« first day (1565 days earlier)      last day (3386 days later) » 

11:01 AM
moar ning
 
Morndom
@rdlowrey Will you be making any more changes to Artax rc6?
 
NKL
2
Q: Google search results showing up a URL on its search which doesn't exist on the website

NKLI am using a keyword to display a website page on google search. After entering the keyword, on the first page of google, I am redirected to a page, whose domain is exactly similar to the website whose page I want to display, but it is showing a page which doesn't even exist on the domain. Also, ...

Any idea on the above?
I can see it's a malware that is generated by PHP scripts
I did check my plugins, updates, etc, but not sure where is it coming from
 
magic getters and setters - yes or no?
 
NKL
There is some base_64 encoding done, so the not sure where is that encrypted path this is showing such files
 
@MarkusPint 99% of the cases no
 
11:07 AM
@MarkusPint avoid magic when you can, it'll definitely bite you in the future
 
NKL
@Anyone expert with a PHP website hacked and relevant solutions?
 
@NKL Probably you are running wordpress
 
NKL
Yes @PeeHaa
 
Well there's your probloem
 
@PeeHaa What client do you make requests with using your requestable?
 
11:09 AM
curl
 
diagnosis complete. pay the good doctor.
 
NKL
@PeeHaa - So what should I do now ?? I can see a malware is getting its folder to occupy my server with stupid casino links
 
@PeeHaa Cheers
 
@NKL delete everything and revert to the last known good backup
 
NKL
11:12 AM
That's the only backup I have :( - @PeeHaa
 
Maybe you should do what Daniel does and just setup your own socket
 
@Fabor Starting to use artax has been on my list since v0.0.1 of the project :)
@NKL And what have we learned from this? :)
 
Will you straight up use Artax or just steal borrow the parts you need?
 
NKL
@PeeHaa - Is there something I can do without flushing everything and reinstalling ??
 
@NKL yes
@Fabor neh just use the lib
@NKL First you need to update everything
 
11:13 AM
@PeeHaa Furry
 
NKL
@PeeHaa - Learned from what ?? This issue ?? Strange thing is I do more than 10+ wordpress websites everymonth and have never got this hacked thing .. It's the first time
 
@PeeHaa I really thought you were gonna go with: "flush everything and use something else entirely."
 
NKL
@PeeHaa - Thanks peeha, but I have updated every item + also reinstalled and installed plugins, but still the same story
 
After that do grep -R 'base64_decode' . grep -R 'eval' . grep -R 'gunzip' .
@NKL Updating doesn't remove the hack
It just prevents more troublesz
 
NKL
@PeeHaa - where do I go this grep? Pardon me if this is a stupid question
 
11:15 AM
@NKL On the commandline
@PaulCrovella Lets be honest that is the only solution
 
anybody have any clue what is this error?
Warning: fsockopen() [function.fsockopen]: unable to connect to gmail-smtp-in.l.google.com:586 (Network is unreachable)
 
Have you tried pinging it?
 
no actually
 
NKL
@PeeHaa - Once again, pardon me, but where do I find command line on my wordpress dashboard?
 
how can I ping it
ping gmail-smtp-in.l.google.com
like this
 
11:17 AM
Holy shit what have I begun
 
NKL
@PeeHaa - you mean on CMD?
 
/me sometimes regrets trying to help people
@NKL yes
But grep won't work on windows
@John yes
 
thats golden
 
NKL
@PeeHaa - I pinged the ping gmail- .. on CMD, and it gave me packets sent and received data
 
O.o
 
11:20 AM
well if this hasn't just turned into a clusterfuck
/me goes for popcorn
 
but when I pinged ping gmail-smtp-in.l.google.com:586 it doesnt do anything
 
@NKL Does this mean @John is fixing your problem also?
@John Learn how ping works
 
ping: unknown host gmail-smtp-in.l.google.com:586
 
NKL
@PeeHaa - My bad .. I apologize if I am not following your commands correctly . @John - Nice to know
@John - Thank you
 
