password) . '")';
>   }
>
> Feel free to correct my code and give suggestions for better techniques.
>
> Thanks!
>
> Paul
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>

-- 
the Blog: http://www.utopiaparkway.com
the Karma: http://www.coderswithconscience.com
the Projects: http://flickr.com/photos/86842405 at N00/
the Store: http://astore.amazon.com/httpwwwutopic-20

From skyline at publicmine.com  Mon Oct 30 18:57:14 2006
From: skyline at publicmine.com (Ben Sgro (sk))
Date: Mon, 30 Oct 2006 18:57:14 -0500
Subject: [nycphp-talk] Mysql question!
References: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>
Message-ID: <019301c6fc7f$20e48090$6401a8c0@gamebox>

Hello Paul

            if exists(!Customer_Info)  //Here it doesn't work, error!!!!

Is 'Customer_Info' a constant?
Otherwise I dont see how this works, its not a function (), its not a variable $..I'm not big on OOPHP some if that is some sorta construct
ignore my message.

- Ben

ps: These are some wrappers I use to make my code simpler to look at.

/* DBAS_MySQLConnect

   $sqlInfo is an array that holds values particular to the app this is used in.
   ex: $sqlInfo = array('databaseUser' => mysql, 'databasePass' => 's3cr3t');
*/
function DBAS_MySQLConnect(&$db, $sqlInfo)
{
    $cIp    = $_SERVER["REMOTE_ADDR"];
    $dbName = $sqlInfo['databaseUser'];
    $dbPass = $sqlInfo['databasePass'];
    $db = mysql_pconnect("", $dbName, $dbPass);
    if ( $db )
    {
        error_log("DBAS: $cIp connected to mysql server");
    }
    else
    {
        error_log("DBAS: error connecting to mysql server");
    }
}

/* DBAS_MySQLUseDB

*/
function DBAS_MySQLUseDB($dbName, $db)
{
    $res = mysql_select_db($dbName, $db);
    if ( $res )
    {
        error_log("DBAS: using database $dbName");
    }
    else
    {
        error_log("DBAS: cannot use database $dbName");
    }
}

/* DBAS_MySQLQuery

*/
function DBAS_MySQLQuery($query, $db)
{
    $result = mysql_query($query, $db);
    if ( !$result )
    {
        $errorStr = mysql_error( $db );
        $errorNum = mysql_errno( $db );
        $errorStr = "error($errorStr):error no($errorNum)";
        error_log("DBAS: MySQL $errorStr");
    }
    return $result;
}

  ----- Original Message ----- 
  From: tuon1 at netzero.net 
  To: talk at lists.nyphp.org 
  Sent: Monday, October 30, 2006 6:21 PM
  Subject: [nycphp-talk] Mysql question!

  Hi, everybody!

  I want to ask you all to help me out in solving my database question.

  Here is what I want to accomplish:

  I want to add my users, one by one, to my Mysql database via a registration form.

  When a user fills out a registration form, my script should gather all the information

  and add them to the database. I pretty much got all that part working, but I want my

  script to check to see whether a table exists or not. If it doesn't exist, my script

  should create a table and then proceed to add the information to the database;

  and if it does exist, then it should not create one and proceed to use the existed table.

  1) Is there a php function that take care of this job that I can use?

  I tried to use: if exists(mytablename)

  but, it doesn't work.

  Here is my code: (some codes are left out for illustration purpose.)

From dmintz at davidmintz.org  Mon Oct 30 21:06:45 2006
From: dmintz at davidmintz.org (David Mintz)
Date: Mon, 30 Oct 2006 21:06:45 -0500 (EST)
Subject: [nycphp-talk] Mysql question!
In-Reply-To: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>
References: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>
Message-ID: 

On Mon, 30 Oct 2006, tuon1 at netzero.net wrote:

>   class TableInfo
>        {
>         function _construct()    //A Constructor
>            {

This isn't a propos of your question, but that ain't a constructor. You
need two leading underscores:

function __construct() {

}

---
David Mintz
http://davidmintz.org/

En Nueva York el tr?nsito de la belleza a la desolaci?n sucede
siempre expeditivamente, como si el principio universal
de m?xima eficiencia hubiera aconsejado la supresi?n de
gradaciones intermedias.

  -- Antonio Mu?oz Molina, Ventanas de Manhattan

From cliff at pinestream.com  Mon Oct 30 21:18:26 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Mon, 30 Oct 2006 21:18:26 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
Message-ID: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>

Many web sites display a "processing please wait" page after submitting
an order, request, etc. and then display the final confirmation page
when it's available.

I'm confused by how that works. Does the server-side script spit out a
"processing" page by flushing the output buffer and then redirect when
the script is completed? Or does the client-side JavaScript display the
"processing" page while the server script goes about its business?

Cliff
_______________________________
Pinestream Communications, Inc.
Publisher of Semiconductor Times & Telecom Trends
52 Pine Street, Weston, MA 02493 USA
Tel: 781.647.8800, Fax: 781.647.8825
http://www.pinestream.com  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From dcech at phpwerx.net  Mon Oct 30 22:01:07 2006
From: dcech at phpwerx.net (Dan Cech)
Date: Mon, 30 Oct 2006 22:01:07 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>
References: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>
Message-ID: <4546BC73.3090901@phpwerx.net>

Cliff Hirsch wrote:
> Many web sites display a "processing please wait" page after submitting
> an order, request, etc. and then display the final confirmation page
> when it's available.
>  
> I'm confused by how that works. Does the server-side script spit out a
> "processing" page by flushing the output buffer and then redirect when
> the script is completed? Or does the client-side JavaScript display the
> "processing" page while the server script goes about its business?

You can do this a few ways, depending on how involved you want to get.

The simplest is just to use some javascript to replace the content of
the current page with a 'processing....' message while the server does
its business.  This works pretty well but doesn't give the user any
feedback about what's going on.

The more complicated approach is to launch the actual processing script
in the background, the refresh a 'processing...' page until it finishes.

With this method you can show the status of the background task, but it
takes a lot more effort to get it right (eg, using a wrapper script to
allow communication between the 'backend' and 'frontend' scripts.

I use both of these methods with good success, it really depends on the
kind of task you are performing.  That said, there are myriad other ways
to achieve this, and I'm sure everyone on the list has their own favorite.

Dan

From dell at sala.ca  Mon Oct 30 22:12:18 2006
From: dell at sala.ca (Dell Sala)
Date: Mon, 30 Oct 2006 22:12:18 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>
References: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>
Message-ID: <28E0211C-FF23-458A-AE5B-56733724A65A@sala.ca>

Cliff,

I believe the most common solution is to have the your processing  
script launch a sub-process to run in the background, and then return  
a response page that periodically refreshes (via javascript) to poll  
the server for some flag indicating that the process has completed.  
(Ex: checking for the existence of a file or something like that).

You launch the sub-process using exec() or some other function in  
that family. http://us3.php.net/manual/en/ref.exec.php

The trick with these functions is that the calling script halts when  
the function is called and waits for the sub-process to complete and  
return a result. You can prevent this by setting the sub-process to  
run in the background and redirecting its output (STDERR _and_  
STDOUT) to go to a file (or nowhere).

Here's an example:

exec("php takes-a-long-time.php > /dev/null 2>&1 &");

takes-a-long-time.php would do something time-consuming, and when it  
completed, would deposit a file somewhere or add a line to a file to  
indicate that it was complete.

There are lots of related comments in the user contributed notes on  
the exec page that I linked to above. I guess there are some  
potential problems with trying to do this on a windows server -- I've  
only done this on unix servers.

The other gotcha I've run into is that that php goes CRAZY if you try  
this on a server that is running php as a CGI. If you call a php sub- 
process from a php page it goes into a recursive loop and eventually  
chokes. I'd be curious to hear if others have run into this problem.  
Any solutions?

***

I believe there is another way to tackle this issue which involves  
some fancy output buffering. The page only partially downloads and  
then keeps the connection open while it waits for the rest of the  
script complete. Anyone else familiar with this technique?

-- Dell

On Oct 30, 2006, at 9:18 PM, Cliff Hirsch wrote:
> Many web sites display a ?processing please wait? page after  
> submitting an order, request, etc. and then display the final  
> confirmation page when it?s available.
>
> I?m confused by how that works. Does the server-side script spit  
> out a ?processing? page by flushing the output buffer and then  
> redirect when the script is completed? Or does the client-side  
> JavaScript display the ?processing? page while the server script  
> goes about its business?
>
> Cliff

From 1j0lkq002 at sneakemail.com  Mon Oct 30 23:01:19 2006
From: 1j0lkq002 at sneakemail.com (inforequest)
Date: Mon, 30 Oct 2006 20:01:19 -0800
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>
References: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>
Message-ID: <20690-13457@sneakemail.com>

Cliff Hirsch cliff-at-pinestream.com |nyphp dev/internal group use| wrote:

> Many web sites display a ?processing please wait? page after 
> submitting an order, request, etc. and then display the final 
> confirmation page when it?s available.
>
> I?m confused by how that works. Does the server-side script spit out a 
> ?processing? page by flushing the output buffer and then redirect when 
> the script is completed? Or does the client-side JavaScript display 
> the ?processing? page while the server script goes about its business?
>
> Cliff
>

I saw everything I wanted to know about this over on Joe's blog: 
http://www.josephcrawford.com/2006/09/28/php-upload-progress-extension-yay/

-=john andrews

-- 
-------------------------------------------------------------
Some say "Science is fact. Religion is faith. Magic is perception". I wonder, if what you witness is not reality, but your perception of reality, do you trust your perceptions as truth? Does that make the so-called scientist a religious magician?  --John Andrews Competitive Webmaster and SEO Blogging at http://www.johnon.com

From tuon1 at netzero.net  Mon Oct 30 23:03:43 2006
From: tuon1 at netzero.net (tuon1 at netzero.net)
Date: Tue, 31 Oct 2006 04:03:43 GMT
Subject: [nycphp-talk] Mysql question!
Message-ID: <20061030.200427.13415.792063@webmail45.nyc.untd.com>

An embedded and charset-unspecified text was scrubbed...
Name: not available
URL: 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From ariel.kulkin at gmail.com  Mon Oct 30 23:25:53 2006
From: ariel.kulkin at gmail.com (Ariel Kulkin)
Date: Mon, 30 Oct 2006 23:25:53 -0500
Subject: [nycphp-talk] Passing parameters with the click of a button.
Message-ID: <556034ce0610302025j10592888g2d2b1b41a61ef5bf@mail.gmail.com>

Problem Statement: With the click of a button, I need to open a new window
(to capture "user referrals"), and pass to it a parameter that will be used
to track the user id of the individual who originated those referrals.

I have no problems opening the window with the button click:
I can't quite get the syntax, however, to pass the user_id parameter...
How do I go about passing the user_id parameter to the newly open window?

CODE:

Do you know anybody who may benefit from using XYZ System?

