<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title>PHPDeveloper.org</title>
    <link>http://www.phpdeveloper.org</link>
    <description>Up-to-the Minute PHP News, views and community</description>
    <language>en-us</language>
    <pubDate>Fri, 29 Aug 2008 01:57:47 -0500</pubDate>
    <ttl>30</ttl>
    <item>
      <title><![CDATA[Jonathan Street's Blog: When scraping content from the web don't make it obvious]]></title>
      <guid>http://www.phpdeveloper.org/news/8992</guid>
      <link>http://www.phpdeveloper.org/news/8992</link>
      <description><![CDATA[<p>
<i>Jonathan Street</i> <a href="http://torrentialwebdev.com/blog/archives/125-When-scraping-content-from-the-web-dont-make-it-obvious.html">has a tip</a> for those developers out there that have no other choice than scraping content from a remote site - don't make it obvious. He also includes a suggestion on how to make it a little less obvious.
</p>
<blockquote>
A couple of hours ago I was playing around scraping some content from a website. All was going well until suddenly I couldn't get my script to fetch meaningful content. [...] The first thing I did was stop visiting the site for 15 minutes or so and then increase the time between requests. It briefly worked again but quickly stopped.
</blockquote>
<p>
One simple change to his user agent string in his php.ini made the problem evaporate pointing to a user agent filtering happening on the remote side. His helpful hint involves two methods - one in just PHP and the other in cURL - to change the user agent that your scripts are sending. An even better sort of solution might be some sort of rotating array that would alternate between four or five strings to make things even more random.
</p>]]></description>
      <pubDate>Wed, 07 Nov 2007 11:26:00 -0600</pubDate>
    </item>
    <item>
      <title><![CDATA[Paul Reinheimer's Blog: When does a user abort?]]></title>
      <guid>http://www.phpdeveloper.org/news/8773</guid>
      <link>http://www.phpdeveloper.org/news/8773</link>
      <description><![CDATA[<p>
<i>Paul Reinheimer</i> recently <a href="http://blog.preinheimer.com/index.php?/archives/248-When-does-a-user-abort.html">discovered something interesting</a> about how PHP handles users aborts (hitting the stop button in the browser, closing it) and the steps the language follows after that.
</p>
<blockquote>
I was under the impression that when the user hit stop, the script stopped. Which is: bad, and wrong. PHP doesn't detect that the user has terminated the connection, it has no clue, it obligingly continues processing along, until it attempts to send information to the user.
</blockquote>
<p>
The "ignore_user_abort" configuration option in the php.ini controls some of this, allowing for you to specify whether or not the script should go ahead and finish out even after PHP has discovered that the client has been disconnected. There's also a <a href="http://www.php.net/manual/en/function.ignore-user-abort.php">function</a> that allows you to specify the same thing on a script-by-script basis (in both PHP4 and PHP5).
</p>]]></description>
      <pubDate>Wed, 03 Oct 2007 07:52:00 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[Ian Selby's Blog: Uploading Large Files With PHP]]></title>
      <guid>http://www.phpdeveloper.org/news/8656</guid>
      <link>http://www.phpdeveloper.org/news/8656</link>
      <description><![CDATA[<p>
<i>Ian Selby</i>, working for a startup and building a lot of code up from scratch <a href="http://www.gen-x-design.com/archives/uploading-large-files-with-php">came across a problem</a> - the upload of pretty large files via PHP:
</p>
<blockquote>
I have found myself in a position where I am writing scripts that may need to upload fairly large files. My scripts were timing out, and I couldn't seem to figure out why. For the unitiated, there are some standard things that you usually do to both your php.ini and in your script in this situation [...] However, it turns out there are some other php.ini config variables that you may need to look at.
</blockquote>
<p>
The "usual suspects" list includes changing the max_upload_size value and adjusting the script timeout. The other settings he mentions, though, are things like memory_limit, post_max_size and max_input_time to help increase the default times that PHP uses on most page executions.
</p>]]></description>
      <pubDate>Fri, 14 Sep 2007 13:03:54 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[SecurityReason.com: PHP 5.2.4 Released...unpatched]]></title>
      <guid>http://www.phpdeveloper.org/news/8592</guid>
      <link>http://www.phpdeveloper.org/news/8592</link>
      <description><![CDATA[<p>
As mentioned by <a href="http://www.php-mag.net/magphpde/magphpde_news/psecom,id,27417,nodeid,5.html">the International PHP Magazine</a>, <i>Maksymilian Arciemowicz</i> has <a href="http://securityreason.com/news/0/0x1f">posted about</a> some testing he's been doing on the newly released PHP 5.2.4 and has still found some issues with it.
