« first day (1723 days earlier)      last day (3225 days later) » 

6:00 AM
Just because you put salt and pepper on your food, doesn't mean you might as well label the salt shaker as pepper and the pepper shaker as salt.
You still may choose to only put salt or pepper at some point.
 
yeah i understand that. __construct can be subjective, but allowing to call __clone or __destruct is bad. and that's the end of it :P
 
And thus you still require the distinction.
@RonaldUlyssesSwanson Right, so now that you've realized that your argument simply doesn't work in general you're going to switch your thesis to a more specific subset and proclaim that you have thusly argued your case?
 
ahahahahahah
what have i done xD
 
I don't know. You tell me.
 
i didn't want to start this. i'm not switching to a specific subset, i'm steadily convinced that allowing multiple __construct calls is bad, but i really don't want to continue this now :P
 
6:05 AM
@RonaldUlyssesSwanson Of course not :) You just want to remain convinced. scottberkun.com/essays/40-why-smart-people-defend-bad-ideas
I get that
 
i am extremely convinced, but still i accept it is subjective. languages such as js allows you do to literally anything you want, and they work. i instead want php to be as strict as possible, but that's just my own opinion
english skills are dropping down badly here
 
Yea, well that's where you and I part ways :)
I don't find that languages filled with restrictions are necessarily adding any real value to the programmer.
In fact, in most cases I find that all those languages do is actually inhibit the programmer's productivity with minimal gain in actually succeeding at "fixing stupid", so to speak.
i.e. you are still stuck on fixing stupid and there have been entire generations that have come before you trying to do that that still haven't succeeded.
So your ideology unfortunately comes at the price of tunnel vision.
> You are so intent on trying to get to the light at the end of the tunnel that you can no longer see anything else around you; even an alternate way out.
 
Well, that is unless your aim isn't productivity at all. If your goal was to merely create perfection in a truly pure programming language, then actually you want Haskell.
 
but you have a java background, right? i have seen unspeakable things with languages such as js and honestly i can not blame the language a little for that
but just a little
 
6:13 AM
Which completely inhibits productivity and pragmatism at the cost of engulfing purity.
 
ahahah hell no
 
Well, that's the trade off you get for purity.
You can't have a completely safe programming language without inhibiting pragmatism.
i.e. you can't have both safe and practical in a programming language unless you're willing to trade some of one for the other.
They exist on inverse axis.
 
hi guys
I am stuck at one point please help..
the thing is
my site is not https://
 
@RonaldUlyssesSwanson Yea, sometimes unspeakable just means practical.
 
and if I apply SSL certificate then its breaking whole site
please let me know what is best solution...
 
6:16 AM
And honestly people are mostly going for practical so in a language like Java, getting to practical sometimes just means jumping over hoops.
i.e. you just made your code even more unspeakable
 
users can be online anytime so I cannot do this experiment on live site
 
@Sherif that's true and actually that's a thing i like of php, you can be pragmatic/sloppy/strict/pedantic, anything you like with it
 
Yea, PHP has that "get shit done" mantra. Which is probably why it's become so popular.
Whereas you look at a language like Haskell, and it's virtually non existent outside of a very specific niche.
The majority of languages we use the most today are unsafe because they aren't pure.
But that's also what makes them so useful.
The real world isn't pure. The real world is chaos.
 
please anybody @RonaldUlyssesSwanson , @Sherif
 
6:20 AM
haskell actually is getting somehow popular recently, don't know how that is possible
i get sick every time i try to read it :P
 
@John Loading non-encrypted resources on an encrypted connection is the reason your browser is signaling that the page is broken. You just have to go through your html and make sure that all csss/js/images are being loaded via https and not http
@RonaldUlyssesSwanson Yea, I heard that two more people started using it this year.
 
That's a 200% growth for them!
 
if that's the only thing then all right.. thanks ..
 
@Sherif still no reply from you on-list? … Are you seeing what my point is?
 
6:24 AM
@bwoebi Sorry, no I haven't checked my mail yet. I'm procrastinating.
Will read it shortly.
 
@Sherif mail clients are something nice… you don't miss your mail^^
@RonaldUlyssesSwanson It's the developers responsibility to clarify the API. It's not his responsibility to prevent abuse of it.
 
class X{ protected function lol(){ echo "x"; } }
$method = new ReflectionMethod("X::lol");
$method->setAccessible(true);
(new X)->lol();
guys, shouldn't this work?
 