      No

      Yes

Your assistance is appreciated.

Thanks!

Ariel.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From anthony at adcl.biz  Tue Oct 31 02:14:09 2006
From: anthony at adcl.biz (Anthony Papillion)
Date: Tue, 31 Oct 2006 01:14:09 -0600
Subject: [nycphp-talk] PHP Throwdown
References: <8d9a42800610291421g6824b4c0l6455c234c00d5d6e@mail.gmail.com>
Message-ID: <002801c6fcbc$29cb2c30$6401a8c0@ISIS>

This does sound like a lot of fun. I'm definately going to join up. Thanks for the info.

--
Anthony Papillion
Advanced Data Concepts, Inc
Ph: (918) 926-0139
  ----- Original Message ----- 
  From: Joseph Crawford 
  To: NYPHP Talk 
  Sent: Sunday, October 29, 2006 4:21 PM
  Subject: [nycphp-talk] PHP Throwdown

  Guys,
  check this out it may be of interest to you.

  Please digg this so it get's to the front page and get's some exposure.  I am still in the air as to whether or not i will join in but sounds fun ;)
  http://www.josephcrawford.com/2006/10/29/php-throwdown-you-got-what-it-takes/

  -- 
  Joseph Crawford Jr.
  Zend Certified Engineer
  Codebowl Solutions, Inc.
  http://www.codebowl.com/
  Blog: http://www.josephcrawford.com/
  1-802-671-2021
  codebowl at gmail.com 

------------------------------------------------------------------------------

  _______________________________________________
  New York PHP Community Talk Mailing List
  http://lists.nyphp.org/mailman/listinfo/talk

  NYPHPCon 2006 Presentations Online
  http://www.nyphpcon.com

  Show Your Participation in New York PHP
  http://www.nyphp.org/show_participation.php
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From support at dailytechnology.net  Tue Oct 31 06:08:52 2006
From: support at dailytechnology.net (Brian Dailey)
Date: Tue, 31 Oct 2006 06:08:52 -0500
Subject: [nycphp-talk] Passing parameters with the click of a button.
In-Reply-To: <556034ce0610302025j10592888g2d2b1b41a61ef5bf@mail.gmail.com>
References: <556034ce0610302025j10592888g2d2b1b41a61ef5bf@mail.gmail.com>
Message-ID: 

---------- Forwarded message ----------
From: "Brian Dailey" 
To: "NYPHP Talk" 
Date: Tue, 31 Oct 2006 06:08:13 -0500
Subject: Re: [nycphp-talk] Passing parameters with the click of a button.
Ariel,

Assuming user_id is a PHP variable, you should be able to do it like this.

     Yes

And in referrals.php...

That's *one* way to do it. However, it's very insecure. If you're
setting variables like user_id they should never be accessible from a
GET param where the user can manipulate it directly. It would be best
to set user_id in a SESSION variable somewhere - then you can access
it from any page you want without having to worry about constantly
passing it as a parameter.

On 10/30/06, Ariel Kulkin  wrote:
> Problem Statement: With the click of a button, I need to open a new window
> (to capture "user referrals"), and pass to it a parameter that will be used
> to track the user id of the individual who originated those referrals.
>
> I have no problems opening the window with the button click:
> I can't quite get the syntax, however, to pass the user_id parameter...
> How do I go about passing the user_id parameter to the newly open window?
>
> CODE:
>
> Do you know anybody who may benefit from using XYZ System?
>       
>       
>       No
>       
>        onclick="MM_openBrWindow('/Pop%20Ups/Referrals.php','Referrals','scrollbars=yes,resizable=yes,width=500,height=600')"/>
>       Yes

>
> Your assistance is appreciated.
>
> Thanks!
>
> Ariel.
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>

From cliff at pinestream.com  Tue Oct 31 08:38:57 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 31 Oct 2006 08:38:57 -0500
Subject: [nycphp-talk] Passing parameters with the click of a button.
In-Reply-To: 
Message-ID: <005201c6fcf1$eac62590$12a8a8c0@HirschLaptop>

If you don't need the initial server-side script to use the variable
until the form in the new window is submitted, you can also use
JavaScript to copy the variable from the old window into the new Window.
For example, you can copy it into a hidden input field.

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Brian Dailey
Sent: Tuesday, October 31, 2006 6:09 AM
To: NYPHP Talk
Subject: Re: [nycphp-talk] Passing parameters with the click of a button.

---------- Forwarded message ----------
From: "Brian Dailey" 
To: "NYPHP Talk" 
Date: Tue, 31 Oct 2006 06:08:13 -0500
Subject: Re: [nycphp-talk] Passing parameters with the click of a button.
Ariel,

Assuming user_id is a PHP variable, you should be able to do it like
this.

     Yes

And in referrals.php...

That's *one* way to do it. However, it's very insecure. If you're
setting variables like user_id they should never be accessible from a
GET param where the user can manipulate it directly. It would be best
to set user_id in a SESSION variable somewhere - then you can access
it from any page you want without having to worry about constantly
passing it as a parameter.

On 10/30/06, Ariel Kulkin  wrote:
> Problem Statement: With the click of a button, I need to open a new
window
> (to capture "user referrals"), and pass to it a parameter that will be
used
> to track the user id of the individual who originated those referrals.
>
> I have no problems opening the window with the button click:
> I can't quite get the syntax, however, to pass the user_id
parameter...
> How do I go about passing the user_id parameter to the newly open
window?
>
> CODE:
>
> Do you know anybody who may benefit from using XYZ System?
>       
>       
>       No
>       
>       
onclick="MM_openBrWindow('/Pop%20Ups/Referrals.php','Referrals','scrollb
ars=yes,resizable=yes,width=500,height=600')"/>
>       Yes

>
> Your assistance is appreciated.
>
> Thanks!
>
> Ariel.
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

From cliff at pinestream.com  Tue Oct 31 08:57:03 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 31 Oct 2006 08:57:03 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: <20690-13457@sneakemail.com>
Message-ID: <005d01c6fcf4$71f1a740$12a8a8c0@HirschLaptop>

Interesting. This seems like a great idea for uploads. But isn't the
"please wait, thinking" situation different. And how do you know when to
use "please wait, thinking," If Ticketmaster or Sabre knows it will take
30 seconds to process a request, that's one thing. But theoretically,
all requests are instantaneous until there not. Which mean you have to
monitor requests or, more likely, know that an external call, like a
request to a credit card gateway, will take a while.

I still like the idea of Dell's output buffering. Seems to me you can
spit out a "processing" page by flushing the output buffer and then
issue a redirect when the script is complete.

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of inforequest

> Many web sites display a "processing please wait" page after 
> submitting an order, request, etc. and then display the final 
> confirmation page when it's available.
>
> I'm confused by how that works. Does the server-side script spit out a

> "processing" page by flushing the output buffer and then redirect when

> the script is completed? Or does the client-side JavaScript display 
> the "processing" page while the server script goes about its business?
>
> Cliff
>

I saw everything I wanted to know about this over on Joe's blog: 
http://www.josephcrawford.com/2006/09/28/php-upload-progress-extension-y
ay/

-=john andrews

From wkamm at rvyriptide.org  Tue Oct 31 10:10:49 2006
From: wkamm at rvyriptide.org (Bill Kamm)
Date: Tue, 31 Oct 2006 10:10:49 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>
References: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>
Message-ID: <45476779.1070401@rvyriptide.org>

I use the following. It's simple, and it works. It displays the message 
"Please wait while we process your request", and immediately redirects 
to the url that does the actual work. The "processing" message will 
remain on the user's browser until your other php script returns data.

Please wait while we process your request...

Bill

Cliff Hirsch wrote:

> Many web sites display a ?processing please wait? page after 
> submitting an order, request, etc. and then display the final 
> confirmation page when it?s available.
>
> I?m confused by how that works. Does the server-side script spit out a 
> ?processing? page by flushing the output buffer and then redirect when 
> the script is completed? Or does the client-side JavaScript display 
> the ?processing? page while the server script goes about its business?
>
> Cliff
>
> _______________________________
> *Pinestream Communications, Inc.*
> Publisher of /Semiconductor Times/ & /Telecom Trends/
> 52 Pine Street, Weston, MA 02493 USA
> Tel: 781.647.8800, Fax: 781.647.8825
> http://www.pinestream.com 
>
>------------------------------------------------------------------------
>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>
>NYPHPCon 2006 Presentations Online
>http://www.nyphpcon.com
>
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>  
>

From cliff at pinestream.com  Tue Oct 31 10:22:39 2006
From: cliff at pinestream.com (cliff)
Date: Tue, 31 Oct 2006 10:22:39 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: <45476779.1070401@rvyriptide.org>
References: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>
	<45476779.1070401@rvyriptide.org>
Message-ID: <20061031152239.M81941@pinestream.com>

How is this triggered? Is this called by the requesting button/form? If so,
don't you lose the post/get variables?

On Tue, 31 Oct 2006 10:10:49 -0500, Bill Kamm wrote
> I use the following. It's simple, and it works. It displays the 
> message "Please wait while we process your request", and immediately 
> redirects to the url that does the actual work. The "processing" 
> message will remain on the user's browser until your other php 
> script returns data.
> 
> 
> 
>  content="0;url=http://yourdomain.com/process.php">
> 
> 
> 
> 
Please wait while we process your request...

> 
> 
> 
> Bill
> 
> Cliff Hirsch wrote:
> 
> > Many web sites display a ?processing please wait? page after 
> > submitting an order, request, etc. and then display the final 
> > confirmation page when it?s available.
> >
> > I?m confused by how that works. Does the server-side script spit out a 
> > ?processing? page by flushing the output buffer and then redirect when 
> > the script is completed? Or does the client-side JavaScript display 
> > the ?processing? page while the server script goes about its business?
> >
> > Cliff

From wkamm at rvyriptide.org  Tue Oct 31 10:34:17 2006
From: wkamm at rvyriptide.org (Bill Kamm)
Date: Tue, 31 Oct 2006 10:34:17 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: <20061031152239.M81941@pinestream.com>
References: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>	<45476779.1070401@rvyriptide.org>
	<20061031152239.M81941@pinestream.com>
Message-ID: <45476CF9.9080300@rvyriptide.org>

Looking at it from the user's perspective, the user enters some URL and 
gets a page back with a form and a submit button. The user fills out the 
form and clicks the submit button. The request comes in to you, and you 
then respond to that request by sending the html I showed earlier. If 
you have variables you want to pass to what I called process.php, one 
possibility is to append them to the url, like this:

Depending on how secure your data needs to be, this may or may not be 
acceptable, but it's an option.

Bill

cliff wrote:

>How is this triggered? Is this called by the requesting button/form? If so,
>don't you lose the post/get variables?
>
>On Tue, 31 Oct 2006 10:10:49 -0500, Bill Kamm wrote
>  
>
>>I use the following. It's simple, and it works. It displays the 
>>message "Please wait while we process your request", and immediately 
>>redirects to the url that does the actual work. The "processing" 
>>message will remain on the user's browser until your other php 
>>script returns data.
>>
>>
>>
>>>content="0;url=http://yourdomain.com/process.php">
>>
>>
>>
>>
Please wait while we process your request...

