« first day (1640 days earlier)      last day (3530 days later) » 
06:00 - 15:0015:00 - 00:00

15:34
Anyone using Silex 2-dev + Symfony 2.6 components?
continues to add random version numbers until nobody on the planet has that exact sequence
hi, session_id($this->sessionID); doesn't get the session data although session file has 777 permissions ?
@Jimbo nobody
@Jimbo composer require nobody/nobody:dev-nothing@STABLE
dev-null
lol
oh, seems like one of my packages will make it to symfony-standard
user924016
15:47
Mooooorningsssssh =]
monring
http://www.quora.com/I-am-powering-a-banks-website-using-WordPress-What-security-measures-should-I-take (⊙ω⊙) via @sapphicorb
user895378
> Step 1: Design a new implementation
Step 2: Migrate to new implementation
Step 3: Perform pen test on new implementation.

Optional step 4: fire yourself
@ircmaxell they chose WordPress, I wouldn't trust them with steps 1-3
-P
>I think the question is, "What security measures should I take?".

Find out which bank
Close my account
Reset all my passwords
3
Also, inb4 WordPress core developers come to tell us that, while WordPress may not use "newfangled" features and "better" coding standards, with enough duct tape they have made it perfectly secure, and how dare you suggest otherwise.
16:05
Meh, I had a guy last week who does wordpress for a living and had for years, and he was asking me how to check that an include is there... he'd never heard of file_exists()
I didn't mind helping him but man...
posted on April 13, 2015 by kbironneau

/* by shrub */

there's nothing wrong with that
> checking that an include is there
uhh
@ircmaxell Even the most senior developers don't know the odd basic thing sometimes.
@Jimbo it doesn't work if different include paths are used (not that I advice on using them)
I don't consider that person to be a developer
that doesn't mean he isn't doing a valuable job, nor that he's a bad person
16:09
Oh, right, they may not be
a lot of WordPress users aren't really programmers per se
exactly
why are we even still discussing it?
it's like jQuery... its own world
guys please i need help
I'm using session_id($session); to access another session
but from another php instance
so there is two session file with diffrenet owners
-rwxrwxrwx 1 root root 75 Apr 13 11:56 sess_cl6l2tgsipcdbfk3icbikd06r2
-rwxrwxrwx 1 admin root 0 Apr 13 11:59 sess_cslqpnukkjo66qq9btse4rnsi7
root?
why are you running your server as root?
It's another php instance for websocket
16:19
Yeah, PHP files should be owned by either the FCGI process or the web server
this looks like the definition of a bad idea
I'm using root as another users can't create sockets on server
Warning: stream_socket_server(): unable to connect to tls:// (incase of using ordinary users)
I can't think of any reason why you couldn't create another user and run it as that tho
but how could I create sockets from ordinary user ? and it should be the same user create the session file so that i could access it (read&write)
user924016
16:25
@Goku what are you doing (making/creating)?
@RonniSkansing Look, I have nginx server running with php-fpm by user admin,
and I want to start mywebsocket server via php run-server.php
But to start websocket I had to have root privileges so that I could open sockets on server

The problem that I want to access session which was created by admin user
In Websocket server I have the $session_id so I can do session_id($session); to get session data, but unfortunately
the session file owned by admin and websocket server (php instance) cant access that file ( as websocket run by root)
user924016
@Goku do you really need root to run nginx or make sockets?
@Andrea It was XY I think, he didn't know how to ask the question
user924016
and I do not think you should try to share the session between multiple sessions, seems like a hack
user924016
what are you doing(making/creating)?
16:37
@RonniSkansing I want root for : stream_socket_server method in php
user924016
"Note: Most systems require root access to create a server socket on a port below 1024."
user924016
use a port higher then 1024 `?
ammmm, I'm using 843
@RonniSkansing saved my day thanks :D ;) , I used another higher then 1024
user924016
great, so now you are not running anything as root anymore?
no just ordinary user
user924016
16:45
yay =]
user924016
Now, why where you trying to share a single session between multiple sessions?
3
Q: A PHP User System

Hassan AlthafThis PHP User System was built with MySQLi and I also used Composer. I'm planning to improve this, and add more stuff and release it as a sort of a module for Composer. User.php (Controller File in the src/Controller) folder. <?php namespace Application\Controllers; use Http\Request; use Http\...

