Codeassembly

Benjamin Kuz

2008-07-04 16:51:26

This is a pretty nice piece of work - with only a few beefs. 1) You should include the option to use spaces instead of tabs - some places require that kind of thing since editors sometimes do funky things, like include half-tabs or other strange quirks which make the code come out of alignment. I hacked this in manually in order to make it work. 2) the first line of a comment sometimes \"stacks\" with the line above it, giving the effect of: some_code(); # my comment becoming: some_code();# my comment

Matt Browne

2008-06-26 10:37:58

Discovered a possible error: I think that before setting $ADODB_FETCH_MODE in the constructor, you should import the global variable, i.e.: global $ADODB_FETCH_MODE; $ADODB_FETCH_MODE = ADODB_FETCH_ASSOC; Otherwise, it doesn't seem to be truly using ADODB_FETCH_ASSOC, but rather ADODB_FETCH_BOTH. Thanks again for the class.

Ashish

2008-06-26 08:51:54

This is such a wonderful script....It really helps me to show the category tree like site map. Thanx a lot

egemen

2008-06-24 17:38:07

thanks antonio..

Wesley

2008-06-23 23:38:04

I am using the following library's The chainselects works fine on a page by itself, but when I combine with jquery and validate functionality it blows up &function undefined.

Drew

2008-06-22 21:25:22

Yes -- obviously to those who say 'seperating the php & html is not needed', obviously you need to go back to design school, because I would never let you come close to touching one of my projects. (not even smell it). Smarty is absolutely fantastic at splitting html from php. Sure, smarty has its own language but seriously... if you have troubles understanding smarty syntax, you should not be doing php either, because obviously you are an amateur at php (of the millions running around claiming to be 'good programmers'). Sure, the templates contain a bit of logic (loops, if statements and the like), however this should be kept straight to the idea of only being based off of display. Smarty has proven to be extremly useful to me over the years as business logic and presentation logic are truly separated. I don't care about the compiled templates and they are 'php again', because those are not what I edit. so funny.... to many amateur programmers running around... Its the one disadvantage to PHP. PHP is easy to become a novice in, however it takes a lot of time to be an expert in. PHP lets its programmers get away with too much... I mean honestly... not even initializing variables before use. That is basic programming stuff! If you don't do that at the minimum... well... its time to start leaving the amateur zone of PHP and brush up your skills!

Antonio

2008-06-17 06:24:15

So.. if you want to get it working on FF,IE6 and IE7 jquery.chainedSelects.js >> Line 36: 36: parameters : { '_id' : $(this).attr('id'), '_name' : $(this).attr('name') }, 37: } , settings); Remove comma at the end: IN THE END IT WILL LOOK LIKE: parameters : { '_id' : $(this).attr('id'), '_name' : $(this).attr('name') } 37: } , settings); AND CHANGE line 53 TO: $(target).get(0).add(new Option(data[i][key],[key]), document.all ? i : null); it works :)

AvaiveArrashy

2008-06-15 20:18:37

Hello �� 12 �� 15 �� 16 �� 12 �� dvd �� burning book �� -�� -�� 12 16 �� x video �� 70-� �� 3gp �� 30 �� 60 �� 2 �� 3gp �� 2 �� re �� ru �� -�� 17 �� webchanges �� 2 �� 18 �� "�� 3 - �� " �� web �� 70 �� com �� 30 -35 �� G'night

titel

2008-06-13 15:17:10

Hi, I was reading your article today and this is exactly what I need for the project I'm working on. One think though, is there any way that the script is aware of the hierarchy when it displaying the URL as well? I'll jut give you an example. Say we have Web development - /web-development - - Javascript - /web-development/javascript - - - - AJAX - /web-development/javascript/ajax Again, very good article and thanks a lot, titel

Jimmy

2008-06-12 02:17:06

How would you load the 2 dropdown with data when page is loaded

PK

2008-06-08 12:30:51

Same error as Derrick described - unexpected ';' in line 49 in jquery.chainSelect.js Array in PHP looks like $array = array('1'=>'22','2'=>'222','3'=>'444','5'=>'666','7'=>'88888');

Trung

2008-06-09 03:26:29

Thanks for this useful script. I found there is a security hole. The first policy password length above 6 characters must be a mandatory policy. So the script may be changed as following: //if password bigger than 6 give 1 point if (password.length > 6) { score++; // another policies... if ... score++; if ... score++; ... } If not changed as above script then the passwords "1","Do","!","@" are evaluated as "Weak" and "1!", "Do!" are evaluated as "Better",... So I suggest the policy password length above 6 characters must be a mandatory policy. Thanks & regards, TrungTN

Jeff

2008-05-29 11:43:35

After fixing the errors that m^e noted above I still couldn't get the script to work. ADODB is good but it appears there are errors still in the script. Anyone else have luck?

Bob

2008-05-28 11:07:38

Nevermind, figured out what was going on. It was the way I was building the array.

Bob

2008-05-22 19:32:27

I'm reading a directory of .mp3 files to create my second select list, but when I run the script I get this: Error: invalid label Source File: http://[mydomain].com/jquery.chainedSelects.js Line: 48, Column: 4 Source Code: {"0":["No Track"],"1":{"1":"23-29 Tick Tock Blues.mp3"},"2" ..... -----^ I can't for the life of me figure out why json_encode($array) would place square brackets around the first item, and curly brackets around the rest. Thoughts?

Malcolm

2008-05-22 13:03:27

I am still amazed that programmers construct interactions with databases using SQL/Mysql/Oracle/postgresql etc. Do not do it. Your job is to control/direct the user experience. Use DB2/400 and stop messing about.

Kobra

2008-05-22 14:36:20

If SQL Injection works on a website in this day and age, it DESERVES to get hacked. Seriously.

Jasper

2008-05-22 05:24:11

You could just use PDO, which automatically escapes the data you pass to it.

CodeAssembly

2008-05-22 02:19:56

Is safer to put the default value instead of user input because PHP has some problems with UTF8 and the string comparison can be true but the string can be slightly different.

