« first day (3700 days earlier)      last day (1244 days later) » 

12:00 AM
Well basically a short term contract would be ideal lol
 
study, work on PHP, play Fire Emblem...
I'm speaking from personal experience, is why I'm saying that
 
@Girgias What would your rates be?
 
Currently it's sleeping, getting trolled by the German embassy, working on PHP, working on some university websites which are killing me
Erf, I don't even know what my rate would be
 
How do you feel about minimum wage? :P
 
I do live in London tho :p So London living wage would probably do it initially tbh
Would need to talk it throught a couple of people because complicated personal situation
 
12:04 AM
Maybe you could offer yourself up as a consultant at some point, means registering with HMRC though
 
@MarkR Huuuh, someone we know is an accountant in the UK, I'll talk with my mum and them to look into that (as they probably would know)
 
@Girgias Aye get freebie advice if you can, hiring a contractor who does a self-assessment is a lot easier than employing someone because of all the BS with having to have pensions etc
 
I can imagine lol also for 6 to 9 months it's probably the easiest
 
cmb
12:20 AM
@Girgias, github.com/php/doc-en/commit/… seems to have been a bad commit; did you mean svn.php.net/viewvc?view=revision&revision=351833?
 
@cmb Online doc editor issues... it was an anonymous patch so I just applied it but I suppose the doc editor decided to swallow that one
This is getting really annoying as to why DoE/SVN just flat out refuses to send some changes
 
pecl/mcrypt is not compatible with PHP version 8.0.0 ・ mcrypt related ・ #80459
 
@jeeves banuser ticket:80459 reason="mcrypt is bad and you should feel bad"
... was a long shot :P
 
@cmb @Girgias and any other docs people, can you give me your opinion on github.com/php/doc-en/pull/255#issuecomment-736183760?
 
12:35 AM
Well the removal of the migration guide doesn't seem likely so dunno
 
cmb
Actually I think we should remove migration guides up to (but not including) 56-70.
Changing oop5 too oop, however, might be a big burden for translators (who are stressed currently anyway).
 
can we instead change it to oops?
 
cmb
lol
 
@cmb do we link void to something now?
Or has that just been dropped (need to fix the French build as we got a void entity)
 
12:52 AM
oh. the segfaults from nightly are now with stable. there goes my release ... . maybe it's xdebug 3.0?
 
@cmb other than revision tags which is something I don't have experience with :/, the change was pretty straightforward.
but I can only speak from the en side of things
 
what happened to SplFixedArray::rewind o_o
did I miss the removal of the iteration stuff?
 
@Tiffany I think if you wait for this to go through in like Jan/Feb when hopefully all PHP 8 stuff has been translated for most translations it should be fine
 
@Girgias just leave it open until then, you think? or should I close it and open a new one later?
 
@makadev SplFixedArray is now IteratorAggregate rather than Iterator. (PHP 8 Changelog), docs are stale on php 7.
 
1:07 AM
@hakre ohh, ok, thx.
 
@makadev 3v4l.org/4dV4k - foreach ftw.
 
ah, that looks even better ye
 
@Tiffany Leave it open I'd say :)
 
alright
 
nice day
 
2:10 AM
Cold day
 
2:47 AM
ODBC doesn't account for SQL_NO_TOTAL indicator, causing segmentation fault ・ ODBC related ・ #80460
 
Have a great day!
 
where the fuck am i supposed to get one of those...
 
@user3942918 with some fuzzy cats who are willing to cuddle, if course :D (assuming you're not allergic and don't hate cats)
s/if course/of course
 
3:02 AM
their willingness to cuddle is the question
 
It's a long-term investment, I admit, but usually the ROI is worth it
 
oh the cats are already there.. maybe if i turn the heat off
 
Plus have to deal with the child and adolescent phase, the latter lasts about two to three years, then they start to mellow out
Yeah, I'm shivering, but one of my cats has firmly planted herself upon me. Though, even in summer she'll give me some cuddles, just not as much as she does in winter
 
3:18 AM
one will stand on my lap, walk back and forth, but never lay down.. he also really really wants me to see his butt
which is flattering in a way but not productive
 
My other cat used to behave similarly, it took several years before he became cuddly, but even then, the furthest he goes is laying in my lap while I'm working or sometimes laying on me while I'm laying down, but they are rare occurrences.
 
