Secure PHP Development- P176 docx

home.phpapplication, 223–225 HTML interface templates, 222–223 Internet resource manager application, 204 IntranetUserclass, 217–218 Messageclass, 207–213 message creation/deletion, 207–

intranet document publisher, 267–268 intranet system, 222–223

online help system, 417–418 tell-a-friend system, 450 vote application, 703 Web forms manager, 679 HTMLtoText()method, 415 htpasswd utility, Apache 2.0, 785 httpd script, 805–806

httpd.confscript, 786–790, 813–814 HyperText Markup Language (HTML), external templates, 4, 5–11

I

IfModuledirective, 793, 801 implementation documentation, commenting, 59

implicit_flushdirective, 817 include_pathdirective, 818 _indexOfSection()method, 407–408 information

authentication shielding, 60 debugging display color, 87 debugging storage, 87 sensitive concealing, 38–39 input variables, automatic creation risks, 30–32

INSERTSQL statement, 51–52 installing, phpMyAdmin, 771–772 integer, defined, 765

interfaces, external HTML template, 4 Internet Geographic Database, geo location finder tool, 584 Internet resource manager application, intranet system, 204

Internet Resource Manager system application classes, 362–368 application configuration files, 369–373

calendar.errorsfile, 373 calendar.messagesfile, 373 category adding, 395–396 Category Manager, 394

category manager application, 374–379 click-through tracking, 359

error messages, 373 HTML interface templates, 373–374 installation, 391–393

Internet resource adding, 397–398 IRM database, 359–361

IRM search interface, 394 IrmCategoryclass, 362–363 irm.conffile variables, 369–372 IrmResourceclass, 364–368 keyword search support, 359 Messageclass, 368

messages, 368, 373 resource manager application, 379–385 resource organization, 359

resource rankings, 359 resource tracking application, 385–386 search manager application, 386–391 search results display, 399–400 security issues, 401

subcategory adding, 395–396 testing, 393–400

intranet calendar manager application configuration files, 343–347

automatic reminders, 336 calendar event manager application, 350–352

calendar manager application, 348–349 calendar.conffile, 344–347

database design, 336–337 error messages, 347 event adding, 355–356 event assignments, 336 Eventclass, 337–343 event modifying, 356 event reminder viewing, 356–357 event sharing, 336

global events, 335 holiday events, 335

continued

intranet calendar manager continued

HTML templates, 348 installation, 353–354 messages, 347 repeatable events, 335 testing, 354–357 weekends, 355 intranet contact manager application classes, 297–307 application templates, 312–313 automatic reminders, 294 category adding, 326–327 Categoryclass, 298–301 central contact database, 293–296 configuration files, 308–311 contact adding, 328 contact category hierarchy, 293 contact category manager application, 313–317

Contactclass, 302–307 contact management, 293 contact manager application, 317–323 contact.conffile, 308–312

e-mail interface, 294 e-mail sending, 330 error messages, 312 installation, 323–325 messages, 312 searches, 293, 325–326, 329–330 subcategory searches, 330–332 testing, 325–332

intranet database, tables, 205–206 intranet document publisher application classes, 250–259 automated announcements, 248 category adding, 286–287 Categoryclass, 251–255 category-based document organization, 247–248

configuration files, 261–267 database design, 248–250 Doc class, 255–258 document adding, 288–292 document details application, 280–281

document index display application, 278–279

document publisher application, 268–277

document response application, 281–282

document view list application, 282–283

error messages, 267 HTML templates, 267–268 id.conffile, 261–265 installation, 283–285 ld.errorsfile, 267 ld.messagesfile, 266–267 main document index, 285–286 messages, 266–267

Responseclass, 258–260 testing, 285–292

user-level access controls, 248 Web forms, 247

intranet home application message writing, 244–245 testing, 240–245

user access logs, 242–244 user preferences, 242 intranet system access reporter application, 230–233 ActivityAnalyzerclass, 213–217 admin access reporter application, 233–235

application configuration files, 219–222

application templates, 222–223 application testing, 240–245 CD-ROM installing from, 238–240 central contact-manager application, 204

central event-calendar application, 204 central user authentication, 203 daily logbook manager application, 236

database design, 204–206 document-publishing application, 204 home.conffile, 219–222

home.phpapplication, 223–225 HTML interface templates, 222–223 Internet resource manager application, 204

IntranetUserclass, 217–218 Messageclass, 207–213 message creation/deletion, 207–213 messages (notes), 204

MOTD (Message of the Day), 204 MOTD manager application, 225–229 reports, 232

user home application, 203 user management, 203 user preference application, 237–238 user preferences, 242

user tip application, 237 intranets

application framework, 67–71 application-specific authorization, 67 business-logic requirements, 69 central authentication, 66–67 database abstraction, 70–81 debugging requirements, 85–91 error handler class, 81–84 PHP Application Framework (PHPAF) layer, 68–69

relational database, 69–70 shared database, 67 template-based presentation layer, 68 user requirements, 65–67

IntranetUserclass, 217–218 IntranetUser()method, 218–219 introduction message, tell-a-friend system, 464–471

IP/network address, authorization access control, 24

IrmCategoryclass, 362–363 IrmCategory()constructor method, 362–363

IrmResourceclass, 364–368 IrmResource()constructor method, 364–365

isAccessAllowed()method, 445 isAccessDenied()method, 445

isAllowed()method, 665 is_authenticated()method, 131, 143 is_coupon()function, 31

is_customer()function, 31 isDenied()method, 665 isKnownForm()method, 670 isLoaded()method, 408 isMaximumSubmitted()method, 438 isNetworkAddr()method, 665, 666 isNodeOf()method, 665, 666 isOKtoSendMail()function, 603–604 isRead()method, 228

isSection()method, 408 isset()function, 568 ISSUBMITTED()method, 483 isValidAge()function, 36 isViewable()method, 212

