Skip to content

Quotes turn into funny characters when submitted in an HTML form

 

We have a PHP function that tries to clean up the mess with smart quotes. It’s a bit of a mess, since it’s grown a bit organically as cases popped up during prototype development. It may be of some help, though:

function convert_smart_quotes($string) {
    $search = array(chr(0xe2) . chr(0x80) . chr(0x98),
                    chr(0xe2) . chr(0x80) . chr(0x99),
                    chr(0xe2) . chr(0x80) . chr(0x9c),
                    chr(0xe2) . chr(0x80) . chr(0x9d),
                    chr(0xe2) . chr(0x80) . chr(0x93),
                    chr(0xe2) . chr(0x80) . chr(0x94),
                    chr(226) . chr(128) . chr(153),
                    '’','“','â€<9d>','â€"','  ');

     $replace = array("'","'",'"','"',' - ',' - ',"'","'",'"','"',' - ',' ');

    return str_replace($search, $replace, $string);
}

Posted in Php. Tagged with , , .

By amit
February 22, 2010

No comments

How do you Change the Date format?

 

How to do this using Joomla 1.5, assuming you want to change the default English:

1. Navigate to the language\en-GB folder in your Joomla install.
2. Edit the en-GB.ini file.
3. Change the date formats near the top. The parameters you see there (that is %A, %H, etc.) are replacements for the formatting of the date. The available parameters can be found in the PHP link in the above post.

An example for my particular setup, I wanted to switch to a format that looks like this for my front page articles.

Sunday, March 3 2008

I changed DATE_FORMAT_LC2 key to the parameters below to accomplish this:

DATE_FORMAT_LC2=%A, %B %d %Y

Reload the front page, and it was good to go.

Some More Formates

it worked for me on the backend in joomla 1.5.10 by changing en en-GB.ini file in administrator/languages/en-GB to:

DATE_FORMAT_LC=%A, %B %e %Y
DATE_FORMAT_LC1=%A, %B %e %Y
DATE_FORMAT_LC2=%A, %B %e %Y %H:%M
DATE_FORMAT_LC3=%B %e %Y
DATE_FORMAT_LC4=%m/%d/%y
DATE_FORMAT_JS1=m-d-y
# %Y-%M-%D=%Y-%M-%D
%M-%D-%Y=%M-%D-%Y
%A, %B %E=%A, %B %e

note that the LC4 entry is the only one that mattered on the content dates.

Posted in Open Source Software, Php. Tagged with , , .

By amit
February 17, 2010

No comments

Get the first sentence with PHP

 

The code

Using a combination of the PHP functions strpos() and substr() we can extract the first sentence from the above text like so by looking for the location of the first period / full stop in the content and returning everything up to and including it.

function first_sentence($content) {

    $pos = strpos($content, '.');
    return substr($content, 0, $pos+1);

}

Then doing this:

echo first_sentence($content);

would output this:

Lorem ipsum dolor sit amet, consectetur adipiscing elit.

What if there’s no periods / full stops?

The first example assumes that would be at least one period / full stop in the content. If there isn’t, the example code will simply return the first letter from the passed in string.

This isn’t ideal, so we can modify the first_sentence() function to use strpos() to check for a full stop, and if there isn’t one just return the whole string instead:

function first_sentence($content) {

    $pos = strpos($content, '.');

    if($pos === false) {
        return $content;
    }
    else {
        return substr($content, 0, $pos+1);
    }

}

Automatically removing HTML code

And finally, we’ll modify the code to remove any HTML tags and entities. If the source content is always plain text then you won’t need to do this step, but if it can then you’ll need to clean it up first.

You may not need to use the html_entity_decode part (which converts e.g. &amp; to &) but you will need to strip the tags, otherwise in <p>blah blah blah.</p> you’d end up with <p>blah blah blah. without the closing </p> tag. Also it’s possible your HTML tags may contain . characters which would falsely indicate the end of the sentence.

function first_sentence($content) {

    $content = html_entity_decode(strip_tags($content));
    $pos = strpos($content, '.');

    if($pos === false) {
        return $content;
    }
    else {
        return substr($content, 0, $pos+1);
    }

}

Conclusion

It’s easy to extract the first sentence from some content using the PHP functions strpos() and substr() by looking for the first occurence of a period or full stop. The final example function in this post combines this with a fallback in case the content does not contain a full stop and cleans the content from HTML tags and entities.