Jansen Price

2008-05-21 22:43:29

Wouldn't it be easier to do that last bit of code's switch statement thusly: switch ($_GET['bookCategory']) { case 'sf_books': case 'literature_books': $table = $_GET['bookCategory']; break; default: $table = 'cooking_books'; }

CodeAssembly

2008-05-21 12:22:45

Jakub Kulhan, this is just an example to show that query generation using user input is dangerous. It's not trying to be an example on how to design your database. @Konr Ness and @slink thanks for the tip, I forgot to put that break. @Wabbitseason, you can write your code any way you want, the important thing is not to slip any user input in the query.

Jakub Kulhan

2008-05-20 12:02:27

The last example (using user input as table name) is non-sens. With good database design you'll never get to this situation. For example suppose that we have these tables: books (id, name, type_id) and types (id, name). And here you can use bindable value, again, to choose type of book: SELECT * FROM books LEFT JOIN types ON books.type_id = types.id WHERE type.name = ? I think that it's more secure and for unknown type it won't return anything, which is more expectable.

Wabbitseason

2008-05-21 06:35:16

or ... switch ($_GET['bookCategory']) { case 'sf_books': case 'literature_books': $table = $_GET['bookCategory']; break; default: $table = 'cooking_books'; } $query = "SELECT * FROM $table"; or rather: $allowed = array('cooking_books', 'sf_books', 'literature_books'); if (@in_array($_GET['bookCategory'], $allowed)) { $table = $_GET['bookCategory']; } else { $table = current($allowed); } $query = "SELECT * FROM $table";

slink

2008-05-21 05:45:39

Probably you missed a "break" in case 'literature_books'.

Konr Ness

2008-05-21 10:59:07

That last bit of code with the switch statement has bug. You missed the break; statement after the 'literature_books' case. Without it, $table will be 'cooking_books' even if 'literature_books' was specified.

Solomon

2008-05-20 08:13:34

Hi I have a JSP page which has 6 combo boxes.When i select a value in the first combo the other 5 will filter with values which is done using AJAX. Now the problem is if the value i selected in the first combo has a size say 50 the screen looks very bad with scroll bars on both sides....All the combos size varies according to the value selected in first one.... Can anyone give an idea to have all the combo boxes sizes fixed irrespective of how the AJAX fires.

Andreas

2008-05-14 00:39:57

Hey there, been looking for this. The online tool seems to work quite nice, but i can't download you class. Maybe you should take a look. Thanks

Stefan

2008-05-12 07:09:29

what about the new Zend Studio for Eclipse? It has an extensive code formatter built-in that you can configure to have every detail match your coding guidelines. Then, you can export those settings and have other people in your team import it. The formatting while working on a file is then only a single keyboard shortcut away. Sure, it costs money, but Zend Studio (for Eclipse) has been worth a lot of money for ages in my humble opinion. It supports development in PHP in so many useful ways that it's worth its price.

Matthew Browne

2008-05-03 16:58:49

Thank you SO much! I have been looking for a way to do this forever. It's even better to have a whole class written already.

Derrick

2008-05-03 18:41:06

As soon as I try loop one of these: $array[] = array('1' => 'New York'); with something like: foreach($count=1; $count=3; $count++) { $array[] = array($count => '$count'); } I get this firebug error: Parse error: syntax error, unexpected ';' in F:\server2\Apache Group\... line 49 in jquery.chainSelect.js

Radek

2008-05-01 14:21:24
To make it work on IE: jquery.chainedSelects.js >> Line 36: 36: parameters : { '_id' : $(this).attr('id'), '_name' : $(this).attr('name') }, 37: } , settings); Remove comma at the end: parameters : { '_id' : $(this).attr('id'), '_name' : $(this).attr('name') } 37: } , settings);

radek

2008-05-01 14:23:33
Doesn't work for me in IE 7. With $(target).get(0).add(new Option(data[i][key],[key]), document.all ? i : null); i get "object does not accept this property or method." on line $('#country').chainSelect('#state','/examples/jquerycombo/combobox.php',

Nguyen Duc

2008-05-01 14:22:23
Hi, I tried using a $var just replace "echo" in this function but can't. Help me because I am using Xtemplate for my project. Thanks

Barry

2008-05-01 14:22:23
Please provide an example of what you mean by "you need to select the rows inside the function instead of declaring the menu_array as a global." I have had the same issue with only one set of results being displayed. Thank you.

Aeglos

2008-05-01 14:22:23
The argument that "Smarty separates PHP from HTML files" is extremely absurd and ridiculous. What Smarty does is REPLACE the PHP in HTML files with it's own syntax which mimics PHP's, so the problem remains. Same crap, different smell. So instead of designers learning PHP, they have to learn Smarty which is only marginally simpler (notice: SIMPLER and NOT EASIER). Separation of application logic from view can be achieved by various OTHER means far better than Smarty, such as MVC implementation or a better, cleaner, faster, templating engine. And what most people fail to realize is that whatever Smarty does, you can do with PHP exactly the same way. I invite you to search the web for the Savant templating engine. It's probably the prime example the ideal templating engine. Simple, fast, unobtrusive, and uses PHP native syntax to achieve all that Smarty can do, and more, with less resources.

Mike

2008-04-23 03:28:00
Thanks Remy. The following tweak of your code works for me in FF, IE7, IE6 & Saf3: $(target).get(0).add(new Option(data[i][key],[key]), document.all ? i : null);

Nguyen Duc

2008-05-01 14:22:23
Hi, I tried using a $var just replace "echo" in this function but can't. Help me because I am using Xtemplate for my project. Thanks

Jeremy

2008-04-18 00:57:45
First - thanks for the tutorial. Mauro, I had the same problem (worked on one server but only first row shows on a different server). Can you explain what you mean by selecting the rows inside the function instead of declaring the menu_array as global? Thanks.

