« first day (3565 days earlier)      last day (1386 days later) » 

4:17 AM
posted on July 18, 2020

And THAT is why batman will be the most popular superhero for many years to come.

 
 
3 hours later…
7:20 AM
morns
 
 
2 hours later…
8:50 AM
@NikiC Thanks for the latest commits about magic methods
Now I have some conflicts to solve :p
 
Jun 6 '15 at 22:09, by Danack
For the record, this is why I do not think anyone should copy anything Enterprise level Java programmers have done. They've clearly, as group gone collectively insane.
any code environment you can't debug without using a byte level debugger is 'not good'.
 
@Danack You still OK for 11am?
sorry, 14:30 :-D
 
9:08 AM
@NikiC I've just received a private mail from the rhsoft guy XD
 
@Derick actually... would it be possible to do it another day. It seems I'm having a bad pain day, and while it's not that painful, it's interfering with my ability to speak, which is "not ideal".
 
Yes, that's fine. When would you suggest?
 
@MátéKocsis if it's at all abusive, please could you share it with me via email.
 
@MátéKocsis Is it to a @php.net address?
 
@Danack I didn't read it all, but at the first glimpse, it seemed not to be very harsh.
@Derick No, my personal email is public on GitHub. Probably it's time to change that :)
 
9:12 AM
If it's in a git commit it's public. Hiding it is just annoying...
 
Oh yes, that's sure. But it was visible on my profile page until a minute ago. :D
 
yeah, so is mine
(if you're signed in, that is)
 
I read it now, and it seems that he's frustrated because he already works 90 hours per week, and he's not happy that version upgrades come with extra work.
 
oh didums
what's the change he's not happy about?
 
Quite the entitlement issue.
 
9:18 AM
And the thing is that the issue he pointed out might have some merit, but he didn't use a very nice tone in the bug report as well as my PR.
 
I stopped wasting time on him
@NikiC (and others), does this new regexp looks OK?
-    if (preg_match("/(rhsoft|reindl|phpbugreports|bugreports@gmail)/i", $email)) {
+    if (preg_match("/(rhsoft|reindl|phpbugreports|bugreports\d+@gmail)/i", $email)) {
 
@Derick Should be * instead of +?
 
ugh, yes.
need moar tea
committed
FWIW, I think that Zip change should have gone through an RFC.
 
@nikic #FYI I've tested all 3v4l scripts on php8alpha2 with JIT enabled and 99% of the bughunt output is noise, there are two significant differences: 3v4l.org/Tk6b0 and 3v4l.org/P1Rvd where only the last one seems to be an actual bug where the jit version is too slow
 
9:33 AM
@Derick Friday afternoon?
 
Yes, can do, but a bit later? Maybe 15:30?
 
yep, sounds good.
 
I hope you're feeling not too bad :-/
 
@GabrielCaruso I'm done now I think ... it was a big mess :(
 
ThW
@Derick are you missing some parenthesis (for subjects like "rhsoft123@gmail")? regex101.com/r/XR2wh3/1
 
9:38 AM
@NikiC Indeed, 5 different methods checking different things in the same context. I'll rebase the PR and I'll let you know, thanks!
 
@ThW no, some of the other ones were domains
and they're not full string matches
 
ThW
ahh ok, looked like different gmail addresses to me :-)
 
10:01 AM
o/
 
\o
 
Hello, is there a way to know if 2 out of 3 arrays have the same content, without looping through each of them?
 
There is php.net/manual/en/function.array-intersect.php to see if they're the same (the intersection is empty), but you'd have to do that for all combinations of your 3 arrays.
 
Thank you @Derick
 
or... something like that
it might just be faster to iterate over all three at the same time and compare each value
I meant array_diff, sorry: php.net/manual/en/function.array-diff.php
 
10:12 AM
Perfect. If i count() the result and there are no difference I get 0 I suppose....? Thanks!
 
Is edit.php.net dead?
 
