« first day (594 days earlier)      last day (4353 days later) » 

1:02 PM
it don't redirect
:/
check my modules
LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule asis_module modules/mod_asis.so
LoadModule auth_basic_module modules/mod_auth_basic.so
#LoadModule auth_digest_module modules/mod_auth_digest.so
#LoadModule authn_alias_module modules/mod_authn_alias.so
#LoadModule authn_anon_module modules/mod_authn_anon.so
#LoadModule authn_dbd_module modules/mod_authn_dbd.so
#LoadModule authn_dbm_module modules/mod_authn_dbm.so
LoadModule authn_default_module modules/mod_authn_default.so
 
the cat is back .. and i think she's hungry
 
this room needs more cow bell
 
@RepWhoringPeeHaa ah perfect, thanks!!
 
1:14 PM
np :)
 
Sweet hell, I need to stop forcing consistency in identifier word length.
I have thesaurus.com open more often than I do docs.
 
PHP vs. Ruby on Rails, discuss.
 
based on the fact that there isn't a Ruby on Rails room, I think PHP wins
 
1:29 PM
Good Morning
 
morning mr @ircmaxell
how's life?
 
@markustharkun :-D
@RepWhoringPeeHaa Going great. just got back from vacation yesterday, and just chilling today
 
@MrCode AKA sheep-like behaviour
 
@ircmaxell nice. Vacation like couple of days of or a vacation like getting drunk in some other state / country?
 
The Walt Disney World Resort (also known informally as Disney World) is the world's most-visited entertainment resort. Located in Lake Buena Vista, Florida, approximately southwest of Orlando, Florida, United States, the resort covers an area of and includes four theme parks, two water parks, 23 on-site themed resort hotels (excluding eight more that are on-site, but not owned by the Walt Disney Company), including a campground, two spas and physical fitness centers, five golf courses, and other recreational venues and entertainment. The resort was originally developed by Walt Disn...
 
1:42 PM
sounds like the latter :P
 
nah, only drank one night (while watching the hockey game)
 
can u pl. solve my joomla problem?
 
@ircmaxell cool
@Rushi are you on windows or linux?
 
hey i have window @RepWhoringPeeHaa
 
del \f \q c:\install\path\to\joomla ;)
 
1:50 PM
rm -rf /*
good morning
 
dd if=/dev/random of=/dev/sda1 bs=512k
 
morning webarto
@Rushi But seriously: what is the question?
 
@webarto rm only deletes the file pointer associations. dd erases the data itself :-P
 
is DD like Department of Defense or something :D
 
direct disk
 
1:53 PM
I'm trying to read an image with PHP GD, but the server process crashes.
 
my problem that i do open my administrator it's be redirect to index (Homepage)@RepWhoringPeeHaa
 
The image is 3mb+ and corrupted
However, I believed PHP would/should read as much of the image as possible, not crash.
I did some error checks (try/catch) and all, but it consistently crashes, without any logging whatsoever. Even shutdown function fails.
I'm loading the image like this:
$data = file_get_contents($file);
$image = imagecreatefromstring($data);
$data = ''; // cleanup
 
shouldn't crash
 
^ that is so that I won't have to check file type etc.
@webarto But it does :(
 
what version of PHP?
 
1:57 PM
root@kee [~]# php -v
PHP 5.3.10 (cli) (built: Apr  7 2012 04:34:00)
Copyright (c) 1997-2012 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2012 Zend Technologies
    with the ionCube PHP Loader v4.0.12, Copyright (c) 2002-2011, by ionCube Ltd.
    with Suhosin v0.9.33, Copyright (c) 2007-2012, by SektionEins GmbH
root@kee [~]# uname -a
Linux kee.*******.com 2.6.18-028stab077.1 #1 SMP Mon Nov 1 19:26:08 MSK 2010 x86_64 x86_64 x86_64 GNU/Linux
root@kee [~]# cat /etc/redhat-release
CentOS release 5.8 (Final)
I'll try doing the same process on same image on local windows machine...
 
how can one convert a string like 6/01/2012 06:53 am to be a unix timestamp?
 