 
2 hours later…
Jpv
5:12 AM
Hey Guys, just wanted to see if someone can judge this part of my code.. IDK if this is the most efficient way (if you have any tips, it would be great ). Basically, After reviewing multiple items from a shopping cart, this section determines what type of shipment it will have. Is just bunch of if / else statements.

if($free_domestic_counter > 0 || $will_call_counter > 0){
//We have Free Shpping or Will Call Items
$total_items = count($items);
if($total_items == $free_domestic_counter && $total_items == $will_call_counter){
 
You should create functions out of those if else statements
You should provably read the clean code book by uncle bob.
 
Hello Folks
I am implementing validation of play store receipts.
I am using a package https://github.com/aporat/store-receipt-validator for this

It uses google-purchase-api. I am getting 200 OK response from API but most of the fields in the response are null.

Here is my code snippet:
https://pastebin.com/KT5e0XfN

Here is the response that I'm getting:
https://i.stack.imgur.com/7VA8l.png
Do you have any idea where I am going wrong?
 
Jpv
@SalOrozco I will take a look at that book. Reason why I didn't write it as function (method since is part of my class) is because it is only used once. I kept the counters on the method since is only relevant for that section. This whole object gets triggered only when the customer inputs a zipcode for shipping rates. $label is just a flag to help me determine how many different API calls to the couriers need to make.
 
5:27 AM
Thats a class
humm
it is doing to much
 
Have you worked on google purchase API??
 
Just an api. What is your question
 
I am using that API but not getting the desired response.
 
5:37 AM
Have you tested it with something like postman
 
Jpv
Your code matches to the github sample and you are getting a 200. Do you know what responses you are suppose to be getting?
 
I have to pass in key file and multiple other things, so I haven't tested the API directly through postman
In the purchase API documentation, they have mentioned the response
This is the response that I should get ^^^
 
5:54 AM
DityCeakCamtaip ・ *General Issues ・ #80461
 
@Jeeves expected result matches the actual result.. sorry not a bug
 
 
3 hours later…
8:52 AM
Nullsafe operator tokenize with TOKEN_PARSE flag fails ・ *General Issues ・ #80462
 
9:16 AM
pecl mcrypt compile issues ・ mcrypt related ・ #80463
 
Wes
return call(function() use(*){

PLS
just PLS
 
I just started writing code again
so I am working on a project I wrote years ago
and it seems a nightmare lol
I might consider starting over
 
Wes
ah the good old programmer's groundhog day
 
@Derick As you seem to be the mcrypt maintainer, will there be a release declaring php 8 support (it does support it)?
Just wondering what to tell people in bug reports
 
compile issue with PHP 8 ・ imagick ・ #80464
compile issue with PHP 8 ・ inotify ・ #80465
compile issue with PHP 8 ・ ssh2 ・ #80466
compile issue with PHP 8 ・ svn ・ #80467
 
9:54 AM
Segfault on PHP 7.4 and xDebug 3.0.0 ・ Xdebug ・ #80468
compile issue with PHP 8 ・ xdiff ・ #80469
 
@Jeeves shouldn't all xdebug bugs end up on the xdebug tracker? If so, why is the PECL package in the PHP tracker, to confuse people?
 
Sounds like another question for @Derick. Maybe he can delete the category
 
@NikiC I have forgotten about mcrypt (nor do I really care), but I can update that. I'll also get rid of the Xdebug category if I can.. I'm not sure how it even ended up there? Perhaps imported from PECL packages?
 
Most likely
 
10:16 AM
compile issue with PHP 8 ・ gnupg ・ #80470
 
btw... the package.xml file didn't have me as lead any more, but "leith".
 
10:30 AM
@Sjon I've closed that.
 