Posted in Php. Tagged with , .

By amit
February 16, 2010

No comments

How to dynamically adjust an iframe’s height

 

Suppose you want to include a child iframe on your page. You’d like to resize the height of the child iframe so that it doesn’t show a scrollbar. That is, you want something that looks like this:

Dynamic i-frame height example

Here’s one way you can do it. First, make the iframe that you want to include. I made a file “child-frame.html” that looks like this:

<html>
<head> <title>Child frame</title> </head>
<body bgcolor=”#000000″>

<font color=”#ffffff”>
<p>Child frame.</p>
<p>Child frame.</p>
<p>Child frame.</p>
<p>Child frame.</p>
<p>Child frame.</p>
<p>Child frame.</p>
<p>Child frame.</p>
<p>Child frame.</p>
</font>

</body>
</html>

Now in the parent frame, you can make code like this:

<html>
<head> <title>Parent frame</title> </head>

<body onload=”resizeFrame(document.getElementById(‘childframe’))” bgcolor=”#cccccc”>

<script type=”text/javascript”>
// Firefox worked fine. Internet Explorer shows scrollbar because of frameborder
function resizeFrame(f) {
f.style.height = f.contentWindow.document.body.scrollHeight + “px”;
}
</script>

<p>Parent frame.</p>
<p>Parent frame.</p>
<p>Parent frame.</p>
<p>Parent frame.</p>

<p>
<iframe frameborder=0 border=0 src=”./child-frame.html” name=”childframe” id=”childframe”>
</iframe>
</p>

</body>
</html>

Posted in Articles, Javascript. Tagged with .

By amit
February 16, 2010

No comments

Simple PHP String EnCrypt + DeCrypt function.

 

f your need of security is not that high,
this script makes it a bit more difficult to get to your information.
Most people would never be able to decode your text.
If you have stuff that needs high security, you should use other tools.
Sure is possible to add more complicated operations,
but I wanted to keep it small, fast and simple.

This little function will use a Secret Key to encrypt text.
And you would have to use same Key to decrypt it back.
There is only one function for both encrypt/decrypt.
And you call it the same way always.

<?php
// String EnCrypt + DeCrypt function
// Author: halojoy, July 2006
function convert($str,$ky=”){
if($ky==”)return $str;
$ky=str_replace(chr(32),”,$ky);
if(strlen($ky)<8)exit(‘key error’);
$kl=strlen($ky)<32?strlen($ky):32;
$k=array();for($i=0;$i<$kl;$i++){
$k[$i]=ord($ky{$i})&0×1F;}
$j=0;for($i=0;$i<strlen($str);$i++){
$e=ord($str{$i});
$str{$i}=$e&0xE0?chr($e^$k[$j]):chr($e);
$j++;$j=$j==$kl?0:$j;}
return $str;
}
///////////////////////////////////

// Secret key to encrypt/decrypt with
$key=‘mysecretkey’; // 8-32 characters without spaces

// String to encrypt
$string1=‘To be or not to be, that is the question’;

// EnCrypt string
$string2=convert($string1,$key);

// DeCrypt back
$string3=convert($string2,$key);

// Test output
echo ‘<span style=”font-family:Courier”>’.“\n”;
echo ‘Key: ‘.$key.‘<br>’.“\n”;
echo $string1.‘<br>’.“\n”;
echo $string2.‘<br>’.“\n”;
echo $string3.‘<br>’.“\n”;
echo ‘</span>’.“\n”;
?>


Posted in Php. Tagged with , , .

By amit
February 12, 2010

No comments

Jquery Extensions

 

While Thickbox had its day, it is not maintained any longer, so we recommend you use some alternatives.

Posted in jquery.