22 secs ago, by PeeHaa
@John Learn how ping works
 
11:22 AM
@PeeHaa !! I got essue in wamp and xammp in php
I am doing code in wamp using mysqli
and its perfectly works
 
NKL
@PeeHaa - So what shall I do now?
 
but now in xampp it isn't working
do you have any solution
 
@Sandesh Great! I have an itch I just cannot seam to reach!
@NKL just search for those things in my earlier post
@Sandesh Also don't ping random people
 
NKL
@PeeHaa - I found this online "http://grep.3tecky.cz/" .. It's grep online. Will it work over there ??
 
It gets you hellbanned pretty fast
 
11:24 AM
ok
have you any solutoin
 
NKL
@PeeHaa - Thanks .. I shall check your posts
 
@NKL Have you like? Idunno? Tried it?
 
@PeeHaa I have a doubt about this popcorn. It's urgent. plzz fix?
 
room topic changed to PHP: Please ping PeeHaa with all your questions. Doesn't need to be related to PHP. [php]
 
11:26 AM
room topic changed to PHP: Discussion for all things PHP, and stuff. Chat Guidelines : room-11.github.io [php]
 
NKL
@PeeHaa - Nope .. Not tried it, just found it while googling
 
@NKL you need to pay someone to clean it
or go back to a previous backup and audit all plugins + server passwords
 
ping gmail-smtp-in.l.google.com 586
this is how ping works
but not pinging
 
@NKL been there before, take the website offline, purge the casino links, and check all php scripts that are accessible through the internet if they put a backdoor in it
 
MarcelBurkhard you need to diff all files to the originals, the code can also be put inside the database, and audit all plugins
 
11:32 AM
@John No it is not
Stop guessing this shit
 
and they resolved it on their end
 
@PeeHaa telnet gmail-smtp-in.l.google.com 586
 
@John you are fired
 
-1
Q: To test whether gmail account exists or not

Sandy_iosI want to login using gmail in my app is it possible to test whether the given gmail a/c exists or not programmatically in objective c.

 
how do we share snippets here ??
 
11:34 AM
@RonniSkansing yes and in my case they actually put some fake jpgs that were in fact php scripts
 
@John And telnet is related to ping how exactly?
 
check the link
 
no
 
@MarcelBurkhard nice =]
@animaacija use any snippet service you like, maybe 3v4l.org if its php
 
@NKL btw don't rely on file modification timestamps, they can be faked, just if you didn't know
 
11:35 AM
@RonniSkansing thanx never rememberer any one of those..
 
@PeeHaa oops my mistake ping checks the connection and telnet gives access to remote system
 
NKL
@MarcelBurkhard - Thanks .. But how to analyze the backdoor ?? I mean, they are getting encoded by base_64, so how to trace it?
 
@animaacija no problem
 
you decode it :P
 
Where is the drastic swing in conversation to language design philosophy? This room used to be much more bipolar. I am disappointed.
 
11:37 AM
@NKL get a full backup now and analyze it later, for now just remove those backdoors
 
NKL
@MarcelBurkhard - So you want me to take the site down, by taking full server backup and then deleting everything till the backdoors are closed. Right?
 
@NKL well in a perfect world you would have a backup without backdoors and upload that
but I guess you don't so I see this as the only possible solution
 
NKL
@MarcelBurkhard - I have no backup, as I directly work on the server than localhost :(
 
@NKL now you learned something for the future ;D While you're at it take a full backup of any other sites you work on
 
@PeeHaa sorry guys my network admin has blocked my gmail so may be because of that this connection is not happening
 
11:40 AM
Automatic backups - Yet another reason why you should always use version control
 
NKL
@MarcelBurkhard - I agree .. Learnt good
 
Can any one tell me please what does this error_log means? 3v4l.org/L1nd7
 
NKL
@RonniSkansing - Pay whom? Would you do it?
 
