Sort Of IP Check Or Other Security Check
Do sessions already do some sort of IP check or other security check or do I have to do this manually? My problem is that I want to use sessions to log in users to my message board. My concern is that a non-cookie user, we'll call her Mary, will post a link to another message at my site and that link will include her session id. If someone else, call him John, clicks on that link, will John now have the same session id as Mary? Or are sessions smart enough not to let that happen?
View Complete Forum Thread with Replies
Sponsored Links:
Related Messages:
Security Check On
This code follows an HTML form that accepts typed user input and there is one file upload form. All of this information is stored in a MySQL database, except the image. The image is stored in a directory on my web server and the path to that file is stored in a database. I specified the maximum file size in my HTML form and I have the file types limited to gif and jpg. Is there anything I can do to "sanitize" the information input in the HTML form fields, other than using htmlentities()? Code:
View Replies !
View Related
Basic Security Check
I'm looking for some simple code to ensure that a $variable read from the URL originates on my site. Example URL: http://mysite.com/page.php?variable=1 I want code that prevents someone from calling a file from another site, for example: http://mysite.com/page.php?variable=http://badsite.com/file.exe
View Replies !
View Related
Best Way To Check Security Of The Pages.
I just need to know the best way to check security of the pages. When I write log-ins I compare username and password to the mysql database, then create cookies. Then each page starts with an include. The page is a check to confirm that the cookies have been set, then confirm that the username and password are the correct ones with relation to each other. If this is all good it returns true. Following this there's an if statemtent, if ($check == "true"){ the site shows, } else{ $log_error; die(); } Is this secure enough, is there ways round this, or better ways of doing it?
View Replies !
View Related
Security Check .htaccess
I am trying to convert an old static site of several hundred pages into a CMS. So, I need to preserve old URLs (lots of deep links, excellent rankings, etc.) In .htaccess I have: Options +FollowSymLinks RewriteEngine on RewriteRule .*(php)$ template.php which directs the old .php URLs to the new template.php page Then, on template.php I have: $page = pathinfo(($_SERVER[REQUEST_URI])); $page = $page['basename']; if(in_array($page, $pages)) include("$page"); which captures the old file name, checks it against an array of valid pages I have this working on my test server, but before I put much more time into it, or worse, take it live, I thought I would get a security check. Any major holes in the above? If so, strategies to plug them?
View Replies !
View Related
Basic URL Security Check
I'm looking for some simple code to ensure that a $variable read from the URL originates on my site. Example URL: http://mysite.com/page.php?variable=1 I want code that prevents someone from calling a file from another site, for example: ...mysite.com/page.php?variable=http://badsite.com/file.exe
View Replies !
View Related
Security Check Idea - PHPSESSID
We currently use temp sessions only for login tracking (no cookies) and we don't pass the PHPSESSID in the URL. However, if I know someone's session ID, I can take it over by passing that PHPSESSID in the URL just as if I logged in. So, in my security check, for another layer of protection, basically if I catch someone passing the PHPSESSID as a GET variable, I don't allow access.
View Replies !
View Related
Add A Drop Down Menu For Check In And Check Out Date
i have done a booking system and want to add a drop down menu for check in and check out date. I have done the drop down menu and the date display in is today's date. I wanted to make the the date 3 days in advanced of todays date. <select name="dayIn" > <? for ($i=1;$i<=$days;$i++) { if($i == $_POST['dayIn']) { ?> <option value="<?=sprintf('%02d', $i)?>" selected><?=$i?></option> <? } else if($_POST['dayIn'] == "" && $i==date(d)){?> <option value="<?=sprintf('%02d', $i)?>" selected><?=$i?></option> <? } else { ?> <option value="<?=sprintf('%02d', $i)?>"><?=$i?></option> <? } } ?> </select> and here is my code for check out: <td>Check-out date</td> <td> </td> </tr> <tr> <td><select name="dayOut"> <? #$nextDayOut=$_POST['dayIn']+1; $nextDayOut = date('d', strtotime('+1 days')); for ($i=1;$i<=$days;$i++) { if($i == $nextDayOut) { ?> <option value="<?=sprintf('%02d', $i)?>" selected><?=$i?></option> <? } else { ?> <option value="<?=sprintf('%02d', $i)?>"><?=$i?></option> <? } } ?> can anyone help me figure this thing out?
View Replies !
View Related
File Check-in/check-out System?
I'd like to a build a PHP-based interface for sharing documents (MS Office docs, latex, etc). I need to be able to allow users to "check-out" the files for their exclusive use and then go through a "check in" process when they re-upload the doc so it's accessible again to everyone else. I'd also like to implement some form of version control where older versions of the docs can be in some sort of repository. I'm not quite sure how to approach either concept. I'm wondering if anyone can give me tips on how I might go about this.
View Replies !
