Comments on: image generation in PHP http://www.3till7.net/2006/03/11/image-generation-in-php/ Programming, espresso, and grumbling. Fri, 25 Jun 2010 09:48:24 +0000 hourly 1 By: marvin http://www.3till7.net/2006/03/11/image-generation-in-php/comment-page-1/#comment-352411 marvin Sun, 16 Aug 2009 09:42:04 +0000 http://www.3till7.net/2006/03/11/image-generation-in-php/#comment-352411 How to save a copy of a php generated image ? How to save a copy of a php generated image ?

]]> By: Sarah http://www.3till7.net/2006/03/11/image-generation-in-php/comment-page-1/#comment-315300 Sarah Thu, 18 Dec 2008 05:58:02 +0000 http://www.3till7.net/2006/03/11/image-generation-in-php/#comment-315300 Anna: it's the only way I know of to get parameters from the URL. Any input you get from the user should not be trusted, so any data you get from $_GET should also not be trusted. However, you can do things to ensure the data is valid and safe. For example, say you expect the value of $_GET['option'] to be 1, 2, or 3. Something like this would suffice: <code>if ($_GET['option'] == 1 || $_GET['option'] == 2 || $_GET['option'] == 3)</code> <code>  echo 'Yay!';</code> <code>else</code> <code>  echo 'Bad data!';</code> You can also use functions like <a href="http://www.php.net/manual/en/function.stripslashes.php" rel="nofollow">stripslashes</a>, <a href="http://www.php.net/manual/en/function.htmlentities.php" rel="nofollow">htmlentities</a>, and <a href="http://www.php.net/manual/en/function.mysql-real-escape-string.php" rel="nofollow">mysql_real_escape_string</a>. Anna: it’s the only way I know of to get parameters from the URL. Any input you get from the user should not be trusted, so any data you get from $_GET should also not be trusted. However, you can do things to ensure the data is valid and safe. For example, say you expect the value of $_GET['option'] to be 1, 2, or 3. Something like this would suffice:

if ($_GET['option'] == 1 || $_GET['option'] == 2 || $_GET['option'] == 3)
  echo 'Yay!';
else
  echo 'Bad data!';

You can also use functions like stripslashes, htmlentities, and mysql_real_escape_string.

]]> By: Anna http://www.3till7.net/2006/03/11/image-generation-in-php/comment-page-1/#comment-314932 Anna Tue, 16 Dec 2008 06:01:47 +0000 http://www.3till7.net/2006/03/11/image-generation-in-php/#comment-314932 If I might ask this considering I know nothing about php. What is the safety of using a $_Get function? If I might ask this considering I know nothing about php. What is the safety of using a $_Get function?

]]> By: sarah http://www.3till7.net/2006/03/11/image-generation-in-php/comment-page-1/#comment-5260 sarah Sat, 26 Aug 2006 14:36:25 +0000 http://www.3till7.net/2006/03/11/image-generation-in-php/#comment-5260 That you'll put after you've done all your configuration for the image, because those lines are what actually render the image in the browser. That you’ll put after you’ve done all your configuration for the image, because those lines are what actually render the image in the browser.

]]> By: osiris http://www.3till7.net/2006/03/11/image-generation-in-php/comment-page-1/#comment-5168 osiris Fri, 25 Aug 2006 02:26:31 +0000 http://www.3till7.net/2006/03/11/image-generation-in-php/#comment-5168 header( 'Content-type: Image/PNG' ); imagepng( $image ); imagedestroy( $image ); The code above, where should I place it in image.php? header( ‘Content-type: Image/PNG’ );
imagepng( $image );
imagedestroy( $image );

The code above, where should I place it in image.php?

]]>