You ultimately can't disallow anyone to shoot himself in the foot.
@RonaldUlyssesSwanson no.
@RonaldUlyssesSwanson Reflection accessibilities are always local to the reflection object
 
@bwoebi Who said I missed my mail?
 
@Sherif … you just don't read it then?
 
6:32 AM
@bwoebi ok, makes sense
 
@bwoebi Hence the procrastinating part :)
 
@Sherif pffff
 
setAccessible(false) on a public method will it make private?
 
TIL: fanotify
@RonaldUlyssesSwanson yes.
(In the sense that you can't access it via invoke())
 
doesn't seem so
class X{ function lol(){ echo "x"; } }
$method = new ReflectionMethod("X::lol");
$method->setAccessible(false);
$method->invoke(new X);
 
6:34 AM
@bwoebi So a DivisionByZeroError that's not caught is fatal, correct?
 
@Sherif sure, like every exception/error.
 
@bwoebi So then you have turned what was once a non-fatal error in PHP, into a fatal error.
That's the difference.
And unjustly so, because it is actually well-defined behavior now.
All I want is the error information. I don't want the fatal.
 
scope is set by invoke method
 
In that case, as said, then don't error at all.
 
Wrong.
 
6:36 AM
Either you want an error or you don't want one.
 
you can't have an exception that continues execution
that's a warning
 
I want the useful information that would allow me to debug such an error easily. I don't want the program execution to halt because of it.
Don't conflate the two things.
 
@Sherif Explain why you wouldn't?
 
the bug report was about unifying the handling
 
@bwoebi I have. Because it has never been a fatal error before and because it is now well-defined behavior as per IEEE 754
 
6:38 AM
Why don’t we just return null with a warning on invalid function call and display a warning but throw Error? Null is the default return value of any function call. So, why not null? Return value just never was overwritten to be anything else, by the lack of the function which was called.
Here we have exactly that same issue. Either something went really wrong (at that point you want to abort), or it is an intended feature, which doesn’t need a warning.
 
Don't draw this into a straw man. Focus on my point.
 
You will find that is actually quite reasonable.
 
@JoeWatkins uhm?
 
This has nothing to do with the return value of division by zero. We've already addressed that point.
 
6:39 AM
@Sherif I'm not making any arguments up, just trying to show you an analogy of my reasoning.
 
This has to do with knowing that someone made the mistake of allowing division by zero to occur.
 
@bwoebi I was responding to that, I have no idea what the conversation is about ...
(it's wrong)
it'll make it private, but invoke method sets scope, if you tried to call it normally you would get an error, but not via invoke
 
@JoeWatkins yeah, just had looked at setVisibility, not at the actual invoke call…
if ((!(mptr->common.fn_flags & ZEND_ACC_PUBLIC)
 || (mptr->common.fn_flags & ZEND_ACC_ABSTRACT))
 && intern->ignore_visibility == 0)
 
well no, look further down at fcc
 
will just fail in case it's not public
@JoeWatkins no, that's just scope, not callability.
 
6:42 AM
oh yeah oh yeah
 
@bwoebi The problem there is that you're trying to reason by arguing a different point than mine. By making that argument less defensible than the argument I'm proposing you are creating a straw man. Of course it is an intended feature. We changed it to comply with IEEE 754, but that doesn't mean you don't need the warning. You still need it as it is useful in helping the programmer find their mistake.
 
@Sherif Then you missed my point.
 
But the two things aren't mutually exclusive.
Knowing that you made a mistake in your code and having well defined behavior in the language aren't one and the same.
The point of the warning is to alert you that you "may" have done something wrong here. You may actually be perfectly OK with a division by zero.
But we can't assume that.
 
so that I don't have to read all of history, what's this all about ?
 
Just like you may be perfectly OK with undefined variable.
 
6:44 AM
@Sherif My point actually was that we could convert also other cases to well-defined behavior and use a warning. (for example returning null on invalid fcall) … And then the rhetorical question why we don't do that.
 
@JoeWatkins my question was unrelated to division by zero
 
@Sherif that's a notice. for exactly that reason.
 
@bwoebi Well, that's not really relevant to this discussion though is it? I'm just trying to resolve the whole removing the warning thing here.
 
@JoeWatkins throwing divisionbyzeroerror on x / 0, emitting a warning or nothing.
@Sherif then you choose the wrong warning level. That's the role of a notice.
 
Once again, your point is still to draw a straw man there, because that's still a less defensible argument than the one I'm making.
 
6:46 AM
@Sherif I disagree.
 
@bwoebi I didn't chose shit. That warning has been there since PHP 3.
I'm just trying to resolve the issue of you having removed it.
 