@Derick cheers
 
11:03 AM
morns
 
@Derick: If I use pecl to install xdebug and it gives me a segfault at the end of the installation, should I report it in your tracker? I'm doing this on Ubuntu 18.04 LTS w/ the sury packages. And I guess just reporting a segfault is not very helpful, maybe a hint how to better report that.
 
@hakre I think this is a know issue with pecl installer affecting all ext,not only xdebug
and if you use sury, you should probably use xdebug from same repository... (or ask him to add it if missing).... mixing package + build from sources always sounds strange to me...
 
@RemiCollet aren't you building packages from source yourself and having them too? ;)
 
@hakre Yes I build packages (RPM), but I only installed RPM (or build everything from sources, on some other tree, for dev purpose)
 
for the xdebug (I assume) segfault I now also see them when running phpt tests within phpunit (it shells php out to run phpt files) at the very end of the php execution. but this is also cumbersome to report I guess.
is it better for people to get donations via patreon or via github? or does it depend where someone is located? - maybe anyone knows.
 
11:24 AM
I think patreon takes a fee of some percent (5%?) and github sponsors doesn't. Not sure tho, or wether you get a recipe
 
@Derick can probably say, he does both
obviously also depends on country, as each tax office has their own definition of what works and what not
as a german sponsor, github is better because its just on the regular receipt as if I buy other github resources, patreons VAT invoice is a bit lacking for the german tax office.
from a receiving perspective, i don't know
 
@beberlei Oh, good to know. Getting a valid recipe from american services is always so much trouble.
 
yeah, maddening
 
lovely
 
12:08 PM
Morning
 
Morning Everyone
Morning @Stephen
 
hey
 
@Stephen so I was thinking about the problem yesterday. Maybe it is reading the CA cert but maybe it isn't reading the local server cert?
Which is why it is saying can't read local cert
 
12:24 PM
given that the exact same error was replicated, and then solved by specifying -CACertfile to openssl s_client, I'd be very surprised if it's not an issue of some kind with the ca cert.
 
plus there's probably no difference, usually the server cert and the CA chain are included in the same local file
you should throw the file contents into an X.509 decoder and inspect the certificate details
 
there is no chain, to speak of. it's an AD DC, which is also acting as CA
 
oh right, so then there is no difference? the server cert is the CA cert?
or the server has a CA cert that has been used to issue a host cert?
 
no I believe it's generated a cert from the ca
 
(which is the correct way to do it)
@Stephen @JukEboX I bet the file isn't in PEM format, if it was produced on windows...
 
12:27 PM
@DaveRandom yes I exported the CA cert and it is from the CA
@DaveRandom I used openSSL to convert it to Pem
still the same error
 
s_client will connect to the service and verify OK, if the exported ca cert is given with -CACertfile
 
that's to be expected, openssl won't trust the server CA cert automagically
 
but ldap connections with the same CA file set (either using the 7.1+ options, or via the old putenv() trick) fail, with the same error s_client gave when it didn't have the ca cert specified
 
PHP on windows will, if the cert is in the windows trust store
 
hang on, I think we're crossing wires here.
without the CA cert specified, both s_client and php/ldap fail, as expected.
 
12:30 PM
@makadev probably "receipt", but still I agree. Americans use too much cheese and/or cinnamon also.
 
with the CA cert specified, s_client connects fine, as expected.
php/ldap with the ca cert specified still fails, as if it has no ca cert specified
 
it's the client verification of the cert that's failing, surely?
because openssl does not trust the CA cert that was used to issue the client cert
 
....
define client.
 