MacGoerk

2008-05-01 14:22:23
Actually i think this has something to do with the use of a global var. If you change the function to generate_menu($parent, $menu_array) { remove the line "global $menu_array;" change the inner recursive call to generate_menu($key, $menu_array) and the initial call to the recursive function to generate_menu(0, $menu_array) where $menu_array is your mysql result set it will work! As php SHOULD make use of pointers and call_by_reference, this will indeed result in a slightly higher memory usage. If it isn't this is just ... going to be exponential large if you have a deeply nested structure. However I'll try this way :) Also, change the mysqli_whatever calls to mysql_whatever, as mysqli is deprecated. HTH Mac

mere56

2008-04-16 11:10:34
No! Its not working in IE!

Mariano

2008-05-01 14:22:23
Remy: Works here in ie 7 (thanks!). In ie 6, almost: the first select triggers ok, but when you click the 2nd or 3rd select you get a "object does not accept this property or method" (translation from spanish, so may be innacurate. The error is referring to a jquery method, not this script.

Remy

2008-05-01 14:21:24
Ok, I have been following this and have had a couple of issues, I stripped down my production environment to the bare essentials and ran my scripts in FF and IE7. I had no problems with FF and Firebug helped immensely. IE would not play ball, even though I had tried glenn's code (which incidentally precludes FF). I have been doing a bit of digging around and looked at other jQuery options for modifying the select list. The following line has been verified on IE7 and Firefox 2 and I have used it in place of Glenn's solution. I would be interested to hear how this works in IE6. $(target).get(0).add(new Option(data[i][key],[key]),document.all ? 0 : null); This was found via an article on Dr Dobb's Journal (http://www.ddj.com/java/201000935?pgno=4) Kudos to the author!

Tim

2008-05-01 14:21:24
What about deleting? No one ever shows about deleting. I'm not talking DELETE WHERE id = $id AND parent = $id I'm talking if theres a Parent with a Child(1) that has a child(2) that has a child(3). If you delete the main parent how would it go about deleting all the way up to child 3 as child 2 is it's parent and child 1 is child 2's parent and parent is the parent of child 1. Hope I didn't confuse anyone.

Mariano

2008-05-01 14:22:23
Doesn't work for me in IE 7. With $(target).append(""+data[i][key]+""); and stuff I only get empty selects tags...

Remy

2008-05-01 14:22:23
When I try using this I get a page error: expected ";" I know my JSON is well formed and have even tried to force a semi-colon in just to see and the results are the same. I also can't get the demo to work? I don't see a script error but the effect is the same, select an option and the other select boxes are made visible but with no members? I have tried IE7/Firefox.

Tekin

2008-04-09 08:52:47
IE6 fixed but IE7 problem continue :(

angel wortham

2008-04-11 10:10:48
what is the most popualr way to make a password stronger

Dave

2008-05-01 14:22:23
The best way to determine password strength is to calculate the number of possible passwords based on the known parameters of the current password. For example, in order of increasing strength: 5 characters, all lower case = 26 ^ 5 = 11881376. 5 characters, mixed case = 52 ^ 5 = 130691232. 5 characters, mixed case, numbers and symbols = 110 ^ 5 = 16105100000 10 characters, all lower case = 26 ^ 10 = 141167095653376 15 characters, all lower case = 26 ^ 15 = 1677259342285725925376 As you can see, a 10 character password has many, many more possible permutations than a 5 character password, even if there are much fewer possible characters for each letter of the password. This is because the exponent of the equation has much more impact than the operand on the final result. The trouble is, if the attacker knows that you strictly enforce your password policy then all the policy does is to reduce the number of allowable permutations. For instance, in the 5 character password above, one character must be upper case, one must be lower case, one must be a symbol and one must be a number... the fifth can be any of them. This leaves the possible combinations at 26 x 26 x 10 x 48 x 110 = 35692800. To find the number of permutations we need to multiply that number by 5! which leaves us with 4283136000 which is around a quarter of 16105100000, the original number of possible passwords if the password policy is not enforced. With all of this in mind, a password strength tester should assume that if you only have lower case characters then the operand is 26. If you have upper case as well then the operand is 52. Numbers add 10 to the operand and symbols add 48. The length of the password becomes the exponent of the equation. If your company enforces a password policy, simply divide the resultant password strength by 4. Then all you have to do is hard-code some arbitrary values for "very weak" through "medium" to "very strong" as raw numbers of possible permutations. P.S. This algorithm is still a little naive in that it doesn't take dictionary words into account. Dictionary words and variations on dictionary words such as letter-number substitutions, letter-symbol substitutions and prepending and appending numbers to the word are still extremely common. All good password cracking tools will run through dictionary words and their variations before trying the more random permutations and hence these choices of password are inherently weak.

glenn

2008-03-21 13:46:36
It seems my previous posting didn't correctly arrive: This is the line you need to use to get results in IE: $(target).append("");
Replace all in the inner for loop with this line. Btw, I really like this implementation, the size of the plugin is also heaven and I'm a big fan of php/jquery combo. This was right up my alley and it's being used in a production site as wel speak. Thanks codeassembly. If you need some help with finetuning this let me know.

glenn

2008-03-21 13:42:16
Hi, For those who have trouble getting this in IE6 to work: replace: //option = document.createElement("OPTION");//create a new option //option.value = key;//set option value //option.text = data[i][key]; //$(target).append(option); //insert the option into the select With : //insert the option into the select $(target).append(""); There is something up with passing the .text attribute to the way it's constructed here. for some reason it does't work in IE and I cant be bothered to find out how to access the dom there. I could tell in FF that it was working. For any cache issues perhaps you could also change the parameter line to this one: parameters = { '_id' : $(this).attr('id'), '_name' : $(this).attr('name'), '_value' : $(this).val() , 'rrand' : Math.random() }; As such it will not cache the request as some IE's don't even listen to the ajax global options. Hope this helps some people here. Glenn

John Smith

2008-03-08 14:16:53
What would be the best way to add sanitisation for email addresses to this code?