By amit
February 8, 2010

No comments

 

Compression Command

tar -cpvf <foldername> <newfile.tar>
gzip <newfile.tar>

How can I extract a tar.gz or .tgz file?

gunzip <newfile.tar.gz>


Posted in Miscellaneous.

By amit
February 8, 2010

No comments

14 Days of jQuery

 

Welcome to The 14 Days of jQuery! We’re excited to bring you fourteen consecutive days of new releases to celebrate the release of jQuery 1.4. You’ll notice that we’re excited about the number fourteen since jQuery 1.4 is being released on the birthday of jQuery (January 14th) . So be sure to come back each day as another announcement is made and new content is released!

Also be sure to follow the announcements via RSS, Email, or Twitter!

Read the announcement of The 14 Days of jQuery

Pre Release Day 1

Pre Release Day 2

Day One

Day Two

Day Three

Day Four

Day Five

Day Six

Day Seven

Day Eight

Day Nine

Day Ten

Day Eleven

Day Twelve

Day Thirteen

Day Fourteen

Posted in Ajax, jquery. Tagged with , .

By amit
February 2, 2010

No comments

FAQ: Joomla! Permissions Overview

 

The basic unix permissions come in three flavors;

Owner Permissions : These are permissions that you have on your own files or directories.
Group Permissions : These are permissions that you and anyone in your group have on the file files or directories.
Other Permissions : These are permissions that other people have on your files or directories if not you, or in your group

So, in Unix, when permissions are configured, the server allows you to define different permissions for each these three different categories of users. In a Web Serving environment these permissions are used to control which website owners can access which directories and files.

What do Unix permissions look like?
When viewing your files through an FTP client or from the servers command line;

filename.php  username usergroup rwx r-x r-x

The first entry is the name of the file, the next entry is your username on the server, the second entry is the group that you are a member of and the last entry is the permissions assigned to that this file (or directory).

If you notice, I have intentionally spaced out the permissions section, I have grouped the 9 characters into 3 sets of 3. This separation is key to how the permissions system works.

The first set of 3 permissions (rwx) relate to the username seen above, the second set of 3 permissions (r-x) relate to the usergroup seen above and the final set of 3 permissions (r-x) relate to anyone else who is not associated with the username or groupname.

Owner (User) relates to username
The Owner (User) is normally you, these permissions will be enforced on your hosting account name.

Group relates to usergroup
The Group permissions will be enforced on other people that are in the same group as you, within a hosting environment, there is very rarely other people in the same group as you. This protects your files and directories from being made available to anybody else who may also have a hosting account on the same server as you.

Other relates to everyone else
The Other permissions, these will be enforced on anybody else on the server that is either not you or not in your group. So in a Web Serving environment, remembering that no-one else is normally in your group, then this is everybody else accessing the server except for you.

Each of the three sets of permissions are defined in the following manner;

r = Read permissions
w = Write permissions
x = Execute permissions

Owner Group Other
r w x    r w x    r w x

As many of you already know, permissions are normally expressed as a numeric value, something like 755 or 644. so, how does this relate to what we have discussed above?

Each character of the permissions are assigned a numeric value, this is assigned in each set of three, so we only need to use three values and reuse them for each set.

Owner Group Other
r w x    r w x    r w x
4 2 1    4 2 1    4 2 1

Now that we have a value that represents each permission, we can express them in numeric terms. The values are simply added together in the respective sets of 3, which will in turn give us just three numbers that will tell us what permissions are being set.

So, if we are told that a file has the permissions of 777, this would mean that the following was true.

Owner Group Other
r w x      r w x      r w x
4 2 1      4 2 1      4 2 1

Thus…
4+2+1  4+2+1  4+2+1
= 7        = 7      = 7

The Owner of the file would have full Read, Write and Execute permissions, the group would also have full Read, Write and Execute permissions, and the rest of the world can also Read, Write and Execute the file.