10:51 AM
@MátéKocsis he's a cockwomble
 
cmb
@Girgias see bugs.php.net/bug.php?id=79671 (particularly the last comment; seems someone has to check submissions there as well)
 
Okay, cause I needed to do some thinks for the French translation
 
11:15 AM
@bwoebi omg the hidden ungooglable magic
I have learned a lot more about jdbc than I ever wanted to know this weekend, probably overwriting something that was actually useful
 
 
2 hours later…
1:24 PM
@Sjon Can't reproduce either one
 
@NikiC that's.... interesting :X
 
1:34 PM
@Sjon Interesting. How many scripts is that? How long did that take?
 
@IluTov ~ 3M, takes roughly 3 days
 
@Sjon Oh wow, that's crazy.
 
@Sjon are you using the default opcache.jit setting?
 
@NikiC was with -dopcache.enable_cli=1 -dopcache.jit_buffer_size=256M -dopcache.jit_debug=1
so, yes
 
2:06 PM
god dammit mysql
every new computer is such a challenge to get that shit working
 
2:20 PM
Hello guys
I need help regarding stored XSS in my php application
in my application I used mysqli_fetch_array to fetch result from database
but from database malicious data can flow through my application . so I need to filter this mysqli_fetch_array
how can I do that?
any clue
 
Use prepared statements
 
cmb
I don't think that prepared statements can prevent XSS; use htmlspecialchars() when echoing.
 
@NikiC I feel the pain, I've got a couple trick which hopefully should make it work
 
@Girgias I ran a bunch of random snippets from stackoverflow
It works now ... not sure which one is responsible tho :)
 
:')
I did the thing of altering root pwd to be empty and needed to change localhost to 127.0.0.1 in the connect script
But I still have that rando ass issue with MySQLi
 
2:53 PM
@Maximious blog.ircmaxell.com/2011/03/… "filter input, escape output" . Protecting against XSS is done in the 'escaping output' but, not where you're storing/retrieving it in the DB.
 
wtf isn't there an interface for User streams
 
3:13 PM
sort of
streamWrapper is what you are looking for
it's a bit mad
 
The Stream API is utterly bonkers.
 
It's very clever.
which is just about the worst nice thing you can say about a piece of software.
@LeviMorrison Does Datadog have a developer advocate I can have words with? Maybe particularly someone who would care about perspectives of an EU resident.....the way that it seems impossible to delete my account is pretty bad, and is a violation of the GDPR.
 
3:29 PM
@Danack I'm not sure who the person to talk to is, sorry.
I would reach out to support.
I would try to help more but I have a meeting that is starting now.
 
np. me just in a bad mood tbh. Will attempt to feedback through the right channel, but this seems a bit breakdown in process that your management team might not be aware or care about until someone makes a stink.
 
@Danack no… I'd say it tries to be clever.
 
@DaveRandom I was talking about when registering a user stream in PHP internals, like it always need to do some whack check if the function is indeed implemented in the given object
 
3:45 PM
@Girgias oh right yeh the internal stream handlers... that is also a bit mad :-P
the whole set_option() thing is utterly bananas, the operations for stuff like sendto() and recvfrom() run through it
 
PHP is utterly bananas
 
PHP: Hutterly Pananas
4
 
Also gonna have fun trying to cram into a 45min presentation the RFC process + PHP 8
 
isn't that kinda two separate things? :-P
 
yes
exactly
 
3:54 PM
...whoever it's for, tell them that you can't fit all you wanted to in, and you'd prefer to cover less to make sure the quality of the talk is good.
writing talks is stressful enough, even without setting yourself up to fail.
 
@DaveRandom it's a catchall mechanism for whatever doesn't have "regular" functions…
which sort of makes sense if you do not want to break API to other streams… but that's how horrible APIs are born
 
4:12 PM
Do we test OCI8 on CI?
 