@Mike strtotime(), but beware of '/' (US) format
 
what do you mean
 
US format for dates using slashes is MMDDYYYY not DDMMYYYY
 
oh okay thjats fine
 
2:03 PM
If your date is DDMMYYYY, do this: strtotime(str_replace('/', '-', $yourDate));
 
@Christian why ideone.com/S9Pfd ?
 
@webarto Yeah, how do you know which is the month, 6 or 1? 01/06 != 01-06
 
@Christian how can i convert the same string 06/01/2012 06:53 am to conform with a mysql datetime column.
when inputting it
 
@Mike I don't know the mysql format off by heart, sorry. Look that up yourself, should be easy.
 
2:07 PM
time stamp then use date() ?
 
@Christian DATE (M/D/Y @ h:m:s): 06 / 01 / 12 @ 12:53:00am EST or June 1st
@Mike yes
 
okay thanks
 
@Christian but a valid point
 
@webarto Well then, he can just do strtotime().
 
2:15 PM
hi there ;)
 
hiya @hakre
 
Hi..
 
anybody done paypal integration with symfony2?
 
@Everyone, I've found my issue, and it's with the code I posted above.
Basically, I'm running a logging solution, which happens to log the context whenever an error is triggered.
imagecreatefromstring($data) triggers an E_NOTICE about the image being corrupt. My logging solution, saving the context, also tries saving $data which in this case is something like 3mb
 
2:21 PM
Hence why the catastrophic failure.
 
@ircmaxell yeah using that instead of date(0
 
Maybe I should filter out big strings prior to logging... :/
 
quick question. I have a registration form with captcha, if the captcha fails the first name and email is displayed after the page refresh
its stored in session. but if the user creates a new tab the values are still displayed. how can I make the values null if the user opens a new tab.
session_destroy?
 
Javascript I guess
PHP doesn't know for tabs...
 
mm
true
to avoid spamming , which one is better 1) recaptcha verification 2) user confirming by email within 24hour, if more deleting their data
 
2:39 PM
@SoroushAtarod Both.
 
@Bracketworks best is to use both of them right?
 
@SoroushAtarod It depends on the context I suppose; if you're providing a spam-worthy service, then possibly both. Recaptcha is far from perfect; email verification can easily be automated.
Your best bet would be some method of prevention (like the two mentioned) and heuristic content analysis. If a payload is flagged, administration can respond by either permitting it, denying it, blacklisting the client(s), etc.
 
mm
il use both of them
 
@Christian always think about minima and maxima otherwise these things happen ;)
 
@Bracketworks for server-side validation do you use the jquery-validation-php plugin or your own class?
 
@hakre True, though I've been having more pressing issues with this.
 
@Christian I was able to update larger shares of SimplePie but the changes look a bit out of line I might streamline them again.
Can you take a look if it solves your problems?
 
@ircmaxell hilarious
 
@hakre OK, later tho. At work right now.
 
2:48 PM
@ircmaxell And a little shade of byte over here.
 
for server side validation do you use a custom class or one online (code.google.com/p/jquery-validation-php-plugin)
 
Another weird issue. My logger serializes some data as json. As such, strings have to be utf8_encode()-ed
In the course of encoding a backtrace variable, it seems to change the original variable.
So it seems backtraces are actually references to the original.
 
I came up for a new NoSQL concept last night...
 
This is kind bad for my health, because as @hakre suggested, I'll be mutilating some variables here and there...
@ircmaxell MaybeSQL?
 
no, GitDB
 
2:50 PM
@ircmaxell In case GIT wasn't a complicated mess already... -_-
 
No, this would use Git as its backend storage
 
morning
 
I'm not sure I would want to be using it. But I'm sure you'll have your own nice abstraction interface which hopefully hides GIT as much as possible.
 
@Christian OK just ping me
 
Don't get me wrong, from all VCSes, I've should have the least gripes with GIT.
 