View Related
Apply Some Sort Of Encryption/security
I made a "members" script for my site, where poeple have the choice to register to be part of the community... its in PHP, and someone emailed me saying that they could easily hack into the members page -- they could view all the passwords log into the admin page, and what not... I was wondering if there's a way I could apply some sort of encryption/security so that I could prevent this. The person that did it, gave me a hint - saying it was something easy that I could do to prevent this... but wont tell me exactly what. I was thinking somewhere along the lines of CHMOD-ing the files to 666 or 755 or something.. but I dont think that's quite it.
View Replies !
View Related
Check Box?
i am trying to create few check box in one page without a submit button, and there are 5 have which is some with this. User only able to click submit in the last page after he make a selection after these 5 page. How can it keep the selected check box so that i can process in last page. I had heard there are one way to create a onclick function inside check box but how?
View Replies !
View Related
CHECK URL
How it can be checked that a URL exists or not in PHP.There is one way is to use fopen function then passing the URL as a parameter. Like this, <? $URL = "http://www.abc.com"; $fp = @fopen ($URL, "r"); if (!$fp) { die ("Cannot open website $URL!"); } ?> But I think that there should have some other smart technique.
View Replies !
View Related
Can I Check SSL Somehow With PHP?
Ever since I got a server for our site, it just opens new issues. Here is the problem: My SSL Cert somehow got corrupted. The server is managed, so they fixed it right away once I noticed it, but nobody was able to checkout until it was fixed, and I cannot check the site every hour. Here is what I want to do (but the server people say it is not possible): Is there a way, by chron or otherwise, to run a PHP that requests a secure page, and if it does not respond, it emails a warning? It seems that this should be able to be done without too much trouble. Any ideas?
View Replies !
View Related
Check Day
I'm using PHP 4.4.4 and I was wondering if anyone knows of a function or quick way, given a scalar representation of month (as a number between 1 and 12), day, and year (as a four digit number, e.g. 2007), how would I tell if that day is a Saturday?
View Replies !
View Related
Check Box
i want to insert checkbox into mysql like when someone insert his e-mail i would give him option to keep his email private by check box. how can i insert it into mysql and when i show his information print "you can't see the email" or something.
View Replies !
View Related
Php Check
My code doesn't work and I'm not sure why. It is supposed to check whether someone is using IE. I'm trying to do this the fastest way possible, so help would be appreciated. <?php if (strpos($_SERVER['HTTP_USER_AGENT'], "MSIE") === TRUE) {echo "IE.";}else{echo "something better";}?> This is always returning "something better" even if viewed in IE. Any ideas why?
View Replies !
View Related
Check Which OS
How can I check which Operation System I use? I want to do this: if (windows) { setlocale(LC_ALL, 'nld_nld'); } else { setlocale(LC_ALL, 'nl_NL'); } I looked in phpinfo but I can't find a super global the outputs which OS I'm using.
View Replies !
View Related
$check
I am trying to create a button that will appear when a member has a new unread message. I know how to do a check in the database and if an item is found it will return an action. Like this: $check = mysql_num_rows(mysql_query("SELECT * FROM `messages` WHERE `status`='unread'")); if($ch == 1){ The problem is there may be many unread messages and if there are more than one the button doesn't show up. What is the correct way to write this so the button will appear if any unread messages are in the database no matter how many?
View Replies !
View Related
Check Whether
stringA is from file.txt .it is open , then some soft of loop is activated and check against file1.txt . after check the whole file, if there's no match, stringA is insert into file1.txt.
View Replies !
View Related
Check For URL
I'm using the following piece of code: if ( (stristr(basename($PHP_SELF),'index')) and (!isset($_GET['cPath'])) ) { require(DIR_WS_INCLUDES . 'header2.php'); } else { require(DIR_WS_INCLUDES . 'header.php'); }
View Replies !
View Related
Check For Folder
how would i check if there's at least one folder in the current folder? the current folder is $dir/$f/ this is what i have, but i know its wrong $fillle = "$dir/$f/"; if (file_exists($fillle)) {$Q="true";} else{$Q="false";}
View Replies !
View Related
How To Check If I've Been CHMODED 220 ?
My host and I have come to a dissagreament on filedownload sizes, and everyday when I wake up, I see that I'm back to 220 for that /files/ directory. I'd like to point out that it's nothing illegal, it's just gamepatches, and yes... these can get quite big. Now, untill I settle that, I need to redirect my visitors IF that site is innaccessible to another box... how can i detect if the user gets a 403 page so that I can redirect him? Had a look at "socket_read()" etc... but can't make heads or tail in it yet, will keep looking in there, but if someone can give me a push in the right direction, I'd apreciate it.
View Replies !
View Related
How To Check For Multiple @'s
We are trying to prevent spammers from mass mailing their list while using our contact us script. We have a few security measures in place but would also like to add a "check for more than 1 @'s in the to:, cc: and bcc: fields. Can anyone point us to some code or turotials for doing this?
View Replies !
