« first day (902 days earlier)      last day (4271 days later) » 

18:00
500 is true anyway...
btw... is it really safe to trust php with corect operator precedence?
i mean do a (1+2*5-8)
without my father's parens...
@kaᵠ while(500) sill does not make sense to me
500 is true
Hello everyonr. Can anyone guide me to create a secure login script for a website ?
18:01
the while works with an if() pretty much @Baba and an if() will spit true for anything that's set
while (false) or while (NULL) will not enter the loop
while ("loop 10 times") { code(); } will loop 4ever
@kaᵠ just curios why while (500) instead of while(true)
well that makes no sense indeed, while (1) or (true) or (1==1) etc would make more sense
@kaᵠ correct ..
but since you know that the while works on a bool condition, and anything you put there will be converted to a bool, you can obsfucate to whatever you want
@Baba just for fun, or to mess with untrained programmers, or ...
@kaᵠ oh ok
18:10
I may move up 5 spots tonight in the rep league... From #375...
@Baba this one's nice too: while (@$true) and true is not define, false or null
@ircmaxell how'd you figure that?
@kaᵠ you might be unlucky if $true is accidentally defined
@Baba well.. you get my drift...
	$array = array("true"=>"nice","false"=>"not nice");
	extract($array); // now  you are in trouble
	while(@$true)
	{
		// lol
	}
18:16
hahaha, yeah well... while(@$databaseConnection) as the first line in the code....
@ircmaxell you could do 9-10 spots if you try... 5's gonna be by default :P
well, depending on how much others move up
I've been that number for a while
wb
wb @hakre
@ircmaxell was just about to ask you if you saw the guys in 5 places before you as inactive today....
it's friday :)
@ircmaxell puh, just in top 200 :) @ #199
@hakre seems the rocket-science fell on me, and I thought you slapped him a bit harder than me. Woke up with 8 of my posts almost vandalized..
18:24
@kaᵠ what happened? your posts were attacked by that rocket science guy?
his account got suspended, seems @crypticツ was the reviewer on one of his vandalize edits on my posts and notified Gordon
and.. @Gordon was right.. again... don't play with idiots... they gonna drag you down to their level and beat you with experience
but just seemed like a good thing to do
@kaᵠ he also vandalized some other people's posts, which I think was to maybe rub off any suspicion that he was targeting you, but still his edits were basically removing the entire post and saying the function is not useful for everybody.
@crypticツ in his first edit comment to me it was clear that's revenge...
anyway... need to polish my 'what have you tried?' commenting style if i'm gonna ever engage into that s#!t again
What happened that caused the quarrel?
someone posted the question as a 'maybe cv but not really'
18:33
@hakre Nice 'badge' on the avatar :]
@webarto was so sweet and made it especially for me :)
@crypticツ i posted a comment "what have you tried, whet went wrong?" and then hell broke loose, he was being a total d!ck, and attacked anyone commenting on his Q, he just wanted the sollution because 'it's not rocket science'
♡♡♡ love, hugs and kisses @webbarto ♡♡♡
6
@hakre oldies but goodies :))
92 mix is better
18:36
@kaᵠ I'm guessing mods deleted the comments right?
@crypticツ pretty fast, i guess the red alarm was lighting the mod bunker
@crypticツ he basically has the Q like so: "here is upload script, here is watermark script, someone make it work"
@kaᵠ yes gordon is really a sane guy. I'm glad he got enmoderatored.
I just drew a diagram
0
A: auto login by requesting security token

ircmaxellThere are two layers of defense that you need to prevent this style of attack. The first is to use SSL to prevent attackers off-system from intercepting the transmission and getting the token. It sounds like you may already doing this potentially (referrers are always blank from SSL enabled page...

recap of my day: breakfast. about two hours of flag handling. 15 minutes trying to figure out how to open the Raspberry Pi casing. hurting myself in the process. 3 hours wondering why the SD card reader in my x220 doesnt work before I realized it was turned off in BIOS. But learned many linux commands. 1 hour trying to make raspbmc do the first time update w\out wired connection before connecting it to wire but not monitor. rest: fiddling with it only to somehow break the audio. yay!
18:41
@crypticツ lol
In the context of the question I keep reading <battleRifle><battleRifle>Bracketworks 29 secs ago
well, it got me because i knew some people calling themselves programmers who took code from all over the web, tweak it if was too simple and if not, go into asking real programmers on all forums then say they did it (and some charge money for that)
@Gordon rasPi with a case? i knew you buy the board only...
@ircmaxell hand-drawn?
I usually use asciiflow.com for that kind of stuff
2
0
Q: XSS MySQL Database Accessible?