I have placed a bounty on that question.
It's not between multiple sessions, Session cookie was sent from browser to ws server as a header,
so I get that header then use session_id() to fetch user session data
wait, are you trying to resume a session inside of a websocket?
user924016
@HassanAlthaf I got a couple of suggestive reflections for you
16:50
@ircmaxell hhhhhh don't worry I close it again after get user data :D

session_id($this->sessionID);
$ok = session_start();
$this->sessionData = $_SESSION;
session_write_close();
@RonniSkansing Go for it.
user924016
@HassanAlthaf do you want here on chat or on your question?
Question please. @RonniSkansing
user924016
ok it may take a while
16:57
Take your time. :)
18:00
70
Q: 2015 Moderator Nominee Activity Profiles

Jason CI've generated weekly histograms of activity for each of the current 2015 election nominees, combining SO, MSO, and MSE activity. This data consists of the total counts, per week, of publicly available activity (reviews, revisions, comments, posts, accepts, suggests, badges) and is intended to re...

hi.
Slim provides first-class session support. It persists session data using military grade encryption.
what is the meaning of military grade encryption on session.
and is there any grades in encryptions.
are military grade encryption has more complex and than other private encryption.
i just curious to know..
It's marketingspeak for "we use the encryption standards recommended by the government" which is usually translated to AES.
oh!, damn for just for a minute, they made my brain fucked up.
thanks
no, it's "We don't actually understand this stuff, so we looked up what the military recommends and decided to use that"
18:08
I mean, we need to follow what Govt./Millitary recommends.
hello
not what i meant
Just because a government agency recommends a practice, that does not make it the best current practice.
exctly, NIST currently recommends known vulnerable algorithms for many things
Sometimes the military does stuff first so they name stuff and set standards first. As such, what we do later sometimes refers back to that. A good example would be cables. There's RG6 and RG59 grades, but the numbers correspond to the Army Field manual, not the actual size of the cable
@Machavity yeah, when it comes to manufacturing, mil-spec is a VERY good thing to have
18:12
Can anyone help me out, I'm not really sure how I can go about the problem behind what I'm trying to do.

The problem:
I'm trying to get `if($_GET['X'] == 5)`, show me all the options for that specific category.

http://pastebin.com/ZcYtRqks
http://pastebin.com/1gyjDENb

Any help would be highly appreciated! Cheers.
(Also I'm aware that the code is un-secure as the methods haven't been filtered)
okay, I could not find 'x' in your code.
@Rafee Sorry X was meant to show optionOne, optionTwo… so on.
Can we beat military grade encryption??
and by the who decides the encryption grades
there's no such thing as "military grade". It's a marketing term that they made up
Who's they?
18:18
Slim
slim
Actually, there used to be
Oh so I Googled' php slim, got this: slimframework.com
@RahulKhosla what do you want?
18:19
IIRC, 2048+ bit RSA (was it RSA? can't remember) was considered illegal for consumer technology ages ago
that was the "military grade". We don't give a damn nowadays.
(talking about 1995~1998 btw)
@Rafee Just to know how I can edit the SQL query based on $_GET['something'] for 5 different options.
@Ocramius well, no, that was exsize restrictions.
Hmm, guess I don't remember then :D I was 10
18:23
it's the fifth time already I see people here confused because of that Slim advertising mumble jumble
2
@RahulKhosla hope you understand this simple code .
$query = "SELECT *
FROM product
WHERE carcondition = 1 ";

if (!empty($optionOne)) {
$query .= " AND option_1 = :optionOne ORDER BY option_1 desc ";
}

if (!empty($optionTwo)) {
$query .= " AND option_2 = :optionTwo ORDER BY option_2 desc ";
}
@marcio PR
@Rafee I assume that's for cleaning up my messy code :P?
well, messy and as well reducing your code may be..
@Ocramius I think that was an export thing. Back when the strongest cert you could use was 40 bit, back in the dark ages where IE 5.0 was da bomb
18:25
i practice like this on clean php..
Thanks though, I'll hopefully use your method at some point when I come to clean it up. I was actually looking at doing (for my main problem):
if ($_GET['optionOne'] == 5) {
$_GET['optionOne'] = "*";
}