>>
>>
>>
>>Bill
>>
>>Cliff Hirsch wrote:
>>
>>    
>>
>>>Many web sites display a ?processing please wait? page after 
>>>submitting an order, request, etc. and then display the final 
>>>confirmation page when it?s available.
>>>
>>>I?m confused by how that works. Does the server-side script spit out a 
>>>?processing? page by flushing the output buffer and then redirect when 
>>>the script is completed? Or does the client-side JavaScript display 
>>>the ?processing? page while the server script goes about its business?
>>>
>>>Cliff
>>>      
>>>
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>
>NYPHPCon 2006 Presentations Online
>http://www.nyphpcon.com
>
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>
>
>
>  
>

From dell at sala.ca  Tue Oct 31 10:42:28 2006
From: dell at sala.ca (Dell Sala)
Date: Tue, 31 Oct 2006 10:42:28 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: <45476779.1070401@rvyriptide.org>
References: <000001c6fc92$d969eb60$12a8a8c0@HirschLaptop>
	<45476779.1070401@rvyriptide.org>
Message-ID: <3F70FDF4-5D0F-4AEB-BF05-EDED80830590@sala.ca>

Cute. And javascript free. :)

However, there is a limitation to this kind of approach: It will only  
work for requests that will return before your connection times out.  
In many cases, this probably isn't a huge issue as the "slow" script  
might only take about 30 seconds to run, or something like that. But  
what about a script that builds a large, compressed archive, or runs  
a complex index, or something like that. Now were talking minutes,  
and the web server will eventually timeout.

That's when you need to fire up that sub-process to run in the  
background, and just use the browser to poll the server to check if  
the process finished.

-- Dell

On Oct 31, 2006, at 10:10 AM, Bill Kamm wrote:

> I use the following. It's simple, and it works. It displays the  
> message
> "Please wait while we process your request", and immediately redirects
> to the url that does the actual work. The "processing" message will
> remain on the user's browser until your other php script returns data.
>
> 
> 
>  content="0;url=http://yourdomain.com/process.php">
> 
>
> 
> 
Please wait while we process your request...

> 
> 
>
>
>
> Bill
>
> Cliff Hirsch wrote:
>
>> Many web sites display a ?processing please wait? page after
>> submitting an order, request, etc. and then display the final
>> confirmation page when it?s available.
>>
>> I?m confused by how that works. Does the server-side script spit  
>> out a
>> ?processing? page by flushing the output buffer and then redirect  
>> when
>> the script is completed? Or does the client-side JavaScript display
>> the ?processing? page while the server script goes about its  
>> business?
>>
>> Cliff
>>
>> _______________________________
>> *Pinestream Communications, Inc.*
>> Publisher of /Semiconductor Times/ & /Telecom Trends/
>> 52 Pine Street, Weston, MA 02493 USA
>> Tel: 781.647.8800, Fax: 781.647.8825
>> http://www.pinestream.com 
>>
>> --------------------------------------------------------------------- 
>> ---
>>
>> _______________________________________________
>> New York PHP Community Talk Mailing List
>> http://lists.nyphp.org/mailman/listinfo/talk
>>
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>>
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>>
>>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

From hart at saturn.med.nyu.edu  Tue Oct 31 11:08:25 2006
From: hart at saturn.med.nyu.edu (Joshua Hart)
Date: Tue, 31 Oct 2006 11:08:25 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: <3F70FDF4-5D0F-4AEB-BF05-EDED80830590@sala.ca>
Message-ID: 

While we're on the subject how about for something like an image upload (say
20 MB)?  It would be nice to know how to give the user a "processing" page
(perhaps even with a % done indicator)

Joshua

On 10/31/06 10:42 AM, "Dell Sala"  wrote:

> Cute. And javascript free. :)
> 
> However, there is a limitation to this kind of approach: It will only
> work for requests that will return before your connection times out.
> In many cases, this probably isn't a huge issue as the "slow" script
> might only take about 30 seconds to run, or something like that. But
> what about a script that builds a large, compressed archive, or runs
> a complex index, or something like that. Now were talking minutes,
> and the web server will eventually timeout.
> 
> That's when you need to fire up that sub-process to run in the
> background, and just use the browser to poll the server to check if
> the process finished.
> 
> -- Dell
> 
> 
> On Oct 31, 2006, at 10:10 AM, Bill Kamm wrote:
> 
>> I use the following. It's simple, and it works. It displays the
>> message
>> "Please wait while we process your request", and immediately redirects
>> to the url that does the actual work. The "processing" message will
>> remain on the user's browser until your other php script returns data.
>> 
>> 
>> 
>> > content="0;url=http://yourdomain.com/process.php">
>> 
>> 
>> 
>> 
Please wait while we process your request...

>> 
>> 
>> 
>> 
>> 
>> Bill
>> 
>> Cliff Hirsch wrote:
>> 
>>> Many web sites display a ?processing please wait? page after
>>> submitting an order, request, etc. and then display the final
>>> confirmation page when it?s available.
>>> 
>>> I?m confused by how that works. Does the server-side script spit
>>> out a
>>> ?processing? page by flushing the output buffer and then redirect
>>> when
>>> the script is completed? Or does the client-side JavaScript display
>>> the ?processing? page while the server script goes about its
>>> business?
>>> 
>>> Cliff
>>> 
>>> _______________________________
>>> *Pinestream Communications, Inc.*
>>> Publisher of /Semiconductor Times/ & /Telecom Trends/
>>> 52 Pine Street, Weston, MA 02493 USA
>>> Tel: 781.647.8800, Fax: 781.647.8825
>>> http://www.pinestream.com 
>>> 
>>> ---------------------------------------------------------------------
>>> ---
>>> 
>>> _______________________________________________
>>> New York PHP Community Talk Mailing List
>>> http://lists.nyphp.org/mailman/listinfo/talk
>>> 
>>> NYPHPCon 2006 Presentations Online
>>> http://www.nyphpcon.com
>>> 
>>> Show Your Participation in New York PHP
>>> http://www.nyphp.org/show_participation.php
>>> 
>>> 
>> _______________________________________________
>> New York PHP Community Talk Mailing List
>> http://lists.nyphp.org/mailman/listinfo/talk
>> 
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>> 
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
> 
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> 
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
> 
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

From rmarscher at beaffinitive.com  Tue Oct 31 11:16:23 2006
From: rmarscher at beaffinitive.com (Rob Marscher)
Date: Tue, 31 Oct 2006 11:16:23 -0500
Subject: [nycphp-talk] Mysql question!
In-Reply-To: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>
References: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>
Message-ID: <454776D7.7060009@beaffinitive.com>

"if exists" is a sql thing.  i.e. DROP TABLE tablename IF EXISTS; or 
CREATE TABLE tablename IF NOT EXISTS;

Here's one way to check if your mysql table doesn't exist with php:

if (mysql_query("DESCRIBE Customer_Info") === false)
{
    // create the table
}

FYI, there's a nyphp-mysql list that mysql-specific php questions can be 
sent to.
-Rob

tuon1 at netzero.net wrote:
>
> Hi, everybody!
>
> I want to ask you all to help me out in solving my database question.
>
> Here is what I want to accomplish:
>
> I want to add my users, one by one, to my Mysql database via a 
> registration form.
>
> When a user fills out a registration form, my script should gather all 
> the information
>
> and add them to the database. I pretty much got all that part working, 
> but I want my
>
> script to check to see whether a table exists or not. If it doesn't 
> exist, my script
>
> should create a table and then proceed to add the information to the 
> database;
>
> and if it does exist, then it should not create one and proceed to use 
> the existed table.
>
> 1) Is there a php function that take care of this job that I can use?
>
> I tried to use: if exists(mytablename)
>
> but, it doesn't work.
>
> Here is my code: (some codes are left out for illustration purpose.)
>
>  include("dbinfo.inc.php");
>   class TableInfo
>        {
>         function _construct()    //A Constructor
>            {
>             /* Initialize database */
>             mysql_connect($localhost,$username,$password);
>             @mysql_select_db($database) or die( "Unable to select 
> database");
>             if exists(!Customer_Info)  //Here it doesn't work, error!!!!
>                {
>                 $query = "CREATE TABLE Customer_Info
>                 (
>                  FirstNameCol VARCHAR(15) NOT NULL,
>                  LastNameCol VARCHAR(20) NOT NULL,
>                  AddressCol VARCHAR(40) NOT NULL,
>                  CityCol VARCHAR(20) NOT NULL,
>                  StateCol VARCHAR(20) NOT NULL,
>                  ZipCodeCol INT(5) NOT NULL,
>                  AreaCodeCol INT(3) NOT NULL,
>                  PhoneCol INT(15) NOT NULL,
>                  EmailCol VARCHAR(30) NOT NULL,
>                  LoginNameCol VARCHAR(20) NOT NULL,
>                  PasswordCol VARCHAR(20) NOT NULL
>                 )";
>                 mysql_query($query);
>                }
>
>         //Add new customer to database
>         function AddNewCustomer($FirstName, $LastName, $Address,
>                                 $City, $State, $ZipCode,
>                                 $AreaCode, $Phone, $Email,
>                                 $WebsiteURL, $LoginName, $Password
>                                )
>            {
>                 $query = 'INSERT INTO Customer_Info (FirstNameCol,
>            LastNameCol, AddressCol, CityCol, StateCol,
>                                 ZipCodeCol, AreaCodeCol, PhoneCol,
>                                 EmailCol, WebsiteURLCol,
>            LoginNameCol, PasswordCol
>                                )
>     VALUES ("'. $FirstName . '", "' . $LastName . '",
>                      "' . $Address . '", "' . $City . '",
>       "' . $State . '", "' . $ZipCode . '",
>       "' . $AreaCode . '", "' . $Phone . '",
>       "' . $Email . '",
>       "' . $WebsiteURL . '", "' . $LoginName . '",
>                      "' . SHA1($Password) . '")';
>   }
>
> Feel free to correct my code and give suggestions for better techniques.
>
> Thanks!
>
> Paul
>
>  
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>   

From jonbaer at jonbaer.com  Tue Oct 31 11:37:49 2006
From: jonbaer at jonbaer.com (Jon Baer)
Date: Tue, 31 Oct 2006 11:37:49 -0500
Subject: [nycphp-talk] Passing parameters with the click of a button.
In-Reply-To: <556034ce0610302025j10592888g2d2b1b41a61ef5bf@mail.gmail.com>
References: <556034ce0610302025j10592888g2d2b1b41a61ef5bf@mail.gmail.com>
Message-ID: 

You need to be cool and do it the web 2.0 way (slick effects  
optional) ... :-)

 Yes

- Jon

References
http://www.jquery.com

On Oct 30, 2006, at 11:25 PM, Ariel Kulkin wrote:

> Problem Statement: With the click of a button, I need to open a new  
> window (to capture "user referrals"), and pass to it a parameter  
> that will be used to track the user id of the individual who  
> originated those referrals.
>
> I have no problems opening the window with the button click:
> I can't quite get the syntax, however, to pass the user_id  
> parameter...
> How do I go about passing the user_id parameter to the newly open  
> window?
>
> CODE:
>
> Do you know anybody who may benefit from using XYZ System?
>       
>        checked="checked" />
>       No
>       
>        onclick="MM_openBrWindow('/Pop%20Ups/ 
> Referrals.php','Referrals','scrollbars=yes,resizable=yes,width=500,hei 
> ght=600')"/>
>       Yes

>
> Your assistance is appreciated.
>
> Thanks!
>
> Ariel.
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

From dmintz at davidmintz.org  Tue Oct 31 11:46:41 2006
From: dmintz at davidmintz.org (David Mintz)
Date: Tue, 31 Oct 2006 11:46:41 -0500 (EST)
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: 
References: 
Message-ID: 

This is the topic I always wondered about but was afraid to ask!

