« first day (924 days earlier)      last day (4249 days later) » 

10:00
@tereško Your language sucks :P
@PeeHaa埽 already filtering any input/ouput values ah ;)
.. i knew it , i should have added "Vācija" too
... :P
@tereško what is that country?
damn i've put also "St kitty" or somenthing like that, i have all countries, but your .... uhm... @tereško
Good Morning
10:02
St. Kitty? Isn't that @cryptic?
@Baba Morning
St Kitts sorry lol
@Baba A Very Fine Good Morning Sir!
St Kitts / Nevis
@PeeHaa埽 Read Comments : stackoverflow.com/a/16215513/1226894 do you think its an issue ?
i didn't studyed that on school geography sincerily
lol
10:03
@hakre @hakre good morning .... thanks for the tip yesterday
thanks @PeeHaa埽 i think i'll fix that like i sad :D
lol..the image was of 1024x8999 pixels dimension, hence the huge size
@Baba Once people starting to talk crypto I'm not the right person to answer :)
@PeeHaa埽 lol
10:06
@PeeHaa埽 and probably some cheese? (just had a fantastic sandwich, I name it Cucumber Party Provolone Extravaganza Roastedly Strongly)
@asprin If you update your question with what you were trying with wkhtmltoimage, I'll post an answer.
@PeeHaa埽 Ok lets talk about beer .. yesterday was Friday :)
@uınbɐɥs It's fine. The issue was while uploading the file through Filezilla which was corrupting the binary. So you could simply link that bug as an answer and I'll accept it. The problem wasn't related to a particular type of binary. So it won't make a difference whether it was phantomjs or wkhtmltoimage
@asprin OK
10:10
@PeeHaa埽 nice ... a friend of mine is getting married .. so we had free Guinness all the night
@Baba Free beer is even better
I need a name for my internal standard library / "framework" thingy. Any thoughts?
@PeeHaa埽 what is it about i can come up with a name
@asprin I posted my answer.
@Baba Just a collection of some boilerplate code I got tired of writing / copying. Think simple routing system, session storage, autoloader
And maybe some form validator
And perhaps user validation
@PeeHaa埽 Cheese is fantastic. A natural drug.
10:16
@PeeHaa埽 here is my first inspiration 50 Things You Can Call A Beer
@PeeHaa埽 Pitchblade - lol the term even exists.
liquidPHP
@Baba Pliquide
since its all about beer and PHP
@hakre nice more creative :)
10:17
First come first serve. Sorry @Baba :)
PitchBlade it is
@PeeHaa埽 haaaa that is cheating ... you did not add that to the rules
@Baba Pleerquide
mind you my inspiration came first
@uınbɐɥs Thanks a million again. Accepted and awarded
10:18
Pleercheede - to put the cheese in and then PleerCheede for the CaZing pukeness.
\PitchBlade> git init
An just another home grown PHP framework hits github soon.
I called my own one Motor once but it never went anywhere ;)
@asprin :)
10:20
@hakre GITHUB ALL THE THINGS!
@hakre lol
I now call my twitter library Perched :) thefreedictionary.com/perched
Could be also a great framework name. "A position that is secure, advantageous, or prominent."
All the good attributes!
I wonder how sometimes users have the tendency to write down all their soul just to formulate a simple question.
@hakre Often that is part of the problem
If I see the older questions, those are all that simplicit.
@PeeHaa埽 Yes, we should tag those as spam.
Users are too dumb to fetch the information from the site, therefore they write down how dumb they are and ask silly questions.
Let us suggest the "Silly Question" close-reason - "This question is asked in a silly manner and is not worth to stuff this website. The OP might be better guided to re-use exisitng material on this website instead of asking in a silly way."
@hakre Perhaps it should be a new cv reason
Aaaaah too late
:)
10:35
Let's try it online.
It's ALIVE muhahahaha
namespace EZToolsLib\Core; ?
@Baba eeeek WIP name
Expected namespace PitchBlade\Core;
tnx
@Baba I suck at copy pasting :)
10:40
@PeeHaa埽 lol
ya know, the method does not need to be public for spl_autoload_register to use
@PeeHaa埽 First star and first issue opened :)
@PeeHaa埽 Nice github.com/PeeHaa/Random-Pattern-Generator what were you thinking
@hakre :|
I'm not sure what you're trying to accomplish
10:44
@Baba Just having some fun. The JS in there is horrible, but was already much better than what it was. I actually started rewriting that thing last week.
@BoltClock me not either, but lets see what happens.
This cannot be @hakre.... — Raidenace 13 secs ago
See I'm not the only one
@PeeHaa埽 Its usless but creative .. just gave it a star
wow, I didn't expect that. this would need a sock-puppet then.
> close (2)
10:45
@Baba ooooh it's indeed 100% useless :D
@PeeHaa埽 have not been able to create any mindful project in git .. still finding my way around and getting used to it ...
@PeeHaa埽 lol
@PeeHaa埽 you got your first issue
And here come the flags @hakre...
10:51
Wow. This thing is becoming really popular ;)
@tereško lol
all the real frameworks (like Yii, Drupal and SilverStripes) comes with jquery
0
Q: mvc is not working on my host

