phplib-users — A list for users of phplib to talk / discuss phplib

Re: [Phplib-users] Multi-domain sessions?

[Walters J. P. <jw...@sa...>]

Pardon my feeble attempt at an answer...

I believe that w/ cookies you don't have much control over setting one for
*another* domain.  I think the most control you have is limiting it to the
subdomain you're on (mybox.whatever.com) or the whole domain
(*.whatever.com).  So you need another way to pass around session id's
between sites.  Remember that the traditional way of pulling it from a
cookie will be non-existent, so can you simply pass it in the URL?  In any
links between sites, add a variable to the url using the GET method (or
POST i guess if you want to hide it), then on the destination site do that
hack of session4.inc and set their session id to the one passed in.  You
will want to verify the HTTP_REFERER so that sessions can only be
"hi-jacked" by your sites.

Justin Walters


Today @ 3:45pm, James Stewart typed..

> I posted on this a while back but hadn't really thought through what I
> wanted to do.
>
> I have three sites which all share a single database and which I'd like
> to share a single shopping cart. The SSL certificate is only valid for
> one of the domains so I definitely need to be able to have that domain
> access carts started at either of the other sites. Two of the sites are
> on one server and the third is on another, along with the database.
>
> I'm using session4.inc and I'm guessing the best way to handle this
> would be to send three cookies when the user first visits any of the
> sites, one from each domain, each containing the session ID. I would
> then get the same session ID when the user went to any of the sites
> during that browser session.
>
> My initial attempt to do this involved hacking session4.inc so that if
> $cookie_domain is an array it sends a cookie from each domain listed but
> this doesn't appear to have worked. My sessions within one site have the
> same ID but when I move to either of the other sites I get a different
> ID.
>
> Any ideas?
>
> James.
>
>
> _______________________________________________________________
>
> Have big pipes? SourceForge.net is looking for download mirrors. We supply
> the hardware. You get the recognition. Email Us: ban...@so...
> _______________________________________________
> Phplib-users mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phplib-users
>


_______________________________________________________
                               2 common misconceptions
       0) Pain is bad.
       1) Omniscience necessitates predestination.

[Phplib-users] Multi-domain sessions?

[James S. <li...@br...>]

I posted on this a while back but hadn't really thought through what I 
wanted to do.

I have three sites which all share a single database and which I'd like 
to share a single shopping cart. The SSL certificate is only valid for 
one of the domains so I definitely need to be able to have that domain 
access carts started at either of the other sites. Two of the sites are 
on one server and the third is on another, along with the database.

I'm using session4.inc and I'm guessing the best way to handle this 
would be to send three cookies when the user first visits any of the 
sites, one from each domain, each containing the session ID. I would 
then get the same session ID when the user went to any of the sites 
during that browser session.

My initial attempt to do this involved hacking session4.inc so that if 
$cookie_domain is an array it sends a cookie from each domain listed but 
this doesn't appear to have worked. My sessions within one site have the 
same ID but when I move to either of the other sites I get a different 
ID.

Any ideas?

James.

[Phplib-users] Windows absolute paths & template.inc

[Mike G. <mi...@op...>]

Hello,

A Back-End user suggested the following work around for Windows absolute
path names.  I can't test this myself very easily (mostly because I try
not to work in Windows and don't have things set up for it) and wanted
to pass it along to the phplib team for consideration.

Mike

-----Forwarded Message-----
comments = Hi,
Maybe i found a little bug in the template.inc script.

There is no check for Windows absolute pathnames, eg  c:\....

This workaround helps:


  function filename($filename) {
    // Check for Windows (c:/...) and UNIX relativ pathnames
    if ( (substr($filename, 1, 1) != ':')  and (substr($filename, 0, 1) != "/") ) {
          $filename = $this->root . "/" . $filename;
    }

    if (!file_exists($filename)) {
      $this->halt("filename: file $filename does not exist.");
    }

    return $filename;
  }


-- 
Mike Gifford, OpenConcept Consulting, http://www.openconcept.ca
Open Source Web Applications for Social Change
New Site Launched: http://www.patmartin.org/
War is a poor chisel to carve out tomorrows. ML King, Jr.

