carbonize

You will notice that if you download either the IE7 beta/rc installer or the WMP11 beta installer it will perform a windows verification but it does not use the WGA you already have installed but instead uses one built into the installer.

Have a look at paint.net available from getpaint.net. It's a free program and has some nice effect plugins such as motion blur and zoom blur.

Anyone know why imagecolortransparent doesn't seem to work on TC servers? I'm working on new CAPTCHA for Lazarus and the image works fine on my test server but after uploading it to my web space the transparency stopped working as can be seen at http://carbonize.co.uk/Lazarus/captchatest.php According to php.net this function has been supported since PHP 3. >// create an image with width 120px, height 20px $image = imagecreatetruecolor(200, 40); // Assign a background colour $background = imagecolorallocate($image, 190,190,190); // Fill it in with the background colour imagefilledrectangle($image, 0, 0, 199, 39, $background); // Make the background transparent imagecolortransparent($image, $background);

Or cheat. 1 - Log into cPanel and goto the scripts section. 2 - Get cPanel to install Advanced Guestbook for you. 3 - Download Lazarus. 4 - Copy the database information from the Advanced Guestbook config.inc.php file to the Lazarus config.inc.php file. 5 - Upload the entire Lazarus folder (lazarusb is the default folder name). 6 - Run install.php by visiting it in your web browser. 7 - Select update. 8 - Delete install.php. 9 - Delete Advanced Guestbook folder. Delete the folder that is and not delete AG using the delete option in cPanel as ths will delete the database as well. Any problems once set up feel free to post them in the Lazarus Forums where either I, or one of my users, will gladly help you (sometimes they even manage to do so without being sarcastic hey JTD).

As stated above you can specify a file size limit in the actual HTML. Once the file is uploaded you can get it's size and mime type before moving it from the tmp folder this way you can be sure it's an image and within the file size limits. www.tizag.com/phpT/fileupload.php is a good basic tutorial and http://us2.php.net/features.file-upload explains more about what you can get using the $_FILES array.

Also you would have to spell it out to prevent them spelling things wrong. The best way would be either a contact form or use multiple images to spell out the address. I did once use bidi-override CSS so I could have the email address backwards in the HTML and have it made the right way round using CSS.

Spam Assassin sits on the server. Spamihilator sits on your computer and intercepts the email as it comes in. Maybe Spam Assassin should look at adding some other methods of scanning. The plugins I use in Spamihilator are Attachment Filter (Blocks emails with certain types of attachments) DCC Filter (This is a list where people using a DCC program send a hash of any emails they class as spam and if X number of people report it the filter blocks it) Empty Mail Filter (Blocks emails with x number of words or less and can be told to ignore HTML tags) Mystic Signs Filter (blocks emails with ascii in subject) Substring filter (you can specify words to look for and block if found) URL Filter (has a black and white list of urls and blocks as needed)

OK I know I sound like an advert but I can't recommend Spamihilator highly enough. I just had to format and so started off with a clean install of it complete with a couple of plugins. After a single learning session it is now catching 99.9% of spam emails. I may be wrong but I think Spam Assassin only uses a Bayesian filter and this is it's downfall.

Try this to see what you get <?php echo '<pre>'; print_r($_SERVER); echo '</pre>'; ?> See what results you get.

It looks like TC were right to block access to the phpinfo function because PHP 4.4.3 has just been released and one change is: Fixed cross-site scripting inside the phpinfo() function. Now if only they would upgrade the servers to PHP 4.4.3

To be honest I use two web based services, Yahoo and Gmail. All my email is forwarded to both. My Gmail seems to catch aroun 98% of the spam sent to it. The only perfect solution is to insist that all emails to you contain a certain string or signature.

No after some more testing the bug is errr bizarre. I now have both POST and GET to work exactly the same. Slashed are stripped, it's passed to htmlspecialchars etc. But for some reason the ' from a GET request is converted but not from a POST request. Here are the code snippets. First one is getting the variables from the requests. >$gb->searchfield = (isset($_GET['searchfield'])) ? $_GET['searchfield'] : ''; $gb->searchtext = (isset($_GET['searchtext'])) ? urldecode($_GET['searchtext']) : ''; $gb->searchfield = (isset($_POST['searchfield'])) ? $_POST['searchfield'] : $gb->searchfield; $gb->searchtext = (isset($_POST['searchtext'])) ? urldecode($_POST['searchtext']) : $gb->searchtext; Here is where I handle it. >if (get_magic_quotes_gpc()) { $this->searchtext = stripslashes($this->searchtext); } $this->searchtext = htmlspecialchars($this->searchtext, ENT_COMPAT); $this->searchquery = ' AND '.$this->searchfield.' LIKE \'%'.$this->searchtext.'%\''; $this->searchquery2 = ' AND x.'.$this->searchfield.' LIKE \'%'.$this->searchtext.'%\''; $this->searchtext = urlencode($this->db->undo_htmlspecialchars($this->searchtext)); $this->postsearch = '<input type="hidden" name="searchfield" value="'.$this->searchfield.'"> <input type="hidden" name="searchtext" value="'.$this->searchtext.'">'; $this->getsearch = '&searchfield='.$this->searchfield.'&searchtext='.$this->searchtext; I did some testing by having it echo the searchtext at various points and it's definately after $this->searchtext = htmlspecialchars($this->searchtext, ENT_COMPAT) that the ' is getting cinverted.