user2057856I`m using PDO databaseconnect PHP programming with classes and objects in a MVC-model. i made a website that works 100% on my own localhost but when i uploaded it to my host (and ofcourse changed the database connection data), it didn`t work. the html i include in my view.php(MVC) is not been a...

ehhehehedhehe
BTW I have grown a really really big hate for drupal
10:59
4 yes its how grown and a lof of testing was done even with simple sha not HMAC. 5 Evening without changing the hash function i still argue that its far better than your ` $license = base64_encode($rand . $signature);` which by the way does not meet the OP 25 key licence format. Finally I already said in my answer If that is not the case refer to @ircmaxell for a better solution if you have a better solution to fixed sized (20-25) offline licence and not just by changing (hash function) .. be my guest I love to learn .. thanks — Baba 1 hour ago
I wonder how can anyone actually downvote that question. The DV reason given is totally wrong. My question does not have a lack of research!
@PeeHaa埽 as with any PHP cms, you need to have a love-hate relationship with it to use it.
@PeeHaa埽 Welcome to the club
"club" would imply that this is somewhat exclusive group of people ...
11:05
@PeeHaa埽: Sorry for all this :)
But 6 mins is really ASAP dude.
@Baba: "surprise" is the enemy of security. The ONLY thing that should be secret is the private key. Remember Schneier's Law: Anyone can invent an encryption scheme that they themselves can't break. My answer is based on tried and true cryptographic principles. The "Option 2" which you're arguing is weak, is the basis for all authententicated cryptography. In fact, it's what the HMAC was designed to do (and how it was designed to work). The only difference is I didn't bother putting it in the format. But that's trivial once the security part is taken care of... — ircmaxell 12 secs ago
@ircmaxell surprise is the enemy of your enemy - hakre in "the art of electronic warfare"
well, that doesn't make it true...
11:10
Can you show any example of this algorithm being used or vetted for security in the public? It looks REALLY odd and home-grown (especially the $hash1 and $hash2 parts. I mean, why crc32()? It seems like it was derived from the motto The more hash cycles, the better. In other words: SHA1 ALL THE THINGS!. Which offers no increase in security... — ircmaxell 21 hours ago
1. Similar case, A offline j2me application the application was distributed via Bluetooth but licensed with 16 code (Its hard) We are to come up with offline verification 2. crc32($keys) exactly what i want ... You did not expect it its all about prediction 3. SHA1 ALL THE THINGS! I am not Merely chaining hash , this is done in the context that preserved the entropy of the 32 binary key. Fine you can argue cryptographic strength of the HMAC depends upon the cryptographic strength of the underlying hash function (sha) but that can be changed. — Baba 1 hour ago
4
A: Why is it recommended to make crypto algorithms public?

ThiloThe benefit of knowing the algorithm is that you don't have to trust the maker that it is really secure. If I know that the algorithm being used has been massively tested and peer-reviewed, and the general consensus is that it is secure, then that gives me more confidence in the system. The opp...