@animaacija sensitive data is changed
Why the abort ? Abort request processing by PID:785320, kill: 1
 
Massive update to my system: github.com/HassanAlthaf/AccountingSystem
Just cannot wait till it's done! :)
 
11:42 AM
@NKL someone who at securing wp sites that have been breached. I have done it before, but to be honestl I really do not feel like it atm.. If you still getting infected in bout 8 hours and failed I might help you for free
 
Some code review would be really good, also if you can find any area where the code can be shortened/optimised, feel free to throw in a pull request, and I will accept.
 
@animaacija wtf, don't abuse 3v4l. if you just have a big hunk of text to share, pastebin it or something
 
sory .. http://notepad.cc/muscunna15

the readable version
 
last time you showed me the project I asked if you did not want to use a single point of entry approach. I see that you went the oppersite direction, how come?
 
11:45 AM
wtf... github.com/HassanAlthaf/AccountingSystem/tree/master/public why all those php files @HassanAlthaf
 
@Patrick they are the front end files?
 
@HassanAlthaf I think you should handle CSRF attacks...
 
@RonniSkansing sorry, what do you mean?
 
NKL
Thanks @RonniSkansing - I shall try what @PeeHaa, @MarcelBurkhard and others have suggested first.
 
@HassanAlthaf you only need one. Then you set up your server so that all requests are going to that file
 
11:46 AM
@NKL is it a wordpress site?
 
@HassanAlthaf $data = require_once(rtrim(__DIR__, 'Controllers') . 'TemplateParameters.php'); you know... autoloader
 
NKL
Yes @MarcelBurkhard
 
@nikita2206 It's not a class bruh. Tell me how to auto load it?
 
the first log line that is out of ordenery : "901 while in state: 5 watching for event: 25,close!"
 
@Patrick Ohfk. Danggggg.
 
11:47 AM
ive even no idea where to search for code 901 .. I've never held a server
 
@HassanAlthaf the same as Patrick is pointing out, that you only need the index.php
 
I see.
 
@nikita2206 that's not an autoloader
 
all request goes via. the index.php file .. any url be it / or /about or /anything/new
 
$response = new Response();
$request = new Request($response);
$mailer = new Mailer($response, $request);
 
11:48 AM
@NKL check if its up to date including plugins and disable plugins that you do not absolutely need (most wp vulnerabilities are through plugins from my understanding)
 
is this a bad pattern? its a small json api
 
@HassanAlthaf why do you need this file at all?
 
NKL
@MarcelBurkhard - Yes, I have updated them all
 
Anyone has worked with eclipse php here?
 
NKL
@MarcelBurkhard - I have also disabled the plugins that I dont use infact deleted them
 
11:49 AM
@MarkusPint Why would a request need a response?
 
NKL
@MarcelBurkhard - As mentioned above, I even disabled all plugins and started them, but the directory has already been created, so it's of no use.
 
@RonniSkansing I didn't know much about it. Thanks for pointing it out. I cannot change it right now 'cos I need to finish it before a certain date. Its for my school. If I find time, I will make sure that I do it. Thanks again.
 
@MarkusPint this seems really confusing
 
@Patrick thanks for that snippet, update my code. Will push it in the next update.
 
@HassanAlthaf Either you make a class that wraps it or you can also just inject an array. Either way, you don't want an include/require and instead have it as a dependency.
 
11:50 AM
@PeeHaa request object validates the arguments from front-end, if it deems them to be incorrect, it sends a response about it right away
 
@NKL yeah I mean after you cleaned it up before you put it back online so It doesn't get infected again
 
@Patrick Oh, I know that I can inject an array. I will wrap it in a class.
 
@MarkusPint Talking about mixing responsibilities :P
 
To which community goes this question aboud error_log from server ?
 
It's lively here...
 
11:51 AM
hi guys, what's the best way to log stuff when using a load balanced setup
 
And what are tags ?
 
@PeeHaa I see. who should be validating the arguments in this case then? a separate object?
 