@Sherif but still, I think even a notice is not apt here.
 
What is not apt about it?
 
division by zero is basically useless when I have to manually except it or turn warnings/notices off.
 
You keep telling me how X isn't correct, but you haven't provided any real objective reasoning as to why without drawing on Y and Z as examples of where something else is not desirable for you.
All I care about is the reasoning I'm presenting for why we should keep it. I don't care what reasoning went into some other thing.
@bwoebi What do you mean by manually except it?
 
6:49 AM
Put an @, put an if() around.
 
@bwoebi Why are you putting an @ or an if() around it?
 
To silence the warning or notice?
 
But why are you silencing it?
Suppressing the error doesn't make it go away. It's alerting you that you may have a bug in your code. You should I either fix it or refactor your logic.
 
Because I intentionally may want to get INF or NAN?
because… it might actually not be an error.
 
In which case you can still refactor your logic to more concisely accomplish that.
if ($divisor = 0) { $result = INF; } else { $result = $p / $divisor; }
There ... no warning and the person reading your code understand what you're expectations are more clearly.
 
6:51 AM
sure. And that's exactly the reason why a warning is not superior to an error
 
No it's not.
 
because nobody wants the case where a warning occurs anyway.
It has no sense to continue the program with obviously unwanted values.
hence the nicely catchable error.
 
I didn't say they want it. I'm just saying you've taken away all of the error information completely. Having it there is important. Not having it all is stupid.
@bwoebi But you've now turned what was once a non-fatal error into a fatal error.
 
@Sherif Correct. Is that a bad thing?
 
It is if you're migrating your code from PHP 5.
 
6:53 AM
i'm failing to understand what @Sherif is suggesting
 
It always should have been a fatal.
 
Sure, in PHP 5 it should have been.
 
@Sherif That's the point of majors. Correcting things you can't correct in a minor.
 
But you did correct it. You are returning INF now.
 
You have to correct things once or it never will be corrected.
@Sherif we're not discussing the return value, but the warning/exception.
 
6:54 AM
@bwoebi ^ +1 kill all the shit! throw a CatastrophicError
 
Sure, but now you're conflating the problem. You've addressed the part of undefined behavior, which as a result of that it is no longer exceptional. So it doesn't make sense to throw an exception here.
The program can continue with well defined behavior in place.
 
@RonaldUlyssesSwanson Some things obviously never are changeable...
 
I'm just addressing that in the off chance it wasn't intentional, the programmer has no way of knowing that they made that mistake.
 
@Sherif It never was undefined behavior. It had a well-defined return value: false.
@Sherif my god, I'm not arguing that we shouldn't notify them. I just say, when we notify them, it should be an error.
 
if ($divisor = 0) { $result = INF; }
This is wrong
 
6:57 AM
@bwoebi Yes, as a result of PHP being very lenient on type juggling behavior. Though the reasoning behind the exception is typically to alert the user that the language doesn't know how to supply a value to division by zero.
 
1/0 != -1/0
 
@zerkms yeah, obviously, but that doesn't matter in discussion here^^
@zerkms and != 0/0. yeah…
 
It's more normative now with compliance to IEEE 754
 
With one exception - 0 is not a floating point number
so not obvious how it's relevant to IEEE754
 
@zerkms 0.0 is....
 
6:58 AM
It is indeed
But it does not mean integer divided by integer to be IEEE754 complaint
 
@Sherif no, why? It just is a general indicator that something is wrong.
 
@bwoebi No, that would be abuse of an exception.
 
@zerkms uh, we aren't that strict with int->float coercion in PHP ;-)
@Sherif disagree.
 
If it was a general indicator that something is wrong it wouldn't halt execution if left unchecked.
 
Btw, does anyone know IEEE754 well enough to state with 100% confidence that positive / 0 -> +Inf?
 
7:00 AM
@Sherif explain?
 
That's what the warning is doing. It's telling you "you may have buggy code here, but I can still proceed"
 
I have read it but not entirely to be sure
 
@Sherif except that you don't want to proceed it.
 
@bwoebi What needs explaining there? Uncaught error is going to be fatal.
 
you don't want a bogus value like NAN to ever appear in your code.
@Sherif I mean, why wouldn't it halt execution.
 
7:01 AM
@bwoebi You can't make assumptions about what the user does or does not want. There may be millions of lines of PHP code out there that rely on division by zero not being fatal. And they may be perfectly OK with that.
 