True or false:  You could accomplish this easily if you were doing the
AJAX thing. Right? Look at the what-its, the readyState property and keep
the "Please wait..." in your DIV (or whatever) element until your
readyState == 4

Of course, yeah, obviously, Javascript required.

---
David Mintz
http://davidmintz.org/

En Nueva York el tr?nsito de la belleza a la desolaci?n sucede
siempre expeditivamente, como si el principio universal
de m?xima eficiencia hubiera aconsejado la supresi?n de
gradaciones intermedias.

  -- Antonio Mu?oz Molina, Ventanas de Manhattan

From craig at juxtadigital.com  Tue Oct 31 11:52:50 2006
From: craig at juxtadigital.com (Craig Thomas)
Date: Tue, 31 Oct 2006 11:52:50 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: 
References: 

Message-ID: <45477F62.8050803@juxtadigital.com>

David Mintz wrote:
> This is the topic I always wondered about but was afraid to ask!
> 
> True or false:  You could accomplish this easily if you were doing the
> AJAX thing. Right? Look at the what-its, the readyState property and keep
> the "Please wait..." in your DIV (or whatever) element until your
> readyState == 4

True. AJAX makes the not-a-real-progress indicator coding way easy (no 
background process).  Just show the processing wheel/image what-have you 
while the readyState<>4, then just do a layer swap/close the 
window...whatever.

From ashaw at polymerdb.org  Tue Oct 31 12:43:01 2006
From: ashaw at polymerdb.org (Allen Shaw)
Date: Tue, 31 Oct 2006 11:43:01 -0600
Subject: [nycphp-talk] [OT] live slide-show delivery via browser only
Message-ID: <45478B25.5080906@polymerdb.org>

Hi All,

I'm looking for a free/OSS (preferably PHP-oriented) solution to this 
problem:  Deliver paged content (eg., typical still-frame slide show) to 
any number of viewers via the web browser only, while providing only the 
host/operator with the controls to advance the slides in real time;  and 
don't require the user to have anything other than a decent Internet 
connection and fairly modern browser.

If nobody knows of an existing package like this, it seems it would be 
fairly simple to build, no?  Page-forward/back/jump commands could be 
sent by the operator to a database or file on the server, and some 
Javascript in the viewer could be monitoring the server for those 
commands and then adjust the display accordingly. 

Question: Is this
a) so self-apparent and easy that nobody's bothered to develop a package 
for it?
b) much more complicated than I've explained and thus potentially a 
waste of time?
or
c)  contained already in some fairly simple CGI package you know about 
and I don't?

Thanks,
Allen

-- 
Allen Shaw
Polymer (http://polymerdb.org)

-- 
Allen Shaw
Polymer (http://polymerdb.org)

From cmerlo at ncc.edu  Tue Oct 31 12:56:01 2006
From: cmerlo at ncc.edu (Christopher R. Merlo)
Date: Tue, 31 Oct 2006 13:56:01 -0400
Subject: [nycphp-talk] [OT] live slide-show delivery via browser only
In-Reply-To: <45478B25.5080906@polymerdb.org>
References: <45478B25.5080906@polymerdb.org>
Message-ID: <946586480610310956u6d24671enb5f29e5871c701b7@mail.gmail.com>

On 10/31/06, Allen Shaw  wrote:
>
> Hi All,
>
> I'm looking for a free/OSS (preferably PHP-oriented) solution to this
> problem:  Deliver paged content (eg., typical still-frame slide show) to
> any number of viewers via the web browser only, while providing only the
> host/operator with the controls to advance the slides in real time;  and
> don't require the user to have anything other than a decent Internet
> connection and fairly modern browser.

I once saw a very nice slide show presented using S5:
http://meyerweb.com/eric/tools/s5/
-c
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From ashaw at polymerdb.org  Tue Oct 31 13:11:00 2006
From: ashaw at polymerdb.org (Allen Shaw)
Date: Tue, 31 Oct 2006 12:11:00 -0600
Subject: [nycphp-talk] [OT] live slide-show delivery via browser only
In-Reply-To: <946586480610310956u6d24671enb5f29e5871c701b7@mail.gmail.com>
References: <45478B25.5080906@polymerdb.org>
	<946586480610310956u6d24671enb5f29e5871c701b7@mail.gmail.com>
Message-ID: <454791B4.8070501@polymerdb.org>

Hi Chris,

Yes, I had seen S5 before and thought it a pretty nifty setup.  But does 
it allow the operator to control page-advance in real time?  The idea is 
that if you're having a meeting with one or more remote viewers, you 
could discuss by phone while showing them one slide at a time, at your 
discretion.

- Allen

Christopher R. Merlo wrote:

> I once saw a very nice slide show presented using S5:  
> http://meyerweb.com/eric/tools/s5/
> -c
> 
> 
-- 
Allen Shaw
Polymer (http://polymerdb.org)

From rmarscher at beaffinitive.com  Tue Oct 31 13:13:53 2006
From: rmarscher at beaffinitive.com (Rob Marscher)
Date: Tue, 31 Oct 2006 13:13:53 -0500
Subject: [nycphp-talk] [OT] live slide-show delivery via browser only
In-Reply-To: <45478B25.5080906@polymerdb.org>
References: <45478B25.5080906@polymerdb.org>
Message-ID: <45479261.9000104@beaffinitive.com>

I haven't heard of a free/OSS solution... but I agree it would be pretty 
simple to do like you described.  The viewers would have ajax code that 
would periodically ask the server if the slide has been updated.  The 
server-side script could send back the html for the current slide and 
the viewer code would replace the current slide with the new html.  The 
jquery javascript library makes this really easy.  Then you need a 
seperate client for the operator that would have the controls for 
forward/jump/back - that doesn't even have to be done with ajax.

I think the only minor concern here is to benchmark that your web server 
can handle the amount of polling that will be done by the ajax viewer 
client for the number of viewers that you expect.  You can put some kind 
of simple caching in the server-side viewer so that it doesn't really 
need to process anything during the polling... just send back the 
contents of a cache file that is recreated each time the operator 
changes the current slide.  You could also have the client keep track of 
the current slide id and it could send that to the server when it asks 
for an update.  The server could see if the slide id sent from the 
client matches the current slide and then tell the client it doesn't 
have to update anything.

-Rob

Allen Shaw wrote:
> Hi All,
>
> I'm looking for a free/OSS (preferably PHP-oriented) solution to this 
> problem:  Deliver paged content (eg., typical still-frame slide show) to 
> any number of viewers via the web browser only, while providing only the 
> host/operator with the controls to advance the slides in real time;  and 
> don't require the user to have anything other than a decent Internet 
> connection and fairly modern browser.
>
> If nobody knows of an existing package like this, it seems it would be 
> fairly simple to build, no?  Page-forward/back/jump commands could be 
> sent by the operator to a database or file on the server, and some 
> Javascript in the viewer could be monitoring the server for those 
> commands and then adjust the display accordingly. 
>
> Question: Is this
> a) so self-apparent and easy that nobody's bothered to develop a package 
> for it?
> b) much more complicated than I've explained and thus potentially a 
> waste of time?
> or
> c)  contained already in some fairly simple CGI package you know about 
> and I don't?
>
> Thanks,
> Allen
>
>   

From ramons at gmx.net  Tue Oct 31 13:51:51 2006
From: ramons at gmx.net (David Krings)
Date: Tue, 31 Oct 2006 13:51:51 -0500
Subject: [nycphp-talk] exif_thumbnail
Message-ID: <45479B47.4040104@gmx.net>

Hi,

    I want to use exif_thumbnail to extract the thumbnail of an image 
and then have it displayed within a page. The page will have content 
before and after the thumbnail, and the thumbnail may be present or not. 
In order to have it show correctly, all manuals state to send the 
content setting using header(). Since this is supposed to be embedded in 
other content, I can't send the header (already started output).

So how do I get my thumbnail to show up on my page? Any simple 
solutions? Do I need to turn the string into a temp file first and then 
use that?

I googled for a solutions, but it seems that everyone only wants to show 
the thumbnail image without anything else on a page.

Any help is greatly appreciated.

    David K.

From ken at secdat.com  Tue Oct 31 13:58:46 2006
From: ken at secdat.com (Kenneth Downs)
Date: Tue, 31 Oct 2006 13:58:46 -0500
Subject: [nycphp-talk] [OT] live slide-show delivery via browser only
In-Reply-To: <454791B4.8070501@polymerdb.org>
References: <45478B25.5080906@polymerdb.org>	<946586480610310956u6d24671enb5f29e5871c701b7@mail.gmail.com>
	<454791B4.8070501@polymerdb.org>
Message-ID: <45479CE6.90000@secdat.com>

Allen Shaw wrote:
> Hi Chris,
>
> Yes, I had seen S5 before and thought it a pretty nifty setup.  But does 
> it allow the operator to control page-advance in real time?  The idea is 
> that if you're having a meeting with one or more remote viewers, you 
> could discuss by phone while showing them one slide at a time, at your 
> discretion.
>   
The nice thing about AJAX is the first "A", "Asynchronous".

How much trouble would we cause if a page's onload event called an AJAX 
function called "getNextSlide()".  Upon receiving the request, the 
server could sleep until a new slide is loaded (or sleep for 2 seconds 
and check, sleep for 2 seconds and check, etc.).

Once a new slide is loaded the server finally sends a slide back to the 
browser.  The AJAX on the browser activates the slide and then calls 
getNextSlide() again, re-starting the loop.

As always, the balance is between responsiveness and drag.  You can get 
away with this for a few users, but having a lot of open connections 
checking something over and over will die fast at high volume.