</p>
<blockquote>
In 30 August PHP Team have released new version PHP with number 5.2.4. We have tested this version and now we can say, that not all issues from PHP 5.2.3 are patched. It is possible bypass safe_mode, open_basedir and disabled_functions.
</blockquote>
<p>
The issue <a href="http://securityreason.com/news/0/0x1f">he describes</a> is the lack of a "mail.force_extra_parameters" setting in the php.ini still making it possible to exploit the mail() function to execute arbitrary PHP code.
</p>]]></description>
      <pubDate>Wed, 05 Sep 2007 11:43:00 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[Danne Lundqvist's Blog: Problem sending mail with PHP mail function]]></title>
      <guid>http://www.phpdeveloper.org/news/7636</guid>
      <link>http://www.phpdeveloper.org/news/7636</link>
      <description><![CDATA[<p>
In a <a href="http://www.dotvoid.com/view.php?id=73">new post</a> on the Dotvoid.com blog today, <i>Danne Lundqvist</i> talks about some of the issues he's had with the <a href="http://www.php.net/mail">mail function</a> in PHP. Specifically, it's about the mails being set but not making it to their destinations.
</p>
<blockquote>
Instead I have used a PHP class that allows me to send emails using a remote smtp server using an account on that server. This has been a good solution for my setup anyways. A few days ago a <a href="http://www.2good.nu/">friend of mine</a> was asked to investigate the very same problem for a client.
</blockquote>
<p>
As it turns out, the solution to their problem was pretty simple - a conflict between the sendmail_from in the php.ini and the "From" passed into the mail function call. A simple ini_set resolved the issue and kept the spam filters from catching and blocking the message.
</p>]]></description>
      <pubDate>Tue, 17 Apr 2007 08:24:00 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[Tony Bibbs' Blog: What Zend Might Not Want You To Know]]></title>
      <guid>http://www.phpdeveloper.org/news/7602</guid>
      <link>http://www.phpdeveloper.org/news/7602</link>
      <description><![CDATA[<p>
Today, <i>Tony Bibbs</i> provides <a href="http://www.tonybibbs.com/article.php/WhatZendMightNotWantYouToKnow">something that</a> "Zend might not want you to know" about using their debugger in your application - that it enables an option silently, without asking the user at all.
</p>
<blockquote>
<p>
A co-worker here was going through similar problems with Zend Studio 5.5. He'd even gotten so frustrated he tried installing phpEclipse and in doing that installed Zend's debugger. Little did he know that by doing that he had enabled remote debugging support in Zend Studio 5.5 without the need for Zend Platform and we can still happily use APC.
</p>
<p>
Now the million dollar question is why doesn't Zend document or promote this fact? Sure, they want you to install and test drive their "PHP Application Server" but if you don't desire all of that why force it down our throat?
</p>
</blockquote>
<p>
He points out <a href="http://www.zend.com/content/download/1466/8580/file/Zend_Studio_QuickStart_Guide.pdf">a PDF</a> that only barely mentions that this could happen but couldn't find much else. If you don't want this to happen to you, he provided a different method to enable the debugging easily through a few php.ini settings.
</p>]]></description>
      <pubDate>Wed, 11 Apr 2007 10:55:00 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[Pierre-Alain Joye's Blog: Howto use a single php.ini for cli/cgi with htscanner, use 0.7.0 or later]]></title>
      <guid>http://www.phpdeveloper.org/news/7300</guid>
      <link>http://www.phpdeveloper.org/news/7300</link>
      <description><![CDATA[<p>
<i>Pierre-Alain Joye</i> has <a href="http://blog.thepimp.net/index.php/post/2007/02/19/Howto-use-a-single-phpini-for-cli-or-cgi-with-htscanner-use-070-or-later-%3A">posted a quick hit</a> to his blog today about using one php.ini file for both a cli and cgi installation of PHP without it throwing errors for <a href="http://pecl.php.net/htscanner">htscanner</a>.