@Sherif hey… they may rely on that when cast to float it is not INF or NAN.
but PHP 7 upgrade will silently break that.
an error would be even help more for BC than the warning + ±INF/NAN
 
@bwoebi They may, but one is more consequential than the other.
Clearly we're not going to release PHP 7 without any BC breaks. The point is to mitigate breaking the larger part of PHP code out there as much as possible and within reason.
 
@Sherif you want it to be a warning or an Error (an exception) ?
 
@Sherif Who are you to determine which one is really more consequential. Did you test real world code silencing the division by zero warning?
@RonaldUlyssesSwanson he wants a stupid warning :-(
 
@bwoebi Not sure what silencing has to do with it, but my deduction is based on the fact that one is going to be fatal and stop the script completely and the other is going to be potentially buggy.
If I have to chose between someone's code not working at all and someone's code potentially producing a buggy result, I chose the latter.
 
7:06 AM
@Sherif [because you obviously never want it in production to fill up your logs quicker than they're rotated…]
 
> I chose the latter.

That's a strange decision
 
@Sherif And I choose the former.
@zerkms totally agree.
 
If I have something broken I'd rather want it to not work at all rather than make decision based on some randomness
 
@bwoebi Oh I get why someone would use error suppression. I just wasn't sure what that had to do with my deduction of one being more consequential than the other.
@bwoebi Then you are choosing a worse outcome for the vast majority of people.
 
@Sherif In that case, I think, every discussion is lost because of our fundamental positions being diametrically opposed.
 
7:08 AM
If people want some rubbish not a result - just stop using / operator
Use rand() if you don't care of result accuracy
 
@bwoebi It's OK to be opposed. It's not OK to allow your subjectivity sway your decision to do what is best for the vast majority of people, however.
 
@Sherif It's not like nothing would work. Just not the code paths in which the offending division happens.
 
Think about this purely from an objective stand point for a minute.
 
Why do you think vast majority prefers incorrect result?
 
@Sherif I think you're very biased about what the objective stand here is ;-)
 
7:10 AM
@bwoebi Yes, but that doesn't speak to the calamity ensued therein from those offending code paths. What if that offending code path halts the front page of someone's site?
 
Then you better have an exception
Than the wrong offer
Which may be a legal obligation
 
@Sherif imagine a weird bug which shows all your code in plaintext when a NAN appears in code.
 
@bwoebi And how's that? Unlike you I am not limited to just a single side of this argument. I'm considering what you said and trying to find reason to agree with what does make sense, as in the case of INF vs. false, for example.
 
Guys, what is the point of your discussion btw? :-)
@Sherif create RFC
and let people vote
 
@bwoebi OK...
 
7:12 AM
@Sherif And you think I'm not with your points? Sure I am. And I fail to make too much sense with your arguments.
 
@bwoebi So then what's the resolution here?
I wasn't the one that called you biased.
 
@Sherif That's obviously exaggerated, but unexpected values floating around in code is really bad. It's error-worthy.
 
@bwoebi I never said it was good, but what's worse; unexpected values... or a WSOD?
The difference is that I didn't exaggerate anything.
 
@Sherif I just mean, that I don't think that there's an objective stand at all. At some point it's the devs which need to take the decision and we won't be able to satisfy everyone.
 
unexpected values are worse
 
7:14 AM
Hence the non-biased towards consideration of your points.
@bwoebi There is. Put the warning back or have it throw an exception.
 
@Sherif I'm not sure if it was non-biased. But now we're really putting the whole discussion at a meta-level.
 
@bwoebi actually i think a warning/notice would be better. 10 / 0 is not necessarily a fatal error, as opposed to intdiv(10, 0)
 
@Sherif Yes. And I prefer exception for the reasons I outlined.
 
returning INF (or NAN if operands are both 0)
 
Returning NaN in this case is nonsense
 
7:15 AM
@bwoebi Hence the objectivity has been narrowed down to A or B. The subjectivity that remains requires a vote. Put the warning back and start an RFC for chosing A vs. B.
 
Because then it would contradict with IEEE754
 
@zerkms for 0/0
 
@RonaldUlyssesSwanson for 0/0 yes, but not for 10/0
 
@Sherif a RFC? I'm not sure if we want a formal RFC on the features of PHP 7 that late. I'd like to hear some other feedback on-list first before seeing if it's rather tied or not. In case it is, a RFC is unavoidable, sure.
 
7:19 AM
@bwoebi Well, either way all I wanted was for you to put the warning back the way it was. You can start another discussion about whether or not to change it to an exception/error if you'd like. My point was solely focused on the fact that your change left the error information in complete omission, which we agree is not desirable.
 
