Jump to content
xisto Community

iGuest

Members
 View Profile  See their activity

  • Content Count

    72,093

  • Joined

  • Last visited

  • Days Won

    5

Everything posted by iGuest

  1. iGuest
    Can you post the contents of your c:\windows\hosts file and perhaps the Apache directives for the Vhosting from the httpd.config files to ensure that the default settings for localhost are correct, please and thanks. Maybe post them here to have someone double check them, even if they are the default settings as created by XAMPP.
  2. iGuest
    hello everyone.. im having a problem with different gangs. im a 16 yr old teen and i make some bad choices, and one of them was hanging out with gang members. now... there are two different kinds of gangs that hang around my neighborhood.. Bloods(red colored) and Natchea(Green).. these gangs have been enemies for too long.. not just bcuz cloths colors but by race.. Bloods are usually black/ white/ puerto rican.. and Natchea are mostluy cuban and hispanic.. now i was seen with the Natchea by one of the blood members and i go to skool with a bunch of bloods.. everyday i am scared to walk out of my house bcuz i am afraid of getting shot or stabbed.. and all of my friends have been in danger bcuz of me.. my cuzinz r in the Natchea but they have been killed already.. i want to kno if anyone has been thru what i am going thru... am i the only 1 going thru this or are there more? (not in any gangs but friends and family are!)
  3. iGuest
    Here's the updated version that works with PHP 4.4.4 and above with register_globals on. I've seperated the HTML and coding, so that it's not all mixed together, it's easier to work with it if it's seperated. Here's the simple form (form.html) <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://forums.xisto.com/no_longer_exists/ xmlns="http://forums.xisto.com/no_longer_exists/; xml:lang="en-NZ"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <title>Simple Login Form</title> </head> <body> <form action="login.php" method="post"> <fieldset> <legend>Login Form</legend> <ol> <li><label for="username">Username:</label> <input id="username" name="username" type="text" /></li> <li><label for="password">Password:</label> <input id="password" name="password" type="password" /></li> </ol> <input id="login" name="login" type="submit" value="Login Now" /> </fieldset> </form> </body></html> Here's the PHP (login.php): <?phperror_reporting(E_ALL);if ( @ini_get('register_globals') ){ if ( isset($_REQUEST['GLOBALS']) || isset($_FILES['GLOBALS']) ) { exit('<h1>Sorry</h1><p>Not Allowed!!!</p>'); } $protected = array('GLOBALS', '_GET', '_POST', '_COOKIE', '_REQUEST', '_SERVER', '_ENV', '_FILES'); $input = array_merge($_GET, $_POST, $_COOKIE, $_SERVER, $_ENV, $_FILES, isset($_SESSION) && is_array($_SESSION) ? $_SESSION : array()); foreach ( $GLOBALS['input'] as $k => $v ) { if (!in_array($k, $GLOBALS['protected']) && isset($GLOBALS[$k]) ) { unset($GLOBALS[$k]); } }}$allow = array('yourdomain.com');$referer = '';$created = '';if ( !empty($_POST['login']) && $_POST['login'] == 'Login Now' ){ if ( !empty($_SERVER['HTTP_REFERER']) ) { $GLOBALS['referer'] = current(array_splice(explode('/', $_SERVER['HTTP_REFERER']), 2, 1)); } if ( !in_array($GLOBALS['referer'], $GLOBALS['allow']) ) { exit('<p>Bad Referer</p>'); } unset($_POST['login']); foreach ( $_POST as $key => $val ) { if ( empty($GLOBALS[$key]) ) { if ( !empty($key) && !empty($val) ) { $GLOBALS[$key] = $val; if ( is_numeric($val) ) { $GLOBALS['created'] .= '<p>$' . $key . ' = ' . $val . ';</p>'."\n"; } else if ( is_string($val) ) { $GLOBALS['created'] .= '<p>$' . $key . ' = \'' . $val . '\';</p>'."\n"; } } } } echo $GLOBALS['created'];}?> Now I'm using the GLOBALS variable a lot to just show the scope of the variables, that way you should understand that these variables are in the global scope range and not tied into specific functions. The only major difference is that I'm emulating register_globals as off, which is the first instruction for this code, because it has to occur first to eliminate the variables being created. It's always a good idea to initialise your own variables rather than rely on them to be already created and initialised. Now you are probably wondering, what if a variable you want created from your form doesn't get created because it's value was empty, well my method for determining whether a variable is required or not, I would prefix their names with req_ e.g. req_username and then I would create the functions needed to validate these required fields, I have a few validation routines including exact RFC specifications for email addresses as well as my more realistic email address validation routine, however since RFC states what can be valid, it's probably the better choice, my more realistic version is because some of the things they allow, just doesn't seem like what most email providers allow you to have anyways. There's still more I want to show, including how to make sure a form was not tampered with, but that will probably come after the xmas season, so all the best and merry christmas. Cheers, MC