Re: [Phplib-users] phplib vs. pear

[Tarique S. <ta...@sa...>]

On Thu, 9 May 2002, Kristian Koehntopp wrote:

> No, really, PHPLIB was written on and for PHP3. That is an environment
> where classes really are nothing more than namespaces, and where

Hey, nice to know you still follow this list

Thanks

Tarique


-- 
=============================================================
PHP Applications for E-Biz: http://www.sanisoft.com

Indian PHP User Group: http://groups.yahoo.com/group/in-phpug
=============================================================

[Phplib-users] Feature similar to auto_init?

[Willie D. L. <wi...@un...>]

Is there a feature similar to auto_init of Session,
which is called when the session is destroyed?

For example, when a user closes the browser during
a session, or when the session is expired by timeout,
I would like to save some data. Is this possible?

Thanks in advance,

Willie D Leiva
http://www.icmc.sc.usp.br/~wdl/

Re: [Phplib-users] phplib vs. pear

[Kristian K. <kr...@ko...>]

On Tue, May 07, 2002 at 08:57:58AM +0200, Saulius wrote:
> By speed there are two groups: 1) mysql, phplib, adodb; 2) pear, 
> metabase. I think it's not effective to use pear db in projects.

From an OO design POV phplib has extremely badly designed database
classes. That's why they are that fast. :-)

No, really, PHPLIB was written on and for PHP3. That is an environment
where classes really are nothing more than namespaces, and where
state and code cannot be kept efficiently in memory, like for example
it would be possible in an application server and with truly compiled
code.

OO design techniques strongly favor such an appserver execution
environment, and PHP does not offer such an environment at all,
in fact, it almost offers the antithesis to such an environment.

PHPLIB was written with the particular execution model used in
PHP in mind and tested on sun4m hardware. That's why it performs
adequately, even today. It is not a bit fashionable, though.

Kristian

-- 
http://www.amazon.de/exec/obidos/wishlist/18E5SVQ5HJZXG

[Phplib-users] where is New phpauth code

[John L. <jo...@li...>]

hello,

Im wondering where I can get the new phpauth code.

I think I deleted the email with that info previously.

John

RE: [Phplib-users] phplib vs. pear

[Peter B. <re...@f2...>]

At 12:12 PM 5/7/02 -0700, Daniel Bondurant wrote:
>anyone know what the cause of the slowdown is?
>is it all the included files, or just the way the db class is written?

I believe it is partly to do with the amount of code being included, but 
mainly because (and this is hearsay) the way they are written - the classes 
are well separated with good inheritance.  Unfortunately PHP is slower than 
usual when you do this, hence the results :-(

I'm hoping that PHP5 will fix these problems so we can write better OO code 
- as I'm slowly learning the best way to do it for Java I want to do the 
same in PHP without the overhead - although seriously OO appears to be 
overkill for many little tasks that PHP is used for.  Of course that 
doesn't mean that the language shouldn't support them as for larger 
projects (or for proper classes as opposed to function libraries wrapped in 
a class) they are brilliant.

Peter.

---oOo---
sendcard - The free PHP e-card solution
http://www.sendcard.org  

Re: [Phplib-users] New phpauth code

[Giancarlo P. <gia...@na...>]

> That's a screwup on my part.  Should read "auth object doesn't
> exist...."
> 
> > I have not thoroughly inspected your code, but what I have seen indicates
> > that you have dismissed many of the design decisions followed in the PHPLib
> > classes. Why?
> 
> I've dismissed very little.  The biggest problem that I had with
> phplib's auth class was that the existence of an auth object didn't mean
> the user was authenticated.  Indeed, even the "is_authenticated"
> function didn't work properly, as it would return "form" if the user was
> in the process of logging in.  Checking for authentication meant going
> through the convoluted steps of checking for an auth object, seeing if
> is_authenticated returned anything, and if so making sure it wasn't
> "form".  Now, it's a simple check for the existence of an auth object in
> the $_SESSION global.

An he wsn't 'nobody'!