@bwoebi yeh exactly
it also has a terrible name
 
>_>
And the install process locally seems to be a PITA too
Well just gonna put that in the PR that I'm updating and let them look into it
 
5:22 PM
@NikiC given a free list of fixed-size nodes (eg. for a linked list), and a dtor call on the zval within the node on attach, is it safe to then completely bypass the entire free list during GC, and free the nodes on shutdown? I think the refcount of every node in the free list would be 0, right?
 
5:33 PM
@DaveRandom Do you tutor?
I need some lessons, and I will pay
 
 
2 hours later…
7:45 PM
@samayo lessons in what?
the short answer is no I don't tutor. but that doesn't mean I won't/can't, depends what it is you want to know though :-P
 
8:03 PM
Got a question if I open the vote tomorrow morning 21st for StackFrame and it finishes on 4th of AUgust then it's fine, right?
 
What's for lunch
 
8:20 PM
I opened fb for the first time in months and within 3 mins I was basically stalking my ex from 15+ years
that shit is evil, yo
@SalOrozco cheap beer and sadness
 
lol @DaveRandom wassup Dave. How was your weekend
 
long and Java-y
I don't recommend it
 
I got an Effective Java 3rd edition about 2 months ago. Tried reading it, couldn't finish it. Just so used to the PHP way.
 
it's not that, it's because java is layers and layers of exponentially increasing magical insanity
 
8:39 PM
@DaveRandom I believe someone already told you about it :) I need some lessons about SSL/HTTP stuff
I prefer to pay though
 
...why? there's 'nuff free resources on that sort of thing
 
ping me on wed eve and we can talk about it more, I'm really busy tomorrow and wed day
 
Turning away money.
Really value beer time.
 
well kind of, idk, firstly it would be selling something you can get for free (sort of) and secondly security related things come with a weight of responsibility that isn't always worth the money :-P
also, let's be honest, thirdly impostor syndrome
 
8:50 PM
@DaveRandom I have tried, for some reason my brain keeps shutting down when cryptography stuff is mentioned
 
well cryptography itself is a massively complex subject that is more about mathematics than tech, what you need to know is how to configure HTTP/SSL
which is kind of a different subject
you need to know some stuff about crypto, the basic overview of what all those settings actually do, but you don't need to completely understand how crypto works to use it securely
like you need to know that TLS 1.1 is considered insecure and should be disabled unless you need to support legacy clients, but you don't really need to know why
depends what you are trying to do, obv
the thing to remember at all times though is that security is not a thing to "play" with, if you are genuinely "where the buck stops" with this stuff then you better be damn confident in what you are doing before you agree to let someone pay you for it
 
I am stuck at the beginner level. I can't wrap my head around the SSL/HTTP implementation. I am trying to understand the handshake, public/private key exchange ... basically the basic
I actually changed career some time ago, I am working as a tech writer and I am trying to understand some of the basic things about SSL/HTTPS
 
Selenium is not capturing text with   e.x. I tried using:
//*[normalize-space(text()) = 'Step 1 of 2: Account' or text() = 'Step 1 of 2: Account' or normalize-space(.) = 'Step 1 of 2: Account']
 
I am not required to do so, but still would be nice to know
 
for <div class="step-title">Step 1 of 2: &nbsp; Account</div> but it didnt work.
 
9:04 PM
anyway i will ping you
 
kk no worries (y)
omg we really badly need an international standard on how emojis and keyboard shortcuts in chat work
@Ghostff normalize-space() won't help you, nbsp is not counted as whitespace, afaik it only deals with ascii whitespace
you could account for &nbsp; explicitly as an edge case, but it still won't be perfect, e.g. it won't account for &emsp;
 
lol
 
you could walk the DOM tree and replace all unicode whitespace chars with 0x20, then it will work, but obv that's a pretty expensive operation with the cost governed by the size of the document
btw everyone: this is why &nbsp; should be avoided if at all possible, I rarely see it used in any place where CSS doesn't have a better solution
nbsp (like all unicode chars) is a semantic marker, not a layout element...
 