View Related
How To Check If Theres Something In STDIN
How do i check if there is something new in STDIN? I ran into this problem when i was doing some simple command line script that takes input from STDIN. And i noticed that feof() always returns TRUE with STDIN. Also it seems that if i fread(STDIN) and there is nothing in STDIN, it waits forever for input. So i was wondering if there is some way to check how much stuff there is in STDIN and then read it, because i dont want to wait for the input forever.
View Replies !
View Related
How To Check SessionID Available Or Not?
I am working on a site in which I need to check whether user is online or not. If user successfully logged out then I can change status from online to offline but if user do not logged out and close the browser or session timeout then in both of the case I do not handle how to change user's status from online to offline.
View Replies !
View Related
Check Box Question
I have a small question regarding check box and mail() forms. I have a mail() form on my website and I want to add to it a check box that if checked the user get a copy of the data he sent and if not check the mail is sent to me only please help me doing this because I have tried how to figure it out but I couldnt and the problem is that am not a really good php developer am just a beginer.
View Replies !
View Related
Spell Check
I have a form with 6 different fields for the user to fill in. One of the field is the text field and they are suppose to fill in about 6 lines of information. This page/information is dynamically get displayed on my webpage. How do I make sure that before it gets displayed on the web some kind of spell check is done automatically. I did try at php.net. There is a function call Aspell() but I don't know how to get that to work for my problem.
View Replies !
View Related
Domain Name Check
I want to check domainnames on my website. Type in a name and you'll see if it exists or not. I've once had a CGI Script dat does this... but I wonder if its also possible in PHP.. and how?
View Replies !
View Related
Webmail Check
How would I go about writing a script that checks users GMAIL and HOTMAIL emails and displays it for them? if you go to www.netvibes.com it allows you to check your gmail or hotmail and yahoo accounts right from their website.
View Replies !
View Related
How To Check Value Of Variable??
I have this input box that is optional called "Reason" If a user submits this form with data in the "Reason" form then I want to take those contents and add to them, ie: if (isset($reason)) { $reason_message = "Reason for rejection: $reason";} else { $reason_message = "";} Then I have $reason_message sent alow with other stuff in an email. The problem is that if a user leaves "Reason" empty, when they get their email, this string called "Reason for rejection:" is sent. Bottom line: is there a way for me to tell that "Reason" has no value and there for not send "Reason for rejection:"
View Replies !
View Related
Checkboxes Id Check
I have it so a user ticks checkboxes with what 6 numbers they chose, and i need it to check it with a list of 12 numbers and when they press submit, if they got any correct, its says how many they got right. I laso need it to say if someone has selected more than six options. The checkboxes id are the numbers, ie checkbox1, checkbox2, checkbox3 etc up to checkbox20 Code:
View Replies !
View Related
Check For Cookies
This is more of a pain than I thought it would be. I need a simple code segment to determine whether a browser accepts cookies or not. When I pass variables between pages when cookies are turned off, the global variables are empty between pages, fine, that tells me cookies store the global variables - right? I store the values in $_session and when cookies are turned on values are passed between web pages - I can see these values in fields that are displayed in the next web page. I need to be able to check on the 'first' entry webpage after a user enters that page directly whether or not their browser accepts cookies at that point. Everything I have tried complex to simiple won't work. How do I do this?
View Replies !
View Related
Check My Math!
Not sure about you, but when I run this, it tells me 59001.31 doesn't equal 59001.31. Change each side of the equation by a hundreth or two and it checks. Change it a bit more, and it won't. _What_ is going on here?! <?php $subtotal=59001.31; $principal=58605.33; $interest=395.98; $check=$principal+$interest; echo("<pre>"); echo("Check: " . $check . " "); echo("Subtotal: " . $subtotal . " "); if($check!=$subtotal) { echo("Check (" . $check . ") does not equal subtotal (" . $subtotal . ")"); // Check doesn't equal subtotal } else { echo("Check (" . $check . ") equals subtotal (" . $subtotal . ")"); // Check does equal subtotal } echo("</pre>"); ?>
View Replies !
View Related
Check Fonts
Is there a way to check wich fonts are installed on sombodies browser? if not in php maby in java or something. I need the code for that for a highly customizable graffity wall.
View Replies !
View Related
Cookie Check
I would like to check and see if my visitor’s browser accepts cookies, and do it on the first page they landed on. To best of my knowledge ‘setcookie’ function does not give a confirmation back if the cookie was already set. Is this possible and if so how? Some notes:
View Replies !
View Related
How Do I Check Against The PHP Version?
I'm writing an installation script for my PHP content management system. I've written the code to be compatible with PHP 4.06 or later. I need to get the PHP version and throw an error message if the version is less than 4.0.6. I realize that phpinfo outputs the info, but what function would get me the version string?
View Replies !
View Related
Using PHP To Check POP Email?
PHP document that would log-in to the users POP mail server, and check for mail, allow them to "compose" and send an email through that server, along with any attachements, etc. I've seen this done with Cold Fusion, and am looking for information on this using PHP.
View Replies !
View Related
|
TRACKER