  4. iGuest
    I agree with the green side box, not that it's hurting my eyes, it just seems to be too overpowering on the site and I'm not sure if this is meant to be the important area. Also the inner white box (of the green side box) and the font color used, is also a bit on the light side, not enough contrast to make it easily readable but that also has to be considered for the majority of the background too as color blind people would have trouble with this site as well.The HTML coding is poor, incorrect document type, this is not HTML 4.01 Transitional, but XHTML which means following XHTML rules, the use of uppercase element tags and attributes is not allowed, there could be some minor adjustments for semantics too. There seems to be a double up of the body tag used, which will confuse browsers and a fair amount of deprecated elements being used too.Increasing the font to twice it's size didn't alter the look of the site, which is good. Turning off styles gave insight to the ordering of content, which the order didn't seem right but was acceptable, also noticed HTML style elements were used, as well as tables for non tabular data.The CSS coding uses browser proprietary styles, which should be avoided if possible or conditional commenting be used.Overall, average coding, and an alright looking site.Cheers,MC
  5. iGuest
    First of all you need to identify the chipset on the sound card, That will help you determine the module you'll need to run, Creative PCI128, so I'll list a few that I know of to help you identify the chipset easier, if you don't find it then list the model which usually starts with CT#### where # is numbers. It's possible there could be more. To install the module, you'll just do: su -c "/sbin/modprobe ens1370"ENTER ROOT PASSWORD or possibly: su -c "/sbin/modprobe es1370"ENTER ROOT PASSWORD Then you should try the sound, it's strange Fedora didn't automatically detect it though, but give that a shot. This might be just a temporary solution and it's possible the card won't be there next boot, but I'll explain how to do that after you can identify the card properly. Cheers, MC
  6. iGuest
    Actually TavoxPeru, I did notice that area failing on PHP 4.4.4 (Xisto's version which means the area I commented won't fail, but anything below PHP 4.3 could be of some concern), PHP 5 processes this correctly.What you are suggesting isn't what the code reflects, what you're saying is, if the variable does exist (not empty means has something), then overwrite the already existing variable. This to me seems like register globals is on, or some automatic variable creation has already taken place, not the way I would configure php.ini nor would this be default, I'll try to dig into it more and see why the variables are already being created, as I might write a routine to remove this automation (I know this is what we wanted, but securing this area would be far better and just allowing ourselves to do this automation).For now in PHP 4, just comment out if( empty(${$name}) ) { and the ending bracket } and it'll work as intended but will still overwrite existing variables, unless you think you can post the code to solve this before I get to work on it, then by all means do so.I'll see what I can do, I'm not at home at the moment, and I'm not sure when I'll post the solution, I've also got a bit of code clean up that I did that I want to post too as well as more additions to this code.Now the reason I'm sharing this area, is that I started working on a complete class for form processing, so that the class can handle all aspects of a form, including uploaded files, mailing, searching, registration, you name what the form does, and that is what I want to have in it. I'm also trying to incorporate ajax into the mix too, so that it will seem to process a lot smoother.Cheers,MC
  7. iGuest
    For those who are using Firefox 2.0, there is an update reccomendation issued today for some fixes to the Firefox Browser. Head over to the Download site and install a new version to have the fixes added to your copy. https://www.mozilla.org/en-US/firefox/new/?utm_source=firefox-com&utm_medium=referral
  8. iGuest