PamelaI'd like to know if there is any danger of someone being able to access the database via XSS vulnerabilities on this page (or SQLI or any other vulnerability I may have here without realizing it). I have the following link. When you go to this link, the text I've enclosed as code displays on the...

@igorw you cunning bast***. That is frigging awesome!!! bookmarked
@igorw yes
18:44
@ircmaxell there are some nice 'NFO editors' for ascii art
@igorw AWESOME!
@kaᵠ yes, it's a transparent casing with a wall mount
stackoverflow.com/questions/15838040/… Out of close votes. Waiting to receive my magical extra vote =o(
:)
18:47
hi
@Gordon I vote for @crypticツ to receive 10-20 CV's when she runs out and request them
@kaᵠ unfortunately I do not have magical bestow vote capabilities :(
@Gordon do you get more 'votes' at 10k rep?
@kaᵠ not that I know of
you get unlimited votes when you become a mod though
18:56
Anyone know much about XML schema, specifically key/keyref?
I've cast 1,333 close votes in ~5 months at this rate I'll hit ~2,400 by my Yearling mark. I need more votes =o(
@crypticツ If you don't stop at 1,337 then you aren't cool.
;)
at least take a picture
@Gordon It seems even the Stack Overlords have limits.
. . . I don't even:
0
Q: php: different between array( ) and { }

Mariowhat's the different between Array ( [user_id] => 1 [username] => user [first_name] => hello [last_name] => world ) and { user_id: "1", username:"user", first_name:"hello", last_name:"world" } ? and how to convert them in php? Thx

@LeviMorrison close voted
19:14
jsonp, jsonc, jsonw ??
@Gordon those xbmc folks are sure quite crazy. the have ported the whole app on arm in quite a speedy time.
it was ported to ARM a while back
and, they didnt really need to write much since its all built on top of existing libraries such as SDL and glibc which already exist for ARM
Whats quicker getting info from database or reading a file?
depends on how you do it
also, getting info from a database IS reading a file
@bizzehdee ok, sooo..
19:17
@bizzehdee well it was not all done.
@hakre, xbmc is an app, same as any other app, it relies on api's that the OS and other libraries provide, as long as the OS and those libraries exist, the source is more or less the same
@hakre it took me less time to break it :)
Man, the answer requirements for tag badges suck
I am missing 1 silver and like 6 bronze because of it
is it possible to load a remote image and then extract its contents via JS?
extract its contents? as in like get a string representing the binary data?
19:21
yeah, using canvas or whatnot
what do you mean "using canvas"? what are you trying to do, I'm not sure what you're getting at?
4
Q: Convert an image into binary data in javascript

Manoj Kumar Possible Duplicates: Get image data in Javascript? How to encode image data within an HTML file? Is there any way to convert an image to binary data in javascript and vice versa.

