« first day (2113 days earlier)      last day (2838 days later) » 

6:00 PM
@PeeHaa @JayIsTooCommon went pretty fuckinh well!
Not sure if that's a good sign or what
Getting news next week
 
Anonymous
\o/ Good luck :)
 
@FélixGagnon-Grenier nice
 
@MattCowley "intermediaries" in this case means "proxy servers", and you have no way to control whether your users are behind them or not (I assume this is a public web site for general use by the internet?)
 
@DaveRandom Ah. yeah it is
Poop
 
@DaveRandom CSS actually not, as it's not considered active content. But it will still result in a warning.
 
6:01 PM
It would be awesome! I'd be working on multi layered map visualization prototypes
 
@kelunik It would presumably result in the Referer being stripped, which is what matters here
 
CSS leaking/bleeding because lack of https is information disclosure when the rest of the resource is https
 
I wish somebody would hotlink something from one of my sites. I would have sooo much fun
 
@MattCowley Opera I think was it also stripped the referer for all requests some time ago, don't know whether they still do.
 
what's an opera?
 
6:02 PM
@kelunik Well I'll experiement and see if I get complaints if I implement it
 
@PeeHaa That's the other hand, yes.
 
@MattCowley Since you are serving requests via PHP, you could require a valid PHP session exists, but that's a bad idea for a number of reasons, mostly performance related
 
@MattCowley Mostly a waste of time.
 
53
A: Using Javascript in CSS

ZachIE and Firefox both contain ways to execute JavaScript from CSS. As Paolo mentions, one way in IE is the expression technique, but there's also the more obscure HTC behavior, in which a seperate XML that contains your script is loaded via CSS. A similar technique for Firefox exists, using XBL. Th...

 
wat
 
6:04 PM
Omg that is just sooo much fun
 
I literally only have stylesheet access :/

Best way to extract a domain from a url?
 
@MattCowley ok while I am being a dick.... I will humor you what i would do
 
@MattCowley If you implement it, be sure to allow requests without any referer, otherwise you will block these ~1%.
 
I would probably do the session thing, then go and slash my wrists in a warm bath
 
6:06 PM
Intentionally break the client's side using the loaded css. Client calls angry saying the site is fucked. Update the site in a way that you have to change the css. All others sites break. profit!
 
@kelunik I'll serve a less customized version with a nice message in the code ;)
 
"nice" message
/* fuck off. srsly. */
 
But seriously. That javascript inclusion stuff is soo cool if it still works
 
Redirect everyone to rebecca.blackfriday
 
I did not know blackfriday was a TLD. Wow
 
6:08 PM
It could have done with a goatsy on other days
 
@MattCowley Note that there's an experimental referrerpolicy attribute in HTML that can suppress the referer header completely.
 
Not just people screwing with your CSS, but literally everyone who visits every site on the internet, all the time
@PeeHaa lemondayparty
 
@PeeHaa you have strange tastes :p
 
https://gyazo.com/d151edf3098fe3dd10366fd9fa50c47d
Is that correct to always return false unless the attribute exists?
 
Just use a proper statement instead of that
 
6:10 PM
?
 
@MattCowley Better check the result of parseUrl, otherwise there might be notices.
 
I would have showed you but I cannot copy paste the code image :)
 
!!> $a = false; $a["host"];
 
sigh php
 
Not even a notice?! sigh
 
Is that better, so it also checks if its a url first
 
nooo worse
 
@kelunik I'm confused by what you typed
 
@bwoebi Can we fix that for 7.2?
 
6:12 PM
Don't abuse ternaries
 
@PeeHaa So i should write it out a long winded if?
 
@MattCowley Referer is user input, just like every thing else, so might not contain a valid URL.
 
@kelunik Tahts why ive got url validation
 
@kelunik Rather for 8.0, I guess. There may be quite some code relying on it...
 
@⁠PeeHaa error has been logged. Fix it fix it fix it fix it.
 
6:13 PM
@MattCowley its not the domain request the css
its the client .. the browser
 
@bwoebi But we can still throw a notice?
 
// Hey you, yes you, reading this code: fuck you!
if (!($allow = empty($_SERVER['HTTP_REFERER'])) && ($parts = parse_url($_SERVER['HTTP_REFERER'])) && in_array($parts['host'], $allowed)) {
    $allow = true;
}
 
@DaveRandom That seems worse, I can track and follow mine
 
@kelunik That, maybe yes.
 
6:15 PM
Just nothing seems really weird. Probably too late for 7.1 unfortunately.
 
@kelunik Might want to look for other stupid stuff like that and kill it all
 
user image
3
@MattCowley Yeh that's obviously not what you'd do, the point of that is to illustrate that you don't need to worry about reducing it to a small number of lines, write it readably
 
Thanks for the help guys
 
@MattCowley Sorry we can't give you exactly what you need, and also note that this room is often generally a bit more helpful when it isn't Friday evening :-P
 
@DaveRandom Fairs, I think I've got it sussed though. I've implemented it, and it seems to be blocking direct navigation to the code, and is presenting the code on the allowed sites.
 