@animaacija serverfault
 
@MarkusPint Neither
A request object should be pretty dumb
It shouldn't validate anyting
 
@HassanAlthaf all the files in the public/* (except assets like css/js) does the same thing. Are you sure you need them? The FastRoute Lib takes care of the uri. So try this
`['GET', '/index.php', ['AccountingSystem\Controllers\Homepage', 'show']]` replace with
`['GET', '/wow', ['AccountingSystem\Controllers\Homepage', 'show']]`
 
11:52 AM
https://github.com/HassanAlthaf/AccountingSystem/blob/master/src/Controllers/Homepage.php
Right now you are overwriting $html multiple times depending on what happens. There are a lot of possible code paths in that method. I like to get rid of else (use smaller methods and returns instead). But then you only have that many code paths because you use a GET parameter for routing, instead I would recommend that you use another url for that (with the router you can do that once you get rid of all your .php files in the public folder)
 
and go to /wow
you will see that it works without any file in the public, as all request are routed via. the index
 
@MarkusPint what do you want to validate? User data?
 
NKL
@MarcelBurkhard - But the backup would have that malware code
 
@RonniSkansing no bro.
 
@PeeHaa yes, to prevent empty queries from being executed
 
11:54 AM
@RonniSkansing prntscr.com/5y2l00
 
what happens when you goto localhost:8080/wow ? @HassanAlthaf (or whatever the url is)
 
@MarkusPint That is not the responsibility of the request object (I assume your object represents a http request here)
 
@NKL yes of course. 1. get full back up 2. delete files from ftp (take site offline) 3. clean scripts 4. update wp and disable plugins 5. put it back online
 
@Patrick Pardon? Sorry I did not get what you mean. I would really appreciate it if you do not use technical terms. Thanks.
 
@PeeHaa So it would be sensible to validate the data in the object that actually uses the data I guess
 
11:56 AM
@RonniSkansing I sent you a screenshot. prntscr.com/5y2l00
 
So you're developing some system but don't want anybody to use technical terms, woot?
 
I learnt php without knowing even a single technical term
Because all the content what I find on the internet is too hard for me to grasp. (Langauge)
 
@HassanAlthaf you might need to add a .htaccess file or edit your vhost with apache. Have you tried using php -S localhost:8080 in the public folder
 
@HassanAlthaf sorry If I offend you but doesn't this mean you don't know what you're doing?!
 
@MarcelBurkhard he is 14 if I remember right
 
11:59 AM
Exactly what I thought, Ronni. I will need an .htaccess file which rewrites $_GET headers?
 
Are Framework to be considered as library in PHP?
 
NKL
@MarcelBurkhard - Ok .. Sounds ideal
 
ah well when I was 11 i disassembled flash games, changed something and put it back together and I didn't know what I'm doing exactly either so I guess its ok
 
@JavaFan not in my point of view.
 
Are Framework to be considered as library in PHP?
 
11:59 AM
@MarcelBurkhard I do know what I am doing.
 
@JavaFan it depends
 
"In computer science, a library is a collection of non-volatile resources used by computer programs, often to develop software. These may include configuration data, documentation, help data, message templates, pre-written code and subroutines, classes, values or type specifications. In IBM's OS/360 and its successors they are referred to as partitioned data sets."
 
@HassanAlthaf instead of /foo?login use /foo/login
 
Yeah, I believe I can do that with .htaccess?
 
12:01 PM
Then you don't have to put all the code into the show() method
no
 
Without htaccess It shouldn't work, should it?
 
@HassanAlthaf that's what the router is for
 
@JavaFan hmm tricky, I think a framework can be considered a library altough I find the description not-so fitting
 
Oh, but it doesn't seem to work. lol
 
@HassanAlthaf the only thing in your htaccess should be a line that redirects everything to index.php
 
12:02 PM
I have asked this question because in eclipse IDE I want to add a codeIgniter framework to my project
 
I dont even have an .htaccess file
 
@HassanAlthaf what server are you using?
 