> - Allen
>
> Christopher R. Merlo wrote:
>
>   
>> I once saw a very nice slide show presented using S5:  
>> http://meyerweb.com/eric/tools/s5/
>> -c
>>
>>
>>     

-------------- next part --------------
A non-text attachment was scrubbed...
Name: ken.vcf
Type: text/x-vcard
Size: 261 bytes
Desc: not available
URL: 

From wkamm at rvyriptide.org  Tue Oct 31 14:02:35 2006
From: wkamm at rvyriptide.org (Bill Kamm)
Date: Tue, 31 Oct 2006 14:02:35 -0500
Subject: [nycphp-talk] exif_thumbnail
In-Reply-To: <45479B47.4040104@gmx.net>
References: <45479B47.4040104@gmx.net>
Message-ID: <45479DCB.3080109@rvyriptide.org>

Does this help?

http://www.php.net/ob_start

"This function will turn output buffering on. While output buffering is 
active no output is sent from the script (other than headers), instead 
the output is stored in an internal buffer."

Bill

David Krings wrote:

>Hi,
>
>    I want to use exif_thumbnail to extract the thumbnail of an image 
>and then have it displayed within a page. The page will have content 
>before and after the thumbnail, and the thumbnail may be present or not. 
>In order to have it show correctly, all manuals state to send the 
>content setting using header(). Since this is supposed to be embedded in 
>other content, I can't send the header (already started output).
>
>So how do I get my thumbnail to show up on my page? Any simple 
>solutions? Do I need to turn the string into a temp file first and then 
>use that?
>
>I googled for a solutions, but it seems that everyone only wants to show 
>the thumbnail image without anything else on a page.
>
>
>Any help is greatly appreciated.
>
>
>    David K.
>_______________________________________________
>New York PHP Community Talk Mailing List
>http://lists.nyphp.org/mailman/listinfo/talk
>
>NYPHPCon 2006 Presentations Online
>http://www.nyphpcon.com
>
>Show Your Participation in New York PHP
>http://www.nyphp.org/show_participation.php
>
>
>
>  
>

From kenrbnsn at rbnsn.com  Tue Oct 31 14:26:46 2006
From: kenrbnsn at rbnsn.com (Ken Robinson)
Date: Tue, 31 Oct 2006 14:26:46 -0500
Subject: [nycphp-talk] exif_thumbnail
In-Reply-To: <45479DCB.3080109@rvyriptide.org>
References: <45479B47.4040104@gmx.net>
 <45479DCB.3080109@rvyriptide.org>
Message-ID: <7.0.1.0.2.20061031140954.0a010658@rbnsn.com>

At 02:02 PM 10/31/2006, Bill Kamm wrote:
>Does this help?
>
>http://www.php.net/ob_start
>
>"This function will turn output buffering on. While output buffering is
>active no output is sent from the script (other than headers), instead
>the output is stored in an internal buffer."
>
>Bill
>
>David Krings wrote:
>
> >Hi,
> >
> >    I want to use exif_thumbnail to extract the thumbnail of an image
> >and then have it displayed within a page. The page will have content
> >before and after the thumbnail, and the thumbnail may be present or not.
> >In order to have it show correctly, all manuals state to send the
> >content setting using header(). Since this is supposed to be embedded in
> >other content, I can't send the header (already started output).

What you want to do is use the "'" tag in your script. The "src" 
attribute should point to a script that will send the image back.

Quick example (no error checking done...)
Main script

?>

tn.php:

Ken

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From tom at supertom.com  Tue Oct 31 14:36:14 2006
From: tom at supertom.com (Tom Melendez)
Date: Tue, 31 Oct 2006 14:36:14 -0500
Subject: [nycphp-talk] [OT] live slide-show delivery via browser only
In-Reply-To: <45479CE6.90000@secdat.com>
References: <45478B25.5080906@polymerdb.org>
	<946586480610310956u6d24671enb5f29e5871c701b7@mail.gmail.com>
	<454791B4.8070501@polymerdb.org> <45479CE6.90000@secdat.com>
Message-ID: <117286890610311136l69f2f2fbm6f5aa9ddd746bc31@mail.gmail.com>

Hi Allen,

It really sounds like you are looking for an alternative (albeit
stripped down) version of webex.  Some Googling brought this up:

http://dimdim.com/

Can't speak for it and can't even say I made it past the first page,
but from the description it sounds promising.  And free.

Let us know how you make out solving this problem.

Tom
http://www.liphp.org

On 10/31/06, Kenneth Downs  wrote:
> Allen Shaw wrote:
> > Hi Chris,
> >
> > Yes, I had seen S5 before and thought it a pretty nifty setup.  But does
> > it allow the operator to control page-advance in real time?  The idea is
> > that if you're having a meeting with one or more remote viewers, you
> > could discuss by phone while showing them one slide at a time, at your
> > discretion.
> >
> The nice thing about AJAX is the first "A", "Asynchronous".
>
> How much trouble would we cause if a page's onload event called an AJAX
> function called "getNextSlide()".  Upon receiving the request, the
> server could sleep until a new slide is loaded (or sleep for 2 seconds
> and check, sleep for 2 seconds and check, etc.).
>
> Once a new slide is loaded the server finally sends a slide back to the
> browser.  The AJAX on the browser activates the slide and then calls
> getNextSlide() again, re-starting the loop.
>
> As always, the balance is between responsiveness and drag.  You can get
> away with this for a few users, but having a lot of open connections
> checking something over and over will die fast at high volume.
>
>
>
> > - Allen
> >
> > Christopher R. Merlo wrote:
> >
> >
> >> I once saw a very nice slide show presented using S5:
> >> http://meyerweb.com/eric/tools/s5/
> >> -c
> >>
> >>
> >>
>
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
>
>

From jonbaer at jonbaer.com  Tue Oct 31 14:43:23 2006
From: jonbaer at jonbaer.com (Jon Baer)
Date: Tue, 31 Oct 2006 14:43:23 -0500
Subject: [nycphp-talk] [OT] live slide-show delivery via browser only
In-Reply-To: <45478B25.5080906@polymerdb.org>
References: <45478B25.5080906@polymerdb.org>
Message-ID: <602AB997-AECD-4283-9A50-14FD41F6C2D5@jonbaer.com>

I think the scientific term is called "webinar" :-)

https://www.gotowebinar.com
http://www.campfirenow.com

Campfire is interesting in that you can post images/slides to the  
group so it would be a quick hack (or something to model off of).

There was a nice piece of software a few years back that gave Java  
presentations/webinars with a sandboxed console so you can play  
around in the shell @ the same time, no luck refinding it but thought  
that was a nice touch.

- Jon

On Oct 31, 2006, at 12:43 PM, Allen Shaw wrote:

> Hi All,
>
> I'm looking for a free/OSS (preferably PHP-oriented) solution to this
> problem:  Deliver paged content (eg., typical still-frame slide  
> show) to
> any number of viewers via the web browser only, while providing  
> only the
> host/operator with the controls to advance the slides in real  
> time;  and
> don't require the user to have anything other than a decent Internet
> connection and fairly modern browser.
>
> If nobody knows of an existing package like this, it seems it would be
> fairly simple to build, no?  Page-forward/back/jump commands could be
> sent by the operator to a database or file on the server, and some
> Javascript in the viewer could be monitoring the server for those
> commands and then adjust the display accordingly.
>
> Question: Is this
> a) so self-apparent and easy that nobody's bothered to develop a  
> package
> for it?
> b) much more complicated than I've explained and thus potentially a
> waste of time?
> or
> c)  contained already in some fairly simple CGI package you know about
> and I don't?
>
> Thanks,
> Allen
>
> -- 
> Allen Shaw
> Polymer (http://polymerdb.org)
>
>
>
> -- 
> Allen Shaw
> Polymer (http://polymerdb.org)
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

From chsnyder at gmail.com  Tue Oct 31 14:48:55 2006
From: chsnyder at gmail.com (csnyder)
Date: Tue, 31 Oct 2006 14:48:55 -0500
Subject: [nycphp-talk] Mysql question!
In-Reply-To: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>
References: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>
Message-ID: 

On 10/30/06, tuon1 at netzero.net  wrote:
> [...]
>         //Add new customer to database
>         function AddNewCustomer($FirstName, $LastName, $Address,
>                                 $City, $State, $ZipCode,
>                                 $AreaCode, $Phone, $Email,
>                                 $WebsiteURL, $LoginName, $Password
>                                )
>            {
>                 $query = 'INSERT INTO Customer_Info (FirstNameCol,
>            LastNameCol, AddressCol, CityCol, StateCol,
>                                 ZipCodeCol, AreaCodeCol, PhoneCol,
>                                 EmailCol, WebsiteURLCol,
>            LoginNameCol, PasswordCol
>                                )
>     VALUES ("'. $FirstName . '", "' . $LastName . '",
>                      "' . $Address . '", "' . $City . '",
>       "' . $State . '", "' . $ZipCode . '",
>       "' . $AreaCode . '", "' . $Phone . '",
>       "' . $Email . '",
>       "' . $WebsiteURL . '", "' . $LoginName . '",
>                      "' . SHA1($Password) . '")';
>   }
>
> Feel free to correct my code and give suggestions for better techniques.
>

Hi Paul,

You always need to escape each of the user submitted values in your
SQL, in order to prevent breakage and security vulnerabilities. The
mysql_real_escape_string() function is the recommended way to do this.

function dbEsc( $value ) {
  return mysql_real_escape_string( $value );
}

function AddNewCustomer( $FirstName ) {
  $query = 'INSERT INTO Customer_Info ( FirstNameCol )
                             VALUES ("'. dbEsc($FirstName) . '")';
  return mysql_query($query);
}

This is one of the two fundamental rules of secure web programming
with php (the other being that you always escape output values using
htmlentities()).

-- 
Chris Snyder
http://chxo.com/

From chsnyder at gmail.com  Tue Oct 31 15:01:13 2006
From: chsnyder at gmail.com (csnyder)
Date: Tue, 31 Oct 2006 15:01:13 -0500
Subject: [nycphp-talk] Processing, please wait logic flow question
In-Reply-To: 
References: <3F70FDF4-5D0F-4AEB-BF05-EDED80830590@sala.ca>

Message-ID: 

On 10/31/06, Joshua Hart  wrote:
>
> While we're on the subject how about for something like an image upload (say
> 20 MB)?  It would be nice to know how to give the user a "processing" page
> (perhaps even with a % done indicator)
>
> Joshua

Currently impossible with vanilla php, because the post request isn't
handed off to your scripts until after the upload has finished.

If you're feeling brave, Christian Stocker has written an extension
for php 5.2 that enables upload progress, see his blog entry from last
month: http://tinyurl.com/yxrleh

Haven't tried it, wouldn't use it in production, but quite glad to see
the possibility that we'll be able to do this in the near future!

