They talk about some of the advantages to encryption before getting into how it actually works. Their example script is separated out into three PHP files – the main part of the script, a single-use script that, in turn, creates the third file, include file for the encode/decode functions. With the structure defined, they move on to the code – the generation of the file with the large multi-dimensional array and the two functions to encode and decode the information.

Link

Zend has also invited some serious industry figures to share their insights on creating modern web apps, running high volume PHP sites and to discuss democratization on the web. The press release says it best:

CUPERTINO, Calif–Sept. 6, 2006–Zend Technologies, Inc., the PHP company, today announced that Chris Anderson, author of “The Long Tail” and editor-in-chief of Wired magazine, will keynote the second annual Zend/PHP Conference and Expo October 30-November 2, 2006. He will discuss how the theories in his groundbreaking article (and now book) apply to software development and to the growth of PHP in particular. Also keynoting at this year’s event is Robert “r0ml” Lefkowitz, software architect, systems designer and open source strategist. At the conference, r0ml will analyze the evolution of our use of human languages as a source of inspiration for our use of programming languages. Matthew Rechs, CTO of the interactive agency Schematic, is also scheduled to address the conference. As part of his keynote, Rechs will discuss the mobile digital content store of Amp’d Mobile, a case study of one of the largest and most successful PHP deployments in private enterprise.

Most free e-mail services are known to get profit from ads showed to users in mailbox web-interface. That’s why the Internet web giants of web industry are not in a hurry to give a free access to mailboxes through the POP3 and SMTP protocols. No doubt they wouldn’t want the effectiveness of their advertising to be reduced greatly.Such giants as www.Yahoo.com, www.MSN.com, AOL.com operate many users, which are tied to other companies’ services don’t hasten to provide such access as today users won’t disappear and the reason is that they just get into the habit of using web-interface.

Of cause there are some ways to avoid these limitations. For instance there is third parties’ software for Yahoo.com converting web traffic into POP3. But this increases the possibility of password stealing with the help of that program, and that reduces the willing to use it. Hotmail.com has the ability provided by MSN.com to use special protocol integrated into Outlook Express and been unavailable to other e-mail software developers, and that is certainly also constrains the freedom of user when choosing e-mail software. AOL.com has an access through POP3 and SMTP, but it is available for users to have an access to the Internet only from that provider. That also limits the opportunities of using an email, because there are places without an access to the Internet from AOL.com.

Still they loose a lot when trying to follow out of date marketing policy directed to online-advertising constraining user’s freedom of choice. There is another way to monetize population attracting and holding users. Such new model of user treatment was Google.com Company and its e-mail service – Gmail.com. Users have the access to POP3 and SMTP interfaces, which does not limit the user’s opportunities to work with the email. Furthermore the service has a great advantage over ordinary email clients like Outlook Express; this is a huge size of the mailbox. All letters are free stored on the server, which allows the user to get the access to his mailbox from each point of the world easily.Plus, only relevant advertising is shown to a user, no bothering banners! This format is becoming more and more likable for email users because a convenient web interface allows you to forget about installing and setting problems of email programs.

As a result the email systems we will know in the future will be web interfaces, without actually using any email programs. Most probably Yahoo.com, MSN.com and AOL.com will use this model in the future, because such approach better than the old methodic with the using of mail programs.Basically POP3 and SMTP become even obsolete; the Gmail.com provides new e-mails reception notifications via RSS channels.

All of the functions in PDFlib and the PHP module have identical function names and parameters. Unless configured otherwise, all lengths and coordinates are measured in PostScript points. There are generally 72 PostScript points to an inch, but this depends on the output resolution. Please see the PDFlib Reference Manual included in the PDFlib distribution for a more thorough explanation of the coordinate system used.

PDFlib Lite is available as open source. However, the PDFlib Lite license allows free use only under certain conditions. PDFlib Lite supports a subset of PDFlib’s functionality; please see the PDFlib web site for details.

Now we are working to program PHP scripts to make equivalents of these tasks:

• Convert DOC to PDF
• Word to JPEG
• DWG to PDF converter
• Autocad to PDF converter
  
• Convert AutoCad to PDF
• Word converter

Among the included projects are PHP, phpMyAdmin, phpBB, Python, Apache HTTP Server, MySQL, PostgreSQL, CVS, and dozens more. Out-of-the-Box works just as well on Red Hat, SuSE, and Mandrake Linux as it does on Windows XP/2000.

1. The $go variable in the forums code was not stripped of html
characters, making the code vulnerable to Cross Site Scripting (CSS)
attacks. It should be noted that $g is a transient variable, i.e.
it is just used to carry information between page views and not stored
in a database. The only way the problem could be exploited was by
crafting a special link and then clicking on it. The fix removes the
vulnerability.

