« first day (2536 days earlier)      last day (2409 days later) » 

Anonymous
2:00 PM
@Gordon no idea.
 
Anonymous
HAH
 
I DID NOT LAUGH
 
@JayIsTooCommon to admit now I did wear a plastic pirate eyepatch at some point :P
 
Anonymous
@Ekin legend.
 
I wish eyepatches could fit over my glasses :(
 
2:01 PM
@JustCarty I would normally do it at the declaration time. But AFAIK it's mostly a style choice
 
Anonymous
@PeeHaa we should get it and get a few other 11ers on board /cc @Tiffany
 
Wes
lol, and you obviously have a photo captioned with HARRR HARRR
 
@pmmaga That's the way I have done it at the minute, wasn't sure if there were downsides to it or whatever?
 
@JustCarty actually I prefer:
class Foo {
    private $bar;
    public function __construct(string $bar = 'default') {
        $this->bar = $bar
    }
}
 
@JayIsTooCommon Guess I could get it somewhere next month
 
Anonymous
2:01 PM
:)
 
I at some point of time really considered buying https://www.amazon.com/Kaneki-Patch-Cosplay-Costume-Halloween/dp/B00L8VHC92/ref=sr_1_1?ie=UTF8&qid=1506348090&sr=8-1&keywords=tokyo+ghoul+eyepatch+mask and
https://www.amazon.com/Anogol-Tokyo-Kaneki-Cosplay-Silver/dp/B00MPRKU9W/ref=cts_ap_3_vtp?pf_rd_m=ATVPDKIKX0DER&pf_rd_p=2897711222&pf_rd_r=Z47RBDTR4ZCYETNTJ35R&pd_rd_wg=KC0dp&pf_rd_s=desktop-detail-softlines&pf_rd_t=40701&pd_rd_i=B00MPRKU9W&pd_rd_w=UJu0q&pf_rd_i=desktop-detail-softlines&pd_rd_r=Z47RBDTR4ZCYETNTJ35R&_encoding=UTF8
 
@Saitama oh boy oh wow
 
@JustCarty I actually wrote about an answer couple days ago: stackoverflow.com/a/46377943/727208
 
@JayIsTooCommon yup I have it, haven't played it yet.
 
@JayIsTooCommon naah, we should play Civ5 :D
 
Anonymous
2:05 PM
^ not a bad idea
 
@Tiffany it's very nice
 
@JustCarty no downsides that I'm aware of.. the constructor choice would have a tiny perf impact but the points of @tereško still stand. So, there's no wrong choice there
 
@JayIsTooCommon agreed
 
meh, you PC peasants
 
@tereško I do have that actually. But Civ5 is the worst of all the Civs
 
2:06 PM
Civ5 was the best, imo
 
@Gordon yes, it looks the least like ass
or we could play Heroes 3 (or 5 or 6)
 
I dont have that
I'd definitely would appreciate support against the zombie hordes though
 
Anonymous
we need to find a good host for voice chat as well
 
I'm up for civ5 tho :P (because that's the only game my potato pc can run smoothly)
 
Discord
 
Anonymous
2:08 PM
Yeah, discord is nice
 
Anonymous
/cc @PeeHaa, don't be a bitch
 
Who's the bitch who refuses to read whatsapp messages I have been sending him the entire day
Well 1. And just 1 hour ago
:P
 
Anonymous
.. moment
 
Sep 7 at 14:49, by Saitama
you guys should marry each other :D
 
Anonymous
aw, now I feel bad for calling you a bitch
 
2:11 PM
Is that a yes?
 
@Saitama if I can run 7days with an intel hd5500 so can your potatoe pc
 
Anonymous
@PeeHaa yeah, i'll go out with you. I just don't want to fall out with ekin
 
:P
Otherwise I am going to dump on twitter
kk
 
@Gordon you need to buy a real computer
or at least, one made in this decade
 
I have one. it's sitting in a beautiful black aluminium brushed silverstone casing under my desk. but it's broken
keeps bsod'ing on me and I cannot be bothered to fix it
 
2:15 PM
@JayIsTooCommon can you stop pinging/mentioning me whenever you are getting married or breaking up with pieter please :P
 
@JayIsTooCommon yeah, stop pinging @Ekin you insensible clod
 
Anonymous
!!urban clod
 
[ Clod ] - A peice of dirt -idiot
 
@JayIsTooCommon yeah dude, pinging @Ekin is a pita
 
Anonymous
I'll stop pinging @Ekin
 
2:18 PM
@Ekin great
 
@Ekin Just kick 'em
@Ekin You can't kick me though :D
 
:D hence you say it
 
@Ekin Yup
 
I am going home now
 
Anonymous
Thanks for informing us.
 