So in my SQL :option_1 = ALL (*), but that didn't work at all. :(
And now we live in the future, where you can encrypt things as much as you want and find out there's giant gaping holes in the underlying software/encryption scheme
well, you just you need write one more logical condition for 5. thats it.
@Rafee I really can't figure out what logical condition to write. Gimme a hint? ;);)
18:29
haha.. @Ocramius thanks for the note too.. may be should be write a letter to Slim guys too.
@Ocramius I always assumed it meant encryption that the military use or used?
evenin'
@Ocramius :D good idea, now people will ask about "industry standard" instead of "military standard"
@marcio industry standard is whatever the corrupt idiots at RSA say is "standard"
2
but yes, there are standards for encryption
added obligatory yoda
merged instantly
18:34
@Ocramius I should open the same ticket to change "Industry Standard" to "AES"
did bjori wake up?
also: everyone just got back to the hotel: torrenting is now impossibru.
@Ocramius Hey I was just bitching about that a couple of days ago
which conf are you at?
@ircmaxell no conf - I'm currently working in Bristol, but I still live in Germany, so yeah, hotel for ~6 months
from pyos.github.io/dg/tutorial cuteness = ~> ShibaInu.cuteness + 10
I don't know what the ~> (spermatozoon operator) is doing but we should use it on short lambdas instead of ==> (big junk operator)
18:44
ERMEHGERD PER ERCH PER
btw, why would anyone want python with Haskell syntax?
@Ocramius By the way, did you ever decide on what features collections in Doctrine are actually needed?
@LeviMorrison no, sadly. Guilherme is trying to put some ideas together, I'm focused on the UoW part
It's also very hard to make lazy loading work with a custom collection API
As much as possible I think you want to do lazy evaluation on Iterators.
I don't think you really want "collections" but "algorithms".
Collections by definition collect things. As much as possible I think Doctrine probably wants to avoid collecting things because of memory usage.
Make sense, @Ocramius?
19:04
Well, kind-of
I've really been looking a lot at PINQ lately
Timetoogo is trying somehow to integrate D2 with it, and I think that's the right direction
this guy has so many old-school publications online: cs.tut.fi/~jkorpela/html/empty.html
ohai @hakre!
heya!
@hakre not joining the UG tomorrow, but greets to all :D
that is tomorrow and I have another date, too.
:)
but I'll pass greetings through a proxy
19:11
dammit these proxies - they keep following me!
hehe
@kelunik @bwoebi woohoo, you're awesome
very nice find
I just found it by accident while accessing @kelunik chat ^^
still cool :)
Feeling kinda guilty.... I've just told somebody who swears that his PHP always returns a false for if (date('H')>=13 || date('H')<=14) should post a bug report on bugs.php.net
Was that evil of me?
user924016
19:28
@HassanAlthaf I posted some of my answer, I have some more I want to put in the answer, but I have to make food and etc now, will write abit more on it later
@MarkBaker luckily bugs.php.net does not allow to upload screenshots.
19:48
/me just watched the avengers and it was way less crap than I expected
@MarkBaker Mini Me
@rdlowrey I am right when I say your windows lock patch landed right?
@PeeHaa The new one came out?
I'm horribly out of touch on movies these days
@Machavity Neh the first one. Didn't watch it yet because I thought it would suck
20:04
Avengers is probably one of the best superhero movies of late. Even the Iron Man series has proven to be decently good through all 3
I've heard some good things about Netflix's Daredevil series. Hafta check that out
@Machavity Yeah I've heard good things too. Should be at least better than the movie :P
That's not saying much tho ;)
20:32
lol
I liked the Avengers a lot, but surprisingly I enjoyed Guardians of the Galaxy even a little more
Has anyone checked out the new Daredevil series? I've been watching, it's quite good
user924016
@HassanAlthaf I will add more to the question tommorow sleepy time
here sleepy time, too
but this B.S. in CS list is amazing.
Should I be using LIKE or CONTAINS?
SELECT *
FROM product
WHERE carcondition = 1
AND option_4 LIKE :optionFour
AND option_1 LIKE :optionOne
AND option_2 LIKE :optionTwo
AND option_3 LIKE :optionThree
When my database shows: "#,different#" ??
@RahulKhosla You should immediately stop what you are doing and redesign your database to account for data normalization.
Do not put delimited values in a text field in a relational database.
@Charles Oh the security risk?
I know.
It's not a security risk.
It's a design anti-pattern.
@Charles I'm failing to understand, sorry! How would you do it?
21:12
Database normalization is the process of organizing the attributes and tables of a relational database to minimize data redundancy. Normalization involves refactoring a table into smaller (and less redundant) tables but without losing information; defining foreign keys in the old table referencing the primary keys of the new ones. The objective is to isolate data so that additions, deletions, and modifications of an attribute can be made in just one table and then propagated through the rest of the database using the defined foreign keys. Edgar F. Codd, the inventor of the relational model (RM...
^^ that.
Those options belong in their own table.
Ahh I get you.
How would this help @Charles ? Code performance?
@RahulKhosla Performance (no need to parse the string), clarity and sanity. It'd also help solve the problem you're having, as you can then easily find all of the products that have any given option while also lifting the limit of four options.
@Charles Ahh I get you now! I could do it that way but I'm still a novice in PHP, just using the basics for now and putting it all together.
@RahulKhosla Trying to manage the substring searching is harder and increases complexity more than doing the database design correctly.
21:18
Any way I can do it my way? A section of my database:
http://gyazo.com/49306c6cf69801dba536696a75e696dc

The LIKE doesn't seem to work.
 
1 hour later…
Anonymous
22:26
@Charles ping
23:47
So… this works in my enum's branch:
<?php

enum Singleton {
        Value
}

class Foo {
        const Singleton = Singleton::Value;
}

echo (Foo::Singleton)->name();
cool
I'm scared to enable opcache and find out that it breaks in some horrible way >.<
lol
I need to try using it in more ways but it seems that everything is working without opcache.
It's been too easy in that regard. Opcache has to break to keep the balance.
tried function test(Singleton $foo = Singleton::Value){} ?
23:52
"It's been too easy" - how does the serialization look?
@Danack Oh that was easy. Serialization is unsupported ;)
Not making a joke - we ought to drop the current serialization/deserialization - it just doesn't work properly, and can be done in userland.
Serialization should be done in user-land in my opinion.
Not sure if I can get away with not supporting it though.
Hmm… I've built opcache supposedly but I can't get sapi/cli/php to use it.
06:00 - 15:0015:00 - 00:00

« first day (1640 days earlier)      last day (3530 days later) »