</p>
<blockquote>
Htscanner reports error during module or request init (returns FAILURE), these errors may be fatal and stop the current executions. This behavior is not desired if you use it in a shell ((if you have only one system php.ini for both cli and cgi or if htscanner is compiled statically). This release brings a new ini settings to solve this problem, stop_on_error.
</blockquote>
<p>
The <a href="http://blog.thepimp.net/index.php/post/2007/02/19/Howto-use-a-single-phpini-for-cli-or-cgi-with-htscanner-use-070-or-later-%3A">solution</a> involves changing the htscanner setting to 0 instead of 1 to return a "SUCCESS" message rather than the errors.
</p>]]></description>
      <pubDate>Mon, 19 Feb 2007 08:58:00 -0600</pubDate>
    </item>
    <item>
      <title><![CDATA[Ed Finkler's Blog: Bug in Zend Studio 5.5's php.ini]]></title>
      <guid>http://www.phpdeveloper.org/news/7026</guid>
      <link>http://www.phpdeveloper.org/news/7026</link>
      <description><![CDATA[<p>
<i>Ed Finkler</i> points out (in his <a href="http://funkatron.com/wp/archives/php/bug-in-zend-studios-local-debugger/">latest blog entry</a>) a problem he's noticed when using Zend Studio 5.5 related to its default path.
</p>
<blockquote>
In the php.ini file used by the PHP5 executable, the include path is hosed.  If you installed in the default location and are running Windows, you'll probably find the file at: C:Program FilesZendZendStudio-5.5.0binphp5php.ini
</blockquote>
<p>
The <a href="http://funkatron.com/wp/archives/php/bug-in-zend-studios-local-debugger/">problem</a> is that the value of include_path isn't wrapped in quotes, making portions of it act like a comment and "hose" your directory path. Thankfully, it's a pretty simple fix - just quote the value and be on your merry way. It's one of those bugs that has the potential to be so small that it'd be very frustrating to find.
</p>]]></description>
      <pubDate>Thu, 04 Jan 2007 07:22:05 -0600</pubDate>
    </item>
    <item>
      <title><![CDATA[Alexander Netkachev's Blog: About Eclipse PHP IDE php.ini location]]></title>
      <guid>http://www.phpdeveloper.org/news/6966</guid>
      <link>http://www.phpdeveloper.org/news/6966</link>
      <description><![CDATA[<p>
In <a href="http://www.alexatnet.com/Blog/Index/2006-12-23/about-eclipse-php-ide-php-ini-location">this new entry</a> on his blog, <i>Alexander Netkachev</i> shares a hint for those PHP IDE Eclipse users out there frustrated with php.ini issues.
</p>
<blockquote>
 You may notice that the IDE does not load options specified in the php.ini and this makes customizing extensions impossible. I run into this problem today and looked over the source code of PHP plugin for it.
</blockquote>
<p>
The solution he found was in <a href="http://dev.eclipse.org/viewcvs/indextools.cgi/org.eclipse.php.core/src/org/eclipse/php/core/phpIni/IniModifier.java">an update he found</a> to one of the Java files, pointing it to the correct location. Changing this changes the default setting for the editor.
</p>]]></description>
      <pubDate>Tue, 26 Dec 2006 10:46:17 -0600</pubDate>
    </item>
    <item>
      <title><![CDATA[PHP 10.0 Blog: Production mode]]></title>
      <guid>http://www.phpdeveloper.org/news/6911</guid>
      <link>http://www.phpdeveloper.org/news/6911</link>
      <description><![CDATA[<p>
In an effort to get some thought going about ways to encourage security in PHP applications, <i>Stas</i> has posted <a href="http://php100.wordpress.com/2006/12/17/production-mode/">an idea</a> about a simplified php.ini setting - production=On.
</p>
<p>
His idea is that, with this setting on, the PHP installation would:
<ul> 
<li>disable display errors
<li>disable phpinfo()
<li>turn expose_php off
<li>make max_execution_time/memory_limit reasonable
<li>and possibly a few others that some developers forget to set correctly
</ul>
<a href="http://php100.wordpress.com/2006/12/17/production-mode/">Comments on the post</a> range from disagreement to suggestions on improvement and support.
</p>]]></description>
      <pubDate>Mon, 18 Dec 2006 08:43:00 -0600</pubDate>
    </item>
  </channel>
</rss>
