Linux, Apache, MySQL, PHP

Re: SQL Injection Prevention - How Good Are These Measures?

12-Jun-08 0:58

Exactly.

Brad
Australian
The PHP MVP

- Christian Graus on "Best books for VBscript"

A big thick one, so you can whack yourself on the head with it.

Hesham Amin13-Jun-08 0:09

Hesham Amin

13-Jun-08 0:09

What level of validation is enough?
I think that using prepared statements with parameters is the safest way, what do you think ?

Hesham A. Amin
My blog

Re: SQL Injection Prevention - How Good Are These Measures?

alex.barylski1-Jul-08 10:29

alex.barylski

1-Jul-08 10:29

SQLi is best handled using the database's native escaping routines and not just relying on addslashes() -- there is actually a way to circumvent addslashes from what I remember.

Filtering is probably a good practice as well.

To avoid escaping, you could just use PDO and prepared statements which handles the escaping for you automagically as well.

I'm finding the only constant in software development is change it self.

Smarty Question !!!

Mohammad Dayyan11-Jun-08 1:40

11-Jun-08 1:40

Hi friends.

I usually use Smarty to create templates.

When I wanted to create somethings like this :

<html xmlns="http://www.w3.org/1999/xhtml">
<head> 
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />  
<title>Test</title> 
</head>  
<body>

<table>    
	<tr>      
		<td>&nbsp;</td>    
	</tr>  
</table>
    
<table>    
	<tr>      
		<td>&nbsp;</td>    
	</tr> 
</table>
    
<table>    
	<tr>      
		<td>&nbsp;</td>    
	</tr>  
</table>  
  
<table>    
	<tr>      
		<td>&nbsp;</td>    
	</tr>  
</table> 
   
</body>  
</html>

I created three files ( for example Header.tpl , Footer.tpl , Body.tpl )

Header.tpl :

<html xmlns="http://www.w3.org/1999/xhtml">
<head> 
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />  
<title>Test</title> 
</head>  
<body>

Body.tpl :

<table>    
	<tr>      
		<td>&nbsp;</td>    
	</tr>  
</table>

Footer.tpl :

</body>  
</html>

Then I wrote this Smarty code in PHP to created above HTML file :

$smarty -> display('Header.tpl');
for ($i=0; $i<=3; $i++)
	$smarty -> display('Body.tpl');
$smarty -> display('Footer.tpl');

This way is bad, because designing template is very difficult.

Are there any ways to use Smarty and create above HTML file.

Thanks in advance

Sorry for my English. I'm a freshman .

Bradml11-Jun-08 21:37

11-Jun-08 21:37

Can't you just output the HTML? It doesn't stop normal PHP from working.

Brad
Australian
The PHP MVP

- Christian Graus on "Best books for VBscript"

A big thick one, so you can whack yourself on the head with it.

Mohammad Dayyan11-Jun-08 22:44

11-Jun-08 22:44

Thanks Bradml.

Bradml wrote:
Can't you just output the HTML?

Yes, I can. but I want generate output by SMARTY ! Sniff | :^)

Sorry for my English. I'm a freshman .

Bradml11-Jun-08 22:57

11-Jun-08 22:57

.... why? What benefit does that provide?

Brad
Australian
The PHP MVP

- Christian Graus on "Best books for VBscript"

A big thick one, so you can whack yourself on the head with it.

Mohammad Dayyan11-Jun-08 23:03

11-Jun-08 23:03

Bradml wrote:
What benefit does that provide?

With Smarty you can sift Template through program , so we can change template easily.

Sorry for my English. I'm a freshman .

Bradml12-Jun-08 0:55

12-Jun-08 0:55

Ok, well sorry I haven't really looked into Smarty so I'm not going to be of too much help. Check out the Smarty Forums[^]. They can probably help you out.

Brad
Australian
The PHP MVP

- Christian Graus on "Best books for VBscript"

A big thick one, so you can whack yourself on the head with it.

Mohammad Dayyan12-Jun-08 2:27

Image is not being generated...

12-Jun-08 2:27

OK, That's all right. Thanks

Sorry for my English. I'm a freshman .

xelios4-Jun-08 20:42

Re: Image is not being generated...

4-Jun-08 20:42

I want to place image generating code in my webpage, but it is working fine alone..

But when I implement that code in my webpage it doesn't work..

Mohsin Ali

Bradml4-Jun-08 22:58

Re: Image is not being generated...

4-Jun-08 22:58

Can you tell us what happens? Does it through errors? Can you show us the code?

Brad
Australian
The PHP MVP

- Christian Graus on "Best books for VBscript"

A big thick one, so you can whack yourself on the head with it.

Mohammad Dayyan5-Jun-08 9:48

Any simple example to implement CAPTCHA...

5-Jun-08 9:48

It's hard to say without any code .
Write your code Ali

Sorry for my English. I'm a freshman .

xelios4-Jun-08 10:53

Re: Any simple example to implement CAPTCHA...

4-Jun-08 10:53

I want to implement CAPTCHA on a simple web form...

Is there any easy example to implement it..

Mohsin Ali

Mohammad Dayyan5-Jun-08 9:06

Re: Any simple example to implement CAPTCHA...

5-Jun-08 9:06

See these :

http://www.phpclasses.org/browse/package/4589.html[^]

http://lamp.codeproject.com/KB/web-security/CaptchaImage.aspx[^]

Sorry for my English. I'm a freshman .

Bradml6-Jun-08 2:44

What's the best PHP IDE ?

6-Jun-08 2:44

Nice answer!

Brad
Australian
The PHP MVP

- Christian Graus on "Best books for VBscript"

A big thick one, so you can whack yourself on the head with it.

Mohammad Dayyan4-Jun-08 1:38

4-Jun-08 1:38

Hi.
I'm looking for a good PHP IDE. Do you know what PHP IDE is better ?

Sorry for my English. I'm a freshman .

xelios4-Jun-08 2:36

4-Jun-08 2:36

M using Dreamweaver since last two years.... I also used other IDEs for PHP but found Dreamweaver as the best..

Mohsin Ali

Bradml4-Jun-08 2:36

4-Jun-08 2:36

In my opinion you cannot beat Zend. They make the best IDE out there. Check out their website.[^]

Brad
Australian
The PHP MVP

- Christian Graus on "Best books for VBscript"

A big thick one, so you can whack yourself on the head with it.

xelios4-Jun-08 4:40

4-Jun-08 4:40

I used zend, its good.............. but damn slow due to java... OMG | :OMG:

Mohsin Ali

Bradml4-Jun-08 22:56

4-Jun-08 22:56

The Linux version runs like a dream.

Brad
Australian
The PHP MVP

- Christian Graus on "Best books for VBscript"

A big thick one, so you can whack yourself on the head with it.

Mohammad Dayyan4-Jun-08 6:58

4-Jun-08 6:58

What about PHP EDIT 2 ?

Sorry for my English. I'm a freshman .

Did anybody use PHP in Visual Studio.......

alex.barylski1-Jul-08 10:41

alex.barylski

1-Jul-08 10:41

Depends on what you want or need. Personally I'm happy with a super charged Notepad.

I use UltraEdit. I love the source folding feature and column selection is handy when pasting in cities, postal codes, etc. Or formatting code to you liking when you copy from somewhere else.

I'm finding the only constant in software development is change it self.

xelios3-Jun-08 18:30