Good day. Can anyone help me on how to access the user app data using a php code? Is there any built-in function for these? If you have any idea, please help. Badly needed.
heres a sample of the directory i want to access
C:\Documents and Settings\MyDocumentName\Application Data\
thanks in advance
Not (entirely) possible.
PHP code is interpreted on the server and the only thing that reaches the user's browser is the result of the PHP code. You could build an app with a form that allows the user to upload the contents of their Application Data directory to the server, but I don't think that it will turn out to be a very popular website.
Alternately, if you intend to interact with the user in a more intimate fashion, there are always avenues like Flash applications or (gasp!) ActiveX controls, but with browsers these days, most will flag your app as being a security breach and disable it.
Related
Sorry for my English and probably stupid question, but being amateur in web programming I can't find a definite, short answer for the following questions:
what is the danger of allowing Joomla user to upload PHP file from the front-end, and
is there any way to prevent the risks in (1), while allowing user to upload PHP script?
Thanks in advance!
CBroe's answer outlines the risks of letting users upload PHP script files to your web server. There are applications that allow this functionality by using automatic code generators that create the PHP script files server side, providing some kind of UI for users to do so. Some of the Content Construction Kits (CCKs) do this. Others allow authorized users (administrators) to edit PHP files directly, which mitigates the security risks by relying on trusted users to not do harm. A third approach is something like Facebook's, where they require users to host the PHP script files on the user's own server, but provide an API and SDK to integrate those apps into Facebook's system.
I'm developing an app that access to a service and according to the user privileges make some stuff.
I've been searching a way to handle user permissions and I found that Kinvey provides something close to what I want, but I'm not so sure it will be enough.
I need a way how to handle the different user privileges using just HTML5 without compromising the user security. I'm not that experienced but think that just doing it with JS could bring me security problems in the future (you know, the source code can be seen in the browsers). So, I was considering to use PHP but the app will be moved later to iOS and Android with PhoneGap and I don't know If PHP will work fine in this environment.
I'm driving crazy, can you help me?
Thanks in advance.
html (any version) is a stateless protocol (http://en.wikipedia.org/wiki/Stateless_protocol), a simple communication layer that cannot provide anything like that.
What you are asking is simply impossible, it's like asking a paper envelope to remember your name.
So I am developing some software in php and mysql. The clients web application is hosted on their server but basically I want an easy way to turn their site off if they don't pay. I wanted to be able to host a say config file on my server that has maybe an array of data that says how long their subscription is good for, what they have access to etc. I obviously don't want to save this information directly on their server because they could manipulate the config to have whatever they want. Their are a number of other things I would be using this for but for the most part these are the most important parts. Also if there is a better way I am always open to any suggestions.
Thanks in advance!
I have developed a website in php-zend with SQL server 2008r2 in which we can create requests. I am building an add-in for Outlook in asp.net with C# to create a request directly from email also.
But at the time of request creation from Outlook, I want to know whether that person is already logged into the website or not. If not then he needs to log into the website first, then only he can create a request from Outlook.
So basically I want to synchronize my website and the Outlook add-in application. I searched for active directory also, but could not get any idea how to achieve that.
Can anyone help me?
Thanks a lot in advance,
Mausami
It's not really designed to do this. You would need to look up the phpsessid value in the cookie set for your website on the local computer.
That's basically impossible because,
Every browser and OS store cookies differently, checking all the major browser cookie stores would be cumbersome and slow
If the browser is open when you're add in runs, the cookies will probably have an exclusive lock on them
Private browsing does not save cookie values to disk
Use authentication within you're plugin instead.
I could use some advice.
I'm building a website in which the general user needs to be able to transfer files to the site administrator. It could be done one of two ways:
1] Some kind of web based interface - PHP perhaps - to send files to the FTP. I've done some Googling but have yet to come up with anything concrete that works. I've considered using an Applet but I need something free. Also, it seems to me that people are hesitant to give Applets permission to run in their browser.
2] Some kind of file transfer service. I've looked at services like Megaupload but using a free account, the files are public and that will not work. I need something that a user could use to send a file to the administrator who could pick it up later.
If anyone has some suggestions, it would be appreciated.
Thanks in advance.
You can do file upload via http if you have enough space (which I assume since you also have access to a ftp server). See here for more information.