2:21 PM
I just burped
@JayIsTooCommon you're welcome ...
 
Anonymous
aren't we all full of information today.
 
lol
we should set up a room11 discord channel
 
Anonymous
I did set up one a while back but only @Ekin would speak to me
 
Anonymous
Pieter was too scared.
 
gimme link
 
2:24 PM
Yeah, @PeeHaa and his mic excuses :P
 
I don't know what is an discord
 
@JoeWatkins discordapp.com
 
oh fuck that, I also have mic woes, ended up doing last podcast on mobile
 
Anonymous
@Tiffany noo idea
 
@JoeWatkins discord works on mobile
 
2:27 PM
I hate doing stuff on my mobile, the battery is always flat and getting flatter and the internet is terribad
 
I am using symfony and I have entity with:
* @Assert\Date()
* @Assert\Expression(
* "this.getDateIn() < this.getDateOut()",
* message="The end date must be greater than the start date"
 
@JoeWatkins ahh, fair enough
 
how can I use bootstrap to display this
 
now I'm probably going to waste an hour trying to get my mic to work again ... thanks ...
 
Anonymous
But you get to speak to me?
 
2:28 PM
@JoeWatkins my apologies
 
I have already imported bootstrap
 
@JayIsTooCommon you suck
 
Anonymous
right.
 
you're ... not supposed to agree
 
Anonymous
that wasn't an agree right
 
Anonymous
2:29 PM
that was a right right
 
I don't get it
 
Anonymous
right. that's it.
 
Anonymous
that kind of right
 
Anonymous
other than right, you're right
 
Anonymous
2:29 PM
right.
 
stahp
 
@JoeWatkins HAMMERTIME!
 
well they look like mighty fancy headphones
 
@JayIsTooCommon stop reminding me about YoungTurks youtube channel
 
Anonymous
:B
 
2:31 PM
@JoeWatkins nope, they are not fancy ... but that's what I bought for myself
 
@tereško "Class 'models\base\AdministratorBase' not found" ... wat ...
 
@Tiffany are your directories really lowercase?
 
Jesus those headphones are expensive
I was wondering if I was jumping the shark considering spending $300 (38,5 EUR) on a pair
Oh, sorry @JoeWatkins, that's also 1.25 GBP
 
@Tiffany how are you running that code?
is it in your application?
 
2:35 PM
@tereško how do you mean?
 
have you added requrie 'vendor/autoload.php'; in your bootstrap file?
 
yes
 
is that code actually being called through that bootstrap file?
 
yes, otherwise google recaptcha v2 wouldn't work
or Whoops for that matter
 
@PeeHaa my company acquired a dutch company a few months ago, and today they are visiting us, and I have to say, their accents are most disappointing
 
2:36 PM
@Dereleased Is that good or bad? :P
 
@PeeHaa Their accents are so mild. Family guy promised me a veritable symphony of misplaced vowels, and... just no
 
@tereško going to paste some code to gist for you... I'm wondering if this is interfering with it.
 
so ... to recap, @Tiffany, you have two classes, in /lib/classes/models/Administrator.php and /lib/classes/models/base/AdministratorBase.php
one is starts with:
 
@Dereleased heheheheh
 
<?php
namespace models;
use models/base/AdministratorBase;
class Administrator extends AdministratorBase {
and other starts with
 
<?php
use models/base/AdministratorBase;
class AdministratorBase {
 
dammit
do I need use models\Model; in AdministratorBase?
 
wait what?
T_NS_SEPARATOR is "\\"
 
SHIT
5
sorry, had a brainfart
@Tiffany where does the Model class come from ?
 
I'm thinking I probably need to add a lot more uses to the code.
 
2:42 PM
I just popped my head in, and @tereško is swearing... what's the world coming to?
 
@Tiffany Get a proper ide
 
@salathe I was being retarded
 
@tereško Model is in the models folder. Do you want me screenshot the entire directory?
 