miCRoSCoPiC^eaRthLinG

2008-03-21 14:02:43
Hey there... yep, I believe it's a ADODB bug. I traced the FetchRow() function to ADODB... but couldn't locate the cause. And yes, the query does return rows. My knowledge of MySQL statements fall in the "intermediate" region... so to avoid any problems while using them through PHP, I always make sure the statement is wholly functional by testing them out first through phpMyAdmin and SQLYog. There's nothing wrong with the statement itself.. anyway, I'll try with the latest ADODB release and get back to you if it works out... Thanks, m^e

Phil

2008-03-21 14:02:43
It would be nice to add a check for valid email address something like...
function validate_email_address ($address) { // check address format $address = stripslashes($address); if (!ereg ("^.+@.+\\\\..+$", $address) || empty ($address)) return FALSE; if (eregi ("\\r", $address) || eregi ("\\n", $address)) return FALSE; // safe return TRUE; }
Regards, Phil

John Smith

2008-03-08 14:05:39
What would be the best way to add sanitisation for email addresses to this code?

CodeAssembly

2008-03-08 05:01:50
Does your query return any rows ? The FetchRow() function is within ADODB so it can be an ADODB bug, try updating ADODB. Also try testing your query and see if it runs fine using phpmyadmin or another tool.

miCRoSCoPiC^eaRthLinG

2008-03-21 14:02:43
Got a question here for the author. Scenario --------- I'm using .htaccess to redirect all page requests to my script, which then parses the pretty URLs and loads the correct page. Now some of these pretty URLs are generated out of concatenating 2 different fields, i.e. a 6 digit ID and a content title. The statement goes like... ----------------------------------- SELECT CONCAT( id, '-', title_nicename ) AS content_title, list_date AS update_date FROM tbl_content, tbl_content_meta WHERE tbl_content.id = tbl_content_meta.id ORDER BY tbl_content.list_date DESC; ----------------------------------- As you can see, the concatenated result is return as a pseudo field named content_title, which isn't physically present in any of the tables. When I pass this statement to your sitemap class, I keep getting this error message: ----------------------------------- Fatal error: Call to a member function FetchRow() on a non-object in E:\\xampp\\htdocs\\site\\core\\classes\\sitemap\\sitemap.php on line 185 ----------------------------------- In contrast, generating sitemap off hard-coded field names presents no problem at all. So the reason must be that the sitemap class is running into some difficulties reading the value out of this dynamically generated field. Any ideas how to get this thing working? Thanks, m^e

abdullah

2008-03-21 14:02:43
"json_encode" this below :

pete

2008-03-21 14:02:43
example doesn't work on FF either . Missing files: Warning: include(db.inc) [function.include]: failed to open stream: No such file or directory in /home/givanz/public_html/codeassemblycom/examples/ajaxcombo/combobox.php on line 7 Warning: include(db.inc) [function.include]: failed to open stream: No such file or directory in /home/givanz/public_html/codeassemblycom/examples/ajaxcombo/combobox.php on line 7 Warning: include() [function.include]: Failed opening 'db.inc' for inclusion (include_path='.:/home/web/framework//autoload/adodb/:/home/web/framework//autoload/') in /home/givanz/public_html/codeassemblycom/examples/ajaxcombo/combobox.php on line 7

unit.zero

2008-03-21 14:02:43
as you have all said, the purpose of templating engines is to separate presentation code from logic.. the problem is, the example above combines logic with presentation.. you can really see how useful smarty can be if you actually follow the rules and use it as it was meant to be used.. for example, in your php code, lets call it example.php: $name = db->getName(); //whatever... //NOW we do our logic, which is determining the greeting to use if ($name == "Wilma") $greeting = "Welcome Ma'am."; else if ($name == "Fred") $greeting = "Welcome Sir."; //and then we assign our greeting $smarty->assign('greeting', $greeting); //finally we display the template $smarty->display('example.tpl'); so in our template file, along with all our html, we just need: {$greeting} that's it..! much easier for a third-party designer to avoid (and not destroy!) the smarty syntax is incredibly simple, you can learn to use the basic features in a day.. not to mention it provides many plugins that offer pagination (extremely useful) amonst many other things.. or you can write your own plugins of course.. MVC frameworks are a fine alternative but you can't really beat the simplicity and flexibility of smarty.. i also agree with hari and michael phipps - it is my opinion that any html combined with the php means your website is actually just webshite =)

Ken

2008-03-05 07:58:50
Hi, It looks like this script has a bug. I also has problem listing all of the categories. It starts nicely by listing Web development og followed by Php, but then it stops. It really seems like the loop does stops when the last sub categori does not contain a new sub. Because if you add a new sub cat. it will be listed. Ok? Some ideas?

Mk

2008-03-21 14:02:43
Hi. This code is great! But one problem: I copied the code straight from this page, and it works fine, except for one thing. I don't want the category names to be linked. I only want the subcategories to be linked. In the example displayed on this page, the category names are not linked, and this is how I want it, but when I copied the code, it makes them links. How do I fix this?

Mk

2008-03-21 14:02:43
This code is great. I'm using the one with CSS formatting, not the javascript expandable one. My problem is the category names are linked and I don't want them to be. I only want the subcategories to be linked. On this page, the example shows the categories as unlinked, but when I use the code, it makes my category names linked. Any ideas?

Mar�al

2008-03-21 14:02:43
Hi again, I have changed the following plugin script line: $(target).append(option);//insert the option into the select with this other one $(target).append('');//insert the option into the select and now the script works also in IE. I hope this help somebody ;)

Mar�al

2008-03-21 14:02:43
Hi, congratulations for your script, is very usefull. But i didn't get it work under IExplorer, just in Firefox. I'm trying to make it work under IE, if someone have already done it please let me know. Thanks.

apadley

2008-02-25 12:04:44
Sorry, I see that json_encode is PHP 5

apadley

2008-03-21 14:02:43
I've installed the plugin, but get the following error: Call to undefined function: json_encode() I'd like to get this working.