2. We removed <img> from the default $allowed_tags in the
forums code for obvious CSS-related reasons. We recommend that you do
not allow <img> unless you are operating in a closed and secure
environment.

:r ! diff -ur phpreactor-1.2.7/ phpreactor-1.2.7pl1/
Only in phpreactor-1.2.7/: changes-1.2.7
Only in phpreactor-1.2.7pl1/: changes-1.2.7pl1
diff -ur phpreactor-1.2.7/conf/bbs.conf.php phpreactor-1.2.7pl1/conf/bbs.conf.php
— phpreactor-1.2.7/conf/bbs.conf.php Wed Feb 28 12:59:00 2001
+++ phpreactor-1.2.7pl1/conf/bbs.conf.php Fri May 24 16:13:50 2002
@@ -22,10 +22,8 @@
//what directory are the icons for the forums stored in
$icondir = $reactorcore.” /img/” ;//relative to document root, include trailing /
-//what HTML tags will you allow your users to use.
-//note: I do not recommend allowing <br> or <p> as newlines are converted to
-//<br> tags in the comments.
-$allowedtags = ” <b> ,<i> ,<font> ,<img> ” ;
+/** WARNING: allowing tags like <img> , <iframe> and other may open your
* site to XSS (Cross Site Scripting) attacks. Only use those tags when
* you have a trusted user base or are running in a closed environment,
* eg. an intranet.
*/
+$allowedtags = ” <b> ,<i> ,<font> ” ;

// THE MAXIMUM NUMBER OF RECORDS YOU WANT TO DISPLAY ON ANY PAGE VIEW
//this is already specified in global.inc.php but you can change it here
diff -ur phpreactor-1.2.7/inc/global.inc.php phpreactor-1.2.7pl1/inc/global.inc.php
— phpreactor-1.2.7/inc/global.inc.php Wed Feb 28 12:59:00 2001
+++ phpreactor-1.2.7pl1/inc/global.inc.php Fri May 24 16:15:12 2002
@@ -40,6 +40,11 @@
$boardname = $tmp_array[count($tmp_array) - 2];

/*
+* Strip the nasties from $go … preventing XSS attacks
+*/
+$go = strip_tags($go);
+
+/*
* the mailfrom() function allows you to set the ” Return-Path:” header when using
* sendmail. This bounces messages to the sender. done by using sendmail -f
*/

Also a new service for developers ::: http://www.bad-sector.org/dtraq.php Track who is downloading what from your website and then contact them later about updates or announcements.

I’m open for suggestions about how to speed up the release process. Anyone?

2. Completion of links/ (anyone?) We need to add two scripts, addlink.php and addcategory.php . Each will just send an email to an admin with a link which will add the (link|category) into the system. See bbsrequestforum.inc.php for an example.

3. accounts/ (raja) The accounts board will make a more robust and flexible user management system. I already have the majority of this code written, I just need to integrate it and modify users.inc.php to use the new system.

4. documentation in docs/ (anyone?) This is necessary, and any benevolent developers who wish to document their code/experience will be appreciated. Thanks to peterj for the docs he contributed.

5. New languages (anyone?) These are always welcome.

6. The port to PostgreSQL. I have given this much thought and it can be divided into several parts:

a. development of the required db.inc.php for postgresql. I have done this and posted it to the mailing list previously.

b. altering the table definitions to work with postgres. here, we should try to alter both the mysql and pgsql table defs so they are as similar as possible and try to use ANSI sql. The mysql table defs will be stored in sql.mysql/ while the pgsql table defs will be stored in sql.pgsql/ The most critical difference will be that sequences will have to be created or postgres. I have a pretty good idea about how to handle this but am delaying because fo time contraints. If anyone has serious experience with pgsql and wants to take this on, let me know and i’ll lay out the plan in detail.

c. altering the sql in the code. there are parts of the code which will require distinct sql depending on what database is used. like the table defs, we should try to keep the sql for each database as similar as possible, where that doesn’t work, we’ll create a function called picksql() in db.inc.php which looks like the folllowing:

//db.mysql.inc.php version
function picksql($mysql = ”, $pgsql = ”)
{
return $mysql;
}

//db.pgsql.inc.php version
function picksql($mysql = ”, $pgsql = ”)
{
if ($pgsql) return $pgsql;
else return $mysql;
}

usage would be like:
$sql1 = picksql(“SELECT * FROM $userstable”, “SELECT * FROM $userstable”);

d. development of appropriate backup strategies.

I want to avoid using transactions at this point as they won’t really give us any added value for what we are doing now.

7. If anyone has any other features they would like to see for 2.0, speak now or forever hold your peace. Or at least hold it until 2.2.

8. have an optional mailing list address for new articles to be cc’ed to.

Please comment.