-- 
Chris Snyder
http://chxo.com/

From chsnyder at gmail.com  Tue Oct 31 15:18:49 2006
From: chsnyder at gmail.com (csnyder)
Date: Tue, 31 Oct 2006 15:18:49 -0500
Subject: [nycphp-talk] exif_thumbnail
In-Reply-To: <7.0.1.0.2.20061031140954.0a010658@rbnsn.com>
References: <45479B47.4040104@gmx.net> <45479DCB.3080109@rvyriptide.org>
	<7.0.1.0.2.20061031140954.0a010658@rbnsn.com>
Message-ID: 

On 10/31/06, Ken Robinson  wrote:
>  Quick example (no error checking done...)
>  Main script
>      
>  ?>
>
>  tn.php:
>       $image = exif_thumbnail($_GET['f'], $width, $height, $type);
>     header('Content-type: '
> .image_type_to_mime_type($type));
>     echo $image;
>  ?>
>

I'm not sure what exif_thumbnail() would do with a non-image, but to
protect against $_GET['f'] == "../../../etc/passwd" you'd probably
better make that:

-- 
Chris Snyder
http://chxo.com/

From kenrbnsn at rbnsn.com  Tue Oct 31 15:25:28 2006
From: kenrbnsn at rbnsn.com (Ken Robinson)
Date: Tue, 31 Oct 2006 15:25:28 -0500
Subject: [nycphp-talk] exif_thumbnail
In-Reply-To: 
References: <45479B47.4040104@gmx.net> <45479DCB.3080109@rvyriptide.org>
	<7.0.1.0.2.20061031140954.0a010658@rbnsn.com>

Message-ID: <7.0.1.0.2.20061031152209.0a00f940@rbnsn.com>

At 03:18 PM 10/31/2006, csnyder wrote:
>I'm not sure what exif_thumbnail() would do with a non-image, but to
>protect against $_GET['f'] == "../../../etc/passwd" you'd probably
>better make that:

I said it was a quick example with no error checking. I would put a 
check to make sure it's really an image file, check for "../", check 
for "http://", etc.  Actually, in real life, I would just pass part 
of the file or use some other non-obvious method to pass the file to 
the thumbnail script.

Ken 

From rmarscher at beaffinitive.com  Tue Oct 31 15:27:16 2006
From: rmarscher at beaffinitive.com (Rob Marscher)
Date: Tue, 31 Oct 2006 15:27:16 -0500
Subject: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!
In-Reply-To: 
References: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>

Message-ID: <4547B1A4.5010301@beaffinitive.com>

A side note here about mysql_real_escape_string - curious if anyone is 
an expert on this...  In that last year, I switched over from using 
addslashes to using mysql_real_escape_string to escape strings in sql 
statements because it's the 'right thing to do.'

I'm currently reading "Building Scalable Web Sites" by Cal Henderson 
(which I think is great so far for anyone making large [or potentially 
large] web apps).  In the section about avoiding sql injection attacks, 
he says "the more complicated mysql_real_escape_string escapes a bunch 
more characters but is ultimately unnecessary (although useful for 
making logs easier to read)."  I thought that was interesting - 
"ultimately unnecessary."

Although I guess this argument will be moot as soon as people move to 
php 5/mysql 5, as prepared statements seem to be the way to go there.

-Rob

csnyder wrote:
> On 10/30/06, tuon1 at netzero.net  wrote:
>   
>> [...]
>>         //Add new customer to database
>>         function AddNewCustomer($FirstName, $LastName, $Address,
>>                                 $City, $State, $ZipCode,
>>                                 $AreaCode, $Phone, $Email,
>>                                 $WebsiteURL, $LoginName, $Password
>>                                )
>>            {
>>                 $query = 'INSERT INTO Customer_Info (FirstNameCol,
>>            LastNameCol, AddressCol, CityCol, StateCol,
>>                                 ZipCodeCol, AreaCodeCol, PhoneCol,
>>                                 EmailCol, WebsiteURLCol,
>>            LoginNameCol, PasswordCol
>>                                )
>>     VALUES ("'. $FirstName . '", "' . $LastName . '",
>>                      "' . $Address . '", "' . $City . '",
>>       "' . $State . '", "' . $ZipCode . '",
>>       "' . $AreaCode . '", "' . $Phone . '",
>>       "' . $Email . '",
>>       "' . $WebsiteURL . '", "' . $LoginName . '",
>>                      "' . SHA1($Password) . '")';
>>   }
>>
>> Feel free to correct my code and give suggestions for better techniques.
>>
>>     
>
> Hi Paul,
>
> You always need to escape each of the user submitted values in your
> SQL, in order to prevent breakage and security vulnerabilities. The
> mysql_real_escape_string() function is the recommended way to do this.
>
> function dbEsc( $value ) {
>   return mysql_real_escape_string( $value );
> }
>
> function AddNewCustomer( $FirstName ) {
>   $query = 'INSERT INTO Customer_Info ( FirstNameCol )
>                              VALUES ("'. dbEsc($FirstName) . '")';
>   return mysql_query($query);
> }
>
> This is one of the two fundamental rules of secure web programming
> with php (the other being that you always escape output values using
> htmlentities()).
>
>   

From support at dailytechnology.net  Tue Oct 31 15:46:00 2006
From: support at dailytechnology.net (Brian Dailey)
Date: Tue, 31 Oct 2006 15:46:00 -0500
Subject: [nycphp-talk] mysql_real_escape_string
In-Reply-To: <4547B1A4.5010301@beaffinitive.com>
References: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>	
	<4547B1A4.5010301@beaffinitive.com>
Message-ID: <4547B608.9040109@dailytechnology.net>

So are their any real tangible advantages to mysql_real_escape_string as 
opposed to addslashes?

-Brian

Rob Marscher wrote:
> A side note here about mysql_real_escape_string - curious if anyone is 
> an expert on this...  In that last year, I switched over from using 
> addslashes to using mysql_real_escape_string to escape strings in sql 
> statements because it's the 'right thing to do.'
> 
> I'm currently reading "Building Scalable Web Sites" by Cal Henderson 
> (which I think is great so far for anyone making large [or potentially 
> large] web apps).  In the section about avoiding sql injection attacks, 
> he says "the more complicated mysql_real_escape_string escapes a bunch 
> more characters but is ultimately unnecessary (although useful for 
> making logs easier to read)."  I thought that was interesting - 
> "ultimately unnecessary."
> 
> Although I guess this argument will be moot as soon as people move to 
> php 5/mysql 5, as prepared statements seem to be the way to go there.
> 
> -Rob
> 
> csnyder wrote:
>> On 10/30/06, tuon1 at netzero.net  wrote:
>>   
>>> [...]
>>>         //Add new customer to database
>>>         function AddNewCustomer($FirstName, $LastName, $Address,
>>>                                 $City, $State, $ZipCode,
>>>                                 $AreaCode, $Phone, $Email,
>>>                                 $WebsiteURL, $LoginName, $Password
>>>                                )
>>>            {
>>>                 $query = 'INSERT INTO Customer_Info (FirstNameCol,
>>>            LastNameCol, AddressCol, CityCol, StateCol,
>>>                                 ZipCodeCol, AreaCodeCol, PhoneCol,
>>>                                 EmailCol, WebsiteURLCol,
>>>            LoginNameCol, PasswordCol
>>>                                )
>>>     VALUES ("'. $FirstName . '", "' . $LastName . '",
>>>                      "' . $Address . '", "' . $City . '",
>>>       "' . $State . '", "' . $ZipCode . '",
>>>       "' . $AreaCode . '", "' . $Phone . '",
>>>       "' . $Email . '",
>>>       "' . $WebsiteURL . '", "' . $LoginName . '",
>>>                      "' . SHA1($Password) . '")';
>>>   }
>>>
>>> Feel free to correct my code and give suggestions for better techniques.
>>>
>>>     
>> Hi Paul,
>>
>> You always need to escape each of the user submitted values in your
>> SQL, in order to prevent breakage and security vulnerabilities. The
>> mysql_real_escape_string() function is the recommended way to do this.
>>
>> function dbEsc( $value ) {
>>   return mysql_real_escape_string( $value );
>> }
>>
>> function AddNewCustomer( $FirstName ) {
>>   $query = 'INSERT INTO Customer_Info ( FirstNameCol )
>>                              VALUES ("'. dbEsc($FirstName) . '")';
>>   return mysql_query($query);
>> }
>>
>> This is one of the two fundamental rules of secure web programming
>> with php (the other being that you always escape output values using
>> htmlentities()).
>>
>>   
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
> 
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
> 
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
> 
> 

From tuon1 at netzero.net  Tue Oct 31 14:47:58 2006
From: tuon1 at netzero.net (tuon1 at netzero.net)
Date: Tue, 31 Oct 2006 19:47:58 GMT
Subject: [nycphp-talk] Mysql question!
Message-ID: <20061031.114859.21820.1153771@webmail10.nyc.untd.com>

An embedded and charset-unspecified text was scrubbed...
Name: not available
URL: 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From cahoyos at us.ibm.com  Tue Oct 31 16:29:50 2006
From: cahoyos at us.ibm.com (Carlos A Hoyos)
Date: Tue, 31 Oct 2006 16:29:50 -0500
Subject: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!
In-Reply-To: <4547B1A4.5010301@beaffinitive.com>
Message-ID: 

> I'm currently reading "Building Scalable Web Sites" by Cal Henderson
> (which I think is great so far for anyone making large [or potentially
> large] web apps).  In the section about avoiding sql injection attacks,
> he says "the more complicated mysql_real_escape_string escapes a bunch
> more characters but is ultimately unnecessary (although useful for
> making logs easier to read)."  I thought that was interesting -
> "ultimately unnecessary."

mysql_real_escape_string takes into consideration the character set which
addslashes doesn't.

You are safe if you're using ansi-8859 or utf-8, but other character
encodings which have valid characters ending in 0x5c will not be properly
escaped by addslashes.