> 
> Additionally, the separate perm object didn't make sense to me.  Nor did
> the inclusion of various files (headers, etc.) which sometimes resulted
> in confusion of scope (header might be included in global scope, or from
> within the auth object if logging in or registering).
> 
......
> new code.  These problems involve the fundamental architecture of the
> auth class that they present, working on it doesn't make sense.


I came to this same conclusion about the intrinsic obsolescence of
auth and perm. I was also trying to incorporate them with 'user', and
have a single object, and keep them clean from the phisical way of
interaction with the client. So have the 'form' state eventually
handled outside this that I called the BigUser object, by the page
funcions.

I have no time now to check phpauth, I'll see it as soon as I am back
to php for any project. 
But am courious about what users think of

Giancarlo

RE: [Phplib-users] phplib vs. pear

[Daniel B. <bo...@io...>]

anyone know what the cause of the slowdown is?
is it all the included files, or just the way the db class is written?

-----Original Message-----
From: Saulius [mailto:sa...@ye...]
Sent: Tuesday, May 07, 2002 4:59 AM
To: php...@li...
Subject: Re: [Phplib-users] phplib vs. pear


Hello,

> classes had been included but before they were initialised.  If you=20
> alter it to start timing before the classes are included then the
output=20
> is not quite so unfavourable for PEAR.

Yes. Exactly I altered tests and stated timing before any includes. And=20
I was suprised. For example, doing 1 query (after altering tests) took:=20
mysql: 0.03 sec, phplib: 0.06 sec, adodb: 0.14 sec, pear: 0.17 sec.=20
Diference among phplib and pear is enough big: 0.11 sec. So I think,=20
pear is too slow and very unefective. If it would be interesting I could

put results in website.
> See http://www.dybnet.de/MDB/benchmarks.pdf for some more test
results.

My test were taken from that site (http://phplens...).

Bye,
Saulius


_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We
supply
the hardware. You get the recognition. Email Us:
ban...@so...
_______________________________________________
Phplib-users mailing list
Php...@li...
https://lists.sourceforge.net/lists/listinfo/phplib-users

RE: [Phplib-users] New phpauth code

[Brian P. <bp...@ct...>]

Relax people. This thread reminds me one of those nature-channel
documentaries where the two dominant males are killing each other in order
to impress a nearby female. In case you didn't know, there are no females
here! And, if there are females here, they could care less which auth class
is better. :)

If phpauth is better, time will tell.

Incidentally, the template class doesn't appear to be logically linked to
phplib in any way. You could, hypothetically, include 'template.inc' and
nothing else.

-bpopp

-----Original Message-----
From: Michael Chaney [mailto:mdc...@mi...]
Sent: Tuesday, May 07, 2002 9:39 AM
To: Tarique Sani <ta...@sa...>
Cc: 'phplib-users'
Subject: Re: [Phplib-users] New phpauth code


On Tue, May 07, 2002 at 10:23:12AM +0530, Tarique Sani
<ta...@sa...> wrote:
> On Mon, 6 May 2002, Michael Chaney wrote:
> 
> > I've been promising this for a year, but it's undergone plenty of
> > refinement to make it worthwhile.
> 
> Great!!
>  
> I presume you are not asking it to be integrated with PHPlib 
> 
> Are you?

Indeed, your presumption is right.  For those not using the templating
system in phplib, I believe that I have a better alternative.  Again,
this isn't a slam on phplib, I have a lot more flexibility since I don't
need to be backward compatible.

Michael
-- 
Michael Darrin Chaney
mdc...@mi...
http://www.michaelchaney.com/

_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: ban...@so...
_______________________________________________
Phplib-users mailing list
Php...@li...
https://lists.sourceforge.net/lists/listinfo/phplib-users

Re: [Phplib-users] New phpauth code

[Richard A. <rh...@ju...>]

At 9:39 AM -0500 7/5/02, Michael Chaney wrote:

>Indeed, your presumption is right.  For those not using the templating
>system in phplib, I believe that I have a better alternative.  Again,
>this isn't a slam on phplib, I have a lot more flexibility since I don't
>need to be backward compatible.

OK, that's sorted. Are you done spamming your wares on this list now?