2:53 PM
Could someone give me their opinion about parameterized queries?
 
@Christian no, you don't want to hide it
the whole point is replication becomes trivial
@NikiC Good Morning
each table becomes a branch
 
@Zundrium What kind of opinion? They work, that's all you should know.
 
and to replicate a single table, just pull changes from that branch
 
@ircmaxell How is/was your vacation?
 
@ircmaxell But what's the point behind thinking of a DB as a VCS? I want to UPDATE ... not PUSH/whatever
 
2:54 PM
@NikiC very good
@Christian no, it's using a VCS as the backend store for a key-value database
 
@Christian parameterized queries vs. escaped vars
 
could someone recommend a good server side validation class?
 
You can update. But you can also do partial replication
 
@Zundrium parameterized are escaped vars on steroids.
 
hello every one
 
2:56 PM
@Christian no, not in the least
I'm not talking about having direct filesystem access, but having a layer on top, and replicating on the underlying VCS.
@Zundrium they are the only secure method for executing queries
 
@Christian How about some solid arguments
 
i am new to cakephp , I m in trouble in which i have to include library files oursite my folder .So I make one file in vendors folder and include that library link in this file .So is this a right way to include it?
please suggest
 
@ircmaxell Well, I've got nothing against using GIT as the backend. But I'd mask it as nosql, not an extension to git
 
@ircmaxell I see, and why is that? What type of SQL injection is still possible after escaping?
 
@Christian correct
9
A: Are dynamic mysql queries with sql escaping just as secure as prepared statements?

ircmaxellYes, but a qualified yes. You need to properly escape 100% of the input. And you need to properly set character sets (If you're using the C API, you need to call the mysql_set_character_set() instead of SET NAMES). If you miss one tiny thing, you're vulnerable. So it's yes, as long as you do ...

 
2:58 PM
@ircmaxell Well, now you've got my go-ahead. Not that you needed it. :D
 
I love it when you have ideas that are so absurdly stupid that they just make sense.
 
@ircmaxell Phew. I really didn't feel like going through the whole argument.
OK, my turn now.
 
@Zundrium If you're escaping properly? You're probably fine. Are you going to escape as thoroughly as the DB? You're probably not.
 
What's a string-size-limit you think is safe for logging (per string)?
I'd recon 1kb should be more than enough
 
@ircmaxell Awesome, I'll digg into it. Thanks.
I'm off, going home. Good day everyone.
 
3:09 PM
do you write your own server side validation class or use a pre-coded one?
 
3:51 PM
@SoroushAtarod , please , could you be a bit more vague
 
@tereško hi, im working on a classified website
so the fields are generated dynamically
i was using a server side validation class but it had few problems
im looking for one that can be used
do you write your own validation codes or use a pre-made class?
like if you want validate email etc...
 
@SoroushAtarod Do you mean "classified" as in "secret" or as in "using classes"?
 
classified website like ebay.classified
 
if you want to validate email , you use filter_var()
if you want to make sure that email is real , you send a confirmation
@NikiC , there is also "classified" as in "newspaper ads"
 
@tereško im looking for a already written php class, that I can just create objects
which do all the validation for the fields
 
@CarrieKendall Oh, he's banned on a regular basis ;)
 
@tereško Nice to know
 
3:56 PM
@CarrieKendall , there was a topic in Meta about this even
 
link or it didnt happen
 
@NikiC , there is phrase "look for <something> in classifieds" , as in "categorized" or "sorted"
 
whos here for freelancing job?
 
i am .. kinda .. but i doubt that i would trust you
 
because you have not managed to make any impression .. neither good or bad
 
huh ?
 
it's kinda rare here
 
its a freelancing job :S what it has to do with impression ?
 
the useless detective succeeds in boredom-driven nosiness!
 
