@LeviMorrison thanks for sharing that link on the side btw to the codecademy php tutorial. I've been looking at their python tutorial for a long time deciding on when to take the jump off the cliff... however I am still on the cliff (aka what we call PHP) :D
Well said teresko. I always use my bilingual abilities to sum up programming languages. If you can say it one language (English) then the only thing that changes is the word pronunciation (syntax) for when saying the same thing in Albanian (in my scenario)
Both get the same message out just one does it differently.
@RixhersAjazi the issue happens when the password contains an & in a specific location the XSS filtering regex will incorrectly think it is part of an entity and do its crap sanitizing.
and I wouldn't call it crap sanitizing :P... better then nothing, but none the less the way I see it, defense in this case is more then just a global filter if you will. Filter/Validate and Escaping should be taken into consideration with user submitted data.
CI has crap sanitizing, a lot of things get by, it essentially does blacklisting for the most part. Viewing /system/core/Security.php show how it is crap crap crap =oP
I should extend it eventually, but on the fly right now.
@RixhersAjazi you're an info security major? I was majoring in that until my sophomore year and switched. Didn't like the job security that came with it. You can try to convince management to do something one way and they don't listen due to budget reasons, ego, etc and when shit happens like being breached, who is blamed? =oP
Now I'm an Environmental major, so I get to save the planet instead of executive's wallets =oD
Hey guys so I was wondering if I could do something like this: $sql = "SELECT username,firstname,lastname,email,phone,status,statuschangedate FROM csvdata WHERE memberview = :username AND (username =:value OR firstname =:value OR lastname =:value OR email =:value OR phone =:value OR status =:value OR statuschangedate =:value) ORDER BY DATEDIFF(statuschangedate,:date) OR SELECT MailAdrs from insuranceverification ......";
@iroegbu So I could use the join to put a result list of both list?...I will need to make sure if it finds results it is for a specific user and not someone else
@crypticツ Yep I'm an Info Sec guy. It all depends if ya ask me. I don't want to work for sleezy low life a-holes who careless about the protection of users/clients. I actually want to make myself feel good by using my degree to work for the .gov
Lol nnnnnnaaaaaaaaaaa xD I rather catch sex offenders, gather evidence against criminals and such. D.O.D is always highering (100K+ starting depending on pay grade)
You're definitely right but autoloading functions is a much bigger problem. Fixing the namespacing issue feels like slapping a band-aid on a scratch while you have a gaping hole in your face (IMO).
actually, for functions imported like this, you could trivially add autoloading (well, perhaps not trivially, but without the major issues plaguing the normal autoloading)
then again, rather than going through all that bullshit. Why not just fix the f#%()*&% system in the first place and deal with it once
user895378
woah woah woah. There goes @ircmaxell bringing logic to PHP again.
I offered money cause I believe it's more than fair give money to a person that helped me solving a problem. It's really fair. I cant see it other way.
I do not think that anybody here should work for free. NOBODY must work for free since everybody has a great knowledge and I respect that and I...
@igorw ok so I've watched The Mother of All Demos, and it is the bee's knees. But I've been considering the context of your link all day. How is that related to the "smarter people have solved these problems..." lead-in?
This question arose from comments about different kinds of progress in computing over the last 50 years or so.
I was asked by some of the other participants to raise it as a question to the whole forum.
The basic idea here is not to bash the current state of things but to try to understand some...
@igorw definitely clarifies, thanks :) In line with what I was thinking, too. I came up with much cooler ideas when I had little to no concern for implementing the ideas.
I've got 2 large PHP arrays, ISO languages and ISO countries. Instead of using global which I won't, how can I access the arrays from inside the function without passing it via the function call or putting them inside the function?
@crypticツ imo a function argument would be the cleanest solution.
I have a solution that matches your constraints: make a function that returns the large array, then have the other function call it. somehow I doubt that's what you wanted though :)
> Eye Factor : At any one moment, you actually do not perceive that many pixels, but your eye moves around the scene to see all the detail you want. But the human eye really sees a larger field of view, close to 180 degrees. Let's be conservative and use 120 degrees for the field of view. Then we would see
Be very careful on the long term: timestamps get easily updated to "now". For example on modification of the table structure.
I was happy with a timestamp on a log-like table, until all the entries became "new" on a alter table.
Marco
Apparently "protecting" the question against silly answers for rep < 10 doesn't work very well.
I have modified an internal error page that is displayed to the user once a URL is blocked by SquidGuard. Following is the part of the script that I need some assistance with:
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# IE displayed self-page, if them size > 1024
# ~~~~~~~~~~~~~~~~~~~~~...
What are the technical reasons that Magic Quotes has been removed from PHP ?
From PHP docs
Performance
Performance Because not every piece of escaped data is inserted into a database, there is a performance loss for escaping all this data. Simply calling on the escaping functions (like adds...
It's an answer, not spam ... normally my action would be to CV the newer questions in favour of the older (more authoritative one), but in this case that wouldn't be appropriate.
1) storing votes (like, dislikes) in a same table or database as posts 2) storing votes in a different table called votes but each rows are connected to each posts (1 to 1) 2) storing votes and posts (M [votes] to 1 [post])
Here i am posting validation issue for one page. IN that page i am getting the corresponding city for the selected state also. here i am getting validation for the state but after selecting state i am getting the select box and all from another page getCity.php. for more details refer bellow.
Here i am posting validation issue for one page. IN that page i am getting the corresponding city for the selected state also. here i am getting validation for the state but after selecting state i am getting the select box and all from another page getCity.php. for more details refer bellow. below i mentioned my ajax code
Well, an empty record is a database record that is not filled in. Just nothing in the field. I receive all values in an array but I don't want empty ones and '0' ones.
I would like to have the functionality to set a function in a class (function setFunction). Later I want to get the function (with getFunction), which I can call from outside (specifying parameters etc. ). Here is what I have tried:
class Test
{
var $function;
function setFunction($foo...
you can achieve this through "multi_query" option.
$query = "select * from Users;";
$query .= "Select * from Classes";
if (mysqli_multi_query($link, $query)) {
do {
/* store first result set */
if ($result = mysqli_store_result($link)) {
while ($row = mysqli_fe...
> "I don't need to read about what are version control systems and how they work. I already know what i want. Now tell me, why do I need to checkout the repository before adding file ?"
, need to get account numbers with specific prefix. What would be clearer: 1. `account_number BETWEEN 123456000000000000000 2. '123456999999999999999'` and `account_number like '12345%'`