^^^
 
s_client, any TLS client
 
12:32 PM
s_client works when the CA cert is specified
 
PHP ldap ext is being a TLS client
 
just as you'd expect
 
@Stephen yeh, exactly
 
right, but when the CA cert is specified for php/ldap
it does not work
 
so you need to specify the CA cert to be trusted by openssl when it is invoked by the ldap ext
@Stephen ohhh
 
12:33 PM
yeah
and as I said
 
I don't even know how you specify it for ext/ldap
 
there are two ways
an old putenv trick
 
well that's horrid
 
and in 7.1+ there's a constant for ldap_set_option
neither works
 
ok
so
there is a 3rd way, I think
 
12:34 PM
@JukEboX can you try it from the CLI rather than via the web server.
yeah apparently you can set an option in an ldap conf file too
 
because openssl is openssl, it will always try and open it's default openssl.conf as an absolute path
@Stephen I think you can probably circumvent ldap and just plug into openssl
bearing in mind that ext/ldap is still just using openssl underneath
 
@Stephen not sure how to do it with Cli
 
@JukEboX also, what @DaveRandom mentioned before is a good tip too: try adding the CA cert to the windows cert store, might help too
 
you'd have to crack out procmon.exe and watch for the path of the file it's looking for though
I can't think of another way
@Stephen yeh if this hasn't been done it definitely should be regardless of this problem @JukEboX
 
@JukEboX put that block of php we've been fiddling with into a file on it's own (if it isn't already) and just invoke it via php.exe
 
12:36 PM
although also remember, you need to protect that CA cert if you are going to implicitly trust any cert issued by it!!!
 
@Danack but cheeeeeeeeeeeese
 
ok wowowowow . You got me all confused now
 
@DaveRandom surely you mean protect the key for the CA cert.
 
sorry yes that
 
@Tiffany yeah, but huge amounts of obesity in your country.
 
12:37 PM
@JukEboX the easiest thing to try first, is to add the CA cert to the certificate store for the machine php is running on
im sorry I forgot if it's the same machine or not.
 
@Stephen ok
@Stephen the DC and teh Web server are different servers
 
right. is the web server joined to the domain? I'd have thought it would automatically trust the DC's CA
 
@Stephen ...I really wish PHP had an abstraction to enable the use of schannel on windows instead of openssl, it would make all this shit so much easier :-/
 
@Stephen yes it is joined to the domain
 
@DaveRandom I generally just wish to not deal with windows
 
12:39 PM
it should receive the DC's cert via GPO, yes
 
but I was dug into helping @JukEboX before I realised it was windows both ends :P
 
LOL sorry. Didn't realize you guys all mainly live in linux. I live in windows
 
@Stephen indeed, windows lead to outside and I do not trust the outside
@JukEboX I also live in windows, ftr
not with PHP, because that would be insane
 
ok so the cert is in the local store on teh web server
 
the CA cert is in the "Trusted Root Certificate Authorities" store?
it has to be in the right store or it won't play the game
 
12:42 PM
oh shoot I put it in personal. one sece
 
@DaveRandom and then you'll end up hating the player. or.. the game. I forget.
 
it's windows, everyone hates everyone
 
ftr re: windows/linux, I only "live" in linux for servers.
 
Ok it is in the store now
 
but I also don't live in windows for desktop, so I'm flying blind here either way :P
@JukEboX ok, can you try the openssl s_client command again from yesterday, without the -CACertfile flag this time?
 
12:44 PM
sure
verify erro:num-21 unable to verify the first certificate
 
can you add -debug to the command before the -connect part, and run it again
 
sure '
ok so Verify depth is 2
connected (00000184)
then a long pile of wirte to .......
near the ned is the unabel to verify the first certificate
 
does it have a section that says 'Certificate chain'
 
It does
0 s:CN = DC.DOMAIN.NET
i:DC = NET, DC = DOMAIN, CN = DOMAIN-DC-CA
 
@beberlei good to know. thx for sharing.
 
12:53 PM
and then below that does it have the 'server certificate' part?
should be the base64 encoded blob, and then subject and issuer lines.
 
yes it does. BEGIN CERT ---> END CERT
 
after end cert is there a subject and issuer line?
 
subject=CN = DC.DOMAIN.NET
issuer=DC = NET, DC = DOMAIN, CM = DOMAIN-DC-CA
 
ok so weird, it seems like it is using the root ca cert for AD.
 
that's not uncommon
 
1:00 PM
odd that s_client connected OK yesterday when we told it to use the cert file as the CACert
 
it's not the best way to do it, but it's very common in single-server domains (and domains that started off as single server and then snowballed)
 