The standard, default permissions that get assigned to files and directories by the server are normally;

Files = 644 and  Directories = 755

These permissions would allow, for files;

644 =  rw- r– r–  = Owner has Read and Write
Group has Read only
Other has Read only

and for directories;

755 =  rwx r-x r-x    = Owner has Read, Write and Execute
Group has Read and Execute only
Other has Read and Execute only

Now, things can get a little complicated when we start talking about shared Web Servers, the Web Server software will be running with its own username and groupname, most servers are configured for them to use either “apache” and “apache” or “nobody” and “nobody” as username and groupname.

So hear is the problem, your Web Server runs as its own user, and this user is not you or in your group, so the first two sets of permissions do not apply to it. Only the world (other) permissions apply.

Therefore, if you configure a permissions set similar to 640 on your website files, your Web Server will not be able to run your website files.

640 =  rw- r– —  = Owner has Read and Write
Group has Read only
Other has no rights

The WebServer is assigned no permissions at all and cannot Execute, Write or more importantly, even Read the file to delivery its content to a website visitors browser.

If a directory was to be assigned 750 permissions, this would have the same effect, because the WebServer does not even have permissions to read files in the directory, even if the files inside that directory had favorable permissions.

750 =  rw- r-x —  = Owner has Read and Write
Group has Read and Execute
Other has no rights

Directories have an extra quirk, if a directory does not have the Execute permission set in the World set then even if Read and Write are set, if the program is not run as the user or group, it will still not be able to access the files within the directory. The Execute setting allows the program to “Execute” commands in the directory, so without it being on the program(in our case a Web Server) cannot execute the “Read” command, thus cannot deliver your file to the users web browser.

How Does this Relate to Joomla! ?
Good question, well in the first instance this would be important during the Web-Installer process.
If you can remember back to when you ran the Joomla! Web-Installer, we were looking for specific directories to be designated as “Writable”.

We see quite a numbers of posts either stating that there were problems during the install with permissions or asking what permissions are recommended. Some even consider the message, asking for “Writable” permissions to be too vague.

Unfortunately, as the Web-Installer does not know how your server is configured, then it cannot be more specific, however, once you understand the permissions settings and you know a ittle about Web Serving environments, you will actually find that the term “Writable” is actually very specific and a more than adaquate description of what Joomla! needs.

Thinking back to the above information, you may remember that there are three places where “Write” permissions maybe set;

Owner Writable, Group Writable and Other Writable.

Also remembering that the Web Server generally doesn’t run as your own user or in the same group. When you run the Web Installer from a browser, it is the Web Server trying to access the files, thus it is the “Other” permissions that will apply to it. If the “Other” permissions do not allow the Web Server to Read, Write or Execute commands in the Joomla! directories, you will receive the message saying that the directories are not “Writable”.

In this case, you will need to configure the Other permissions to be “7″ on the directories listed in the Web Installer.
So your total permissions might be something like 757, in the worse case you might need to set 777. These very open permissions
maybe reset back to 755 after the installer runs to assist in the security of your directories and files.

757 =  rwx r-x rwx  = Owner has Read, Write and Execute
Group has Read and Execute
Other has Read, Write and Execute

Just to make things even more confusing, many hosting firms make use of a software called phpsuExec or suExec, these tools change the way the Web Server runs, where the Web Server would not normally run as your username, in this case, it does.

So the use of the “Other” permissions, may not be required, now you may only need to configure directories to be “Writable”  to your own username and groupname, this allows directory permissions to be set as 755 or 775 instead of 757 or 777.

755 =  rwx r-x r-x  = Owner has Read, Write and Execute
Group has Read and Execute
Other has Read and Execute

775 =  rwx rwx r-x  = Owner has Read, Write and Execute
Group has Read, Write and Execute
Other has Read and Execute

The Web Server will still need to Execute set for the username and Read, Execute groupname permissions set so that it can Execute the Read command on files inside the directory. Again, these permissions may be demoted back to 755 after the Web Installer completes.

OK, so thats the basics for directories covered, what about files? This is where things get a little simpler.

Most of the files that Joomla! makes use of will be quite happy with the 644 default permissions.