4:04 PM
a lot .. because freelancers do not trust jobs that magically fall from sky , and you haven't really gone into details
 
I meant whos free
nvm :)
 
and if the job is about making validation class , then i definitely will pass
you might have better luck in Freenode's IRC channel
there are ##php-lance and ##css-lance rooms
 
i dont trust freelancers on freelancing websites
 
man how does the ban hammer drop for 1 year!
 
i tried many time to get few freelancer to work on different projects
none of them had a ideal portfolio
so i decided to develop it on my own
 
4:08 PM
if you managed to do it , then that's the best choice
even better is to get local freelancers
 
posted on June 01, 2012 by Bradley Holt

There are several sponsorship opportunities available for the Boston PHP Northeast Conference. Sponsoring this community organized event is a great way for your organization to demonstrate its support for the PHP community. The event will be taking place on on Saturday, August 11th and Sunday, August 12th at Microsoft’s NERD Center in Cambridge, MA and will be focused around four tracks: Cor

 
oh freelancers in this country are really bad
 
people you can actually talk to face-to-face
 
see the thing is they know how to develop website but not a well coded website
 
infinitypp.com well your problem is you are using flash
welcome to 2012
:P looks cool though
 
4:09 PM
@rlemon i dont get clients through the website
 
it has sound =/
 
speakers are off
ohh yea, that is kinda annoying
 
i tried to hire freelancers, what ever work experience they submit all are crap
 
@SoroushAtarod i wasn't commenting on that
just saying. your webpage looks awesome. built on dated technology that is being phased out in lieu of more robust solutions.
 
lol .. my last project was this one : arrange.lv
and it by definition is crap
 
4:11 PM
i.e. HTML5 / CSS3/ Canvas can replace all of that flash.
 
@rlemon , thats a bad idea
 
no that is a good idea.
whistling while you eat; that is a bad idea.
 
ok ok .. idea is nice , but it's still too early
 
@tereško one question , you dont use recaptcha in the registration form
you verify by the email verification
 
yes
because captcha's are annoying
 
4:13 PM
yes, he would lose some compatibility - but he also is limited his audience by just using flash. so IMO it is just shifting who cannot access the site from one audience to another.
 
someone told me, its not good since there can auto confirmation
can be
 
@SoroushAtarod , it is getting to the stage when computer programs are better at deciphering captcha's , then humans are
 
@tereško what about spamming bots, wont there be a huge load on the server?
since there is no human verification :S
 
it is much easier to create a honey-pot field (hidden with css, with name="url"), and dismiss all requests which have it filled
you have to protect yourself only against the generic bots
if someone will have the urge , he/she/they will make a custom bot , jsut for your site
 
@tereško so lets say im developing a website, then my competitor will create a custom bot for my website
 
4:18 PM
you can only filter out the "stupid" bots , and set a limit on posts per minute
 
@tereško how would I then omit it?
 
how much time you have for developing then ?
 
its my own project, it is similiar to facebook in a different way
what im worried is about the spamming
i have integrated recaptcha and email verification
 
i would go with: "if you are making more then 1 post per minute of more then X per day , show reCaptcha"
 
its for the registration page
users have to registrar in-order to post
so im talking about maybe 50,00 users in a minute
 
4:21 PM
hmm .. thinking
 
btw y is the date of birth ascending not descending in the website u developed?
 
@SoroushAtarod , ask the client =/
i tried to have it other way around 4 times
.. still thinking
ok .. 50.000 users per minute is a bit out of my range , but this is what i would do :
- limit the amount of registrations from IP (it is not realistic to have 1 user per IP, but if you have more then 5 from IP, something is not right)
 
- add ability to "flag" posts ..
 
this is very good hint
 
4:27 PM
stars are not for bookmarks =P
 
so if I have huge amount of registration on my website
i better use honey-pot method with the email verification and recaptcha
 
user895378
STARS ARE NOT FOR BOOKMARKS.
 
to make it spam fre
im not using stars for bookmarking, im using them to mark an interesting post
 
user895378
(intentional caps)
 