@ircmaxell ... neither wrong. I was just joking a bit.
> “Engage people with what they expect; it is what they are able to discern and confirms their projections. It settles them into predictable patterns of response, occupying their minds while you wait for the extraordinary moment — that which they cannot anticipate.”
@Baba 2. crc32($keys) exactly what i want ... You did not expect it its all about prediction is exactly what what you're giving is bad or weak... It violates 3,000 years of cryptographic principles...
11:15
@ircmaxell am also surprised you call me enemy of security i don't argue the fact it needs to be reviewed .. In fact i personally asked you to review it bit but i strongly disagree that SHA1 ALL THE THINGS!. Which offers no increase in security
it's weekend.
I didn't call you the enemy of security
@hakre lol
And also there is no lack of research if you can't research anything.
11:16
I called the expectation that you did not expect it is the enemy of security...
@ircmaxell Oh ok .... but i think you misunderstood my concept of chained hash
No, I see what you were trying to do
@ircmaxell Like i said .. please how can this be better
It can be better by being simpler
// Simple Random Chr authentication
$hash1 = hash_hmac($this->hash, crc32($keys), $this->privateKey);

// Get hash if keys using $h1 + hash
$hash2 = hash_hmac($this->hash, $hash1 . $keys, $this->privateKey);

// Encode Options with json
$options = json_encode($this->option);

// Get hash of options $h2 + key + options
$hash3 = hash_hmac($this->hash, $hash2 . $options, $this->privateKey)
that can be 1 hmac
11:19
because the crc32 is pointless
the h1 is pointless
h2 is pointless
$key[] = sprintf("%s%s%s%s%s", $hash1{$i}, $v[1], $hash2{$i}, $v[0], $hash3{$i});
quick question because I am too lazy to look it up in the docs :) In php unit assertFalse does it do a strict comparison?
I used 2 hashes because of
that can become simply $hash
	foreach ( array_chunk(str_split($keys), 2) as $v ) {
		// Combine Ramdom Keys and all 3 hashes
		$key[] = sprintf("%s%s%s%s%s", $hash1{$i}, $v[1], $hash2{$i}, $v[0], $hash3{$i});
		$i ++; // increment position
	}
Needed to create hidden pointers in the serial
@PeeHaa埽 yes, always
11:21
@hakre k tnx
@Baba which is my point. That's un-needed complexity that if anything adds potential points for bugs and weaknesses
@ircmaxell one moment let take a critical look
@PeeHaa埽 everything else would not be that useful in PHP :)
hello all
when i "debug as web page" in eclipse
it automatically debugs index.php
instead of asking for a url
what could be the problem
@PeeHaa埽 or if you don't like strictness, assertEmpty() might be fitting.
11:23
@hakre I ask because there is the horrid assertEquals
@hakre No no. I like my shit to be strict
@PeeHaa埽 but also assertSame()
:)
@hakre Yeah I know
I most often prefer strict for test assertions.
@hakre Both my tests and my code
but got to run now BRB.
11:24
later @hakre
@PeeHaa埽 +1!
11:34
		$keys = $keys ?  : $this->randString(10);
		$keys = strrev($keys); // reverse string

		// Encode Options with json
		$options = json_encode($this->option);

		$data = $keys + $options;
		// Simple Random Chr authentication
		$hash = hash_hmac($this->hash, $data, $this->privateKey);
		$hash = str_split($hash);

		$step = floor(count($hash) / 15);
		$i = 0;

		$key = array();
		foreach ( array_chunk(str_split($keys), 2) as $v ) {
			$i = $step + $i;
			$key[] = sprintf("%s%s%s%s%s", $hash[$i ++], $v[1], $hash[$i ++], $v[0], $hash[$i ++]);
@ircmaxell ^^^ what do you think
@ircmaxell used $step because of diffrent lenght of hash functions
wb
still quite complicated. especially the serialization part. But better
@ircmaxell thanks ...
@ircmaxell what would you have done otherwise ?
exactly what I did
hello all
when i "debug as web page" in eclipse
it automatically debugs index.php
instead of asking for a url
what could be the problem
11:39
@ircmaxell can you modify it to output the 25 key format and let me see .. you can just paste the code here
I can, but that's actually masking the solution
Ron
Ron
$file = 'path/to/image.jpg';
$image = imagecreatefromjpeg($file);
imagejpeg($image, $file, 60);

