myPhp – 第 5 页 – Demengqi的好时机

关于生日计算的程序

因为一个朋友要我帮忙改个javascript计算他朋友孩子年龄的代码，发现其中有些难度，后来用php改写了程序，计算更准确些。

header ( "Content-type: text/html; charset=utf-8" );

$weeklist = array ("星期日", "星期一", "星期二", "星期三", "星期四", "星期五", "星期六" );
$date = date ( 'Y年m月d日' );
$dateDisp = $date . $weeklist [date ( w )];

echo '今天是' . $date . '<br>';

$birthday = strtotime ( '1977-02-14' ); //生日
$haveday = floor ( (time () - $birthday) / (60 * 60 * 24) ); //出生距离现在的天数
echo '生日是'.date('Y-m-d',$birthday).'<br>';
echo '距现在是'.$haveday.'天<br>';

//计算年
if (date ( 'n' ) >= date ( 'n', $birthday ) && date ( 'j' ) >= date ( 'j', $birthday ))
 $have_year = date ( 'Y' ) - date ( 'Y', $birthday );
else
 $have_year = date ( 'Y' ) - date ( 'Y', $birthday ) - 1;
 
//计算月 
if (date ( 'n' ) >= date ( 'n', $birthday )) {
 $have_month = date ( 'n' ) - date ( 'n', $birthday );

} else {
 if (date ( 'j' ) >= date ( 'j', $birthday )) {
  $have_month = 4 + date ( 'n' );
 } else {
  $have_month = 4 + date ( 'n' ) - 1;
 }
}

if (date ( 'j' ) >= date ( 'j', $birthday )) {
 $have_day = date ( 'j' ) - date ( 'j', $birthday );
} else {
 $time_tmp = time () - date ( 'd' ) * 86400;
 $date_tmp = date ( 't', $time_tmp );
 $have_day = $date_tmp - date ( 'j', $birthday ) + date ( 'j' );
}

echo '您'.$have_year . '岁' . $have_month . '月零' . $have_day . '天啦 ^_^';
//echo $haveday;

新建trac项目

公司项目需要，所以要建立一个独立的trac项目，这里做个备忘

1、在想要建立项目的地方（例如 /trac/projects/）,输入 trac-admin 项目名 initenv

2、（接下来的提问全部按回车即可。如果想与subversion联合使用，请继续看）

3、# chown -R apache.apache 项目名

4、复制第一个项目的 passwd及 trac.ini文件至对应目录

5、配置apahce：

<Location /box>
SetHandler mod_python
PythonInterpreter main_interpreter
PythonHandler trac.web.modpython_frontend
#PythonOption TracEnvParentDir
PythonOption TracEnv /trac/projects/项目名

AuthType Basic
AuthName “LilyBox”
AuthUserFile /trac/projects/项目名/conf/passwd
Require valid-user
SetEnv PYTHON_EGG_CACHE /trac/projects/项目名/cache
</Location>

6、重启apache

centos安装openvpn

公司是第二次安装openvpn了，因为需要，所以这次一定告诉自己要记录下来，所以从网上找了很多资料，甄别后，进行操作，没想到异常顺利。

==============
For Server
==============
1. Download package files 下载文件
#wget http://openvpn.net/release/openvpn-2.0.9.tar.gz
#wget http://openvpn.net/release/lzo-1.08-4.rf.src.rpm

2. Install package
#rpmbuild –rebuild lzo-1.08-4.rf.src.rpm
#rpm -Uvh /usr/src/redhat/RPMS/i386/lzo-*.rpm

#rpmbuild -tb openvpn-2.0.9.tar.gz
#rpm -Uvh /usr/src/redhat/RPMS/i386/openvpn-2.0.9-1.i386.rpm

如果顺利就不会出下面提示了，

Error:
Failed build dependencies:
autoconf is needed by lzo-1.08-4.rf.i386
Answer:
yum install autoconf.noarch
–
Error:
Failed build dependencies:
pam-devel is needed by openvpn-2.0.9-1.i386
Answer:
yum install pam-devel

3. Copy the sample configuration files 按这个操作即可
#cp -r /usr/share/doc/openvpn-2.0.9/easy-rsa/ /etc/openvpn/
#cp /usr/share/doc/openvpn-2.0.9/sample-config-files/server.conf /etc/openvpn/

4. Configure the CA
#cd /etc/openvpn/easy-rsa/
#vi vars
export KEY_COUNTRY=CN
export KEY_PROVINCE=Beijing
export KEY_CITY=Beijing
export KEY_ORG=”VPN”
export KEY_EMAIL=”service@myemail”

#. ./vars
#./clean-all

./clean-all 只需要做一次哟！

下面开始建立ca证书

5. Build the root CA
#./build-ca
……++++++
writing new private key to ‘ca.key’
—–
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank.
—–
Country Name (2 letter code) [CN]:
State or Province Name (full name) [Beijing]:
Locality Name (eg, city) [Beijing]:
Organization Name (eg, company) [VPN]:
Organizational Unit Name (eg, section) []:linux
Common Name (eg, your name or your server’s hostname) []:VPN
Email Address [vpn@myvpn.ca.mail]:

6. Build the server key and crt
#./build-key-server server
Generating a 1024 bit RSA private key
…..++++++
……………………++++++
writing new private key to ‘server.key’
—–
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank.
—–
Country Name (2 letter code) [CN]:
State or Province Name (full name) [Beijing]:
Locality Name (eg, city) [Beijing]:
Organization Name (eg, company) [VPN]:
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server’s hostname) []:VPN
Email Address [service@myemail]:

1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated

这里 Common Name 是必须要填的，其他默认即可，之后的建立 key ，Common Name都是要不同的，

7. Build the Diffie Hellman parameters
#./build-dh
Generating DH parameters, 1024 bit long safe prime, generator 2
This is going to take a long time
……….

