input controlled by the server provider

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

Post Reply
gphp
Forum Commoner
Posts: 29
Joined: Sun Feb 17, 2008 1:40 pm

input controlled by the server provider

Post by gphp »

Hi,
I got an application word for a word (PHP) on my home system and on my remote forum server but on the remote I can post 3 posts and then it prohibits me from further posting while on my home system I can post as many posts I can.
Is the input controlled by the server provider (why should be) or is it my implementation somewhere(!?) that I need to figure out?
Thanks,
George
:x
User avatar
ghurtado
Forum Contributor
Posts: 334
Joined: Wed Jul 23, 2008 12:19 pm

Re: input controlled by the server provider

Post by ghurtado »

What is the application called? is it something you bought? something you downloaded?
gphp
Forum Commoner
Posts: 29
Joined: Sun Feb 17, 2008 1:40 pm

Re: input controlled by the server provider

Post by gphp »

Well, I developed the application myself. It is a forum implementation and it works fine on my machine (of course) at home but I am having problems to run it on a provider's system. At home it runs on CentOS fine and it takes every input but on my provider's it refuses to accept input after 3 or so entries!?
Thanks,
George
User avatar
ghurtado
Forum Contributor
Posts: 334
Joined: Wed Jul 23, 2008 12:19 pm

Re: input controlled by the server provider

Post by ghurtado »

What's the error message? Can we see some of your code that has to do with the problem?
User avatar
onion2k
Jedi Mod
Posts: 5263
Joined: Tue Dec 21, 2004 5:03 pm
Location: usrlab.com

Re: input controlled by the server provider

Post by onion2k »

I'm going to take a guess and say the server you're using online has a web application firewall installed on it, and that's stopping what it thinks is a spam/DoS attack.

Obviously that's a total guess because there's very little to go on.
User avatar
ghurtado
Forum Contributor
Posts: 334
Joined: Wed Jul 23, 2008 12:19 pm

Re: input controlled by the server provider

Post by ghurtado »

Talk about a stab in the dark... ;)

If you are right, onion, I'll buy you a beer / shave my head / make a comic book about black bears... :D
gphp
Forum Commoner
Posts: 29
Joined: Sun Feb 17, 2008 1:40 pm

Re: input controlled by the server provider

Post by gphp »

I was told by the provider that they do not firewall anything. I will have to organize the code since I use function calls and so the code is elsewhere before I can post it.

Thanks,
George
gphp
Forum Commoner
Posts: 29
Joined: Sun Feb 17, 2008 1:40 pm

Re: input controlled by the server provider

Post by gphp »

I think I found the problem. It is the special characters that create the conflict. They work at some instance but not at other instance so I need to figure out where I got the implementation incomplete to take care of this issue.
You can see some of the issues at http://www.myforestspace.net.
Thanks,
George
User avatar
onion2k
Jedi Mod
Posts: 5263
Joined: Tue Dec 21, 2004 5:03 pm
Location: usrlab.com

Re: input controlled by the server provider

Post by onion2k »

Your data is in ISO-8859-1 encoding but you're sending the page to the browser in UTF-8.
gphp
Forum Commoner
Posts: 29
Joined: Sun Feb 17, 2008 1:40 pm

Re: input controlled by the server provider

Post by gphp »

So, what you are saying is that as long I will type it in within the page I should have no problems but once I send it in from a different source like the UTF-8 then I will have problems showing the right text?
I pasted the text from OpenOffice word processor and that caused same problems.
Thanks,
George
User avatar
Chalks
Forum Contributor
Posts: 447
Joined: Thu Jul 12, 2007 7:55 am
Location: Indiana

Re: input controlled by the server provider

Post by Chalks »

I'm dealing with a problem right now that sounds very similar to yours. I just recently found the error though, the database was saving everything in iso-8859-1 format, but I was trying to display it as cp850 (and then I tried utf-8, then windows-1251, then on and on, ugh). Long story short: make sure the charsets are the same on _all_ pages AND the database.
Post Reply