phplib-users — A list for users of phplib to talk / discuss phplib

RE: [Phplib-users] How to disable browser caching

[Layne W. <la...@if...>]

> There are cases where the url perhaps indicates a database
> record that has already been deleted, or some other change
> in data state has occurred, so it is not possible to
> recreate the page or else it would be venturing into
> undefined territory to do so.  Rather than worry about all
> these possiblities it would be easier just to keep them
> from going back to stale pages.


Easier, but never better. It might be okay if I was showing off pictures of
my cat, but we charge for professional-level web apps, so they damn well
better be checking every piece of data. I take validation and data integrity
_very_ seriously; in some pages, the validation accounts for more than half
of the code.

Layne Weathers
Ifworld Inc.

RE: [Phplib-users] How to disable browser caching

[Carl Y. <cyo...@le...>]

There are cases where the url perhaps indicates a database record that has
already been deleted, or some other change in data state has occurred, so it
is not possible to recreate the page or else it would be venturing into
undefined territory to do so.  Rather than worry about all these
possiblities it would be easier just to keep them from going back to stale
pages.

> -----Original Message-----
> From: Layne Weathers [mailto:la...@if...] 
> Sent: Thursday, March 28, 2002 11:48 AM
> To: 'Carl Youngblood'; php...@li...
> Subject: RE: [Phplib-users] How to disable browser caching
> 
> 
> > I have seen this behavior in IE all the time.  And I'm using IE 
> > version 6.0. There must be an official way to disable page caching 
> > because I've seen a
> > lot of high profile sites, like financial sites, that show
> > this "page has
> > expired" message when clicking the back button.
> 
> 
> Yes, but why would you ever _want_ that to happen on your 
> site? If a visitor sees a stupid browser message while on my 
> site, then I'm not earning my paycheck. Instead, I use the 
> no-cache feature of PHPLib's sessions to rebuild the page. Of 
> course some browsers, like Opera, may cache the pages anyway 
> (and I think Opera is right to keep a true history of pages 
> seen). Any problems caused by actions taken from an obsolete 
> page will be caught by basic data checking.
> 
> Layne Weathers
> Ifworld Inc.
> 

RE: [Phplib-users] How to disable browser caching

[Layne W. <la...@if...>]

> I have seen this behavior in IE all the time.  And I'm using
> IE version 6.0.
> There must be an official way to disable page caching because
> I've seen a
> lot of high profile sites, like financial sites, that show
> this "page has
> expired" message when clicking the back button.


Yes, but why would you ever _want_ that to happen on your site? If a visitor
sees a stupid browser message while on my site, then I'm not earning my
paycheck. Instead, I use the no-cache feature of PHPLib's sessions to
rebuild the page. Of course some browsers, like Opera, may cache the pages
anyway (and I think Opera is right to keep a true history of pages seen).
Any problems caused by actions taken from an obsolete page will be caught by
basic data checking.

Layne Weathers
Ifworld Inc.

[Phplib-users] formhandling and session

[<gro...@fr...>]

Hi,

I have a form for example:

Date from:_____
Date to:____

the user can put some dates in there. 
Now I want to store this information in my session, because I need these
dates also in the next forms.

1. Question
The from reloads itself. The form is submited over HTTP_POST_VARS.
I store the dates like this:
...
// Register the container array with all information about the order
if (!isset($s_leihauftrag)) {
    $s_leihauftrag = array();
    $sess->register('s_leihauftrag');
}
// save date_from
if (!isset(HTTP_POST_VARS[date_from]) {
    $S_leihauftrag['date_from'] = HTTP_POST_VARS['date_from'];
}
// save date_to    
if (!isset(HTTP_POST_VARS[date_from]) {
    $S_leihauftrag['date_to'] = HTTP_POST_VARS['date_to'];
}
...
Is that OK? And what, if I want to store about 15 Variables/Arrays like
this!
I guess there are better soloutions around!?!
Is ist better to store all data in one Array? (In this case, all
information about one order customer_ID, selchted items, date_from,
date_to, prices, paymethod...) 
One Array ist erasier to unregister after everything is in the database.