    Hello guys, I just turned 20 last month and my health insurance has been cancelled, I got a physical to check things out before then and my alt and ast liver enzyms were up so I got a ultrasound of my liver, nothing found.. got another blood test a couple days later and they were normal, then I turned 20 and my insurance cancelled.. But recently, I have been having this pain in my upper middle back down through my right side, it hurts when I stretch out and it hurts when I take deep breaths, the pain on a scale of 1-10 is about an 8 when I take deep breaths and about a 7 when I stretch the wrong way. I have some trouble swallowing too.. I am concern because if something happens to me my life is not insured.I have been surfing the net for good health insurance, i came into oneshopinsurance.com has anyone tried online insurance? how effective is the online quote system? can i depend my money on these?thanks in advance.Carla
  9. iGuest
    The reason I wanted to share this is I've seen so many people do this with their forms when using PHP. $username = $_POST['username'];$password = sha1($_POST['password']);$another_var = $_POST['another_var']; ... and so on, just imagine if you had a large number of form inputs, do you really want to create each and every variable name? Why people do this, is probably due to most of the examples I've seen on the web, that does not show an easier and much quicker way of doing it. Though my way might be much easier and quicker, it does introduce security concerns which I've tried to eliminate the most commonly seen problems with the method I'm about to show but since I only created this today, I haven't really had the chance to extensively test every possible flaw that could lurk in it. I should mention I develop on PHP 5, but this should work with PHP 4.3 and could possibly work with PHP 4 but I think some of the things I've done would need to be rewritten to work with it. So first of all the complete PHP page that demonstrates what I want to show, I will break down the PHP code and explain that, the form is simple HTML conforming to XHTML 1.1 standards, but the importance here is the PHP code itself. simple_form.php <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://forums.xisto.com/no_longer_exists/ https://d https://d xmlns="http://forums.xisto.com/no_longer_exists/ https://4 https://4; xml:lang="en-NZ"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <title>Quick Form Variable Creation</title> </head> <body> <?php $allowed_referers = array('yourdomain.com'); if (!empty($_POST['login']) && $_POST['login'] == 'Login') { if (!empty($_SERVER['HTTP_REFERER'])) { $referer = current(array_splice(explode('/',$_SERVER['HTTP_REFERER']),2,1)); } else { exit('<h1>BAD REFERER</h1><p>Oops!</p></body></html>'); } if (!in_array($referer,$allowed_referers)) { exit('<h1>BAD REFERER</h1><p>Oops!</p></body></html>'); } array_pop($_POST); $created_variables = ''; foreach ($_POST as $name => $value) { if (empty($$name)) { if (!empty($name) || !empty($value)) { ${$name} = $value; $created_variables .= '<tr><td>$'.$name.'</td><td>'.$value.'</td></tr>'; } } } } ?> <p><strong>Please Note:</strong> This is just a <em>demonstration</em>, please do not insert <strong>passwords</strong> that you use, as it is displayed back in plain text.</p> <br /> <p><?php if (!empty($username)) { echo 'Welcome back <strong>'.$username.'</strong>, Thank you for logging in.'; } else { echo 'Hello <strong>Guest</strong>, Please log in.'; } ?></p> <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post"> <fieldset> <legend>Login Form</legend> <ul> <li><label for="username">Username:</label> <input id="username" name="username" type="text" /></li> <li><label for="password">Password:</label> <input id="password" name="password" type="password" /></li> </ul> <input id="login" name="login" value="Login" type="submit" /> </fieldset> </form> <?php if (!empty($created_variables)) { ?> <table> <thead> <tr> <th>Variable Name</th> <th>Variable Value</th> </tr> </thead> <tfoot> <td colspan="2"><em>These were the variables created from the above form.</em></td> </tfoot> <tbody> <?php echo $created_variables; ?> </tbody> </table> <?php } ?