Chris has an example of this here: http://shiflett.org/archive/184

Carlos Hoyos

From rahmin at insite-out.com  Tue Oct 31 16:48:23 2006
From: rahmin at insite-out.com (Rahmin Pavlovic)
Date: Tue, 31 Oct 2006 16:48:23 -0500
Subject: [nycphp-talk] Mysql question!
In-Reply-To: 
References: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>

Message-ID: <20061031164823.7u9cjl0t5v4s4ssg@webmail.vmsol.com>

Quoting csnyder :

> You always need to escape each of the user submitted values in your
> SQL, in order to prevent breakage and security vulnerabilities. The
> mysql_real_escape_string() function is the recommended way to do this.
>
> function dbEsc( $value ) {
>   return mysql_real_escape_string( $value );
> }
>

This is also a good spot to check for magic quotes, strip conflicting
line-breaks + whatever else you may need:

function dbEsc( $value ) {
	$value = trim( $value );

	if( get_magic_quotes_gpc() ) {
		$value = stripslashes( $value );
	}

	$value = str_replace("\n\r", "\n", $value);
	$value = str_replace("\r\n", "\n", $value);

	return mysql_real_escape_string( $value );
}

From rmarscher at beaffinitive.com  Tue Oct 31 17:37:16 2006
From: rmarscher at beaffinitive.com (Rob Marscher)
Date: Tue, 31 Oct 2006 17:37:16 -0500
Subject: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!
In-Reply-To: 
References: 
Message-ID: <4547D01C.80109@beaffinitive.com>

Cool... I thought Chris might have something on this.  The previous 
chapter is all about unicode/utf-8 - why you should use it, how you make 
sure that your input is valid utf-8, etc... so maybe he was making the 
statement in that context where everything has already been converted to 
valid utf-8 (and the database uses utf-8 for its tables).
Thanks a lot!
-Rob

Carlos A Hoyos wrote:
>> I'm currently reading "Building Scalable Web Sites" by Cal Henderson
>> (which I think is great so far for anyone making large [or potentially
>> large] web apps).  In the section about avoiding sql injection attacks,
>> he says "the more complicated mysql_real_escape_string escapes a bunch
>> more characters but is ultimately unnecessary (although useful for
>> making logs easier to read)."  I thought that was interesting -
>> "ultimately unnecessary."
>>     
>
>
> mysql_real_escape_string takes into consideration the character set which
> addslashes doesn't.
>
> You are safe if you're using ansi-8859 or utf-8, but other character
> encodings which have valid characters ending in 0x5c will not be properly
> escaped by addslashes.
>
> Chris has an example of this here: http://shiflett.org/archive/184
>
> Carlos Hoyos
>
>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>   

From cliff at pinestream.com  Tue Oct 31 17:44:45 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 31 Oct 2006 17:44:45 -0500
Subject: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!
In-Reply-To: <4547B1A4.5010301@beaffinitive.com>
Message-ID: <002c01c6fd3e$2a01ab70$12a8a8c0@HirschLaptop>

I just read the same thing in Cal's book and was going to ask the group
about this. While prepared statements sound nice in theory, there are
many of us that still hack together "old-fashioned" queries. And what
does "ultimately unnecessary" mean anyway? Consumes more mips than its
worth?

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Rob Marscher
Sent: Tuesday, October 31, 2006 3:27 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!

A side note here about mysql_real_escape_string - curious if anyone is 
an expert on this...  In that last year, I switched over from using 
addslashes to using mysql_real_escape_string to escape strings in sql 
statements because it's the 'right thing to do.'

I'm currently reading "Building Scalable Web Sites" by Cal Henderson 
(which I think is great so far for anyone making large [or potentially 
large] web apps).  In the section about avoiding sql injection attacks, 
he says "the more complicated mysql_real_escape_string escapes a bunch 
more characters but is ultimately unnecessary (although useful for 
making logs easier to read)."  I thought that was interesting - 
"ultimately unnecessary."

Although I guess this argument will be moot as soon as people move to 
php 5/mysql 5, as prepared statements seem to be the way to go there.

-Rob

From ramons at gmx.net  Tue Oct 31 19:03:14 2006
From: ramons at gmx.net (David Krings)
Date: Tue, 31 Oct 2006 19:03:14 -0500
Subject: [nycphp-talk] Passing parameters with the click of a button.
In-Reply-To: 
References: <556034ce0610302025j10592888g2d2b1b41a61ef5bf@mail.gmail.com>

Message-ID: <4547E442.2000201@gmx.net>

Hi,

    I would use a session and write whatever I need somewhere else into 
the session. As long as the session is kept alive you can grab from it 
whatever you need. No GET, no POST, and definitely no JavaScript. ;-)

       David K.

Jon Baer wrote:
> You need to be cool and do it the web 2.0 way (slick effects  
> optional) ... :-)
>
> 
>
>  Yes
>
> 
> 
> 
>
> - Jon
>
> References
> http://www.jquery.com
>
> On Oct 30, 2006, at 11:25 PM, Ariel Kulkin wrote:
>
>   
>> Problem Statement: With the click of a button, I need to open a new  
>> window (to capture "user referrals"), and pass to it a parameter  
>> that will be used to track the user id of the individual who  
>> originated those referrals.
>>
>> I have no problems opening the window with the button click:
>> I can't quite get the syntax, however, to pass the user_id  
>> parameter...
>> How do I go about passing the user_id parameter to the newly open  
>> window?
>>
>> CODE:
>>
>> Do you know anybody who may benefit from using XYZ System?
>>       
>>       > checked="checked" />
>>       No
>>       
>>       > onclick="MM_openBrWindow('/Pop%20Ups/ 
>> Referrals.php','Referrals','scrollbars=yes,resizable=yes,width=500,hei 
>> ght=600')"/>
>>       Yes

>>
>> Your assistance is appreciated.
>>
>> Thanks!
>>
>> Ariel.
>> _______________________________________________
>>     

From ramons at gmx.net  Tue Oct 31 19:11:49 2006
From: ramons at gmx.net (David Krings)
Date: Tue, 31 Oct 2006 19:11:49 -0500
Subject: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!
In-Reply-To: <4547B1A4.5010301@beaffinitive.com>
References: <20061030.152214.4551.1147273@webmail25.nyc.untd.com>	
	<4547B1A4.5010301@beaffinitive.com>
Message-ID: <4547E645.50907@gmx.net>

Hi,

    from my experience, addslashes does the trick for the most part, but 
mysql_real_escape_string is indeed the better one to use as it does 
cover all possible (not only the likely) characters that could get MySQL 
and its user in hot water.
    From a practical viewpoint I'd just say both work fine and are 
better than nothing with the difference that mysql_real_escape_string 
requires a database connection before it can be called whereas 
addslashes doesn't. So when you just want to massage some input through 
a bunch of scripts that do not do anything with the database, then 
addslashes may be the more convenient thing to use. So far I haven't 
come across a situation where it would have mattered, but since I'm a 
just for fun PHP hobbyist and not a pro, it is well possible that there 
are situation where it does make a difference.

          David K.

Rob Marscher wrote:
> A side note here about mysql_real_escape_string - curious if anyone is 
> an expert on this...  In that last year, I switched over from using 
> addslashes to using mysql_real_escape_string to escape strings in sql 
> statements because it's the 'right thing to do.'
>
> I'm currently reading "Building Scalable Web Sites" by Cal Henderson 
> (which I think is great so far for anyone making large [or potentially 
> large] web apps).  In the section about avoiding sql injection attacks, 
> he says "the more complicated mysql_real_escape_string escapes a bunch 
> more characters but is ultimately unnecessary (although useful for 
> making logs easier to read)."  I thought that was interesting - 
> "ultimately unnecessary."
>
> Although I guess this argument will be moot as soon as people move to 
> php 5/mysql 5, as prepared statements seem to be the way to go there.
>
> -Rob

From ramons at gmx.net  Tue Oct 31 19:21:47 2006
From: ramons at gmx.net (David Krings)
Date: Tue, 31 Oct 2006 19:21:47 -0500
Subject: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!
In-Reply-To: <002c01c6fd3e$2a01ab70$12a8a8c0@HirschLaptop>
References: <002c01c6fd3e$2a01ab70$12a8a8c0@HirschLaptop>
Message-ID: <4547E89B.20104@gmx.net>

Hi,

    my guess is that some of the characters escaped using the mysql 
escaping cannot be reasonably expected to come in from user input. 
Mysql_real_escape_string escapes all these:
\x00, \n, \r, \, ', " and \x1a
    but I can't think of any way on how to get \x1a as user input 
(assuming that this is the hex value for an ASCII character). Even NULL 
is difficult, but not impossible. I guess that the "ultmately 
unecessary" looks at it from a viewpoint of what is possible assuming 
the user is the idiot and not the developer. It consumes a trip to the 
database engine and back, whereas addslashes doesn't. I don't know, my 
arguments are a bit thin and it may really just like that: "ultimately 
unecessary" as long as the string was addslashed.

    David K.

Cliff Hirsch wrote:
> I just read the same thing in Cal's book and was going to ask the group
> about this. While prepared statements sound nice in theory, there are
> many of us that still hack together "old-fashioned" queries. And what
> does "ultimately unnecessary" mean anyway? Consumes more mips than its
> worth?
>   

From cliff at pinestream.com  Tue Oct 31 19:36:24 2006
From: cliff at pinestream.com (Cliff Hirsch)
Date: Tue, 31 Oct 2006 19:36:24 -0500
Subject: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!
In-Reply-To: <4547E89B.20104@gmx.net>
Message-ID: <000801c6fd4d$c2923a30$12a8a8c0@HirschLaptop>

This brings up an interesting point. Many people slam prepared
statements for being slow for non-repetitive querys. However, if you
need to make multiple trips to the database engine and back to escape a
handful of parameters, I wonder which method is actually faster --
especially if your DB is on a different server. Simply climbing up and
down the TCP/IP stack burns a lot of cycles, unless you happen to have
one of the TOEs that I have written about (TCP/IP offload/acceleration
engine). I recall seeing a performance comparison somewhere, but it's
location escapes me -- no pun intended.

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of David Krings
Sent: Tuesday, October 31, 2006 7:22 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!

Hi,

    my guess is that some of the characters escaped using the mysql 
escaping cannot be reasonably expected to come in from user input. 
Mysql_real_escape_string escapes all these:
\x00, \n, \r, \, ', " and \x1a
    but I can't think of any way on how to get \x1a as user input 
(assuming that this is the hex value for an ASCII character). Even NULL 
is difficult, but not impossible. I guess that the "ultmately 
unecessary" looks at it from a viewpoint of what is possible assuming 
the user is the idiot and not the developer. It consumes a trip to the 
database engine and back, whereas addslashes doesn't. I don't know, my 
arguments are a bit thin and it may really just like that: "ultimately 
unecessary" as long as the string was addslashed.

    David K.

Cliff Hirsch wrote:
> I just read the same thing in Cal's book and was going to ask the
group
> about this. While prepared statements sound nice in theory, there are
> many of us that still hack together "old-fashioned" queries. And what
> does "ultimately unnecessary" mean anyway? Consumes more mips than its
> worth?

From dcech at phpwerx.net  Tue Oct 31 19:37:21 2006
From: dcech at phpwerx.net (Dan Cech)
Date: Tue, 31 Oct 2006 19:37:21 -0500
Subject: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!
In-Reply-To: <4547E89B.20104@gmx.net>
References: <002c01c6fd3e$2a01ab70$12a8a8c0@HirschLaptop>
	<4547E89B.20104@gmx.net>
Message-ID: <4547EC41.60401@phpwerx.net>

David Krings wrote:
> Hi,
> 
>     my guess is that some of the characters escaped using the mysql 
> escaping cannot be reasonably expected to come in from user input. 
> Mysql_real_escape_string escapes all these:
> \x00, \n, \r, \, ', " and \x1a
>     but I can't think of any way on how to get \x1a as user input 
> (assuming that this is the hex value for an ASCII character). Even NULL 
> is difficult, but not impossible. I guess that the "ultmately 
> unecessary" looks at it from a viewpoint of what is possible assuming 
> the user is the idiot and not the developer. It consumes a trip to the 
> database engine and back, whereas addslashes doesn't. I don't know, my 
> arguments are a bit thin and it may really just like that: "ultimately 
> unecessary" as long as the string was addslashed.