2. Question
How can I see what ist actually stored in the session? Is there a
special method?

3. Question
What is about HTTP_SESSION_VARS? Could and should I use it with PHPlib
and why?

If there are good examples about formprocessing and sessions around,
give me a link, pls ;-)

thx
Matthias

RE: [Phplib-users] How to disable browser caching

[Carl Y. <cyo...@le...>]

I have seen this behavior in IE all the time.  And I'm using IE version 6.0.
There must be an official way to disable page caching because I've seen a
lot of high profile sites, like financial sites, that show this "page has
expired" message when clicking the back button.

> -----Original Message-----
> From: Lars Heuer [mailto:ph...@qu...] 
> Sent: Thursday, March 28, 2002 9:47 AM
> To: php...@li...; Carl Youngblood
> Cc: 'php...@li...'
> Subject: Re: [Phplib-users] How to disable browser caching
> 
> 
> Hi,
> 
> > I have been to sites where, when you click on the browser's back 
> > button, you are given a message that says "this page has 
> expired" and 
> > you are thereby
> 
> This is just a Netscape Bug if you send data via POST.
> 
> > but that doesn't seem to do any good.  Does anybody know how to 
> > accomplish this?
> 
> Use NN 4.x :-))
> 
> Regards,
> Lars
> 
> -- 
> quiXS!          | http://www.quixs.com
> 

Re: [Phplib-users] How to disable browser caching

[Lars H. <ph...@qu...>]

Hi,

> I have been to sites where, when you click on the browser's back button, you
> are given a message that says "this page has expired" and you are thereby

This is just a Netscape Bug if you send data via POST.

> but that doesn't seem to do any good.  Does anybody know how to accomplish
> this?

Use NN 4.x :-))

Regards,
Lars

-- 
quiXS!          | http://www.quixs.com

[Phplib-users] How to disable browser caching

[Carl Y. <cyo...@le...>]

I have been to sites where, when you click on the browser's back button, you
are given a message that says "this page has expired" and you are thereby
forced not to use the back button to navigate the site.  I would like to
accomplish this same thing with my PHPLIB sessions, but for the life of me
can't figure out how to do it.  I've set the $sess->allowcache flag to 'no',
but that doesn't seem to do any good.  Does anybody know how to accomplish
this?

Thanks,
Carl Youngblood

Re: [Phplib-users] struck

[Lazaro F. <la...@mo...>]

Hi

The HTTP protocol enforces that not page output can be done before sending
the http page header

So in this case, there is any undesired ouput at the lines of code mentioned
below,

In my experience, this is caused by trailing chars (can be only empty lines)
after your php ending line "?>",  remove any character visible or not after
the "?>" at your local.inc file

Also can be an "echo" command or any other statement that causes php,
printing to the browser
before sending the HTTP page header

Hope this help
Lazaro

----- Original Message -----
From: nagendra prasad <tn_...@re...>
To: <php...@li...>
Sent: Monday, March 25, 2002 12:33 PM
Subject: [Phplib-users] struck


> hi all,
> i am trying toi install phplib in my linux box,
> when i try to run thge index.php3 or showoff.php3 page
> i'm getting the following errors.
>
>
> Warning: Cannot add header information - headers
> already sent by (output started at
> /var/www/html/php/php/local.inc:306) in
> /var/www/html/php/php/session.inc on line 392
>
> Warning: Cannot add header information - headers
> already sent by (output started at
> /var/www/html/php/php/local.inc:306) in
> /var/www/html/php/php/session.inc on line 117
>
> Warning: Cannot add header information - headers
> already sent by (output started at
> /var/www/html/php/php/local.inc:306) in
> /var/www/html/php/php/session.inc on line 404
>
> i'm not getting how to clear this .plz help me,i'm
> newbie
> prasad
>
>
>
> _______________________________________________
> Phplib-users mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phplib-users
>
>

[Phplib-users] struck

[nagendra p. <tn_...@re...>]

hi all,
i am trying toi install phplib in my linux box,
when i try to run thge index.php3 or showoff.php3 page
i'm getting the following errors.