Apache
"Apache/2.4.10 (Unix) OpenSSL/1.0.1i PHP/5.5.15 mod_perl/2.0.8-dev Perl/v5.16.3"
 
@JavaFan oh that was too philosophical for that kind of question :P
And why does eclipse need to know whether it's library or not
 
@HassanAlthaf then create one? :)
 
12:04 PM
Library is more like a module I believe where-as a Framework is something that handles a lot of crap
 
@JavaFan ah right, you are lucky I used to use eclipse with java. In PHP you add libraries to the folder of the project, you don't add them as dependency like in java
 
@Patrick create what?
 
@HassanAlthaf a htaccess...
 
and then eclipse indexes the folder and allows code completion
 
@nikita2206 to know how I could deal with it
 
12:05 PM
@JavaFan but you'll still need to include the library either with autoloading or the old school way with require_once "...";
 
NKL
@Everyone - Thanks a lot for your suggestions.
 
@Patrick bro, does fastroute work for you?
 
@MarcelBurkhard Just add my Framework as a library and use include?
 
@HassanAlthaf github.com/HassanAlthaf/AccountingSystem/tree/master/src/… I see that you made a controller for every action. Instead I would group a few together in one controller. So you could have a controller Account with the methods create/delete/edit/changePassword
@HassanAlthaf yes...
 
12:06 PM
@JavaFan you can't add the framework like you add jdbc files in java
 
@JavaFan people were making fun of you. please do not use codeigniter...
 
@Patrick Oh, thanks for your recommendation. Can you check in my bootstrap file if I have done stuff right?
 
@MarcelBurkhard as zipped?
 
@JavaFan if you had a simple project for an excel report you would need to require "phpexcel/_require.php"
@JavaFan subfolder of the project, extracted
 
@JavaFan bruh, don't use stupid frameworks. They claim to be lightweight but they do the complete opposite.
 
12:07 PM
@HassanAlthaf what is not working?
 
@JavaFan if you still wanna use a framework, use composer, but it isn't exactly a framework though.
@Patrick URIs.
 
@JavaFan don't listen to @HassanAlthaf :D
 
@HassanAlthaf what about codeIgniter?
 
@JavaFan It's crap!!
 
stop talking to the tiny-avatar people
 
12:08 PM
@JavaFan CodeIgniter sucks though, use symfony2
 
Hey @tereško how is your day?
 
mildly infuriating
 
As usual amrite?
 
@HassanAlthaf set up the htaccess and then try again... (and get rid of all the .php files in the public folder except the index.php)
 
12:10 PM
@MarcelBurkhard Why CodeIgniter is not good?
 
@JavaFan it doesn't take advantage of new php features and its harder to structure code cleanly in it
 
@MarcelBurkhard i heard you like yaml
 
@Patrick yeah, gotta look more into annotations though as they seem to be preferred, where did you hear that anyway?
 
Although It considered as one of the best 20 frameworks for php @MarcelBurkhard!
 
@JavaFan I think 18 of that top 20 are crap, sry
 
@JavaFan CodeIgniter also makes implementing good habits such as UnitTesting harder due to the way it does things
 
@MarcelBurkhard it was a joke because symfony = config hell. I prefer to write code and not just edit config files all day
 
@JavaFan, since you have already decided, stop asking same question again and again and again
 
@Patrick what are you using then? :D
 
12:12 PM
@Patrick Don't you have to make it because, github.com/HassanAlthaf/AccountingSystem/blob/master/src/…
 
@JavaFan Most articles I've seen still mentioning it as a top framework and blind copy-paste blog spam whose authors have probably never touched it
 
@tereško If you don't like discuss please let us discuss
 
also, english, fucking use it
 
@tereško that's not the way you should speak to OOP talents
 
12:14 PM
^ =]
 
rait
 
throw new Customer\Exception('Stop doing bullshit');
 
if (strpos($message, 'Laravel') !== false) {
throw new \Room11\tereško;
}
 
@HassanAlthaf no, it will "make" it automatically when you use it as a dependency
 
12:19 PM
@Patrick you do realize that your tutorial describing how not to use a framework is just about developing a simple framework!?
 