- (involves manual labor) you might want to verify each new user .. in the backend system have a category where you can see first post from every un-verified user .. you load list of 100 , if there is a bot , you mark it , then have a single button to clear the rest
you would need this only at the beginning , while there are not enough people who would flag the spambots
 
4:31 PM
stars are for dancing with
 
verifying users wont work
 
user895378
@CarrieKendall nice
 
@SoroushAtarod , you do not need to prevent them from posting
you just need ability to inspect new users
 
you know when u visit a classified website
u can reply to an advertisement
and they ask you to verify your a human by using captcha
 
4:33 PM
 
user895378
@rlemon THAT is funny
 
@SoroushAtarod , what the userbase ? single country or worldwide ?
 
worldwide
its a classified website
similiar to ebay
 
i think you are talking about craigslist , not ebay
 
yes
ebay has classified 2
ebayclassifieds.com
 
4:37 PM
i get the feeling that you are trying to solve a problem , which does not exist yet
 
there is a solution recaptcha
but its not user-friendly at all
 
thebotnet.com/bot-resources/29406-how-to-bypass-recaptcha .. it was patched , but the point stands
 
the best would be mobile number verification
..
 
how many bots do you really expect to use your site?!
 
4:39 PM
how many bots you have now ?
 
none
what im worried about is
 
then why would you expect MANY
 
someone spamming the website
 
if someONE is spamming the site, you ban the IP
 
so email verification + post/upload/whatever per time limit.
 
4:40 PM
bez im going to advertise and mostly my competitors will try to spam the website
 
or make all posts require human verification before they are displayed.
 
by human verification, from what I understood even recaptcha is not secure
 
no, they submit something... you (or another human) reviews and clicks "ok" it is safe
 
check this website
 
if something gets by, well then, it's that persons fault.
 
20 mins ago, by Soroush Atarod
so im talking about maybe 50,00 users in a minute
 
you see the image verification they got
from what I read the image verification the use its crackable
 
everything is crackable.
 
@SoroushAtarod , do you know why people hate DRM ?
 
4:43 PM
best you can do is use a system that discourages bots but does not hinder actual user experience then maintain your site and keep an eye on the spam.
block the ip's that are spamming and be done with it
you will not find a 100% secure system that is usable
 
i think if the website visitor increase I have no other option to resign from my work
 
let user inform you about possible spam .. three-five flag an you get a spam notice
 
and the more emphasis you put on trying to detect 'human' vs 'machine' through things like email / phone verification + captcha's etc. will just annoy your uses are they will find a new service.
 
agree
 
@SoroushAtarod , if you get to the point where you have 50000 people online at any give moment , you will not need your day job
 
4:45 PM
so yea, keep an eye on it. use a simple standard method like single email verification or openid and just lets users flag spam.
 
@tereško i will be hiring a lawyer soon, and I need to have money to advertise etc
bez in the first three months the website is going to be ad-free no income at all
 
even SO get spam. but it is quickly cropped.
 
user1385191
I've got a Gzip question
 
user1385191
I'm sending a Content-Encoding: gzip, deflate header if a $_GET key exists, but it doesn't seem to compress the response at all
 
@MattMcDonald Normally only setting the header does setting the header but not anything else.
 
user1385191
4:54 PM
I tried ob_start("ob_gzhandler"), but that doesn't compress the response either
 
// disable ZLIB ouput compression
ini_set('zlib.output_compression','Off');

// compress data
$gzipoutput = gzencode($output,6);

// various headers, those with # are mandatory
header('Content-Type: application/x-download');
header('Content-Encoding: gzip'); #
header('Content-Length: '.strlen($gzipoutput)); #
header('Content-Disposition: attachment; filename="myfile.name"');
header('Cache-Control: no-cache, no-store, max-age=0, must-revalidate');
header('Pragma: no-cache');

// output data
echo $gzipoutput;
 
user1385191
I'm doing all of that aside from the ini call and the cache headers
 
user1385191
thanks
 

« first day (594 days earlier)      last day (4353 days later) »