 ...R.

Re: [Phplib-users] New phpauth code

[Michael C. <mdc...@mi...>]

On Tue, May 07, 2002 at 10:23:12AM +0530, Tarique Sani <ta...@sa...> wrote:
> On Mon, 6 May 2002, Michael Chaney wrote:
> 
> > I've been promising this for a year, but it's undergone plenty of
> > refinement to make it worthwhile.
> 
> Great!!
>  
> I presume you are not asking it to be integrated with PHPlib 
> 
> Are you?

Indeed, your presumption is right.  For those not using the templating
system in phplib, I believe that I have a better alternative.  Again,
this isn't a slam on phplib, I have a lot more flexibility since I don't
need to be backward compatible.

Michael
-- 
Michael Darrin Chaney
mdc...@mi...
http://www.michaelchaney.com/

Re: [Phplib-users] phplib vs. pear

[Saulius <sa...@ye...>]

Hello,

> classes had been included but before they were initialised.  If you 
> alter it to start timing before the classes are included then the output 
> is not quite so unfavourable for PEAR.

Yes. Exactly I altered tests and stated timing before any includes. And 
I was suprised. For example, doing 1 query (after altering tests) took: 
mysql: 0.03 sec, phplib: 0.06 sec, adodb: 0.14 sec, pear: 0.17 sec. 
Diference among phplib and pear is enough big: 0.11 sec. So I think, 
pear is too slow and very unefective. If it would be interesting I could 
put results in website.
> See http://www.dybnet.de/MDB/benchmarks.pdf for some more test results.

My test were taken from that site (http://phplens...).

Bye,
Saulius

Re: [Phplib-users] phplib vs. pear

[Peter B. <re...@f2...>]

At 08:57 AM 5/7/02 +0200, Saulius wrote:
>Yesterday I did some tests on various db abstration layers (libriaries): 
>native mysql, phplib, adodb, pear, metabase. What I can say about pear db, 
>it is a big looser - latency is very big, queries work enough slow. By 
>speed there are two groups: 1) mysql, phplib, adodb; 2) pear, metabase. I 
>think it's not effective to use pear db in projects.

Did your tests include the time to include the library files?  For 
instance, when John Lim tested them he only started timing *after* the 
classes had been included but before they were initialised.  If you alter 
it to start timing before the classes are included then the output is not 
quite so unfavourable for PEAR.

See http://www.dybnet.de/MDB/benchmarks.pdf for some more test results.

But I agree, PEAR is slow... it's just got a decent architecture and good 
separation of the classes, and is let down by PHP itself...

Peter.

--
Maple Design - quality web design and programming
http://www.mapledesign.co.uk

Re: [Phplib-users] phplib vs. pear

[S. <bj...@ba...>]

* Daniel Bondurant wrote:
> What is the status of bringing together pear and phplib? 

PHPLIB::Template has been converted to PEAR (HTML_Template
in it, not yet released as a package).

-- 
PHP-Support * realitätsnahe Performance-Messungen mit Code-Analyse
    Webapplikationsentwicklung * PHP-Schulungen * Consulting
    
             0700-THINKPHP -*- bj...@th...

Re: [Phplib-users] phplib vs. pear

[Tarique S. <ta...@sa...>]

On Tue, 7 May 2002, Richard Archer wrote:

> If PEAR ever evolves into a distribution network like CPAN and
> loses the elitest attitude I might re-think my position. The last
> thing I want is some overlord telling me how to write my code.

Also the insistance that only one Class for one task is pretty stupid and
against the spirit of freedom.

Tarique

-- 
=============================================================
PHP Applications for E-Biz: http://www.sanisoft.com

Indian PHP User Group: http://groups.yahoo.com/group/in-phpug
=============================================================

Re: [Phplib-users] phplib vs. pear

[Saulius <sa...@ye...>]

Hello,

> If PEAR ever evolves into a distribution network like CPAN and
> loses the elitest attitude I might re-think my position. The last
> thing I want is some overlord telling me how to write my code.