Warning: Cannot add header information - headers
already sent by (output started at
/var/www/html/php/php/local.inc:306) in
/var/www/html/php/php/session.inc on line 392

Warning: Cannot add header information - headers
already sent by (output started at
/var/www/html/php/php/local.inc:306) in
/var/www/html/php/php/session.inc on line 117

Warning: Cannot add header information - headers
already sent by (output started at
/var/www/html/php/php/local.inc:306) in
/var/www/html/php/php/session.inc on line 404

i'm not getting how to clear this .plz help me,i'm
newbie
prasad

Re: [Phplib-users] protected functionality w/no mandatory login

[Richard A. <rh...@ju...>]

At 12:42 AM -0500 23/3/02, Brett Dikeman wrote:

>I don't want the links etc to appear unless they've already
>authenticated.  That's all easy and documented in the user


Users are only required to log in if you call:
$perm->check("admin");


What I do:

page_open(array("sess" => "My_Session", "auth" => "My_Auth", "perm" =>
"My_Perm"));
// display the item
if ($perm->have_perm("admin")) {
	// link to edit item page
}

So, if the user has logged in as admin they get admin options.
Normal visitors are blissfully unaware that admin options even exist.

 ...R.

[Phplib-users] data-garbage in session.inc

[Bernhard F. <bf...@on...>]

Hi!

I have a question:
I use permanent cookie-login.
Is it necessary to increase the $gc_time either?
Or can I purge all data older than one day and the user is still
logged in if he returns on my website after maybe ten days.

Bye,
Bernhard Finkbeiner

[Phplib-users] nevermind!

[Brett D. <br...@cl...>]

Found what I was looking for after some googling.  Should've tried 
that first...

-B

[Phplib-users] protected functionality w/no mandatory login

[Brett D. <br...@cl...>]

Okay, more questions now that I've managed to get phplib all working 
with pgsql.  I do plan on submitting a list of all the things I did, 
by the way.  Would have already, but have you ever been "reminded" in 
a rude way that copy/paste buffers aren't stacks?  Cut the text I had 
written, then went and copied the address for the list 
and...then...just sort of sighed realizing what I had just done.  Why 
does it only happen when a)you've done a cut, not a copy and b)done 
it with something fairly long that took a good 30 minutes to write? 
Baaaaah.

I'm setting up a very simple site that lists vendors our user group 
has established relationships with..eventually planning on adding 
comments+ratings, but for now, i just want editing capabilities for 
authorized users.  Yeah, phplib is a little like throwing the 1000lb 
gorrilla at the problem, but he's a gorrilla that'll come in handy 
when the problem turns out to have problem friends.

While I could give them a clickable link to a login page where admins 
can login and present them with an add page, a modify page, etc...it 
would be very nice to just use the session/authentication data to 
trigger display of a whole bunch of "edit" links in the vendor 
information display script(ie "click to edit this.")  Among other 
things, that's one vendor information script, not two, to 
maintain/update/fix/etc.

I don't want the links etc to appear unless they've already 
authenticated.  That's all easy and documented in the user 
manual...except that the example in the docs by default demands a 
password from you first thing.  That just blows the whole idea out of 
the water.  Users have got to be blissfully unaware except maybe they 
see a little "login" link tucked away in some corner.

I remember reading through the example code and noticing commentary 
about "nobody" users; sounds suspiciously what I'm looking to do(ie, 
they're 'nobody' until they've authenticated, yes?)  If I'm right, 
what do I have to do for this to all work?  It's neither obvious nor 
documented(from what I could find, I did try to hunt around in the 
manual for a while.)  I'm having enough on my plate learning PHP/SQL 
as is, and while I understand the ideas because all the OO stuff used 
and generally what's going on, the code itself is throwing me for a 
loop :-)

Thx!
Brett
-- 
----
"They that give up essential liberty to obtain temporary
safety deserve neither liberty nor safety." - Ben Franklin
http://www.users.cloud9.net/~brett/

RE: [Phplib-users] dumb php question(include_path) (resolved)

[Brian P. <bp...@ct...>]

Looks like you got an answer to your main question already, but
incidentally, the local and global columns in a phpinfo() display have to do
with .htaccess files. If you are running PHP as a module in Apache, you can
use .htaccess files to override php settings. So if you used an .htaccess
file to override a setting like so:

php_value auto_prepend_file /usr/local/blah.php

Your 'local' value would be that, and your global would be whatever was
setup in your php.ini file. Make sense?