apparently it is
I'm just wondering about the security implications. if there is some authenticated content that has an easily guessable URL, could I CSRF someone into loading that image?
that content being an image in this case, but may also apply to audio/video
anyone know if rasPi does hardware h.264 decoding for common video encodings? It was supporting 1 .264 version a while back and decoding others would be done by software which it sucks as it can't really handle 1080p
like a captcha?
19:24
I was thinking maybe a generated avatar at a common URL
@igorw Yes, that sounds quite possible...
@kaᵠ afaik it handles 1080p just fine. the bigger problem is when you try to use DTS and 1080p together which is why you want to force the audio the receiver
but it wouldn't be strictly CSRF, but cross-origin data access
@kaᵠ, yeah, the v2 supports most 264 on hardware. from what i have seen, it can play x264 from an mkv in full 1080p at 30fps
19:25
"oh hi there random user, so that's what you look like on facebook"
well, it would be a non-destructive CSRF, but you're still abusing the user's browser and his session to do stuff
im just waiting for my sd card and my hdmi to dvi converter to show on monday to boot up my new ras pi
@igorw Oh definitely... And it sounds like a valid issue. Especially for phishing
@bizzehdee that's great news, now it makes sense as a tv-box
Is it possible to "run" a PHP file via .htaccess and if the file return true then allow access to the directory?
@Gordon you got a v2 also i guess (latest version?)
@doitlikejustin i think you're doing it wrong
19:29
@kaᵠ, thats what mine is going to be, powered from an old phone charger, booting xbmc, 1tb usb drive plugged in to it with an ethernet connection, hidden behind my tv. makes it an ideal media server and media player
@bizzehdee think about an usb-ssd drive against ruining a big usb drive, usb dies after enough RW
@kaᵠ i have no clue tbh.
@kaᵠ: its a 2.5" 5400 usb drive, not a usb flash drive
sata inside a usb enclosure
@kaᵠ ok what am I doing wrong?
@Gordon i guess you should be able to check, since you opened the box, you should read somewhere on the board/chips some versions
19:31
please elaborate
pce
pce
@doitlikejustin what does apache know, what for example $_SESSION doesn't need to know?
@pce ping :)
pce
pce
@hakre pong :D
That's an angry -1 from me. Voting to close outside the review queue is a review task (in the sense that you are reviewing content), the only difference with the "normal" review tasks is that it's thankless. Even if this was a ploy to get the badges, so what? It's about time we give a badge to close voters, we give badges for everything these days. Visit an election page, get a badge. Visit the about page, get a badge. Close a question, and all you can hope to get is someone raging at you in comments or Meta. — Yannis 4 mins ago
19:33
hmmn
@doitlikejustin serve the user the index.php if it does 'true' serve the files in the directory
something i have noticed today.. i used to hate eclipse, recently, i have come to "i dont mind eclipse", now, im starting to like it a little bit. even more so now since it comes with xdebug support for debugging php
@pce and @kaᵠ what I am trying to do is allow access to a file outside of the WordPress system files. If I include the "require(wp-load.php)" the software I am trying to "authenticate" breaks. It is in it's own folder as well. Essentially I want to block access to ALL files in a subfolder unless a WordPress user is logged in.
Does anybody here have experience using Guzzle to execute http requests in parallel?
I'm having some issues using EntityBodyDecorators.
@doitlikejustin var_dump($_SESSION)
19:42
@dontlikejustin if(!is_current_user_logged_in() && in_array(__DIR__, $protectedDirs)) { // do something wordpressy, like redirect with no msg to usr, return a Status: 747 msg, or other}
then just define a global list of protected directories in wp_settings
@Gordon +infinity
@hakre <3
Is anyone speaking/attending at ZendCon?
Yes, there are lots of people going and speaking
I will not be doing either
@ircmaxell I meant, anyone from here, like you :)
19:45
just wrote this: $head=implode('',$head); :))
@doitlikejustin please see: wordpress.stackexchange.com/questions/37144/… - you might need to extend the .htaccess file to proxy other dirs, too
@kaᵠ I get array(0) { } when I do a var_dump even when the user is logged in
anyone good with php and mysql interactions?
@doitlikejustin session_start()
19:48
@kaᵠ did that
plugin not working
@dyelawn that would work in theory but the scripts I am using conflict with the wordpress core files so I can't include functions on that page
@ChrisBogausch In what capacity?
@ChrisForrence I started a post, got some help, but never got an answer. Wanna take a peek?
19:53
well that's a bummer; too bad that info about a user being logged in is only available in Wordpress functions
So what do you guys think of the news about Mozilla and Chrome putting out brand new engines? I'm slightly horrified, still trying to come to terms with it. Like stage -1 in the 7 stages of grief.
@ChrisBogausch - Cannot update MySQL from php?
@ChrisForrence you got it.
Chris trifecta going on here.
19:55
@Chris: mozilla are sticking with gecko, chrome and opera are using a new engine, and by new, they mean they are forking webkit so they can change its licence and move away from apple
@bizzehdee According to what I've read, Mozilla is going to move to a new engine written in Rust (new language at version 0.6, in development with Eich & others)
@Chris, link?
@ChrisBogausch Eyi...hrm. Is there a user with user_id of 1?
So now we'll have Safari on WebKit2, Chrome and Opera on Blink, Firefox on Servo, and IE on Trident (still, right?). Meaning instead of designing three sites -- mobile, compliant, IE; now we get to do it 6 or 7 times! Hurray?
19:59
hmmn, never thought mozilla would abandon the terribleness that is gheko
PLUS, it remains to be seen if other vendors will stick with WebKit1 proprietary browsers, or conceivably even a Gecko-based proprietary one
@Chris more mind-numbing, soul-crushing billable hours for me, hooray!
@bizzehdee No kidding, but I'm skeptical about an engine written in a language that doesn't even exist yet. How mature could that possibly be?
Yeah, there is. I got the insert to wor
work, just not update
AND, what about Google's Dart?
20:03
@chris, i assume the language will evolve to allow the implementation of features that currently cannot due to language limitations
pce
pce
@hakre drifting <miles> away ...
@pce yeah that one bumps more.
@bizzehdee I'm sure they'll get there, it is Eich after all. Still skeptical. In 10 years it won't matter, but an epic pain in the ass in the mean time.
there must be a ten hour eurodance mix on youtube somewhere I'm pretty sure
20:05
Chrome is going to keep using -webkit- prefixes, that's positive at least. Won't have broken websites for the lack of -chrome prefixes in old CSS
pce
pce
<ironic>i stick with HTML3.2 and don't care about vendors</ironic>
7
@ChrisBogausch - Among other things, your <input type="submit"> is missing a name, so when submitting, $_POST['submit'] is probably missing.
@pce actually loved HTML 3.2. That was a release!
@ChrisForrence hmm, didnt think that would make a differance, but ill try that quick and let you know!
What nowadays happens with HTML 5 is somewhat sad compared back.
Does Adobe CS 14 kick ass like amica paint 2? not rly.
I'm somewhat having a retro trip now.
20:12
I think I live in a perpetual retro trip. I both fear and loathe all change.
4
Guys, I have a problem with Zend & Doctrine. I can't get the PersistentObject running from Doctrine.
I found a brand new education video series on Youtube I was not aware of so far:
@dyelawn lol, Status: HTTP/1.1 747 Baggage Claim
pce
pce
@hakre In computer science, ACID (Atomicity, Consistency, Isolation, Durability) is a set of properties that guarantee that database transactions are processed reliably. (via en.wikipedia.org/wiki/ACID)
this is so funny:
20:21
0
Q: A user ragequit after bountying me all his rep, and I'm kind of creeped out by it