644 =  rw- r– r–  = Owner has Read, Write
Group has Read
Other has Read

This is valid if you do not have a need to Write to the files from the Web Server, the same rules apply as for directories if you do have this need. One file that you may like to have “Writable” to the Web Server is your configuration.php file. This is the Joomla! configuration file, if you plan on changing configuration through the Web Admin interface, then this file will need to be Writable to the Web Server.

If your server needed directory permissions to be set to “Other” Writable for the install then this file will probably also need to be 757 or 777. Leaving this file as 757 or 777 is dangerous though, as you are letting everyone have “Write” access, many Web Site exploits take advantage of this fact, so in general it is not recommended to leave this file with these permissions.

If your Web Server has one of the SU tools installed and you only needed to configure 755 on directories for the installation, then you will probably also only need to set 755 or 775 on this file to allow editing through the Admin interface, and these permissions are generally accepted as more secure than 757 or 777.

In conclusion, what permissions should be set for the Joomla! installation? Well, as you can see, it depends!

I know this isn’t maybe as helpful as you would have liked and it certainly is not a definitive answer, but in general, after the installation any insecure “7″ settings can be reset back to something more secure.

for Example: Files = 644  and  Directories = 755

These permissions would allow, for files;

644 =  rw- r– r–  = Owner has Read and Write
Group has Read only
Other has Read only

and for directories;

755 =  rwx r-x r-x    = Owner has Read, Write and Execute
Group has Read and Execute only
Other has Read and Execute only

Footnotes:

If you have SSH, Shell access the following commands should be able to be run from the command line to reset all your files and directories back to the server defaults of 755 and 644.

Change directory in to the top directory (” / “) of your Joomla! installation, then run these;

find . -type f -exec chmod 644 {} \;
find . -type d -exec chmod 755 {} \;

If you only have FTP access, this can be a very time consuming job, however, unless you changed more directories during the installation that was requested, you should only need to reset about 10 directories and the configuration.php file.

Keep in mind that to install any extensions or templates after the actual Joomla! installation you may need to elevate the default permissions again on the appropriate directories just for the installation period, you may then demote them again after the add-on is installed.

If you decide to use “cache” the cache directory will need to be “Writable” to the Web-Server user to allow it to write its temporary files.

Once you have completed the installation, next thing to do is read Ron Liskey’s  “Joomla! Admins Security Checklist”. I am sure you will find much of the security information that you will need in this post and the Security Forum.

Posted in Apache Web Server, Open Source Software. Tagged with , , .

By amit
January 28, 2010

No comments

Setting Joomla Directory Permissions

 

Here is the sequence of commands to set the permissions for the web server account (apache):

chgrp apache administrator/backups
chgrp apache administrator/components
chgrp apache administrator/modules
chgrp apache administrator/templates
chgrp apache cache
chgrp apache components
chgrp apache images
chgrp apache images/banners
chgrp apache images/stories
chgrp apache language
chgrp apache mambots
chgrp apache mambots/content
chgrp apache mambots/editors
chgrp apache mambots/editors-xtd
chgrp apache mambots/search
chgrp apache mambots/system
chgrp apache media
chgrp apache modules
chgrp apache templates
chmod g+w administrator/backups
chmod g+w administrator/components
chmod g+w administrator/modules
chmod g+w administrator/templates
chmod g+w cache
chmod g+w components
chmod g+w images
chmod g+w images/banners
chmod g+w images/stories
chmod g+w language
chmod g+w mambots
chmod g+w mambots/content
chmod g+w mambots/editors
chmod g+w mambots/editors-xtd
chmod g+w mambots/search
chmod g+w mambots/system
chmod g+w media
chmod g+w modules
chmod g+w templates

Now the installation check looks like this:

administrator/backups Writeable
administrator/components Writeable
administrator/modules Writeable
administrator/templates Writeable
cache Writeable
components Writeable
images Writeable
images/banners Writeable
images/stories Writeable
language Writeable
mambots Writeable
mambots/content Writeable
mambots/editors Writeable
mambots/editors-xtd Writeable
mambots/search Writeable
mambots/system Writeable
media Writeable
modules Writeable
templates Writeable

Posted in Apache Web Server, Open Source Software. Tagged with , , .

By amit
January 28, 2010

No comments