@salathe That humor is so dry you should bring it to Puerto Rico to help ease the flooding
 
@Tiffany no
you just need to import it too
(since it's probably not in the models\base)
 
2:43 PM
so any times there is extend, I need to add that as a use as well
 
@Tiffany unless the thing being extended is in the same namespace as the thing extending it
 
@Tiffany only if you are extending something from a different namespace
 
lol, it is
 
if Foo\Thing extends Foo\Stuff, no use necessary; if Foo\Thing extends Bar\Stuff, (or Foo\Bar\Stuff), then yes, add a use
 
I think
 
2:45 PM
there is probably an error message about it somewhere
 
lucky. I cant think :(
 
models/Administrator
models/base/AdministratorBase
models/Model

AdministratorBase extends Model, Model is in the models namespace. So I think I need to use models\Model; in AdministratorBase
 
yes
 
@tereško those headphones seem a lot cheaper on amazon, are these the same ones?
 
@Dereleased on-ear VS over-ear
 
2:49 PM
@tereško Yeah, just noticed that myself
 
you know how you stare at a word so long that it starts to look like it's misspelled? I keep wanting to spell model as modle, because model looks incorrect.
 
"noodle"
 
modle looks weird, but I'd accept moddle
 
is there a name for that feeling?
 
Anonymous
@Tiffany nutter
 
2:51 PM
Depends, do you consider it similar to semantic satiation?
 
223
Q: Is there a word or phrase for the feeling you get after looking at a word for too long?

J.T. GrimesSometimes after looking at a word for a while, I become convinced that it can't possibly be spelled correctly. Even after looking it up, sounding it out, and realizing that there's simply no other way to spell the word, it still looks wrong. Is there a shorthand way to describe this feeling ...

 
Given that question's accepted answer, I'm going to assume that, yes, you do
 
@Tiffany probably no, but you can create a new-age cult around it, if you make up a word for it
 
Anonymous
Like 'hepeated'
 
this is going to be fun. so now I need to update all places in the code with the namespace.
 
Anonymous
3:03 PM
20 mins ago, by PeeHaa
@Tiffany Get a proper ide
 
\o
 
fuck me. eval('$object = '.$class.'::load($row);');
I need to add a new argument to this function with namespace... then refactor everything that uses this function
@JayIsTooCommon how is phpstorm not proper?
 
@Tiffany eval. Nice.
 
Anonymous
@Tiffany oh, replacing namespaces should be fairly easy then?
 
@JayIsTooCommon adding namespaces to the code
there weren't any previously
 
Anonymous
3:08 PM
Ohhh I see
 
So, on today's episode of "PHP Failures" we have this gem
4
 
@Machavity It gets better
 
@Dereleased ask the programmer who wrote this code, not me. I'm trying to make it better.
 
@Tiffany well, uh... stop... stop, uh, using it?
 
3:11 PM
@Tiffany You can make that better with gasoline and a match
 
@Tiffany "programmer"
 
@Dereleased I don't know enough yet how to refactor it out
 
@Tiffany Continue using eval, and use PHP only to run C++.
 
3:13 PM
@PeeHaa I'm totally shocked they have SQL injection to boot
 
I wish I could do that, but I would have the entire organization pissed at me because we don't have a website, and we're out the money we paid on this.
 
s/sqli/xss
 
in SO Close Vote Reviewers, Sep 21 at 12:31, by Magisch
There's a metric ton of people working as programmers that can't actually program
 
@Tiffany so, based on how it seems to be used, just... get rid of the eval. It looks like it's used to inject a classname into a static method call... which is unnecessary, because you can just do the static method call on the variable containing the classname, as my 3v4l was meant to demonstrate
$object = $class::load($row);
 
@Dereleased Pretty much
@Tiffany Can't you just use an autoloader?
 
3:14 PM
@Machavity that's what I'm working towards
The code is not namespaced. I'm trying to namespace it so that I can load it through composer.
There is A LOT of work that needs to be done to this code, I'm taking it one step at a time.
 
@Tiffany you should drop the eval first, for realsies. Get rid of any of them you can find. Hunt them relentlessly, mercilessly.
 
but I don't know what to replace them with so that the code works.
 
In my career I have only come across one case where eval actually was the answer, and it was so highly specific, so obscure, I highly doubt I'll come across one ever again
 
@Machavity I've always wanted to do erasmus in mysql_num_rows
 
@Tiffany Start with the one you posted here, replace it with what I sent you a few lines ago
 
3:16 PM
my next project after this is converting mysql functions to PDO
 
@Tiffany A worthy, but arduous, task
 
@Dereleased I want to get the namespaces working first.
 
