Search results

> 5. even if $n were assigned a value [which it >has not], and he called include > ("${n}.php");, it would attempt to > locate "/etc/passwd.php", which > does not exist. Yes, again, the examples that i've given in this thread (and that means any data contained in those links) would not...

> in his example, $n has no value. If you're still stuck on the links I gave as an example, i'll give you that. They won't work - and I said that. But there's something else that I like to call register_globals. You figure it out.

> you say it wouldn't work, then turn around say you've gotten > your point across. what's your point if it's impossible? My point? I have two, really. 1. Kaliber posted the code knowing full well (or having the knowledge to determine that) the code he posted was insecure and could be...

Re: Re: Re: what is it with people and page?op=whatever > show me where that'd work. Read the whole thread. > try making a 30, 50, or 100+ page site, then adding a section > and having to edit the navigation on every page. I have. I use a template engine (such as that in phpBB 2.1).

> :D :biggrin2: :devious2: Right. The links I posted wouldn't work anyway, but i've gotten my point across - I would like to hope.

> www.domain.com/?page w00t www.domain.com/?/etc/passwd www.domain.com/?c:\windows\php.ini

> So you still can't do much using PHP alone > without a flat-file database. Yea, so I won't bother telling you about php-GTK. But, yeah, i'm thinking php does have a limited number of logical applications outside of dynamic content generation. Nevermind it's easy ability to process text...

<?php error_reporting(0); # code ?>

phpBB 2.0 will automatically detect if your server supports (avatar) uploading and, if it doesn't, will disable it regardless of the administrative setting.

And name.part[0-9].rar is WinRAR 3.0.

I suppose there is alwasy system() or shell_exec(). Might want to look at the following also: http://www.php.net/manual/en/language.operators.execution.php http://www.php.net/manual/en/ref.exec.php

> with PHP, there are 3 different ways to do this > 1. Cookies > 2. Sessions > 3. With the form [CODE]<input type='hidden' name='number'> 4. shmop functions It may not be as idiot friendly to do, as in .NET, but it's possible. Actuality, the ViewState functionality is like using hidden input...

> and must stay the same for each page request. Any rules for storing the number? Cookies? Database? Text file? Doesn't matter?

> by telling it to sort the entries in descending order by the id > number I get the same result That's right. If you want to get 10 entries and 10 only, use LIMIT 10 in the query. E.G.: $sql = 'SELECT a, b FROM table ORDER BY key DESCENDING LIMIT 10'; Of course, I could be...

Don't forget to make note of the htmlentities() and htmlspecialchars() functions, either. They should work sufficiently if you just want to "disable" html, instead of it strip the post of it. I'd make a custom function to do the job though.

> second, mysql isn´t really designed to handle images, so you > can´t... You can... but why? MySQL has a "BLOB" column type, that you can store binary data in. You would retrieve the binary data the same way you would anything else from the database.

> Can I add a hyperlink to an array? You can store many things in an array. > Is is adviceable to use an array in an array (i dunno what > name). Yes, it's perfectly fine to store an array within an array. They're called multidimensional arrays - but the name is misleading. They're...

> But what good is an array anyway? I dont seem to find any practical use for it. You don't think phpBB, iBF, vBulletin, etc are made without using arrays, do you? Arrays are good for storing large amounts of data (usually related, in a single variable), instead of creating tons of...

> I'm trying to keep it simple... they can learn that type of stuff on > their own when they have a better understanding of php. IMO, users should learn how to write good php code the first time around, instead of having to change a lot of what they know later on.

minor annoyance: If a string does NOT have any variables for php to find, then you should use single quotes in place of double quotes. /* Wrong */ $a = "this is some really long string that has no variables in it for php to parse, but php will look anyway because double quotes are...