What you're failing to consider here is the character set of the active
mysql connection.  Correct me if I'm wrong, but it is my understanding
that mysql_real_escape_string does not incur an extra trip to the
database, the escaping still occurs within php, but it takes into
account the character set of the active connection.

This may not seem that important right now, but when you find yourself
wanting/needing to switch to utf8 you'll be glad you used mysql_real_escape.

As for how strange characters might get into input, assuming that it
won't happen is just plain bad practice.  Of course the enterprising
hacker will find a way to inject these characters, and addslashes will fail.

When dealing with user input, always use the very best tools you have
available to you, because the one corner you cut will be the chink in
your application's armor.

Dan

> 
>     David K.
> 
> Cliff Hirsch wrote:
>> I just read the same thing in Cal's book and was going to ask the group
>> about this. While prepared statements sound nice in theory, there are
>> many of us that still hack together "old-fashioned" queries. And what
>> does "ultimately unnecessary" mean anyway? Consumes more mips than its
>> worth?

From ramons at gmx.net  Tue Oct 31 20:25:32 2006
From: ramons at gmx.net (David Krings)
Date: Tue, 31 Oct 2006 20:25:32 -0500
Subject: [nycphp-talk] exif_thumbnail
In-Reply-To: <45479DCB.3080109@rvyriptide.org>
References: <45479B47.4040104@gmx.net> <45479DCB.3080109@rvyriptide.org>
Message-ID: <4547F78C.8040606@gmx.net>

Bill Kamm wrote:
> Does this help?
>
> http://www.php.net/ob_start
>
> "This function will turn output buffering on. While output buffering is 
> active no output is sent from the script (other than headers), instead 
> the output is stored in an internal buffer."
>
> Bill

It generally does, but not really. This is what I tried to do:
// Show thumbnail
      $exifthumbnail = exif_thumbnail($totalpath, $exifwidth, 
$exifheight, $exiftype);
      if ($exifthumbnail !== FALSE) {
            header('Content-type: ' .image_type_to_mime_type($exiftype));
            echo $exifthumbnail;
            header('Content-type: text/html; charset=utf-8');
            echo "
\n";
      } else {
            echo "No thumbnail available!
\n";
      }

And it still pipes out a whole bunch oh jibberish, that just seems to 
look different as when not sending any header info at all.

Thanks, but I'll try the other proposal. :/

       David K.

From ramons at gmx.net  Tue Oct 31 20:32:20 2006
From: ramons at gmx.net (David Krings)
Date: Tue, 31 Oct 2006 20:32:20 -0500
Subject: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!
In-Reply-To: <4547EC41.60401@phpwerx.net>
References: <002c01c6fd3e$2a01ab70$12a8a8c0@HirschLaptop>	<4547E89B.20104@gmx.net>
	<4547EC41.60401@phpwerx.net>
Message-ID: <4547F924.70300@gmx.net>

Dan Cech wrote:
> What you're failing to consider here is the character set of the active
> mysql connection.  Correct me if I'm wrong, but it is my understanding
> that mysql_real_escape_string does not incur an extra trip to the
> database, the escaping still occurs within php, but it takes into
> account the character set of the active connection.
>   
You probably know this better than I do, but in any case, you need to 
have a connection established otherwise mysql_real_escape_string throws 
an error. That means that something is going back and forth to the db 
engine at some point, which isn't a big deal if one needs the connection 
anyway. Addslashes doesn't need anything.

> This may not seem that important right now, but when you find yourself
> wanting/needing to switch to utf8 you'll be glad you used mysql_real_escape.
>   
That was mentioned in a different post and I did not mean to make it 
appear as if this doesn't happen.

> As for how strange characters might get into input, assuming that it
> won't happen is just plain bad practice.  Of course the enterprising
> hacker will find a way to inject these characters, and addslashes will fail.
>   
I also did not mean to advertise using addslashes (I myself stopped 
doing that), but tried to get some sense into the "ultimately 
unnecessary" that was brought up by Cliff.

> When dealing with user input, always use the very best tools you have
> available to you, because the one corner you cut will be the chink in
> your application's armor.
>
> Dan
I wholeheartedly agree with this.

David K.

From ramons at gmx.net  Tue Oct 31 20:33:11 2006
From: ramons at gmx.net (David Krings)
Date: Tue, 31 Oct 2006 20:33:11 -0500
Subject: [nycphp-talk] rtrim broken?
Message-ID: <4547F957.4030006@gmx.net>

Hi,

I have a string that looks like this
$text = 'blah, blah, blah, ';
I want to use rtrim to cut off the last comma and the whitespace. So I use
rtrim($text, ', ');

To my surprise, it doesn't cut anything off. When I echo $text the comma
and the space are still there.

Is rtrim broken or my logic or my script?

David K.

From ramons at gmx.net  Tue Oct 31 20:41:11 2006
From: ramons at gmx.net (David Krings)
Date: Tue, 31 Oct 2006 20:41:11 -0500
Subject: [nycphp-talk] exif_thumbnail
In-Reply-To: <7.0.1.0.2.20061031140954.0a010658@rbnsn.com>
References: <45479B47.4040104@gmx.net> <45479DCB.3080109@rvyriptide.org>
	<7.0.1.0.2.20061031140954.0a010658@rbnsn.com>
Message-ID: <4547FB37.2040705@gmx.net>

Hi,

    thank you so so sooooo much!! I copied and pasted this and BAM! it 
just works! I love it. Thank you very much indeed!

          David K.

Ken Robinson wrote:
>
> What you want to do is use the "'" tag in your script. The "src" 
> attribute should point to a script that will send the image back.
>
> Quick example (no error checking done...)
> Main script
>    
> ?>
>
> tn.php:
>     $image = exif_thumbnail($_GET['f'], $width, $height, $type);
>    header('Content-type: ' .image_type_to_mime_type($type));
>    echo $image;
> ?>
>
> Ken
>

From dell at sala.ca  Tue Oct 31 20:49:53 2006
From: dell at sala.ca (Dell Sala)
Date: Tue, 31 Oct 2006 20:49:53 -0500
Subject: [nycphp-talk] rtrim broken?
In-Reply-To: <4547F957.4030006@gmx.net>
References: <4547F957.4030006@gmx.net>
Message-ID: <564E745B-E474-4F84-A7DB-68F56F1ED425@sala.ca>

Are you reassigning the result to $text? The first argument is not  
passed by reference -- instead, it returns the trimmed string.

$text = rtrim($text, ', ');
echo $text;

BTW: if this string is build by a loop, there is another idiom that I  
find cleaner than stripping off the last separator: Build text as an  
array, then implode it.

$text = array();
foreach (range(0, 2) as $i) {
    $text[] = 'blah';
}
$text = implode(', ', $text);

-- Dell

On Oct 31, 2006, at 8:33 PM, David Krings wrote:

> Hi,
>
> I have a string that looks like this
> $text = 'blah, blah, blah, ';
> I want to use rtrim to cut off the last comma and the whitespace.  
> So I use
> rtrim($text, ', ');
>
> To my surprise, it doesn't cut anything off. When I echo $text the  
> comma
> and the space are still there.
>
> Is rtrim broken or my logic or my script?
>
> David K.
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

From dcech at phpwerx.net  Tue Oct 31 22:02:21 2006
From: dcech at phpwerx.net (Dan Cech)
Date: Tue, 31 Oct 2006 22:02:21 -0500
Subject: [nycphp-talk] mysql_real_escape_string WAS: Mysql question!
In-Reply-To: <4547F924.70300@gmx.net>
References: <002c01c6fd3e$2a01ab70$12a8a8c0@HirschLaptop>	<4547E89B.20104@gmx.net>	<4547EC41.60401@phpwerx.net>
	<4547F924.70300@gmx.net>
Message-ID: <45480E3D.1050006@phpwerx.net>

David Krings wrote:
> Dan Cech wrote:
>> What you're failing to consider here is the character set of the active
>> mysql connection.  Correct me if I'm wrong, but it is my understanding
>> that mysql_real_escape_string does not incur an extra trip to the
>> database, the escaping still occurs within php, but it takes into
>> account the character set of the active connection.
>>   
> You probably know this better than I do, but in any case, you need to 
> have a connection established otherwise mysql_real_escape_string throws 
> an error. That means that something is going back and forth to the db 
> engine at some point, which isn't a big deal if one needs the connection 
> anyway. Addslashes doesn't need anything.

Actually no, all it means is that without an active connection,
mysql_real_escape_string doesn't know what character encoding is being used.

I looked through the source and found that the php extension just passes
the string and the specified connection through to the mysql client
library's c function of the same name, which then looks up the character
set of the connection and performs the escaping.

That said, I did come across this line in the mysql documentation:

Strictly speaking, MySQL requires only that backslash and the quote
character used to quote the string in the query be escaped. This
function quotes the other characters to make them easier to read in log
files.

However, when reading through the mysql client source I do see it
performing special processing for both correctly formed and malformed
multibyte characters, as well as correctly handling the situation where
the NO_BACKSLASH_ESCAPES SQL mode is enabled on the server.  This alone
is important, as addslashes will fail horribly in this situation.

Dan

From kzimmerm at yahoo.com  Tue Oct 31 22:29:42 2006
From: kzimmerm at yahoo.com (Kurt Zimmerman)
Date: Tue, 31 Oct 2006 19:29:42 -0800 (PST)
Subject: [nycphp-talk] mysql question
Message-ID: <20061101032942.46158.qmail@web52209.mail.yahoo.com>

Is there a system table you can quere to see if a
table exists?  I know there is one in SQL Server.

Kurt

____________________________________________________________________________________
Low, Low, Low Rates! Check out Yahoo! Messenger's cheap PC-to-Phone call rates 
(http://voice.yahoo.com)

From jonbaer at jonbaer.com  Tue Oct 31 23:06:01 2006
From: jonbaer at jonbaer.com (Jon Baer)
Date: Tue, 31 Oct 2006 23:06:01 -0500
Subject: [nycphp-talk] mysql question
In-Reply-To: <20061101032942.46158.qmail@web52209.mail.yahoo.com>
References: <20061101032942.46158.qmail@web52209.mail.yahoo.com>
Message-ID: <3DA6FBF2-E6BA-42AF-A28F-DDAC9DA30300@jonbaer.com>

information_schema database ...

select table_schema,table_name from information_schema.tables;

- Jon

On Oct 31, 2006, at 10:29 PM, Kurt Zimmerman wrote:

> Is there a system table you can quere to see if a
> table exists?  I know there is one in SQL Server.
>
> Kurt
>
>
>
> ______________________________________________________________________ 
> ______________
> Low, Low, Low Rates! Check out Yahoo! Messenger's cheap PC-to-Phone  
> call rates
> (http://voice.yahoo.com)
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php