6:20 PM
BTW @MattCowley if you are going that route. Do it properly. Like starting with only minor changes to the css
 
Could someone answer the question in the screenshot?
https://gyazo.com/018eacba925620943e71568da233f118
 
And go bigger with time
 
Pancakes for dinner 2 days in a row. This is adulting yes?
 
Is what she said^
 
@PeeHaa Huh? I've only rolled it to one store currently
 
6:21 PM
She likes pancakes then?
 
@Fabor i was targeting the peehaa but sure ;)
 
@MattCowley No serve only minor changes to the others that are hotlinking. Fuck with them.
 
@PeeHaa I'm jsut gonna serve it without the custom variables
 
@PeeHaa Since he's serving it through PHP, you could even do stuff like font-size: <?= time() % 7 ?>pt;
 
yeah something like that ^
@MattCowley you are bad at revenge
:P
 
6:23 PM
Or create a really gradual transition of the background to fade some hardcore porn in
 
@PeeHaa I'm liking the idea of random stuff
Yeah
 
21 mins ago, by PeeHaa
I wish somebody would hotlink something from one of my sites. I would have sooo much fun
I mean seriously. I would take time off just to perfect the trolling
 
From all the diseases they would catch presumably.
 
p::after {
    content: " Of course, none of this is true.";
}
 
heh
 
6:28 PM
@DaveRandom content: "\1F4A9";
 
                    $requestDomain = isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : false;
			if ($requestDomain != false) { // Single or Double Equals?
				if ( !filter_var($requestDomain, FILTER_VALIDATE_URL) === FALSE ) {
					$requestDomain = parse_url($requestDomain)['host'];
				} else {
					$requestDomain = false;
				}
			}
 
Much better. I always prefer !== and === btw
 
Now this is how you play pokemon
6
 
@PeeHaa Best way to pull a random image from imgur?
 
using the APi probably
 
6:37 PM
https://api.imgur.com/3/gallery/random/random/{page}
where {page} is 1-50
We could have that in Jeeves but I suspect it would be as much of a shitshow as giphy
 
@DaveRandom Not enough nsfw gallery
@DaveRandom Yeah probably ends up in a clusterfuck
 
Majestic Marley Cat
Did I mention, majestic ?
 
Ekn
did someone say... majestic?
 
Anonymous
And then there's Max..
 
Ekn
anyone played ARK: Survival Evolved? Is it worth a try?
 
7:11 PM
Doing this:

$imgLink = "https://api.imgur.com/3/gallery/random/random/".mt_rand(1, 10);
$imgLink = file_get_contents($imgLink);
I get:
file_get_contents(https://api.imgur.com/3/gallery/random/random/9): failed to open stream: HTTP request failed! HTTP/1.1 401 Unauthorized
But if I naviagate to the url it shows it fine?
Oh
 
lol
 
I need authorization?
But
 
Have you tried navigating to the URL in a private browser window?
 
I can naviagte to it withput?
Oh poop
 
Because when I try it, I get:
{"data":{"error":"Authentication required","request":"\/3\/gallery\/random\/random\/9","method":"GET"},"success":‌​false,"status":401}
 
7:14 PM
Same now
That sucks
 
You'll need to authenticate with them, either use cURL or a nice OO wrapper library for it, like Guzzle
 
@JayIsTooCommon that's cute
 
:D
 
7:19 PM
How do you do a multi line string in php that is actually written in multi line
is it ''''?
 
now/heredoc?
 
!!docs nowdoc
 
[ bindec() ] Binary to decimal
 
uggh fuck you @Jeeves
!!docs strings
 
7:20 PM
A string is series of characters, where a character is the same as a byte.
 
Anonymous
@PeeHaa 1 beer, I can do that.
 
multiline text thing then
 
@JayIsTooCommon Sold. Be ready at phpnw
lol you muricans are so fucked...
> Wordt moeilijk als je moet kiezen tussen een Giant Douche en een Turd Sandwich
Dutch but you get the gist
 
Anonymous
@PeeHaa .., Sorry I'm giving up beer.
 
@PeeHaa https://gyazo.com/a159249d332111888d5f22a1ad71e610
Think that's good enough?
 
7:25 PM
Yeah. It's good start for sure :)
 
@Gordon terrible things. Did you doubt of that?
 
7:42 PM
@Ocramius Dude come anyway it'll be a right laugh
ROOM11 REPRESENT
 
@Jimbo we'll see
 
if ZendCon is a no-go, then probably coming
 
I hope it's a no-go (sorry)
@Gordon @PeeHaa @Fabor Who's PHPNWing?
 
@Jimbo I is
 
Anonymous
7:49 PM
@Jimbo Aye
 
8:15 PM
after disable root login can i do root login again?
 
@Jimbo Eih… who's paying?
 
@AnmolRaghuvanshiVersion2.0 ssh?
 