@Tiffany Are all the classes in one directory? And are they named in some logical fashion?
 
before I do another branch. I don't want to throw another wrench into the mix that may break the code and I don't have any idea of how to properly fix it. It works right now, I'm going to leave it until I can devote the time to fix it.
@Machavity I guess so...
 
@Tiffany sounds like you can use the autoloader right away, and then namespace things individually
 
3:19 PM
You might be able to get an autoloader working even without a namespace then
 
there is already an autoloader in the code
but I want to add the code to composer
which requires namespacing the code
The point I'm at now, I think I have everything namespaced, I'm just working through each error message that Whoops throws at me until the site loads.
 
@Machavity uh, dude, took me 10 seconds I now have their db pass
4
 
@Leigh lol
 
@Leigh wow
 
It's more fun when I don't find anything, ffs, now I have to find a contact email...
 
3:23 PM
@Leigh Also tell them to handle their xss issues too while you are at it
Can I drop their db now?
 
now, I have a question because I need to rewrite a function. And please, before you say something, yes, I know it's using eval. I will fix it eventually. Yes, it is using a mysql_ function, I will fix that eventually. For now I want to get the function working with the rest of the code base so that I cna proceed to the next error message.
 
I already have their "entire" system since @Machavity posted it :P
 
they're really lucky you guys are white hats
 
Who says I am?
 
I am totally not
 
3:26 PM
@Leigh gray hat?
 
I am not any kind of hat
 
My twitter profile clear states I am a Top Hat Hacker
 
:P
 
Anonymous
@Leigh holy shit
 
Now excuse me while I twiddle my moustache
 
3:26 PM
top hat tip
 
Anonymous
also, what a shit password
 
it's not "password" is it?
 
@Tiffany did you get the autoloader working ?
 
@Tiffany Can replace eval with call_user_func_array
 
@tereško I'm still working through error messages.
 
3:27 PM
ah
 
@tereško so far, I think I have everything namespaced, so now I'm just going through and adding the namespaced classes into the code where required.
 
Considering getting a throwaway vpn just to sqlmap
 
i.stack.imgur.com/l5HsV.png @Wes almost self hosted \o/
 
@Julo0sS developer.mozilla.org/en-US/docs/Glossary/Preflight_request /cc @FélixGagnon-Grenier - So your server isn't setting the cors header.....I guess because it's not reaching your code.
 
@Leigh @PeeHaa @JayIsTooCommon I hope one day learn how to do what you guys are doing
 
3:31 PM
You mostly know it too
 
@Leigh I could just do it from the company servers
 
Tip: Think dumber
 
I know how to write a sql injection, but that's about it.
 
dumber, way dumber :)
 
brute force?
 
3:32 PM
Am I the only one who presses the "L" key instead of a semicolon on a QWERTY keyboard?
 
@Tiffany the error message is the clue
 
I just called the entire office over to mock it
we've got some newbies in, and this is the kind of thing they need to be shown
 

Don't put logic in your webroot yo!

Dec 16 '13 at 22:05, 2 minutes total – 16 messages, 5 users, 0 stars

Bookmarked Dec 16 '13 at 22:12 by PeeHaa

 
@Tiffany here's a hint, never embed PHP code in a file which will not be parsed as PHP by the webserver, and also, what @PeeHaa just said above me
So, if you're going to put PHP code in .inc, files, make sure you server parses .inc files with PHP
and don't put your database password somewhere accessible from the webroot under any circumstances
 
No, don't put anything you're including anywhere they can be directly accessed
 
3:35 PM
@Leigh well that would be ideal, yeah
webroots are for images and css files
and JS too I guess whatever
and a single index.php which looks something like <?php require '../bootstrap.php'; exit;
(the exit is just there to show this isn't the top line, it's the only line)
 
lol, I want to say something, but I'm afraid you guys might do something to my site x_x
or someone will because this is searchable
 
personally I like 'application.php', but I'm going with the flow
 
A properly configured web server you don't even need a directly accessible index.php
 
@Dereleased Of all the things I am willing to fight about that one is right at the bottom of the list
:P
Call it George
 
@Tiffany you are not giving enough consideration to how lazy we all are
also, @PeeHaa was bragging about his CMS then
 
@Leigh did you notice the mild humor of this?
$query66 // ... snip
$result66
 
@tereško Little did I know I would use my powers for the advertisement industry back then :D
 
the morale of the story is - dont brag about stuff you dont want people to pay close attention to
 
I'm hoping that it's just someone who really loves the idea of killing a bunch of kids with a plasma sword, not someone who individually, but uncreatively, names all their variables
 
@Tiffany at least it will be parsed as PHP and not echo'd out
 
3:39 PM
@Leigh as long as the server never takes a shit
 
*If the server does what it should do
that ^^
 
it has...
 
webroot$ mv config.php ..
 
and code was displayed... no one caught it but I was embarrassed.
 