-bpopp at bpopp.net

-----Original Message-----
From: Brett Dikeman [mailto:br...@cl...]
Sent: Friday, March 22, 2002 4:03 PM
To: darcy wade christ
Cc: php...@li...
Subject: Re: [Phplib-users] dumb php question(include_path) (resolved)


At 3:50 PM -0500 3/22/02, darcy wade christ wrote:

>  > I go and check in /usr/local/lib/php.ini, and I have:
>>  "include_path = .:/var/www/php"
>>  (which is correct, yes?)
>
>i can't say whether this is correct or not.  where is table.inc?  Also, i'm
>not sure about your quotations around the whole line.  Is that for us?

Yep, they were for you guys.  Sorry, not sure why I put that in there.

Turns out you were on the money about apache setting the path, it was 
in httpd.conf.  Grrrrr.

Brett
-- 
----
"They that give up essential liberty to obtain temporary
safety deserve neither liberty nor safety." - Ben Franklin
http://www.users.cloud9.net/~brett/

_______________________________________________
Phplib-users mailing list
Php...@li...
https://lists.sourceforge.net/lists/listinfo/phplib-users

Re: [Phplib-users] dumb php question(include_path) (resolved)

[Brett D. <br...@cl...>]

At 3:50 PM -0500 3/22/02, darcy wade christ wrote:

>  > I go and check in /usr/local/lib/php.ini, and I have:
>>  "include_path = .:/var/www/php"
>>  (which is correct, yes?)
>
>i can't say whether this is correct or not.  where is table.inc?  Also, i'm
>not sure about your quotations around the whole line.  Is that for us?

Yep, they were for you guys.  Sorry, not sure why I put that in there.

Turns out you were on the money about apache setting the path, it was 
in httpd.conf.  Grrrrr.

Brett
-- 
----
"They that give up essential liberty to obtain temporary
safety deserve neither liberty nor safety." - Ben Franklin
http://www.users.cloud9.net/~brett/

[Phplib-users] dumb php question(include_path)

[Brett D. <br...@cl...>]

Greetings folks...

Been bashing my head against the wall trying to figure out what I'm 
not doing right.  One of the example scripts fails, and I get:

[Fri Mar 22 15:05:43 2002] [error] PHP Warning:  Failed opening 
'table.inc' for inclusion (include_path='.:/usr/local/lib/php') in 
/var/www/html/phplib/showoff.php3 on line 14

I say, "Huh?    What happened to the rest of the include_path?  Did I 
forget it?"

I go and check in /usr/local/lib/php.ini, and I have:
"include_path = .:/var/www/php"
(which is correct, yes?)

Not even close to what php claims its include_path is above.  What am 
I missing?

Oh, and phplib shows two different values for include_path...global 
and local(?!)

thx!
Brett
-- 
----
"They that give up essential liberty to obtain temporary
safety deserve neither liberty nor safety." - Ben Franklin
http://www.users.cloud9.net/~brett/

Re: [Phplib-users] robots and session-id's

[Michael C. <mdc...@mi...>]

On Fri, Mar 08, 2002 at 09:46:19AM -0500, Stephen Woodbridge wrote:
> I thought session IDs timed out, so even is your site was indexed with
> session IDs they would/should not be valid when a search user comes back
> to the site and your software should generate a new ID.

Even if a session id disappears from the database due to garbage
collection, it will immediately be recreated when someone comes in using
it.  That's essentially how they are created in the first place.
Checking the HTTP_REFERER [sic] will mostly solve that problem.

> The idea of keeping the IP address is a good one also, because clearly a
> user coming in from a different host can not be the same session. It
> could be the same user, but the same session.