@AnmolRaghuvanshiVersion2.0 sudo
 
nvm done thanks all :)
 
8:25 PM
@bwoebi this lady, apparently
 
@PeeHaa actually i disabled root login on vps and need to do root login again
 
@AnmolRaghuvanshiVersion2.0 is there a recovery console? oh nvm =)
 
@DaveRandom 404
 
I don't understand facebook
 
@AnmolRaghuvanshiVersion2.0 su -
Once logged in as another user
 
8:26 PM
Will anyone employ me to not understand facebook? Because I'm really good at it.
 
sure your hired
 
@PeeHaa it gives access denied
 
That's very odd
You didn't screw up permissions did you?
 
@bwoebi @DaveRandom said he would
 
I was referring specifically to your mother though, @Jimbo
 
8:28 PM
dammit
 
And in any case, 30p isn't enough
Need some ointment for that burn?
/me goes to do the washing up
 
@AnmolRaghuvanshiVersion2.0 Otherwise you can always use the console as @RonniSkansing said if they provide it
 
thanks PeeHaa,Ronni
 
@DaveRandom I didn't know that I were @Jimbo's mother… Because I'm actually not a mother…
 
@bwoebi Did you not know? You're my mum!
At least, when I've seen you out on a Saturday night you dress like a woman... ;-)
Omg, where's that pic of @DaveRandom dressed up
I swear I'd saved it into my "Blackmail" folder
 
8:34 PM
:P
He's to proud of it to be used for blackmail I think though
too*
 
Anonymous
8:54 PM
@PeeHaa I'm at dome if you're going past
 
Anonymous
@Jimbo i.stack.imgur.com/ZGMaX.jpg here you go...
 
There were 47 failed login attempts since the last successful login
 
@AnmolRaghuvanshiVersion2.0 You in? :)
 
\o/
 
@AnmolRaghuvanshiVersion2.0 sounds like you are quire popular
what account is that?
 
my clients account
!!is today,tomorrow caturday?
 
No.
 
@tereško why popular?
 
8 mins ago, by Anmol Raghuvanshi Version 2.0
There were 47 failed login attempts since the last successful login
 
9:24 PM
do you have any links for vps security releated ?
 
9:51 PM
digital ocean have some okay tuts on setting up the user, firewall, failban and etc
 
Thanks Ronni :)
 
10:17 PM
=)
np man
 
@DaveRandom I have resting death stare face - intj-explained.tumblr.com/post/10233359295/the-death-glare
Also me smiling:
 
@Danack That's not you! There's no beard!
 
re
if there would have been failed login attempts we wouldn't tell you then due to security reasons.
anyone has used git subrepos lately?
 
10:37 PM
@hakre no reason to … git submodule/subtree/filter-branch are good enough
(filter branch to fix the rebase failures with subtree… yea …^^)
 
10:58 PM
@bwoebi wasn't asking for reason just for practical experience. And I'm pretty sure reason is fine, git submodule is clunky, often. And filter-branch is nice to have, no doubt, but I just did some rebases with subrepo and I must admit, it's a snap to handle. But just was asking if there are other users of it.
Btw, applying it with some real-life use-case and it works reasonable well so far.
 
I just mean that I never have used it as I've never seen a reason to learn yet another tool even if it's a tiny bit easier.
 
Fair point, I wish I would see more conservative approaches in that sense in my day-to-day work in the office.
In my case I did use cross-repo-cherry-picking which most often created conflicts which are (quite) burdensome with git am.
I still do these cherry-picks but subrepo allows me to more easily share a folder between repository which has got it's own history.
With the benefit that each repository works out of the box.
 
@bwoebi git submodules are horribad
 
Or clunky I would say.
 
It's like they should be good.
You want them to be good.
 
11:07 PM
Actually I don't want them to be good, I just don't want people to use them
Does that count?
 
Why not?
 
@hakre Because, as you say, they are clunky ^^
My solution to submodule problems is generally rm -rf the whole thing and clone everything again
 
Hmm, dunno what specifically went wrong then, but one advantage with the git subrepo command is, that it does not need any submodules - and git clone just works w/o recursion.
 
@hakre Does it have sane defaults?
Like what were they smoking when they came up with the --init mess
 
You mean --init on submodule update? git subrepo is an additional script, it does not ship with git itself.
It basically pushes the history of folder to a remote and takes care of keeping track.
You have the history of that folder in your local repository independent to that but you can easily share the changes of that subfolder thanks to the suprepo.
That is for normal users, they do a git clone and they have the full history.
They don't need that tool.
And yes, defaults are sane as far as I can say.
 
11:33 PM
uh
so subrepo uses subtrees and pushes that?
it's basically an abstraction over subtrees, looks like
 
Sounds suspiciously like svn, and I therefore hate it
Actual Google is almost as fun as googlefeud
 
11:56 PM
@DaveRandom socialist is correct! /s
 
Ekn
lol I think I'd be tempted to slap the non-threatening person in the face thus become a threat :p
 
@Ekn huh?
 
Ekn
something I just bumped into
 

« first day (2113 days earlier)      last day (2838 days later) »