OK I am trying to add a search function to Lazarus. Al is working fine except where single quotes are concerned. At present it accepts both POST and GET data with POST coming last. Anyway if you submit a ' via POST all is fine. I then pass the search string to urlencode before adding it to the end of pagination links. That works fine with ' becoming %27. I decode when I turn the GET into a standard variable and thats fine as it becomes \'. I strip slashes if needed then pass to htmlspcialchars. It keeps converting the ' into & #039 even with ENT_COMPAT set which according to php.net Apart from that my search function is fine so any ideas or am I going to have to use a hack fix and convert ' to & #039 myself in the code. BTW this damn forum is stupid. It converts & #039 into ' but leaves & alone.

K9 looks good but it's just a Baysian spam filter like most are. Spamihilator has plugins to do such things as check domains in emails against black/white list. Check number of words in an email. Check if stupid characters have been used to space out subject and it also uses DCC whereby it connects to a DCC server and sends a hash of the email to see how many, if any, others have received the same email and classed it as spam.

I still recommend trying Spamihilator.

After an afternoon of trying to back up my website only to have Filezilla keep failing I just turned off compressionin Filezilla and it seems to have fixed the issue. I now have it set to only use compression for directory listings.

I still recommend Spamihilator. It sits on your machine and scans the email as it comes in. Has about a 99% success rate for me after training and with the extra plugins. But yes there has been an increase in spam. Also an increase in pointless spam (lots of meaningless text with no links), 419 scams and phishing. They really need to get together on this and come up with an international agreement on dealing with 419s and phishing. Also someone to actually report them to. As to sites that spam me I report them to their hosts. Sometimes it works.

Yeah I'm not making a big issue out of it but it's always fun to try and optimise. Like using single quotes instead of double quotes for strings in PHP.

Maybe there is already a mod for MT that does this. If not the code to do it should be simple enough to add as it's only about twenty lines and most of thats dealing with comparing altered height with width to make sure it's all in proportion.

Ok probably not the right forum to post this in but ho hum. After viewing some of my inline CSS using Firefox's view selection source feature I noticed the colour had been changed from hex (#F00) to rgb (rgb(255,0,0)) and this got me thinking about how browsers work. It makes sense to me that a web browser must convert a colour code into something easier for it to use to create the correct colour and surely rgb(###,###,###) is what they use? So I'm asking this. Do you think there is a speed boost, no matter how small, in rendering if you use rgb for colour specification instead of hex or names? And yes I could just download the Firefox source code and look for myself but thats a mighty lot of code.

Just to clarify you do not need the closing semi colon for the final declaration. it's good practise to use it but you don't need it.

Maybe your server is not sending the corect mime type for the wmv files so IE doesn't know it can play them.

Yes if you used a high amount of bandwidth monthly you would soon get a nasty email. The same could be said about Gmail. Do you really think they give every user 2.7 GB of space? If every user used even 1.5GB I think Google would soon start changing their tune.

Since they are uploading the photos and your server has GD (you are on TC I take it?) you could either just resize the image on upload if it's to large or, and this is what my guestbook script does, create a thumbnail version of the image if it's to large and then the displayed image is a link to the full size one. As the resizing is done on uploading it will not affect the spedd at which the viewin page loads. Actually I wonder if you could do this with javascript. Something for me to look into but not the best solution.

Problem with password protected zips is you can still download them and you can bruteforce zip passwords at something like 2,000,000 passwords a minute. If you don't mind doing it by hand you could use .htpasswd for each file but you would have to create a new one for each user. The alternative would be PHP and MySQL. You need two database tables and a folder that is set to local access only for the files to go in. The first table being username and passwords. The second being filenames and username it's assigned to. You then make a PHP file that gets called for each download with the filename passed as a variable and then this php script asks for the username and password for that file. If correct username and password is supplied then PHP sends them that file otherwise no go. As complicated as it may sound the above method would be extremely simple to code for even someone with only basic PHP and MySQL knowledge. Actually since you only want to use a password you could get away with a single database table.