J

JavaScript, internationalized error message display, 84 jpcache, PHP applications, 727–729

K

KeepAlivedirective, 793 KeepAliveTimeoutdirective, 793 keepTrack()method, 385 keepTrackAndRedirect()method, 545 key=valuepairs, associative arrays, 46–47

keyword search, online help system element, 403

L

LANGUAGEconstant, 20–21 language poll form, vote application, 709 LanguagePrioritydirective, 804 languages

default setting, 84 internationalizable error messages, 81–84

Language Translation Tools, 83 message selection, 20–21 libraries, PHPLIB, 7–8

lib.session_handler.phpscript, 151–153

links, forgotten password/central login interface, 201

Linux Apache 2.0 installation/configuration, 781–808

file/directory commands, 821–831 multiprocessing modules, 783–784 MySQL installation/configuration, 808–810

predefined cron directories, 569 Listclass, 516–518

list manager application, e-campaign system, 528–532

List Manager application, e-mail survey system, 476

Listendirective, 795 lists

combo, 55–58 e-campaign system creating, 549–550

lncommand, 824–825 loadCatInfo()method, 252, 298 loadConfigFile()method, 670 loadContactInfo()method, 302–303 loadDocInfo()method, 256

load_error_code()function, 84 load_error_code()method, 84 loadEventInfo()method, 339 _loadFile()method, 415 loadMap()method, 413–414 loadMessageInfo()method, 208–209 loadmonitor.confscript, 596 loadmonitor_mail.txtscript, 604 loadmonitor.phpscript, 597–602 loadResponseInfo()method, 259 locatecommand, 825

log_errorsdirective, 818 login application

authentication determination, 131–133 configuration, 133–134

error messages, 136 login.phpscript, 127–131 menu display, 136–137

purpose, 127 testing, 148–149 warning page, 137–138 login.confscript, 133–134 login.errorsscript, 136 login.htmlscript, 136–137 login.phpscript, 127–131 logins

MD5 message digest, 740–743 persistent, 149–155

LogLeveldirective, 802 logout application configuration, 143–145 error messages, 145 flowchart, 138 session termination, 139–143 testing, 148–149

logout.confscript, 143–145 logout.errorsscript, 145 logout.messages script, 145 logout.phpscript, 139–143 logresolve utility, Apache 2.0, 785 logresolve.plscript, Apache 2.0, 785 logUserIn()method, 230–231 logUserOutmethod, 230 loops

benchmarking, 718–722 while, 50

loops.phpscript, 718–721

lscommand, 825–826

M

magic_quotes_gpcdirective, 818 magic_quotes_runtimedirective, 818

$MAIL_CONTROL_FILEarray, 597

$MAIL_FREQUENCYarray, 597

$MAIL_TEMPLATEarray, 597 mailToContact()method, 317–318 main menu application, tell-a-friend system, 451

makeAddRequest()method, 635 makeIndex()method, 419 makeindex.phpscript, 428 makeKeywordIndex()method, 412–413

makesitescript, 619–635 makesite tool, Apache virtual host, 610–611, 612–636

makesite.confscript, 612–614 makeVirtualHost()function, 615 makezonescript, 648–653

makezone utility BIND domain manager, 641–642 configuration, 642–647

functions, 653–655 implementation process, 647–655 installation, 655

standard template, 644–645 templates, 643–647 testing, 656–658 zone template, 645–646 makezone.confscript, 642–643 map()method, 517

markers, HTML template blocks, 9–11 MaxClientsdirective, 794

max_execution_timedirective, 818–819 MaxKeepAliveRequestsdirective, 793 MaxRequestPerChilddirective, 794 MaxSpareThreadsdirective, 794 MD5 message digest, login security, 740–743

md5_login.htmlscript, 741–742 md5_login.phpscript, 742 memory_limitdirective, 819 menus, user administration application, 188

Messageclass addMessage()method, 210, 443 addNewEcampaign Message() method, 520

addViewer()method, 211 deleteMessage()method, 444, 520 deleteViewers()method, 212 EcampaignMessage()method, 519–520

getAll Messages()method, 210, 443 getAvailableMessages()method, 520

getEcampaignHeaderInfo()method, 520

getEcampaignMessage Info() method, 520

getMessageInfo()method, 442–443 getMessages()method, 209 getMsgIDbyMessageTitle()method, 212

getViewers()method, 211 isViewable()method, 212 loadMessageInfo()method, 208–209

Message()method, 208, 442 modifyMessage()method, 211, 444 setEcampaignMessageID()method, 520

setMessageID()method, 442 UpdateEcampaignMessage()method, 520

UpdateEcampaignMessageHdr() method, 520

Message()constructor method, 442 message editor, tell-a-friend system, 432 message manager application

e-campaign system, 535–538 tell-a-friend system, 454–456 Message()method, 208, 442 Message of the Day (MOTD) manager application, intranet system, 225–229

messages See also error messages

creating/deleting, 207–213 customizable, 4, 14–21 dialog/status, 21 e-campaign system, 519–520, 526, 552–553

e-mail survey system, 498–499 forgotten-password recovery, 198 internationalizing, 116

Internet Resource Manager system,

368, 373 intranet calendar manager, 347 intranet contact manager, 312 intranet document publisher, 266–267 intranet home application, 244–245 intranet requirement, 81–84

continued