@DaveRandom Something like //*[text()='Step 1 of 2: &nbsp; Payment Amounts']
 
you'd presumably need to use something like \u2003 instead of &nbsp;
&nbsp; is specifically SGML-ish syntax, xpath with use something more C-esque I would have though
and also that would be coding to the specific case
which may not necessarily be wrong, but take a step back and think about whether it makes sense
i.e. if you are trying to handle arbitrary pages off the internet that may change the position of that nbsp, that will be fragile af
whatever you do, just try and make it as semantic as possible, i.e. focus on what things mean rather than what they look like or where they are
 
9:24 PM
In PHP 7 if you print an array with references in it, does it not show & like it did in 5?
 
by "print" do you mean var_dump/print_r something else?
afaik both of those are unchanged at least
otherwise basically every test in the whole of php-src would have had to change between 5 and 7
 
I did not know PHP had goto.
 
should be easy enough to determine on 3v4l though surely
@SalOrozco yeh but you can't jump into.out of a look like you can in C
 
it's very useful for incremental parsers though
 
9:28 PM
sscanf would make those args a reference; why doesn't it show up in var_dump?
 
@LeviMorrison no change since 5.4 certainly (with "EOL versions" opt)
 
@LeviMorrison because rc=1 refs aren't shown as ref
 
balks on syntax before that becasue short arrays
 
even if they are actually refs
 
@bwoebi oh huh, TIL
 
9:29 PM
Ah, I see. Was this true on PHP 5 as well?
 
yes
 
seems to be according to 3v4l
 
I'm having a difference in a test in PHP 5 vs PHP 7 so I'm trying to figure it out.
 
I am having a lie down and sleep
:-P
nn all
 
@DaveRandom rc=1 refs should in genereal behave equivalently to a non-ref
 
9:30 PM
<?php
DDTrace\trace_function('sscanf', function (DDTrace\SpanData $span, array $args) {
    $span->name = $span->resource = 'sscanf';
    $span->service = 'phpt';
    var_dump($args);
});

$ret = sscanf("42\tFoo Bar", "%d\t%s %s", $id, $first, $last);
var_dump($ret);
?>
--EXPECT--
array(5) {
  [0]=>
  string(10) "42        Foo Bar"
  [1]=>
  string(8) "%d %s %s"
  [2]=>
  &int(42)
  [3]=>
  &string(3) "Foo"
  [4]=>
  &string(3) "Bar"
}
int(3)
 
But there were edge cases (not sure if there still are)
 
On PHP 5, should those rc's be > 1?
Probably -- one exists in the array, and one in the variable being passed in. Both are alive.
I'm not getting the same behavior in PHP 7 though.
 
night
 
@LeviMorrison can't tell. does trace_function copy to $args array without increasing rc?
 
@bwoebi It's complicated but... it should increase RC probably?
Sometimes we call the closure before forwarding along the final call, but the call is all set up with args pushed and such (on 7), and other times it happens after the call is made which is what this code I posted does. My understanding is that extra args can move there, which is partly why it's more complicated than it seems.
Hmm. Z_OPT_REFCOUNTED_P vs Z_REFCOUNTED_P -- not sure of the difference
 
9:59 PM
why do you need to support this complicated use cases?
 
Generally prehooks are either there because of 1) a temporary limitation in how we handle certain aspects (aka a hack) or 2) because the function we observe mutates the arguments, and we don't want the mutated value.
In some cases it may be because you can't do it after, such as a function that closes a resource (the resource will be invalid afterwards).
 
10:25 PM
@LeviMorrison it should, yes
 
@bwoebi Yeah, seems like I have a bug. Thanks for pointing me in the right direction with RC > 1.
 
11:23 PM
so many callable checks which use a zval instead of the dedicated check :(
 

« first day (3565 days earlier)      last day (1386 days later) »