Eric

2008-03-21 14:02:43
Hi, I'm having the same problems as Schalk & Jason whereby only "Web Development" & "Php" are printing. It stops there. Can anyone else get this to work? Thanks

Stefan

2008-03-21 14:02:43
Hi, I discovered a problem when using the script in combination with prototype. The fix is simple ... file:expand.js line:12 -- OLD -- for(i in cookieA) -- NEW -- for(i=0;i

CodeAssembly

2008-02-12 13:14:04
I'm glad you liked it. I updated the example, it now displays a "Loading ..." div while fetching data. You can replace the div with a spinner gif.

josoroma

2008-02-09 17:57:51
Hi! Im a jquery newbie, but i test your plugin and is an easy and perfect piece of art. Great work! I was wondering how can i add a spinner gif while the data is obtained for the new select? Thanks in advance.

Mel

2008-03-21 14:02:43
Hi Mauro, I have the same problem as Jason but I dont understand you explination. What does this mean "you need to select the rows inside the function instead of declaring the menu_array as a global."? What does that mean? Which part of the script must I edit? Can you please give us an example.

miCRoSCoPiC^eaRthLinG

2008-01-10 05:21:21
Forgot to thank the author :D Apart from those minor glitches this class works just fine. I got it integrated into my custom CMS in no time at all :) Cheers, m^e

miCRoSCoPiC^eaRthLinG

2008-05-01 14:23:10
I got the same error too.. i.e. "Parse error: parse error, unexpected T_RETURN, expecting T_OLD_FUNCTION or T_FUNCTION or T_VAR or '}' in sitemap.inc on line 274". If you look into the code, you'll find a misplaced "return" statement right before the closing brace '}' of the class. Commenting this out will make it work. Most likely the author didn't attach a tested copy of the class here. After fixing the error above, I encountered a second one. The ping() function makes several calls to the file_get_contents() method, but on line 132, the same is written as contents() causing php to throw-up an error and halt. Changing that should help too. Moreover, the URLs http://submissions.ask.com/ping and http://search.yahooapis.com/SiteExplorerService/V1/ping throw 403 Forbidden errors. Most likely the ping addresses have changed / and or require some sort of a login now. It'd be wise to enclose this section in a try-catch block so as to not break your code. Cheers, m^e

erichazann

2008-01-08 10:49:33
I get an error (cannot access object of type ADODB_mysql as array) on this line: self :: $adodb[$property] = $value; Changed to self :: $adodb->$property = $value; and it works.

Robert

2008-01-08 10:36:38
You have described some of things I was lookgin for, for a long time.

Agus Halim

2008-03-21 14:02:43
Agree with David, the code is too complex i've got error message Parse error: parse error, unexpected T_RETURN, expecting T_OLD_FUNCTION or T_FUNCTION or T_VAR or '}' in sitemap.inc on line 274 and already chmod to 777

evll

2008-03-21 14:02:43
Well, the main reason to use Smarty (as was stated many times above) - to separate application logic from presentation logic. Yeah, right, you can write: Welcome Sir. Welcome Ma'am. Welcome, whatever you are. But ussually there is a whole bunch of pure php code above that. As alternative you offer MVC frameworks. Well, are they better than template engines? Maybe, or maybe not. There is the same learning curve and many other problems. So, you can't deny the necesity of logic separation. And that's why Smarty is not bad.

Neon John

2008-03-21 14:02:43
This meter is quite flawed. For example, I closed my eyes while hovering my hands over the keyboard. I randomly typed a 30 character password into your test program. I made sure I drifted up to the number row a few times to ensure a good mix of letters and numbers. Your algorithm rated this random string as "medium". Yet when I added ONE upper case letter, it suddenly became "strong". In another test I MD5 hashed a short sentence. Your algorithm only reported "medium" security. Major flaws include giving only one point credit for >12 characters while giving the same credit for a single upper case letter. Not giving proportional credit for longer passwords. Surely a 30 character mixed numeric/text password is many times more secure than a 13 character mixed case password. Your algorithm rates both the same. Seems to me major improvements would include giving proportional credit to length. Perhaps a simple randomness test or a letter frequency test? John

bharatt

2008-03-21 14:02:43
have been using fedora for past year and a half or so. started with fedora core 4, then jumped directly to fedora 7 and now using fedora 8. as far as my experience goes, fedora core 4 was more stabler than fedora 7 and fedora 8. currently am using 64 bit version. even if these problems persist i am a strong supporter of fedora. the problems am facing now, when running "compiz" and a desktop clock with some added GUI effects, crashes even when kept idle for some minutes. this is one major problem am facing now with this 64 bit. felt 32 bit version is more stabler than 64 bit version positives better detection of hardware auto mounting of windows partitions works bit faster than fedora 7 all i hope is to have a very stable version of fedora which can run non-stop with all latest gui effects as well as working as a server. in other words i should be a rugged operating system which can withstand all heavy loads and yet perform without any hiccups. this is just a suggession, not a bug. it is a common problem. hope to see a better version of 64 bit thanks

hari

2008-03-21 14:02:43
This is an absolutely ridiculous argument for larger projects because with templating systems you can avoid a lot of code duplication by keeping PHP separate from the HTML files. It's obvious you've never worked on any PHP application which involves considerably more thought process than "Hello World". Even if you avoid "Smarty" or templating systems in general, you would still find yourself writing a simple templating library yourself to keep having to repeat code segments in PHP. And trust me, large chunks of PHP code in HTML can be as confusing as hell after a while.

example

2008-03-21 14:02:43
Your meter still allows submitting by pressing enter. Even if you don't capture passwords, your ISP is likely monitoring your traffic and will capture them. You might want to block that.

Mike

2008-03-21 14:02:43
Nice class but don't forego service side validation. Client side validation does make the UI better for the user. But savvy user can still monkey with input after processing with Javascript. Always do server side validation. Always.