> </body></html> First of all, I'll explain the form. This is a basic form, that takes user's input and sends the information back to the same page to be processed. The input names of the form become the created variables so that we do not have to manually create them ourselves. With the information gathered from the form, it will alter and add additional information to the page, creating a table after the form, displaying the variables created and the values they were assigned. Remember the password is not encrypted in any way with this form, it is a demonstration and will display it back in plain text, if you're using a password input, be sure to encrypt the variable that it is assigned. In this example, you would do something like the code below after the variable has been created: if (!empty($password)) { $password = sha1($password); } Now on to the real stuff. $allowed_referers = array('yourdomain.com'); This is to make sure that the form information being received is going to come from the domain you list in this array, as we don't want the form to be submitted from any other place as they could then alter our automatically created variables in a way that could compromise security. Now to make it more secure (just thought of it now), I would create a md5 hash of the form so that I can tell that the page has not been altered at all as it's possible to change the clientside of the page and still have it seem like it came from your site. if (!empty($_POST['login']) && $_POST['login'] == 'Login') { This starts the form processing, when the login button is pressed, the posted information gets sent back to the page, and this checks whether login was created and whether the login had the value we made it. if (!empty($_SERVER['HTTP_REFERER'])) { $referer = current(array_splice(explode('/',$_SERVER['HTTP_REFERER']),2,1)); } else { exit('<h1>BAD REFERER</h1><p>Oops!</p></body></html>'); } if (!in_array($referer,$allowed_referers)) { exit('<h1>BAD REFERER</h1><p>Oops!</p></body></html>'); } This is the referer check, it checks whether our server got the referer, it then grabs the domain part of the referer (I hope) and if it's not set or is not our allowed referers, it exits with a simple BAD REFERER message, which I'm sure you could be more creative about it. This is where PHP 4 could fail, but I'm sure there's alternative ways to grab the referer. array_pop($_POST); This is to drop the $_POST['login'] from the $_POST, so we don't create a variable for it, but if you do want it, then leave it in. Now I believe this relies on form ordering, so if the submission is not the last, we could not do this, but since we created the form, and made sure it came last, then this should be fine for us. $created_variables = ''; This isn't vitally important, it's just to help this demonstration and give us something we can store information in to display back so we can see what happened. foreach ($_POST as $name => $value) { if (empty($$name)) { if (!empty($name) && !empty($value)) { ${$name} = $value; $created_variables .= '<tr><td>$'.$name.'</td><td>'.$value.'</td></tr>'; } } } This is what people were probably waiting for, the part that makes variable creating easier, basically we are looping through each $_POST item, using the form name and the value. The first if statement checks that what we are using in the form is empty and not used already, otherwise we could potentially overwrite an internal variable we use as it could affect the behaviour of the program, you could possibly handle this another way by changing the variable so it doesn't conflict but then you would need to figure out how you can remember that change, I don't like variated variables like that, e.g. $password, $password1, $password3 so make sure that your form doesn't use anything that conflicts and this is also an area we have to make sure is secure. Next I did a check if the form name exists and if the value exists, if not, I don't bother with creating a variable, but in your case, you may want to create the empty variables too, and perform your own check on them, incase they are required variables. A quick way you could do this, if you had required variables is to prefix their form name with req_ and then if you encountered this prefix, make sure it's assigned, if not assign a boolean value that the form failed, and tell them what it was that was needed to be filled in and do not process the form any further. The part that automatically creates the variable is the ${$name} = $value; reading this from the inner, {$name} is the form name the brackets convert it to it's name value, e.g. username, the outer $ is for the variable, so we get $username. Simple right? You could also do $$name but it's not the best practise, however I had to use it in the above for checking if the variable had been created, so it's the only time I'm letting it slide. That's pretty much all I should need to explain, the rest just checks the variables are created and displays the information back, there's nothing too drastic about what it's doing. I just want to wrap this up, as I got to get back to doing my work. So hopefully this helps a few people. Cheers, MC