Yesterday I did some tests on various db abstration layers (libriaries): 
native mysql, phplib, adodb, pear, metabase. What I can say about pear 
db, it is a big looser - latency is very big, queries work enough slow. 
By speed there are two groups: 1) mysql, phplib, adodb; 2) pear, 
metabase. I think it's not effective to use pear db in projects.

Bye,
Saulius

Re: [Phplib-users] New phpauth code

[Tarique S. <ta...@sa...>]

On Mon, 6 May 2002, Michael Chaney wrote:

> I've been promising this for a year, but it's undergone plenty of
> refinement to make it worthwhile.

Great!!
 
I presume you are not asking it to be integrated with PHPlib 

Are you?

If my presumption is right then you can ask anyone who does not like your
code to "Get lost"

BUT in the unlikely event my presumption is wrong then - I would say "Get
lost" 

Cheers

Tarique

-- 
=============================================================
PHP Applications for E-Biz: http://www.sanisoft.com

Indian PHP User Group: http://groups.yahoo.com/group/in-phpug
=============================================================

Re: [Phplib-users] New phpauth code

[Michael C. <mdc...@mi...>]

On Tue, May 07, 2002 at 09:25:56AM +1000, Richard Archer wrote:
> At 6:13 PM -0500 6/5/02, Michael Chaney wrote:
> 
> >If it doesn't work for you, I don't care.
> 
> Nice attitude.

It is, actually.  I put my code up, and get a long reply where he tells
me that it doesn't work for his particular situation.

I can name 100 pieces of software that don't work for my situation.  I
don't use Windows XP, Adobe Photoshop, Macromedia Flash, MS-DOS, Novell
Netware, the list goes on and on and on.

But I don't bother alerting these companies to the fact that I don't use
their software.  They don't care.

It is my hope that my software is useful to others.  If it isn't, too
bad.  It's useful to me, and it is useful to some other people who are
already using it.

If it doesn't fit somebody's needs in particular, well, hopefully they
can get those needs met elsewhere.  But it's not my problem.

Michael
-- 
Michael Darrin Chaney
mdc...@mi...
http://www.michaelchaney.com/

Re: [Phplib-users] phplib vs. pear

[Richard A. <rh...@ju...>]

At 4:57 PM -0700 6/5/02, Daniel Bondurant wrote:

>What is the status of bringing together pear and phplib?  There was
>quite a bit of discussion about it about a year ago, but nothing since.

While I can't speak for the other members of the development team,
I certainly don't intend to spend any time moving PHPLIB into PEAR.

If PEAR ever evolves into a distribution network like CPAN and
loses the elitest attitude I might re-think my position. The last
thing I want is some overlord telling me how to write my code.

In the meantime, I've not heard of any problems running PEAR classes
alongside PHPLIB.

 ...R.

Re: [Phplib-users] Current Production Version

[Richard A. <rh...@ju...>]

At 4:49 PM -0700 6/5/02, Andrew Crawford wrote:

>What is the current recommendation for production deployment?

I suggest the php-lib-stable CVS tree. The changes made there since
7.4pre1 (and indeed since 7.2c) are pretty much only to fix things
which were broken. So, even if there are bugs in the CVS, the bugs
in the releases are probably worse.

 ...R.

[Phplib-users] phplib vs. pear

[Daniel B. <bo...@io...>]

What is the status of bringing together pear and phplib?  There was
quite a bit of discussion about it about a year ago, but nothing since.

There is even a sf project dedicated to it, but there is nothing new or
interesting there.
http://sourceforge.net/projects/pear-phplib/

[Phplib-users] Current Production Version

[Andrew C. <An...@Ev...>]

Greetings,

I notice that there have been a lot of commits to the php-lib-stable CVS 
tree since 7.2d.  What is the current recommendation for production 
deployment?  7.2d?  7.2d with all the updates from CVS?  Some of the 
updates?  7.4-pre1?

Andrew Crawford
An...@Ev...

Re: [Phplib-users] New phpauth code

[Richard A. <rh...@ju...>]

At 6:13 PM -0500 6/5/02, Michael Chaney wrote:

>If it doesn't work for you, I don't care.

Nice attitude.

 ...R.