Bart De Waele » tys' comment » July 2008 http://www.bartdewaele.be/ Bart De Waele » tys' comment » July 2008 Gregarius 0.5.4 en tys' comment: Important PHP Mollom update http://feeds.feedburner.com/~r/TijsComment/~3/333466498/ Sat, 12 Jul 2008 13:25:59 +0200 http://feeds.feedburner.com/~r/TijsComment/~3/333466498/ If you read Molloms API documentation you can see that some calls have an (optional) parameter called author_ip. In PHP Mollom the IP-address is set automagically, so you don’t have to worry. But the variable I used could be spoofed.

As you know getting the right IP-address is not that easy. If your application is running behind a reverse proxy $_SERVER[’REMOTE_ADDR_HTTP’] contains the reverse proxy’s IP. Or if your application is running on a cluster setup the clients IP-address is storred in $_SERVER[’HTTP_X_CLUSTER_CLIENT_IP’].

But both of these variables can be spoofed by spammers, so we are not sure these values are right. So PHP Mollom needs to know the allowed IP-addreses for the reverse proxy’s. I build in a function Mollom::setAllowedReverseProxyAddresses that accepts an array of allowed IP-addresses.

Please update your applications with the new version.

]]> tys' comment: CDATA with simpleXML (PHP) http://feeds.feedburner.com/~r/TijsComment/~3/331076828/ Wed, 09 Jul 2008 22:14:34 +0200 http://feeds.feedburner.com/~r/TijsComment/~3/331076828/ It is been a while. But I’m back.

A lot of new Web 2.0 applications use API’s. Most of the time they return XML, and some of those services do it well by encapsulating their data in CDATA-tags.

But simpleXML doesn’t like CDATA. Think again. Use the code below and you will have full access to the data in the CDATA-tags.

$xml = simplexml_load_string($string, ‘SimpleXMLElement’, LIBXML_NOCDATA);

Have fun!

]]>