  10. iGuest
    Can you make your own MySQL database or do they have to be bought or found from a free site i really need help on this guys please reply or send me a PM when you have the time because i need so much help with this atm :Pthankyou very much regards Morex Gaming owner Jarvis
  11. iGuest
    as this person says if you have not checked your control panel then do so thats the first thing to check then if thats all fine im sorry i know no more on the matter
  12. iGuest
    The only 2 DESCENT ones i know of is CuteFTP & SmartFTP, SmartFTP is the free one and so is CuteFTP for 30 days it's worth paying for the software but im not allowed to buy anything online atm so nothing being bought its out of the question really they both can be found by just entering them in yahoo or any search engine adding at the end Download obviously any way these are the two i only know about if you know any others that are better could you please reply and let me and others know what they are or just give me a PM when you can also could you agree or disagree weather my opinions on the 2 programs are correct or not.thank you very much owner of Morex Gaming (Jarvis)
  13. iGuest
    Allthough ET is a good game and even better is that it is free i have to agree with every 1 else im not a big halo fan BUT halo does beat ET in a majority of things such as hardly any lagg better maps etc etc but for people who havent played W:ET before its defintly one that i'd rate out of 7/10 maybe just getting to a 8 because its completely free.
  14. iGuest
    Hi im basically posting this for people who play W:ET but new people are welcome to this please visit this site as its a clan based on W:ET even if you are on a clan on W:ET still check it out to let us know what you think of it the url is http://forums.xisto.com/no_longer_exists/ https://d if you wish to play W:ET but dont have the software all the links to download everything for it is on that site i hope you like this people who want to play W:ET for the first time and i hope people who want to join a clan or are just visiting like the website thankyou very much
  15. iGuest
    I can't believe one of the oldest still standing members was not mentioned... It's ok, I haven't been as active as I would like to be, but next year might allow for a much needed holiday and the ability to have more free time.There's a few members before me I do remember, but I think they moved to Xisto.Anyways, welcome back cryptonx, must make sure the shackles are on tighter so you don't escape this time.Cheers,MC
  16. iGuest
    If I got my hands on a rocket launcher then game on.Well gaming does affect behaviour, but what actually are you evaluating? Games can make people pleasant, stressed, etc and this will alter their behaviour. I'll play competitively against someone, and they could get angry if losing or smart if winning, so it's affecting their behaviour.So really, what are you delving into?I know most people look at it whether gaming will make them act like the game, it's not the game, it's what they're learning from it. Their brain is accepting things from the game, and comparing it with reality and somewhere along the line, they've had a miscommunication where it adversely seems like a decision was based purely on what they picked up from a game.Cheers,MC
  17. iGuest
    I'm going to probably be off topic a bit, but I was not allowed to take someone's music and add my music into it. Basically I took old rock songs and added my own guitar sound to it, because back then, guitaring sounded like a backup more than a main focus and I wanted to show my guitar playing and also to show that old music then can be modernised.Now I know because all I was doing was adding my guitaring to it, it's not really original but my main focus was not to rip off an artist, nor was I profitting by this, I was just showing my passion in playing guitar and that was all. I use to be in a band, we had original music but when you have classic rock that you think could be improved why can't you do this and share it?I just want people to be inspired by my playing and to learn from what I can show them. Another thing being hit is guitar tabs, your own version of how you think a song is played also can be infringement so now you can't even imitate bands, what's the world coming to, we learn from the past and improve on that, but we can't even do this. I know I would not care if musicians were inspired by my sound and tried copying it, I'd be proud if someone actually looked up to me and wanted to follow my style of playing.Cheers,MC
  18. iGuest