Please read archives pointed to elsewhere in this thread.  AOL,
and a number of other sizeable internet services, use transparent proxies
to do the actual requests, so there's no guarantee that the IP will
remain consistent across page views.  If it was as simple as IP
addresses, we wouldn't bother with session id's.

I have written a new authentication class which uses php4's much faster
sessioning, and I now use that exclusively.  Actually, I'm going to be
converting my phplib sites over at some point.  (This isn't a slam on
phplib, it made php3 quite useable)

I'm finishing up development of a "generic" version that will make it
easy for a competent programmer to get a site up quickly.  As an
example, I just completed a fully-functioning e-commerce site in 16
hours.  I can shave another 4 or so hours off that.  I will post an
announcement when it is ready for all.

Michael
-- 
Michael Darrin Chaney
mdc...@mi...
http://www.michaelchaney.com/

Re: [Phplib-users] PHPlib Docs for download?

[Blake G. <bl...@co...>]

to anwer my own question:

wget -r -l 1 http://www.sanisoft.com/phplib/manual/html

did the trick just fine for me, wish i would have thought of that first :)


thanks again,
cheers,

blake







----- Original Message -----
From: "Blake Girardot" <bl...@co...>
To: <php...@li...>
Sent: Thursday, March 21, 2002 1:01 PM
Subject: [Phplib-users] PHPlib Docs for download?


> does anyone or could someone make the excellent and very very helpful
> documentation located at:
>
> http://www.sanisoft.com/phplib/manual/
>
> available for download as static html pages?
>
> i see it all might exist in manual/html on the above site already. is
there
> anyway someone at sanisoft could gzip that direcory up and make it
available
> for download?
>
> as it is now there is no way to work off line and read the docs or do i
just
> not see them someplace?
>
> i would go so far as to suggest they be included in a /doc directory in
the
> phplib download tarball as well.
>
> i would grab them all myself one at a time, but for now i need a quick
guide
> while i sit with a sick relative in the hospital and do a little work
while
> they sleep.
>
> thanks for great software and the great docs to all who helped!
>
> cheers,
> blake
>
>
>
>
>
> _______________________________________________
> Phplib-users mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phplib-users
>

[Phplib-users] PHPlib Docs for download?

[Blake G. <bl...@co...>]

does anyone or could someone make the excellent and very very helpful
documentation located at:

http://www.sanisoft.com/phplib/manual/

available for download as static html pages?

i see it all might exist in manual/html on the above site already. is there
anyway someone at sanisoft could gzip that direcory up and make it available
for download?

as it is now there is no way to work off line and read the docs or do i just
not see them someplace?

i would go so far as to suggest they be included in a /doc directory in the
phplib download tarball as well.

i would grab them all myself one at a time, but for now i need a quick guide
while i sit with a sick relative in the hospital and do a little work while
they sleep.

thanks for great software and the great docs to all who helped!

cheers,
blake

[Phplib-users] PHPlib Docs for download?

[Blake G. <bl...@co...>]

does anyone or could someone make the excellent and very very helpful
documentation located at:

http://www.sanisoft.com/phplib/manual/

available for download as static html pages?

i see it all might exist in manual/html on the above site already. is there
anyway someone at sanisoft could gzip that direcory up and make it available
for download?

as it is now there is no way to work off line and read the docs or do i just
not see them someplace?

i would go so far as to suggest they be included in a /doc directory in the
phplib download tarball as well.

i would grab them all myself one at a time, but for now i need a quick guide
while i sit with a sick relative in the hospital and do a little work while
they sleep.

thanks for great software and the great docs to all who helped!

cheers,
blake

Re: [Phplib-users] Cart & Template

[Tarique S. <ta...@sa...>]

On Wed, 20 Mar 2002, [iso-8859-1] Matthias Gr=F6schl wrote:

Hi,

One of my junior programmers is doing precisely this as an excercise
(converting a demo we have to use templates etc)

She will be done by weekend - you can have the code then - BUT - be warned
the code will not be the best we produce and mostly undocumented