should work, right?
which is why I didn't
@ircmaxell If you where stock with that ... like the way i was in the 16 digit serial application .. for leaning purpose what would be a better solution
make 1 string
then break that into chunks of 5
done
implode('-', str_split($string, 5));
11:45
@ircmaxell .. You would never be able to validate that if limited to 25 chr
	$rand = mcrypt_create_iv(10, MCRYPT_DEV_URANDOM);
	$signature = substr(hash_hmac('sha256', $rand, $private_key, true), 0, 10);
	$license = base64_encode($rand . $signature);
	return implode('-', array_slice(str_split($license, 5),0,25));
what's with the array_slice?
@ircmaxell just trying to limit it to 25 chr as requested
11:48
i can change that to substr
first off, don't worry about what was requested
second, adjust the size of the random string, and the substr off of the hmac to do that
@ircmaxell best i can come up with
	$rand = mcrypt_create_iv(5, MCRYPT_DEV_URANDOM);
	$signature = substr(hash_hmac('sha256', $rand, $private_key, true), 0, 5);
	$license = bin2hex($rand . $signature) . substr(bin2hex(mcrypt_create_iv(10, MCRYPT_DEV_URANDOM)), 0, 5);
	return strtoupper(implode('-', str_split($license, 5)));
Oh wow I didn't know stackoverflow had a chat too =o
12:10
Does anybody know how to setup travis for a project?
The thing keeps failing on me probably because I have screwed up the config
@Baba why are you adding random crap to the end of the signature?
@ircmaxell 25 is odd number bin2hex($rand . $signature) would give me 20 .. i needed some crap
no you don't
And . substr(bin2hex(mcrypt_create_iv(10, MCRYPT_DEV_URANDOM)), 0, 5); is pointless
generate 26 characters (13 base, so 6 random, 7 signature)
and lop one off
I would that during verification
i can not just 1 char from hex ???
decoding would become invalid
you don't decode
you encode the other direction
or you chop off one
12:22
@ircmaxell i really don't get you .. can you show a code sample ?
it's straight forward to do
Uby
Uby
Hello guys
hi checkbox variable itself is not passing if its not checked (instead of carrying default value), any suggestions?
Uby
Uby
12:38
A checkbox has just 1 value
It shouldn't change if you check it
@TheLuckyGoof That's how checkboxes work
If they are not checked they will not be send to the server
atleast it should carry on off when its checked/unchecked
Uby
Uby
That's not how it works
@TheLuckyGoof No it shouldn't
Why on earth would you need a value coming from the clientside?
for checkboxes :)
Uby
Uby
Use 2 radio buttons if you need 2 values. A checkbox can carry just a single value
12:42
i've three tables, and a checkbox is provided whether to process the info or not, anyother alternative to ask user wheter to process that table or not
@TheLuckyGoof if(isset($_POST['theCheckbox']))
If it is set the user checked the thing
yeah I forgot this! Iam a big goof i just wrote if($_POST['table3']) {$table3=$_POST['table3'];}
@PeeHaa埽 thanks bro
np
@ircmaxell Do you have any clue what I am doing wrong regarding that travis thing? travis-ci.org/PeeHaa/PitchBlade
It keeps saying that I am failing at this :P
It seems like it thinks I'm doing Ruby :(
12:58
@PeeHaa埽 first of all, tell it your project is a PHP project
travis.yml should be .travis.yml
that's the problem
@igorw oooooow shit
I must have thought it was something on my screen :P
:)
@igorw Much better <3. Now to find out why it still fails on me, but at least it does php :)
Ah probably another stupidity of mine :D
There were 5 errors:
1) SessionTest::testSet
PHP_CodeCoverage_Exception: Trying to @cover not existing method "Session::set".
@covers requires fully qualified namespace names
@ircmaxell hmmmmmmm. kk tnx
@ircmaxell Yeah saw that. Just didn't realize it wasn;t able to get the FQN itself :)
@OlegOrlov This is the PHP room. If you want to bitch about the US attacking anybody go to the al qaeda room: chat.stackoverflow.com/rooms/1324/al-qaeda
@hakre tnx :)
13:18
:=)
should I squash to polish it?
yes please
I keep getting down votes on: stackoverflow.com/questions/16251087/…
This is embarrassing.
I expected to get a straight +5 upvote on this.
@hakre one of my 2 SO questions has score -6 too
5
A: What is the color of an array in PHP?