Fail early, fail often.
 
heh, did I really not copy internals on that thread?
oh that was my second reply
hurpdurp
 
^^
 
7:37 AM
moinsen
 
@bwoebi When you get a few minutes, could you look over what I've done here: github.com/php/php-src/compare/…
I'd like you to verify I'm freeing things that need to be freed and have done things correctly in general.
I'm headed to bed right now, so no rush, but I would like to get that in before beta 1 (hopefully along with the Error subclasses I'm going to work on tomorrow). I have a couple more extensions to do, but they looked straightforward. Too tired now. :)
Thanks @bwoebi!
 
 
1 hour later…
8:57 AM
hey guys, I need your help :p (well, it's been a long time I've not been on SO but comin' back :) )
I wrote this protection function:

function VerifChamps($valeur)
{
$verif = (get_magic_quotes_gpc()) ? htmlentities($valeur, ENT_QUOTES) :
addslashes($valeur);
return $verif;
}
what do you think? is it exploitable in any way? :) thx
 
Any body there ?
 
Anonymous
o/
 
in JavaScript, 14 mins ago, by Codester
I am trying to capture a query string parameter value(tryjS_loc-href) of `filename` from this URL http://www.w3schools.com/js/tryit.asp?filename=tryjs_loc_href

I am getting the output

"Page location is: ?x=0.3076947645749897"

Here is my fiddle https://jsfiddle.net/LjL6yk8k/2/

Let me know if more details are needed.
 
9:22 AM
I just have a minor improvement for you...

function VerifChamps($valeur) {
return $valeur;
}
Now your function is actually useful :)
 
@Sherif uh
 
Yes.
 
it will be better answered there :3
 
Yup, you're going to get a lot more ridicule there alright.
I suppose it's poetic that the guy offering the first answer supplies a w3schools url
heh
Poor guy. I down vote him he goes back to 1. I feel so bad.
 
@Sherif at least I will have an answer ^^
 
9:36 AM
@MagixKiller You already had an answer
 
@Sherif yeah now I have :p
 
You don't catch on too quickly do ya
 
@Sherif Thank you Sherif
:D
 
I love it when people ask how to sprint when they can hardly crawl
Ambitious, but foolish none the less :)
 
@Sherif I would like to test the vulnerability, would you mind helping me making a "proof of concept" ? :3
 
9:39 AM
I do actually.
 
hey got a question whats the advantages of coding with zend framework.
 
@Sylva After your 10 millionth line of code you get a free Mariah Carey cassette tape
You do have to pay them for the postage though.
 
LOL @sherif thats kinda helpful but for me mariah carey wont help me push past my limit7
 
I don't know man she's a pretty powerful woman.
She can push pretty hard.
 
c'mon @sherif got any thing helpful
 
9:46 AM
@Sylva Your question is far to generic to be specifically helpful. Try it for yourself and find out what you like and don't like about it. Like any PHP framework, it's just a collection of libraries and tools that may or may not help you be more productive building something.
 
@sherif let me tell you a story.
 
@Sherif Edited the question, please look if it doesn't change anything for your answer
 
@MagixKiller Not one single iota
 
@Sherif ok thx
 
Actually that's not true. It does change one thing.
 
9:48 AM
What is iota ?
 
It makes it not fucking safe at all
as opposed to not safe at all
 
OMG. frustated
 
i just started PHP and i m at intermediate level recently while i was carrying out a project they recommended me learning zend but most comments on learning it are negative but since y' all are a bunch of pros i d like to know what you guys think is it that aweful as they say
 
You went from having to worry just about SQL injection to having your entire server compromised since you're running an EOL version of PHP that is riddled with God knows how many CVEs.
I mean, we only stopped supporting PHP 5.2 4 and a half years ago now?
 
9:50 AM
Your must have been pwned more times than you have toes since then.
 
@sherif ?????? :(
 
@Sylva How about you try it and find out for yourself? At least then you'll have something to contribute to the discussion. Like, "I used it and found that it was incredibly helpful in allowing me to accomplish X" or "I used it and found that it sucked because it made Y very hard for me"
At least then you will have formulated your own opinion and gathered your own views to reflect on the views of others.
That is what makes a discussion interesting. Not a one-sided monologue riddled with group-think.
 
poor Sylva
 
time is fleeting my friend to learn it would be like starting PHP all over again
 
No it wouldn't.
Learning is a curve. So it starts off slow, but picks up pretty quickly.
 