@DaveRandom it is not single server domain.
 
no but I'm guessing it's a fairly old domain that has been added to over time
the usual culprit for CA cert abuse is that the domain started off with small business server
anyway, not useful for solving your current problem :-P
 
Not really. I rebuilt the domain maybe 2 years ago in Windows 2016
 
oh huh, and that's the way AD built itself??
in any case this isn't going to help solve the problem, because the problem (afaict) is that openssl is not loading the CA cert when it is invoked my openldap
 
1:03 PM
Domain started with 2 DCs.
 
it's irrelevant which cert it is, we just need to figure out how to get it to load a cert
 
on the PDC i installed teh AD CA because I have other software that uses the CA
 
who added the new option in 7.1?
if it was a #11 regular, they would be the person to talk to I guess
 
????
 
¿¿¿¿
 
1:07 PM
ctags: Warning: ignoring null tag in ./opengrok/.../PHP-8.0/ext/standard/tests/general_functions/bug49692.ini (lines 3, 4)
that's a bit meh, but, now we have the 8.0 branch on heap.space
 
@DaveRandom the response above indicates that even s_client isn't accepting the cert if it's in the cert store
 
@Stephen I wouldn't expect it to, openssl doesn't interact with the cert store
PHP streams do, but that's a custom impl
 
OHH
well shit.
 
yeh, hence the schannel comment earlier :-P
 
I misunderstood you as saying that openssl will trust certs in the cert store
 
1:09 PM
it will for streams, and some exts hook into streams for their SSL comms (e.g. SOAP)
 
So it is ignoring the cert store all togther
 
@JukEboX well openssl is
but @DaveRandom is saying some parts of php will use it
 
if you watch what php.exe is doing when you try to initiate the connection, you will see it a CreateFile syscall attempting to open a file called openssl.conf somewhere on the machine
if you go and create that file and specify the CA trust store path in there, you can bypass openldap entirely and just manipulate the underlying openssl behaviour
I think
that's the way to do it, because that also affect stuff like curl
 
@Trowski no, that's still not anywhere near noddy enough. The other one you linked at: gist.github.com/trowski/ac90817f7000e0ae7bab41320e224172 is better, but there's still stuff that to me is magic incantation that I can't understand. Some of it might be down to the names of the methods being appropriate for your use case, but wrong for the fiber api level.
 
@DaveRandom so how do I start testing this? you going farther than i have
 
1:13 PM
I've tried to modify it to be slightly more understandable, but failed: gist.github.com/Danack/f89afc0e84763e86666a2e8a7a0fe34d How about having a call at some point to talk about this....as I said before, I think the fiber stuff needs to be at least partially usable by people who don't have multiple years writing a concurrency framework, even if that's not the main way people will use it.
 
@JukEboX procmon.exe is your friend :-P
it's kind of extreme, I admit
I would also consider finding out who added the option to ext/dap and seeing if you can track them down to see if they have any advice
since they presumably at least roughly understand how it works
although it's also possible that they didn't really consider windows
 
what do you mean who added ext/dap
This is my network. i did all the work
 
sorry typo, I mean ext/ldap
the PHP LDAP extension
 
@Danack ah yes, receipt, thx. A recipe might not be sooo relevant for taxing.
 
@DaveRandom oh. The ext/ldap is all installed with XAMPP. I am running everything through XAMPP
 
1:17 PM
@makadev unless you're trying to curry favour with your accountant. ba-dum-tish.
 