Csanad Komlos

2008-03-21 14:02:43
Hi, I'm trying to create a mod based on your script "infinite depth categories" at http://www.codeassembly.com/How-to-display-infinite-depth-expandable-categories-using-php-and-javascript I've been struggling with it for days now and thought you were the one to ask. I hope you have some time for it and help me. I would like to print every category names and want to append to them links to every subsequent pages if they have one (to make it clear I simplified my project here, later I want to modify categories to be pages with the links in them). Thanks in advance Csanad Komlos E.g. I have a menu tree with parent and child members that has the structure: one one one one one one one two two two one two two three And this is how I want it to look like: one one one one two one one one one one one one one one two two two one two two two one two two three I have put them in an array as per your instructions. I had to create "Fake" array index 0 so that "one" starts with key 1. It is not needed when traversing the array. $menu_array = Array ( 0 => Array ( 'name' => 'Fake', 'parent' => -1 ), 1 => Array ( 'name' => 'one', 'parent' => 0 ), 2 => Array ( 'name' => 'one one', 'parent' => 1 ), 3 => Array ( 'name' => 'one one one', 'parent' => 2 ), 4 => Array ( 'name' => 'one two', 'parent' => 1 ), 5 => Array ( 'name' => 'two', 'parent' => 0 ), 6 => Array ( 'name' => 'two one', 'parent' => 5 ), 7 => Array ( 'name' => 'two two', 'parent' => 5 ), 8 => Array ( 'name' => 'three', 'parent' => 0 ) );

hakan

2007-12-01 22:07:12
thanks for your helpful articles! especially, i was looking for this code for 2 months :) this is my lucky day! thanks.

codeassembly

2007-11-30 01:40:15
Bob, I can assure you that no email or password is collected from that example. I even disabled the submit button so people will not post the form data.

bob

2007-11-30 00:19:22
Great way to snag passwords - post a password strength meter with an email form.

Dave

2008-03-21 14:02:43
There are two ways to avoid rainbow table cracking: 1. Don't allow your encrypted passwords to fall into the hands of your attackers. 2. Use really long passwords. If you are adding salt to passwords to increase their length, don't forget to make sure it's different salt for each password or an attacker will be able to crack all of your passwords as easily as cracking one of them. Salt is also a good idea in general so that any two people with the same password won't have the same encrypted version.

YIT

2007-11-26 09:13:37
Great resource, i am using it to validate a registration form on my website, it works perfect. Thank you

Jason

2007-11-26 07:50:36
Cheers Mauro - you are a star. It now works a treat :-))

Bryan Price

2008-03-21 14:02:43
The problem is there is a DVD with all the hash codes for NT, 2000 and maybe even XP for all the 14 character alphanumeric passwords. Can't find it now. :( Ah! http://www.codinghorror.com/blog/archives/000949.html Of course, throwing in on special character (+, -, #) you defeat that rainbow password cracking. At least until somebody decides to take that 8.5 gigs and starting adding more to it fill a 320GB laptop drive or a 1TB desktop drive. Since I'm now rethinking my password strategy, I have yet to settle on something that I really like. I'm thinking about using md5 hashes generated on my old passwords with a salt. At least for my web passwords. I've already found out how much my current low priority password shows up in Google with the md5 hash AND base64 encoding. Login passwords are another issue. md5 hashes aren't so great when you can't cut and paste.

Matt

2007-11-26 07:31:25
Interesting article & example. I'd like to add a couple of thoughts, with respect to both the "password security" discussion, and the code shown in the example. As e's comment demonstrates, length is very important, and longer the better. Also, the randomness of a password (entropy) is also very important. The "words with sprinkled numbers" approach seems strong because of the length. However, where brute-force may be infeasible against them, a dictionary and/or rainbow table attack would likely make short work of such a password. http://grc.com/passwords is a good resource on generating long high-entropy passwords. You should also take a look at your markup. The example page is missing a doctype, and H tags can't be nested within a P. Besides, having a header inside a paragraph just doesn't make sense. It would also have been nice to see this implemented as unobtrusive javascript, without the inline onkeyup call and and empty div tag. I hope you don't take this as harsh. It is meant to be constructive criticism. A UI feature like this is a good way to help users use stronger passwords, and this demo is pretty slick. With just a bit more work, it'll be worthy of the attention it seems to be getting on del.icio.us. You also might want to check your spelling of "meter" in the example code ;-)

YIT

2007-11-22 14:43:52
the problem regarding accessibility to those who cant see the pictures can be solved with a button that when pressed will play a cat sound or a dog sound :)

Mauro

2007-11-26 07:31:52
Hi, the problem is that you need to select the rows inside the function instead of declaring the menu_array as a global. It should work after that.

Jason

2007-11-26 07:32:56
Hi, Strange - I've also tried example above from Rik Moncur and it does exactly the same, works on one host but not another. Regards Jason

Codeassembly

2007-11-26 07:32:29
Hi Jason, I had complains about this problem from other users, there is no php module requirement, I didn't discover the cause that is producing this problem. I just retested my script and it works fine, I'm using php 5.2.4 with apache on linux for my tests, but I think it works fine on older versions to.

Jason

2007-11-26 07:32:42
Hi Having the same problem as Schalk above - works perfectly on one host but not on another? Is there a specific PHP module that has to be enabled/installed for this to work? Regards Jason

Jason

2008-03-21 14:02:43
Hi, I have tried using the above on two different hosts - both are running php v5. On one host, the menu displays perfectly but on the other it only ever shows the first 'parent' and first 'child'. Is there a specific PHP Module that needs to be enabled for this menu to work? (hosts question not mine :-)) Many thanks Kind Regards Jason

Andrew Marlow

2007-11-19 08:50:09
This looks really good to me. But I cannot download the zip'd code. Looks like something may be wrong with the link.

e.

2007-11-16 08:22:14
This is fun! Is there any way of making this captcha accessible to those who have trouble seeing the pictures?