9:54 AM
time is fleeting my friend to learn it would be like starting PHP all over again
 
The slow part is when you're completely unfamiliar with the thing you're learning. That's your brain fighting back to fill the void.
You just have to fight through that shit.
Once some familiarity is established your brain finds it easier to connect the dots.
Then experience sets in.
When you're short on knowledge it seems very difficult to acquire skill.
When you're short on curiosity it becomes very difficult to grow your imagination.
;)
Fill your knowledge coffers. Stay curios my friend.
You will find deep wisdom in these words. Just let it simmer.
 
thanks
 
@Sherif Sherif, I'm trying by myself but cannot figure out how to do.
 
@MagixKiller You're missing an adjective there.
 
Could you explain me, as you would do to a five-years-old, how to exploit the code I posted previously?
@Sherif am I? :o
 
10:07 AM
@MagixKiller No
 
@Sherif :D okay
@Sherif why? :o
 
Because there's no point in doing so. Just don't use it. There is already a proven way of doing it securely.
Knowing why it's exploitable won't change that.
It's a waste of time. Besides plenty of people have already addressed this fully on SO and all over the Interntz.
:)
You're just about 15 years late to the party. That's all.
All you had to do with type your question into SO search and you'd easily find Anthony's very elaborate and detailed answer...
292
A: SQL injection that gets around mysql_real_escape_string()

ircmaxellThe short answer is yes, yes there is a way to get around mysql_real_escape_string(). For Very OBSCURE EDGE CASES!!! The long answer isn't so easy. It's based off an attack demonstrated here. The Attack So, let's start off by showing the attack... mysql_query('SET NAMES gbk'); $var = mysql_...

Or you could Google it and read the tons of ever-so-detailed literature therein.
 
this code is used in free software
 
Of course it is.
 
that means I have to contact the devs showing them why this code is vulnerable
they don't care bout literature
 
10:17 AM
You don't have to do anything.
 
I want to do it
 
Whoever wrote that has probably learned a thing or two in the last 10 years since it was probably written.
Why? They have just as much access to the web as you do.
Do you honestly think you are going to tell them anything they probably haven't already learned on their own?
We've all written bad code at some point in our lives. Nobody cares.
Move on.
 
10:35 AM
@bwoebi here is my feedback @bwoebi, for a lot of things there is more than one right answer and the fact that you just ignore other people's opinions and think an answer that works for you is going to be a universally applicable answer, is just showing a bad attitude.
Ninja-committing changes like this is totally bogus.
 
I do recall one other feature that snuck into PHP 5.3 at the very last second because someone didn't want to take the time to think it through that ultimately resulted in a disaster :)
"We don't want to do due diligence because there's no time left to get this in" is definitely not the best attitude towards progress either.
 
btw Fuck me I didn't fucking swear in that email.
 
How fucking dare you?
@Danack and I seriously was going to revert that shit. I just didn't feel like starting a war over something I felt could have been resolved through a civilized peer discussion.
But honestly I don't care enough to get back into these internals wars anymore
 
That's the spirit!
 
Monring
 
10:46 AM
I mean... 0x4d6f726e696e67
Sorry, network byte order...
 
I can only ACK after coffee
 
What no SYN?
@Danack Love that squelch operator BTW.
Is that trade marked? I'm gonna use that.
 
@Sherif I only sin
 
@PeeHaa 418 I'm a teapot
 
I am incredibly lazy and need a gif for when you forgot to change an aws instance back to a smaller size....6 weeks ago. Please do the needful.
 
10:53 AM
@Danack Have you tried giphy?
 
hi again :3
tell me
what are the flaws of htmlentities($var, ENT_QUOTES) for SQL requests plz?
 
it's nothing to do with SQL requests, unless you're doing something horribly wrong.
 
ikr
but why?
 
@MagixKiller You're one of those people that likes to ask the same question at least 562 times before the answer sinks in, aren't you?
 
well, why can't it be used with SQL requests?
@Sherif hell yeah
 
10:56 AM
@MagixKiller It isn't called sqlentities now is it?
 
I thought so.
 
@PeeHaa maybe, but the PHP version I'm working with is old (5.2.13)
 
Why?
 
cause the software is designed for it
it's an old thing
trying to fix it
and understanding why it's bad :p
and finding proof of concepts of its flaws
 
You are also running windows 98?
 
10:58 AM
nope, Millenium
works like a charm :3
 
Even worse
 
(joking heh)
 

« first day (1723 days earlier)      last day (3225 days later) »