I mean find out who added the new option in 7.1 that allows you to specify a certificate
because presumably whoever added that also tested their code
and may know how to make it work right
 
Noone added it. All i did was install XAMPP and have been running everythign fine until we upgraded seceurity stance. Since then my old code doesn't work because according to ldap it needs to be more security
Which lead me to write this question stackoverflow.com/questions/64972504/…
 
45 mins ago, by Stephen
and in 7.1+ there's a constant for ldap_set_option
^ find out who added that constant in 7.1
and/or look at the unit tests surrounding that change
 
Like the developer who did it?
 
yeh, look at the commit history in php-src
 
1:21 PM
Oh jeez
 
there's a decent chance that whoever did it is someone who is sometimes in here
there might have been an RFC actually, I recall some additional ldap_ functions being added around that time, it may be part of the same rfc
 
rfc?
 
sorry lol :-P
hang on give me a few mins I need to do some real work then I will investigate
 
Ok Cool. Because your now over my head. I acan code the PHP but certs I am still learning
 
Chad Sikorra added the constants: github.com/php/php-src/commit/…
 
1:23 PM
welp, never seen that name before :-P
are there tests though?
 
lol
there's a test that setting a dummy value returns bool true
it's a classy test.
 
> #if (LDAP_API_VERSION > 2000)
does the option definitely actually exist? it's got that guard round it
 
Gotta step away for 5 minutes. Phone call. brb
 
@Danack Nice one, also I'm kind of impressed that this is actually an idiom which has nothing todo with curry or favor but instead with grooming horses. Kind of missleading for non-native speakers. ;)
 
@DaveRandom assuming that it's built against openldap, then almost certainly yes.
for reference, API version 2005 happened around 17 years ago.
 
1:34 PM
I mean... windows...
but yeh :-P
 
and actually so did v3001
however that's if its built against openldap
most of the ifdefs check for api version OR oracle ldap or ns (Netscape?) ldap
it can't be netscape
oh wow xampp is using source forge.
its like a blast from the past using another blast from the past
 
cmb
@DaveRandom see windows.php.net/#news-2019-10-08-1 for "official" Win builds (I think XAMPP uses these)
 
I don't have easy access to an AD server that doesn't belong to a customer, can't really test random shit from the internet against customer's live stuff :-P
 
@DaveRandom that's defeatist talk
 
not a 2016 domain anyway
@Stephen I would be lying if I said I hadn't tested my own shit against customers things before but this seems like a step too far :-P
 
Wes
1:45 PM
@PeeHaa sorta making progresses. except not really, api is a clusterf....
i mean surely there's a reason for everything but it's not explained anywhere
 
@DaveRandom @Stephen back
@DaveRandom let me know what to test and I would try it. the whole network is mine and I have smaller ones ini it to play wiht :)
hmmm that reminds me..... le tme try a couple more things
 
it's not about the network I don't think, it's about the software
specifically it's about telling openssl where to look for the CA cert
however it's openssl via openldap, which makes it more complicated
 
I did stumble accords the Open SSL READMe yesterday
 
those LDAP_OPT_X_TLS_* options are just passing through the equivalent options to openssl, presumably
they certainly map 1:1 on to openssl options
 
IDK if XAMPP is using OpenLDAP
 
1:50 PM
it is
 
I did have to enable the openSSL extension the other day to get the thing to run
 
the PHP LDAP extension is based on it
well there is another lib you can use iirc but the APIs are compatible
(I might be thinking of something else as well)
 
I am still in the middle of the security implementation. The DC has had it done. The Web server hasn't. Maybe I should put that one through the process and see if that will work
 
... just to add to the wtf. dealing with a third party dumpster fire. somehow it managed to break a mysql index, so that a simple foo = 'value' query was returning obviously wrong results.
 
I guess another point would that you probably don't need TLS to communicate with a server on the same subnet...
 
1:57 PM
WTF?>
@Stephen they dropped their index colum?
 
@DaveRandom AD will severely limit what you can do over LDAP if you dont connect via SSL/TLS
 
ah, right
 
@JukEboX no it had an index. but somehow it got screwed up. dropping and re-adding the index fixed it, but it's a very bizarre problem
 
it's a long time since I had any of these problems... I don't miss them :-P
 
@DaveRandom sorry to dig up old memories but this new security stance killled one of our important tools that we are using to expand to other things and i need to get this fixed
This stronger connection issue I never figured woudl be such and issue
 
1:59 PM
@Stephen one of the things about a tree... all it takes it one wrong pointer near the root and suddenly nothing makes sense at the leaves
 

« first day (3700 days earlier)      last day (1244 days later) »