Hi all. I'm having a problem with an error message on modsecurity. Whenever appending a $_GET PHP variable to a php file on the server, I am recieving a CSRF attack warning in the error log. I have been looking for an answer to this, and there are multiple posts from people with the same problem on google, but none of them answered. I was wondering if this was a bug, or what it could be. It's a complete wonder to me. PS In this php page, I have not started a session either.
@Leri May be I'll try another time. Well.. php-internals book is fine. Good explanation & well-formed. In theory all is well, nice-designed (especially I liked part about zval & hash tables), but in real life.. ugh
all I really need is a file browser and a text editing window, syntax highlighting speeds up reading, but I don't really like anything else ... the problem is with any ide when you write a bunch of languages, you download for php, then install a ruby pack, then get autotools going, then java, then some other java things, then it won't work anymore ...
@JoeWatkins actually, IDE is needed for me because I'm noob. As well as it's not needed for me when I'm writing PHP scripts. 70% that I will write it in 3v4l and.. without syntax errors & getting desired result from 1-st run
plus also, the change won't be that involved for most extensions ... not the kind of thing you can't search/replace pretty easy, the only real difference you'll see everywhere is zend_hash api usage and zval*'s and now zval's ...
@Leri yeah do it ... it's not even like we can work against phpng today because 64bit patch will maybe change things again, so focus on master is fine, if you can and you have a day to kill then maybe get an ng branch going now even, but it's not really necessary ... nice to know what is coming as soon as possible ...
@Leri it's not, just changed structure
@Fabien at the moment, math, manipulation of strings, pretty basic stuff really ... but extremely fast ...
@cspray Do you have a concrete example where you need to use the prepare bit of Auryn? I've realised there's another problem, the instance that has been just created is also hardcoded as the first parameter e.g.
next will come structures and unions (not hard), then introducing zvals to the runtime, then a reasonably large utility function table, then literally anything
fails. We need some sort of way of defining how to pass the just created object into the function, which may be easier to think about with a concrete example. /cc @rdlowrey ^^
@Fabien I don't really have a target in mind, this is just me researching really, in the healthiest way I know how ... if it's used, I imagine it will be frameworks that use it, it is complicated for php ...
@tereško Is the reason you're not a big fan of templating engines like twig due to the scripting that can and usually is done inside the template instead of the page helper?
I am not a big fan of templating engines, because I find them pointless: php is already a templating language, maintainer of my code shouldnt be forced to learn another language and most of those templating engines are complete nightmare under the hood ... oh and people tend to abuse them
Transcript: Hey guys! Take me to my grandma's, I'll pay you with this paper cup *throws paper cup* *Screeeech* Yeah guys! I need to lay down as I travel, perhaps the boot? Can you help me get in? Thanks!
I used to have a pair of red cords when I was about 12, the main thing I remember about them is that they would take on water if you went within 100ft of a puddle and they would take on enough water to triple the weight
@Fabien Not really. I always found it hard to buy baggy trousers, I'm 6'4" (have been since ~15) and very skinny. It's pretty hard to find trousers that are 32/36 in general, finding jeans that were long enough and baggy on the legs without leaving about 6 inches of extra waste room is pretty much impossible
Also I used to cycle a lot, it's not about cycling in baggy jeans, so I kind of stopped wearing them then, although I haven't got on a bike for a while now
Actually The Gap works pretty well for me, but I live walking distance from a Gap outlet store and they seem to constantly have a sale on on top of the already cheaper prices
@Fabien Yeh it really is. I am physically unable to drive a lot of smaller cars
particularly French ones, I have found
I drove a 206 for a week once, I could press all 3 pedals at once with one foot, which led to a few hairy experiences
My mate had a mini when we were ~18, I only went in it once and that was the last time I ever plan to get in one
I'm pretty certain I could have driven it from the back seat
@Fabien lol yeh I've been there as well. Although my friend has the current yaris model and it is a lot roomier on the passenger side than the previous model, not driven in though so don't know if it's any better to drive
I learned in the smallest model micra for weeks, then I switched to BSM and the guy had a vectra and I have like 4 lessons in that before I took my test. I was shitting it a bit until I got in that car that I was just a shit driver and then I found it was just a shit car I had been driving