BartChar Dec Hex Oct a 97 61 141 r 114 72 162 r 114 72 162 a 97 61 141 y 121 79 171 avg. 69 108.6 155.4 rgb(69, 109, 155) #456d9b

awesome!
13:23
@hakre you have there 5 upvotes.
(but excluding the downvotes...)
@ircmaxell yeah, that one was a great answer.
Your order must be wrong. Dec - Oct - Hex should be the right order: green like the array keyword always is in syntax highlighters — bwoebi 18 secs ago
@ircmaxell :D
@ircmaxell reopen it pls all. This question is so valuable. It doesn't miss humor.
13:34
no
@PeeHaa埽 lol
@ircmaxell You don't have a sense for humor?
nope
which is why I posted that answer in here :-P
I see, the answer is without any humorous thoughts behind.
13:38
Just remembered this classic: Resign Patterns
@PeeHaa埽 "Diff beer"
13:55
upload image square to rectangle how do?
LOHL: "2.5 Fromage - The Fromage Pattern is often full of holes. Fromage consists of cheesy little software tricks that make portability impossible. The older this pattern gets, the riper it smells." - this is really funny @igorw
Hey guys, im trying to learn a mysqli. Whats the way to protect a statement from injection like you did with mysql_real_escape_string($input); ?
@JamaicaBob read about preparing queries
@Jocelyn Sir
please listen me
I've finished my extension ;) It's ready for alpha testing: CVBotnet: Close-voting. Distributed.
@uınbɐɥs What browser is it compatible with?
@Jocelyn Chrome.
@uınbɐɥs
Sir please listen me once
14:22
@Nikhil What do you need help with?
@uınbɐɥs This one might be stepping over the lines. Maybe @Gordon could give a better idea.
@LeviMorrison Hmm, OK...
@uınbɐɥs I can ask the other mods what they think of it
@Gordon Thanks.
I don't think they will like it though
14:24
@Nikhil If you have a question, just post it and the people who can and want to help will help you.
@uınbɐɥs Then the thought of peer reviewing is lost.
14:38
@uınbɐɥs what is this page used for? cvbotnet.herokuapp.com/verify
@Jocelyn For verifying that the user has enough rep to close questions
@uınbɐɥs you might want to ask on Meta if usage of that is acceptable
@Gordon OK
@uınbɐɥs Verification fails when it has already been done once
@Jocelyn I know. That's why it tells you to save your key.
14:44
@uınbɐɥs too late, I refreshed the page
I'll make it show the key as long as the session cookie lasts
@uınbɐɥs I closed and reopened my browser. Now it is showing me another URL for the image, but verification fails with "Mismatched key" error (I updated my profile)
@Jocelyn I updated the code, visit cvbotnet.herokuapp.com/verify again
@uınbɐɥs I still get "Mismatched key"
@Jocelyn Hmm, I'll check the database
14:51
@uınbɐɥs you probably need to delete the record for my account
@Jocelyn I successfully re-verified myself, but I'll try deleting the rows in the database
@uınbɐɥs it is working now
@Jocelyn cool
@uınbɐɥs actually, now I get an error when casting a closevote (bad key)
15:10
Does anyone know how to list for example all the newest questions tagged php OR css on the same page?
@Jocelyn I've tried [php] |(|) [css] etc. ... thank you.
@bwoebi I typed "[php] or [css]" in the search box
@Jocelyn I didn't know that SO has a built-in language interpreter.
@PeeHaa埽: Is there a reason you place the phpunit.xml into the root dir and not inside test?
15:38
@appu @rikesh hiya ... how are you ?
@rikesh i really dont know that how you know there should be mysql_real_escape_string

« first day (924 days earlier)      last day (4249 days later) »