@HassanAlthaf btw props and great job on keep on trying to write some clean code. Keep it up =] this is still WAY better then the code you had before you took the tutorial
 
@MarkusPint Or perhaps even better have a dedicated validation object do it
 
Should I push that ... hm
 
Although that may get cumbersome
 
@MarcelBurkhard define framework
 
12:22 PM
I decided to validate in the object that actually uses it, so the code is like this now:
$response = new Response();
$request = new Request();
$mailer = new Mailer($response, $request->getTopic(), $request->getEmails(), $request->getContent());
 
> framework, /ˈfreɪmwəːk/ noun - a product with the business logic removed, but all of the assumptions left in
 
@MarkusPint Looks saner to me yeah
 
@PeeHaa thx for the help
 
@MarkusPint you made it worse
 
user4202350
Good Morning
 
12:25 PM
@tereško elaborate
 
it was bad, and now you made it worse very more bad
 
^ well elaborated
 
^^ elaboration of the day
 
@MarkusPint np
 
@tereško mst be a troll
 
12:27 PM
@tereško Besides maybe the response in the mail. What is worse?
 
@Patrick Thank you man. I will make sure to throw you some credits for your FastRoute library in my project showcasing.
@RonniSkansing And I will make sure to throw you in some for helping me so much.
 
@HassanAlthaf s/@Patrick/@NikiC
 
@Patrick now I'm really jealous :P
 
Oh!
I believe there is some library
'patricklouys/http' that library.
I love it.
 
can also used outside of symfony full stack ofc.
 
12:38 PM
@MarcelBurkhard I prefer his.
 
@MarcelBurkhard do you always prefer a swiss army knife over just regular scissors if you want to cut a cord?
 
being from switzerland I would use the swiss army knife
but I know what you mean
 
Touché :D
 
but I don't consider the symfony component bloaty!
 
What IDE do you guys use for PHP?
This phpStorm is too slow, and takes forever to startup.
 
12:40 PM
@ThomasDavidPlat and we both don't know what Hassen is gonna need in his application
 
@MarcelBurkhard It actualy really is bloated
Have you even seen the lib?
 
@PeeHaa yes I have, I think it has around 70 files
 
@HassanAlthaf
 
And you don't agree that is a tad on the "a fucking lot" side? ;)
 
@PeeHaa well yeah but I'm a symfony fanboy
 
12:43 PM
@ThomasDavidPlat nice. Lmao. But unfortunately, I am not on Windows.
 
so I will now argue that its not that much and you can use APC or opcache :P
 
@RonniSkansing files not lines
 
@MarcelBurkhard :)
 
12:44 PM
lol shit =] I misread that
 
@MarcelBurkhard Symfony sucks. Resources from stackoverflow users rox.
 
@PeeHaa I'd rather save some development time and headaches and use a cache then use something half assed :P
can I mute hassan?
 
@HassanAlthaf as you probably already knew I was just joking :D
 
Oh i found it, great
 
@MarcelBurkhard I am using it in one of my projects, but I really dislike it (public vars etc...). My component is far from being perfect though, I am (slowly) working on a new one.
 
12:46 PM
@Patrick public vars?
what do you mean by that?
 
@MarcelBurkhard for example $response->headers->set('Content-Type', 'text/plain');
 
@Patrick NikiC's library is the best yeh?
 
@Patrick oh well but they rarely use it that way and you don't even have to, $response = new Response($content, $status, $headers);
@Patrick valid point though
 
@MarcelBurkhard $request->query->get('name')
 
yeah there isn't even a way around that one
damn
I'm guess gonna make a PR :P
 
12:52 PM
@MarcelBurkhard I gave it a try, but the API is horrific
imo
 
Protein bar lunch makes me dissapoint.
 
@Patrick Btw I found myself missing a getPathInfo() in the Request object, so I extended from it and added it. I'll probably just submit a PR
 

« first day (1565 days earlier)      last day (3386 days later) »