What still really annoys me is PDO dumping credentials if you have display errors on for some stupid reason / oversight
 
3:41 PM
and this is why I answer question on SO - it lets me learn from mistakes of other people
 
@Tiffany I give you a bit of a pass because you're actively trying, every day, to get better. There are people who've been "doing this" for 15 years and won't be as good as you are now because they have no interest in trying.
 
^ I have worked with such "senior developers"
 
@Dereleased I work with people like that, which is why I started coming to this chatroom. I needed to surround myself with developers.
 
@Tiffany Dang, and then you got us. Do you feel cheated?
 
:P
 
3:42 PM
No... I've actually fixed shit in the past year. And I have some general ideas of how to make the code better, because you guys make fun of other people's code, so I know what not to do.
 
@Tiffany *looks around*
 
/me goes to play oddworld \o/
 
Wes
@PeeHaa sexy
 
@tereško I turned one away Friday. I just don't get it. And he was the kind of person who refuses to say "I don't know". I don't usually ask Jeopardy-style questions in interviews, but since I'm leaving, someone else was conducting and I was observing. The question was the difference between unset() and unlink()... the bullshit he came up with for unlink(), I think was like making something not a reference anymore? Dude, if you don't know, say so, and I'll respect you more for it.
 
So sexy <3
 
3:46 PM
@Dereleased I've extended part of the code with a feature that was missing. I've written an entirely new feature that works, but I haven't deployed it yet. And I fixed a bug recently that was causing our athletics department to accidentally delete an entire roster for a sport. If I didn't start coming to this chat, I wouldn't have been able to do any of those.
 
@Tiffany All jokes aside, that's the whole point. You seek to better yourself. You're a better programmer than [edit: some] people who've been doing it since you were a child on that simple fact, even if you've shipped fewer things, or can objectively do less right now, because being able to do less won't always be true.
The moment you "know everything", in my mind, you cease to be a programmer, and you are simply a typist.
 
there is always more to learn
 
there's no such thing as "know everything" in this industry, not even close.
 
@salathe there are some people who think they know everything
 
you can possibly "know everything" within a very narrow field, but certainly not "everything"
 
3:49 PM
of course, and there are people who think they're kittens too. :)
 
@salathe oh god, don't remind me
 
too late!
 
lol, I was on a conference call over the weekend with a woman who was going on about how she "has a genius IQ" ...
 
that's how much?
 
@salathe "know everything" was perhaps a mistitling of the condition, try this
The moment you "know enough", you cease to be a programmer, and you are simply a typist.
@Leigh =D
 
3:52 PM
were you able to like...ssh into their server?
sorry
do you want me to delete that?
 
No I lost interest
:)
 
@Dereleased I'm not sure that holds true, perhaps in some cases but it's not a great generalisation.
 
@salathe You don't feel this field is essentially a continuing education?
 
gyazo.com/c76a298d1f1425d51e42e0e910e91d89 I want to remove the title field from that page. display: none works live on page, but I can't find the file which contains the css, so I can make the change permanent. I have changed several css files which contained the code but it still appears when I load the page
 
@Leigh oh fuck now I do too
 
3:54 PM
I have so many files open in phpstorm that it's taking up half of the editor
 
Why you gotta make me so curious
$ fgrep -r .inc public_html | wc -l
3395514
oh. my. god.
 
I'm still trying ot understand how you guys are doing this
 
which part?
 
I guess I need to learn how to hack.
 
@Tiffany Scroll wheel over the tabs. Moves them back and forth
 
3:57 PM
@Dereleased Yes I do, of course it is. However, I don't believe that "knowing enough" makes one a mere "typist".
 
@tereško how they were able to access the directory of the web server and find shit... it's something I want to learn so I can understand how to prevent it
 
@salathe What I mean is, when you decide that you are done learning, you're not a good programmer anymore.
@Tiffany don't expose, or reuse, passwords
 
@Dereleased Then say that. :)
 
the latter is obvious how (not) to do, the former, well, keep stuff out of webroot and keep errors off in production
@salathe I felt it more poetic the other way =/
 

« first day (2536 days earlier)      last day (2409 days later) »