HTH

Tarique

> Hi,
>=20
> after getting through session,perm,auth and template of the phplib, I wan=
t to
> build a small shoplike application. Its for internal use of a department =
to=20
> rent Devices.
>=20
> Is there a small, but not to simple working example for phplib users arou=
nd???
>=20
> thx
> Matthias
>=20
>=20
> _______________________________________________
> Phplib-users mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phplib-users
>=20

--=20
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
PHP Applications for E-Biz: http://www.sanisoft.com

Indian PHP User Group: http://groups.yahoo.com/group/in-phpug
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

Re: [Phplib-users] duplicate session

[Ronald H. <ro...@ha...>]

joost wrote:
> In my app (using auth, user, sess) I open a second window to handle a record
> update. So, I'm having two windows open within the same session. After
> updating the parent refreshes (updating to the new contents), and the second
> closes. I then get the following error (most -not all- of the times) in the
> parent.
> 
> Database error: Invalid SQL: insert into active_sessions ( sid, name, val,
> changed ) values ('c14cbf141ab1b7cd009356f555b607dc', 'Example_User',


you could try to replace the 'insert'-statement by a 'replace'-statement 
in th file ct_sql.inc.

- ronald


> 
> 
> 
> _______________________________________________
> Phplib-users mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phplib-users
> 



-- 
ronald hartwig

Re: [Phplib-users] duplicate session

[Stephen W. <wo...@sw...>]

Joost,

Do you need to do a close page on the popup window? 
If you didn't wouldn't that solve this problem?

-Steve

joost wrote:
> 
> Hi,
> 
> I'm wondering how to solve a problem.
> 
> In my app (using auth, user, sess) I open a second window to handle a record
> update. So, I'm having two windows open within the same session. After
> updating the parent refreshes (updating to the new contents), and the second
> closes. I then get the following error (most -not all- of the times) in the
> parent.
> 
> Database error: Invalid SQL: insert into active_sessions ( sid, name, val,
> changed ) values ('c14cbf141ab1b7cd009356f555b607dc', 'Example_User',
> 'RXhhbXBsZV9Vc2VyOiR0aGlzLT5pbiA9ICcnOyAkdGhpcy0+cHQgPSBhcnJheSgpOyA=',
> '20020320174800')
> MySQL Error: 1062 (Duplicate entry
> 'Example_User-c14cbf141ab1b7cd009356f555b607dc' for key 1)
> Session halted.
> 
> This is probably the same situation when phplib is used within a frameset (a
> single session active in more than one page).
> I've browsed the mailinglist archives but didn't find anything that could
> help me out. :o)
> 
> All help would be appreciated!
> 
> TIA,
> 
> Joost
> 
> _______________________________________________
> Phplib-users mailing list
> Php...@li...
> https://lists.sourceforge.net/lists/listinfo/phplib-users

[Phplib-users] duplicate session

[joost <jo...@jo...>]

Hi,

I'm wondering how to solve a problem.

In my app (using auth, user, sess) I open a second window to handle a record
update. So, I'm having two windows open within the same session. After
updating the parent refreshes (updating to the new contents), and the second
closes. I then get the following error (most -not all- of the times) in the
parent.

Database error: Invalid SQL: insert into active_sessions ( sid, name, val,
changed ) values ('c14cbf141ab1b7cd009356f555b607dc', 'Example_User',
'RXhhbXBsZV9Vc2VyOiR0aGlzLT5pbiA9ICcnOyAkdGhpcy0+cHQgPSBhcnJheSgpOyA=',
'20020320174800')
MySQL Error: 1062 (Duplicate entry
'Example_User-c14cbf141ab1b7cd009356f555b607dc' for key 1)
Session halted.

This is probably the same situation when phplib is used within a frameset (a
single session active in more than one page).
I've browsed the mailinglist archives but didn't find anything that could
help me out. :o)

All help would be appreciated!

TIA,

Joost

[Phplib-users] Cart & Template

[<gro...@fr...>]

Hi,

after getting through session,perm,auth and template of the phplib, I want to
build a small shoplike application. Its for internal use of a department to 
rent Devices.

Is there a small, but not to simple working example for phplib users around???

thx
Matthias