Avend

2007-11-15 21:34:39
Sure, this is a neat idea.. The only problem is that the picture samples you are using are repetitive: it would only take a few dozen manual refreshes to download all the images, sort them into the respective dog or cat category, and use that for making a bot. The bot could just compare file sizes (I think all these images have slightly different sizes), or perhaps an MD5 hash of them. A more robust solution I believe would be to perhaps generate a new image, placing N pictures of cats and dogs in the picture randomly, sending that to the client, then asking how many of each one there are. Of course, this number would probably be less than 10, so even with that you could send enough junk to eventually get some through.

Dadaso

2007-11-15 07:22:08
Really useful to develop project

David Bradley

2007-11-13 02:22:19
That looks far too difficult for my puny php brain. Much simpler (as I'm using Wordpress) is to use the sitemap plugin, which does it all with a couple of clicks. db

e

2007-11-14 17:04:29
Hi, Good article, but I have some suggestions. 6 letters is not a strong password. 6 letter passwords can be cracked almost instantly. I would suggest at least 8 characters. Also, your math is wrong. Using both cases is better than doubling. Consider a 6 character password only using lowercase. That's 26^6 = 308 915 776 possabilities. Using both cases however, is 52^6 = 19 770 609 664. The difference between these is a factor of 64. So for an n character password, using both cases increases cracking time by 2^n, not 2. Cheers

dod

2007-11-12 07:31:30
thanks for the clear way you have put this tut together. just the facts none of the crap. I like how you mainly focused on what we really want to know, the php

V.Z. Bunich

2007-11-11 19:39:13
I removed the multi-threading --with-mpm=worker it works now , thanks!

V.Z. Bunich

2007-11-11 18:13:49
Hi there , first of all thanks for the patch and your effort. Yet i still have a problem with it after root@buddha httpd-2.2.6]make I get the following error: /usr/local/src/httpd-2.2.6/server/mpm/worker/worker.c:1203: undefined reference to `ap_thread_stacksize' <... /usr/local/src/httpd-2.2.6/srclib/pcre/libpcre.la /usr/local/src/httpd-2.2.6/srclib/apr-util/libaprutil-1.la -lexpat /usr/local/src/httpd-2.2.6/srclib/apr/libapr-1.la -luuid -lrt -lcrypt -lpthread -ldl server/mpm/worker/.libs/libworker.a(worker.o)(.text+0x13cc): In function `child_main': /usr/local/src/httpd-2.2.6/server/mpm/worker/worker.c:1203: undefined reference to `ap_thread_stacksize' collect2: ld returned 1 exit status make[1]: *** [httpd] Error 1 make[1]: Leaving directory `/usr/local/src/httpd-2.2.6' make: *** [all-recursive] Error 1 root@blahblah httpd-2.2.6]# i will try to look further in to it... Vlad

Schalk

2007-11-09 08:39:34
Hi, I have been looking for something like this for ages, thank you so much! I just have one problem, and I'm sure it would just require a little tweaking of some sorts...When the initial parent level (0) is generated, the only 0 level links that is displayed is 'Web Development' with 'PHP" underneath and that's it! Do you know why this is happening, or even better how I can fix it? Many Thanks in advance Schalk

Finalzone

2007-11-08 19:06:22
"At the time of writing this the "Add/Remove Software" does not work, it cannot connect to fedora website to check for updates I hope it will be soon fixed, I want to install some software that I forgot to check when I first installed fedora." Those are not bug. Fedora 8 is just released so it is better to wait before applying update.

Rahul Sundaram

2007-11-09 02:17:53
The mirror list should work again. A hardware failed in the Fedora data center but has been replaced now. For the bugs, have you actually filed any bug reports instead of just hoping they would be aware of it and fixing it all by themselves? It would be useful to participate and file good bug reports on problems you find. Helps others keep track of the issues too.

Harald

2007-11-06 13:57:06
i agree with most of your points, even though i don't like your coding-guidelines. but that's a very subjectiv point of view ;-). however: in projects where you will not only have php code but javascript, perl, shell, whatever else phpdoc might not be the best solution, because i think the source-code documentation should look the same across all languages. i've tried several solutions for this and are now using robodoc, which i like very much. it won't analyse your source-code and therefore most time it's a lot more to write to document your code. on the other hand you have unified documentation for all your source-files - and i mean really all: you can even write documentation for your configuration-files for example.

John Waddell

2007-11-19 08:50:36
I encountered a mailcious cracker on one of our servers, apparently it originated in Germany. How it got into our server is still a mystery. The cracker had a complete english dictionary list and tried to break into MS-SQL Server trying root, sa and admin and every word with numeric preamble and postamble. Brute force isn't hard to employ. We use a Dr. Seuss book and take 2 words from different pages and sprinkle numbers but no scheme is "uncrackable", or that's what we should assume.

Ryan

2007-11-05 13:58:58
Excellent tutorial. Explained well, highly detailed, very practical. Thanks for writing this.

Rafael Cortes

2007-11-05 09:25:17
Be carefull with the letter substituion alone, since most brute-force dictionaries already include words with the most common substitutions. i.e. P@ssw0rd will show as a strong password, but it exists in most dictionaries, so does $tr0ngP4$$w0rd (StrongPassword) and Sys@dm1n... While P@ssw0rd and Sys@dm1n shows in this script as Strong, $tr0ngP4$$w0rd shows as strongest, they will not sustain a dictionary attack which usually gets done before or during the brute force attack. Try to use word combinations such as W0rd1ng-4-G33k$ (Wording-for-Geeks), or backward words like ys@3t0N$I$ihT (ThisIsNotEasy).

David Bradley

2007-11-05 04:42:12
Nice idea that might be easily mashed up with my passwords for scientists tip ;-) db

Big

2007-11-05 01:50:20
Cute, but not particularly accurate, "P@ssw0rd" isn't really a "strong" password. Anything that http://www.openwall.com/john/ can crack in under 10 seconds counts as "very weak". Modern tools are quite quick at anticipating simple number/letter substitution and other "leet speak" tactics. Neat Javascript demo though - to do better you'd need to jump up the complexity significantly and use ajax running serverside dictionary attacks against the suggested password... cheers, big

gigi

2007-11-19 08:50:54
very usefull tutorial

Tane Piper

2007-11-02 08:15:15
I've released a jQuery plugin that makes this very easy: http://dev.digitalspaghetti.me.uk/password/ It makes it easy to create a password field, and attach the effect to it showing the strength of the password, and it's very customizable.