8. Install the CA file which server request
#cp keys/ca.crt ../
#cp keys/dh1024.pem ../
#cp keys/ovpnsrv1.key ../
#cp keys/ovpnsrv1.crt ../

9. Setting the server configuration for OpenVPN
#cd ../
#vi server.conf
#proto tcp
proto udp
;dev tap
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
log /var/log/openvpn.log
log-append /var/log/openvpn.log
verb 5

10. Startup the service
#service openvpn restart
#chkconfig openvpn on

11. edit iptables

#vi /etc/sysconfig/iptables

-A RH-Firewall-1-INPUT -p udp -m udp –dport 1194 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp –dport 1194 -j ACCEPT
#service iptables restart

==============
For Client
==============

1.在 linux server 上建立客户端需要的 key

vpn新建帐号方法

[lilyenglish@lilyCenter ~]$ su –    ##################
Password:
[root@lilyCenter ~]# cd /etc/openvpn/easy-rsa/            #####################
[root@lilyCenter easy-rsa]# . ./vars                      #####################
NOTE: when you run ./clean-all, I will be doing a rm -rf on /etc/openvpn/easy-rsa/keys
[root@lilyCenter easy-rsa]# ./build-key zb02   ############################
Generating a 1024 bit RSA private key
………….++++++
.++++++
writing new private key to ‘zb02.key’
—–
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank.
—–
Country Name (2 letter code) [CN]:
State or Province Name (full name) [Beijing]:
Locality Name (eg, city) [Beijing]:
Organization Name (eg, company) [LILYVPN]:
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server’s hostname) []:zb02   #################### 注意Common Name不能相同
Email Address [service@lilyenglish.com]:

Please enter the following ‘extra’ attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
Using configuration from /etc/openvpn/easy-rsa/openssl.cnf
Check that the request matches the signature
Signature ok
The Subject’s Distinguished Name is as follows
countryName           :PRINTABLE:’CN’
stateOrProvinceName   :PRINTABLE:’Beijing’
localityName          :PRINTABLE:’Beijing’
organizationName      :PRINTABLE:’LILYVPN’
commonName            :PRINTABLE:’zb02′
emailAddress          :IA5STRING:’service@lilyenglish.com’
Certificate is to be certified until Dec 8 06:46:11 2018 GMT (3650 days)
Sign the certificate? [y/n]:y                      ############################
1 out of 1 certificate requests certified, commit? [y/n]y      #######################
Write out database with 1 new entries
Data Base Updated
[root@lilyCenter easy-rsa]# cp ./keys/zb02* /home/lilyenglish/keys/ ####################

客户端设置

拷贝 client.ovpn ca.crt zb01.key zb01.crt 到 C:\Program Files\OpenVPN\config 下

修改 client.ovpn 内容 88 ～90 行

ca ca.crt
cert zb01.crt
key zb01.key

session_id跨页变化的处理

今天碰到一个怪问题，

第一个页使用 session_start(); 第二个页也有 session_start(), 但是第一个页面的 $_SESSION 变量却无法传到第二个页。

在网上搜索无数帖子，才逐渐清晰并处理完毕，在互联网上的中国帖子真是无法看，全是东超西抄，毫无价值的内容充斥着。

我是使用 ajax弹出一个 iframe 窗口，在这个 frame 窗口中处理一个post请求，使用session传递变量。

使用 echo session_id(); 在两个页面内是不同的，这个也是导致两个页之间session丢失的主要原因。但是在独立窗口运行，

session_id() 确实相同值，能正常传输数据。

因此处理方案就是在第一个也内，用一个变量记录 session_id()的值。然后在公共文件头使用

if(isset($_POST[‘sid’]))
session_id($_POST[‘sid’]);
else if(isset($_GET[‘sid’]))
session_id($_GET[‘sid’]);

session_start();

setcookie(“PHPSESSID”,session_id(),0,””,””,0);

测试，数据能正常传输到另一个页了，至于网上说需要改 php.ini 啥的，到处都是，如果不确定自己去核对就好了。

主要是学会发现问题出处方法，至于处理，中文英文到处都是。。。

vsftp的被动模式的处理

vsftp 由于设置 iptables 防火墙，限制端口，导致 ftp的被动模式出不去。经高手指点，先做如下修改，

# modprobe ip_conntrack_ftp
# modprobe ip_nat_ftp
# service iptables restart