CharlesMy aggressive tag editing has disturbed people before, but this is a new one. Last week, a 1.5k rep user created a horribly generic tag name, so I nuked it. There was a brief back-and-forth in the comments on the question, now deleted. tl;dr: Dude, if you're gonna talk about search in Android,...

o_O
Well, FWIW that's a pretty awesome question title.
I aim to please.
> I'm a proud member of the New Tag Deletionist Cabal.
probably that user visited your profile page?
@Bracketworks it's TL;DR
@salathe IDGAF
BBQ
20:28
@Bracketworks fair enough
here comes a question from the pschological department: How can you say a sentence is long and then say you didn't read it? Doesn't obtaining the length mean you must have read it already?
@salathe I was just playing the initialism game ;)
@hakre I don't think you understand the concept of TL;DR
@salathe enlighten me please
@hakre strlen($string, &$heres_the_string_by_the_way_i_read_it_for_you);
20:30
Someone could read "A user ragequit after bountying me.... <got bored here>" and say it's too long and they didn't read it. :)
Is that what you meant?
@ChrisBogausch Any luck?
Or they could see the length of the title and think, "fuck that!"
@salathe I'm pretty sure the sentence then has been already read.
@hakre only partially
20:32
@ChrisForrence no luck yet, I'm trying a few other things. I'm in contact with one of my college professors and he's taking a look also. Ill let you know what we come up with.
@salathe well the level of consciousness
I wouldn't say I read Moby Dick after reading the first page :P
lol, seeing isn't reading!
@salathe you TL;DR'ed Moby Dick then ;)
@hakre I did! :)
@salathe I have it in the other in a bookshelf
20:37
0
Q: Allow "title" attribute in allowed html <tags>

ka ᵠtitle is a Global HTML Attribute applicable to any HTML <tag> with the purpose of adding some 'extra information' to the contents of that tag. When used it's rendered as a tooltip with the contents provided for it's value. As per the answer here the title attribute is allowed only for <a> and <img>

But it didn't read it yet. at least not fully.
20:48
This... is probably the stupidest thing I've seen in Stack Exchange. Everyone in the whole site just got a little bit dumber for having read that. — Madara Uchiha 32 secs ago
Hi everyone.
Could someone help me sort an array at all...?
Good evening
@Dan What do you need to do and what have you tried so far?
This are the first three key/values;
Array
(
[0] => Array
(
[0] => 59
[1] => Bookcases
)

[1] => Array
(
[0] => 145
[1] => Cabinets
)

[2] => Array
(
[0] => 145
[1] => Missing post
)
I need it alphabetically sorting by the second key of each array.
And this is what I've been working with;
20:55
@MadaraUchiha
function alphabetical_sort($a, $b) {
return $a[1] - $b[1];
}
usort($title_array, 'alphabetical_sort');
@ircmaxell Although the guys on mod chat came up with this, I'd be surprised if you don't know it already
1278
Q: Our security auditor is an idiot. How do I give him the information he wants?

samA security auditor for our servers has demanded the following within two weeks: A list of current usernames and plain-text passwords for all user accounts on all servers A list of all password changes for the past six months, again in plain-text A list of "every file added to the server from re...

As an accepted challenge to my comment of the stupidest thing on the site :D
I saw that
I mean seriously, a list of plain-text passwords?
Just being able to produce them proves your security has holes in it.

« first day (902 days earlier)      last day (4271 days later) »