A. Lai

2007-10-31 11:28:25
Your live example won't work on IE6. Just Firefox and Opera. Any idea why?

devnic

2007-11-19 08:51:09
Cool. Something basic yet very informative to save a lot of struggle. thanks

Jason

2007-10-07 08:25:25
The css version doesn't seem to function as per your example i.e. the first item in the menu has href link but should be just text? Hope that makes sense - great tutorial though :-) Regards Jason

kasp3r

2007-11-19 08:52:58
Thank you very much for your article. It helped me a lot!

kasp3r

2007-11-19 08:53:07
Thank you very much for your article. It helped me a lot!

Raul Saucedo

2007-11-19 08:53:33
Thanks for your answer, I believe I got the file location issues covered. I did test with all the files in the same directory on my local web server, just in case, I re-downloaded the files and tested again both on my local server and on my hosting. I tried with MS Explorer 6.0 SP2, Firfox 2.0.0.7 and Safari 2.02 for win, on a Win XP SP2 machine, the results are identical on all browsers. You can see what I mean at this address: http://www.masterkey.com.mx/validate.php I am still wondering why the html form name is not returned to the script, although there is a lot in it so at least it is partially working. Thanks in advance, Best Regards, Ra

CodeAssembly

2007-11-19 08:53:57
You must put the files from this example in your "Document root" folder of your web server. I think the problem is that "validate.js" is not included in your html file, check the path of "validate.js". Also you didn't specify what browser you used, I only tested this example on Firefox and Internet Explorer.

CodeAssembly

2007-11-19 08:53:44
Yes, your observation is correct, I removed the links from top categories, because I don't have those categories on my website, and I don't like putting # on my links. Thanks.

Raul Saucedo

2007-11-19 08:52:47
Well this looks exactly what I need to verify inouto on my Web Site. Looks nice and clean. Unfortunatelly it does not work (at least for me), Am I doing something wrong? I know, stupid things take a long time... For some reason the "validate.js" is not producing the full code. 1) the desired script second line is missing: "function validateuser_registration(formname) {" so initially the broser marks an error "error: return statement outside function" becasue the function was not called. 2) Then the second fucntions wich apparently most to get the "Formname" is not geting it. 3) Sadly even I fill manually those gaps manually, the validation starts to work, but when the form is correctly filled, I does not call the exit function, but shows the form again, with the data initially placed on it before all the validations clear... I am sorry but I do not know any JS, so I ca not help. Here it is what I get from the JS function: Would love to have it working! Thanks in advance and keep doing this nice work. Regards, Raul S.

Jason

2007-10-05 16:02:58
The css version doesn't seem to function as per your example i.e. the first item in the menu has href link but should be just text? Hope that makes sense - great tutorial though :-) Regards Jason

Hernan

2007-11-19 08:52:30
Useful class. I will include it in my php resources collection :)

ion gion

2007-11-19 08:52:14
There is indeed no purpose to use any template system in php. PHP itself is a template language, for example you can write the code above like this: <?php if($name == 'Fred'): ?> Welcome Sir. <?php elseif: ?> Welcome Ma'am. <?php else: ?> Welcome, whatever you are. <?php endif; ?> Remember that PHP also has an alternative syntax(so you can dismiss those curly brackets ) if: //block endif; foreach($items as $k=>$v): //block endforeach; and the list goes on(for/switch/do/while ...) PHP itself is a fully fledged template language.

CodeAssembly

2007-09-30 15:01:48
Hi Michael, if your templates are not made by a designer, but by someone with php knowledge, I don't see the purpose of using smarty. I think that a designer's job is to make the template in psd or other graphics format, and the front end programmer should make the html + css from that template and finally a php programmer should include the necessary php code to the template. I think this approach is the best, because everybody does what he is good at. I think is a very good idea to dump smarty, because there are no advantages in using it. You can try a template system based on php like phpsavant or you can try a full featured mvc framework, the advantage of mvc is that it keeps your code really organized, keeping your business logic separated from your presentation logic.

Notos

2007-11-19 08:51:57
Exlenet class but i whoul like to soo less alert and more in line alert ala DHTML

kya

2007-11-19 08:51:37
nice codes. it hep me a lot expecting more like this keep it up

Michael Phipps

2007-11-19 08:51:27
I'm a long time user of Smarty Templates, but I've gotta say you raise some really good points. Why do I use Smarty? To separate business logic from presentation logic. It used to be so designers could work with me, but I end up having to create the template myself anyway because web designers don't understand templates. I don't like having any HTML inside my PHP code. Even though, unless you enforce it, Smarty still allows PHP code in templates - and one project I worked on I found another developer just writing PHP business logic straight into the Template Pages... What's the point? With the way I use Smarty, there's really no reason for me not to use plain old PHP instead. In some cases I've used some pretty complicated template instructions to achieve something that would be much simpler to write in PHP. I have considered dumping smarty in the past. Maybe it's time I actually tried working without smarty on one of my sites?

Michael Phipps

2007-11-19 08:51:19
Hi, I just stumbled on your site through Furl, where i have a PHP search sent through to my feed reader. From the articles I've already seen on your website (I'm commenting on this post after reading quite a number of your articles), I have added you to my feed reader, and will be very interested to see what you write about.

CodeAssembly

2007-11-19 08:53:22
I checked the example from your web server and I noticed that variables inside the heredoc from formvalidator class, are not parsed, it seems that there is a problem with new line characters between operating systems http://www.php.net/manual/en/language.types.string.php. I'm using linux, I guess you are running windows for your web server, so the new line character is not the same and the heredoc does not parse correctly. I replaced the heredoc with a double quoted string so now it should work on windows also. You can download the new files and try it. Thanks for the bug report.