    MS Word is more mainstream, however I prefer OpenOffice. It does what I need to do, and more.Now I'm not going to complain about compatibility, that's expected but I would complain when someone does not follow Open Standards, and guess who that would be. The problem with MS, is they sneak in things, that you could say is product placement, they're doing all they can to hook you onto their products and actually trap you to only being able to be with them and while they're mainstream their ability to do this is easy.I know OO could easily take the mainstream, but people would have to re-learn it, and it's this learning that people do avoid.Cheers,MC
  19. iGuest
    ZoneAlarm is problematic, I would remove it if you have not, unfortunately, I haven't looked at an alternative yet (due to running mostly in Linux).Unfortunately, I've been trying everything to have someone contact me from ZA about the problems I've come across with using it, my strangest one being everytime a CD was inserted in the drive, ZA would want to update even though it was always uptodate, not only that, it hung the CD drive.Another problem is ZA causes the computer to not shut down correctly, sometimes and that the End Task always appears for it.I am now no longer recommending ZA, as I keep encountering more and more problems with it.Anyways off ZA's case, SP2 does slow the computer down, it should not crawl, but that depends on the system and it's resources.You can view the processes used by SVCHOST through Command Prompt. Start | Run type cmd.Then type in the command prompt: tasklist /svcThat should tell you the processes that are running through SVCHOST.SP2 does slow down the computer though, I rely on Spybot and Adaware quite a bit, and they do a good enough job for me.Cheers,MC
  20. iGuest
    Or try Open Source Web Designs from http://www.oswd.org/.
  21. iGuest
    I occaisionally need to log-in here, too. And no deletes to the cookies or anything on my part. Doesn't happen very often, but co-incidently, tonight was one of those times.
  22. iGuest
    try this: <a href="download.zip">Download File</a>as a link on the original page.
  23. iGuest
    The style is very unique and original. I like it.The brushing goes well with the render. Also I like how you blended it.Overall 8.5/10Goodjob
  24. iGuest
    I'd reccomend using div's for all of the above reasons.I would also consider that the 'list' of links should be an 'unordered list' using the <ul> tags or the <dl> tags. I mean, after all, they are 'lists'. Php includes could be used to define the 'div' to 'include' on every page.Check out the Tutorial section for a Topic on the use of Includes in php.
  25. iGuest
    As it was mentioned more than once, announcing a certain piece of software as THE Best anti-virus or anti-spyware is a tough, virtually unrealistic feat. I can, however, tell you what has worked for me so far. I used to use Avast as my trusty anti-virus programme. Truth be told, it never failed me. But I'm not sure whether that was because it was a powerful anti-virus application or simply because I know enough about computer virii to avoid them altogether. Anyway, after a while, I decided that I needed to use an anti-spyware programme, so I looked around for a powerful, yet consice, application. I stumbled upon the AVG line of product, which included anti-virus and anti-spyware software. It seemed that many were raving about the quality and effectiveness of both applications, so I decided to give them both a shot. Now, I've been using AVG Free Edition for my anti-viral needs and AVG Anti-Spyware for, obviously, spyware protection. And I have to say, they both are lovely pieces of software. They're very low on system resources; I hardly ever notice them. The free versions provide a very good amount of protection, including resident shields, automatic updates, scheduled scans, and a number of other features. Both are very customizable to one's needs and whims, giving the user admirable flexibility. In all the time I've used them for, they managed to catch a good number of malware. Well, I actually planted the malware on purpose to test the software , and it passed beautifully. So to sum up, I don't know what the best anti-virus or anti-spyware is. But if you're looking for something that's not bad at all, then you might want to give AVG a shot. For more detailed information, you can visit the Website of GriSoft, the producer of the AVG product line, at: http://www.avg.com/de-de/homepage Cheers.
×
×
  • Create New...

Important Information

Terms of Use | Privacy Policy | Guidelines | We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.

  I accept