« first day (961 days earlier)      last day (4212 days later) » 

11:00
@LightningDust Please, I've heard that argument over and over; real life isn't so straightforward.
@Mr.Alien, yes, that's fair enough. I work for a company which uses a lot of old strict XHTML and I know what you mean.
Does anyone notice the problem here: pastebin.com/5ncXb7AF ?
I agree we can't just tell someone to drop the <CENTER> or other unsupported tags, for all we know his DOCTYPE is html3 which supports it perfectly.
Invalid parameter number: parameter was not defined' in I really can't see it where Im going wrong
@Mr.Alien, but we should definitely advise against it. Let's face it, given the question he's probably not doing this professionally.
11:02
@LightningDust the thing is never modify original code much(except fixin the issue), even I had answered there, his solution didn't worked so he got rid of those tags and, Yes, clients never pay more, so why update their appps
@LightningDust You can read my answers, most of my answers have not, almost of my answers have note which warns either tips the OP
@Mr.Alien, I agree, I always endeavour to keep my solution as close to the original functionality as possible (or offer both a completely rewritten and hack-fixed solution)
hey. if PHP passes objects by reference what is the difference between public function someMethod(SomeObject &$object) and public function someMethod(SomeObject $object)
@David there is no
@David Try to do $object = new Whatever(); inside the function and you will find out.
11:05
@Mr.Alien, I often answer like this with a 'perfect' solution and a 'the way you're doing this' solution: stackoverflow.com/questions/16857166/…
@Jack it won't change anything. or will it?
@zerkms it should :)
@LightningDust Or even this
@LightningDust +1, thats the way to answer
@Jack it does :-S
tbh I don't think I'd have ever noticed the <CENTER> tags if Zenith didn't point them out.
It was obvious it was example code anyway.
11:07
@zerkms yep, just confirmed it as well.
@LightningDust center was deprecated long long way back.. we've margin auto now
i get this error :
#1114 - The table 'temptable' is full

So, increased the heap size to 5120 MB using
set @@max_heap_table_size=5368709120;
select @@max_heap_table_size;


The table is NOT more than 500 MB

y am i still getting the error?
I don't think deceze likes me :P
@zerkms @Jack when I pass an object in without the &symbol i can do $object->setThis() $object->setThat() etc in the method and the changes are made to the object on the outside which is great but now when I pass in an object and do something like this $object = $someObjectHeldInThisClass
@Jack I rarely modify arguments and never pass objects by reference. The "best practices" lead to being dumb :-S
11:08
I then use the $object outside and it has no changed at all
not change*
@David do you use php4?
@zerkms Yeah, it's definitely a "Bad Idea (tm)" :)
@David then it's not possible
what do you mean its not possible
11:09
@David I mean that the behaviour you described isn't possible in php5
seems like you're doing something else
@David well, that's where the & makes the difference.
why not?
oh, you're assigning it as well
how do I get the object i passed in now pointing to a different object
I always expect people won't do weird things
@David forget what I said. I expected you to write a proper code :-)
11:11
@zerkms according to the prisoner's dilemma that should lead to the best possible strategy.
not something that's hard to maintain )
@David what @zerkms is saying is that you shouldn't do that :)
Why do so many people's icons not load for me in here?
user652649
morning
Only @Mr.Alien and my icons seem to show
11:11
@LightningDust you haven't paid your SO membership this month
so it's a icon-trial-mode turned on
SO has membership? :P
@Charles smackdown put on todo list
but I need to. It is in my IdentityMap in my datamappers. before I go and query the database for an object I check my IdentityMap and if the object is already in memory it needs to get me that object
@LightningDust Was same here before few days, I never get @HamZa pic.. it is always disappeared
@David so why not use (surprise-surprise) return ...?
11:13
@Mr.Alien, I have barely any icons at all
it's the expected way to return the function's result
Could be because I'm using IE10, idk
Yeah they all show in Firefox
@LightningDust IE revenges you for not being nice half an hour ago
@zerkms but when I return the object I am stil going to have to assign it to the current object i want to replace
@David yep
11:14
@LightningDust ctrl+f5 (though didn't worked for me)
But that looks explicitly
like - I called something and I have done something with its results
not "I called something and not sure how it modified the variables I passed"
Doesn't work for me either
@LightningDust FF?
but if the assigning 1 object to another does not work in my IdentityMap lookup() method why would it work if I return the object instead and then assigned it
@Mr.Alien All show in Firefox
I think only icons I've seen on SO main site show on IE
11:16
I am coming from c++ pointers and I know PHP references != C++ pointers so it is kinda of confusing me ha
@David your mapper either fetches data from DB or from IM. The client doesn't care where the mapper retrieved it from
@PeeHaa埽 well, i create memory table using the code below, yet it took 22 seconds! any solution to reduce the time?



set @@max_heap_table_size=5368709120;
select @@max_heap_table_size;

create table tbl1 engine=memory
SELECT b.`TIMESTAMP`,a.SYMBOL,b.`CLOSE`CLOSE1,a.`CLOSE`CLOSE2 FROM TEST2 b,TEST1 a WHERE a.`TIMESTAMP`=b.`TIMESTAMP`;
@David php's references is somewhat similar to c++ references
What was again the solution with a multipple file upload to prevent undefined indexes?
adding a value?
@zerkms ok I will return the object from my IM and then assign it is that what you recommend?
11:18
@LightningDust Strange, throw a question on meta
@David it's actually programming language irrelevant - it's common to return data with return
Where do people come up with this crap? github.com/ircmaxell/password_compat/issues/29
@zerkms lets hope this works. i have been at it since last night
@Mr.Alien Done, not something I'd normally notice but I've got a week of IE10 testing to do. :P
@LightningDust Probably related to meta.stackoverflow.com/questions/166575/… - clear your cache
11:22
@DaveRandom I would like to propose the [you-suck-now-gtfo] badge
Clearing cache didn't work @DaveRandom
@LightningDust LOL
@PeeHaa埽 Yeh but there's no game in a badge that all new users automatically get
@DaveRandom Actually same issue here, clearing cache never works, I feel it's a random issue..
@LightningDust Bug report on meta with screen shots then, I suggest
Fail ping
There was an issue with the imgur hosting at one point, I suspect this is another unresolved gremlin
Pretty unlikely to be browser specific though
Hello can someone help? I have two php pages that works with codeigniter at first where i don't have inside javascript and just call the controller it work at second where i have javascript which calls a codeigniter controller it doesn't work,does anyone have a clue on that?
@DaveRandom the images should be cached...1ce they load, the other time they fail
@Mhche Sure
The error "It doesn't work" is an error which happens a lot. Search the site for those keywords
10
Instastar
11:25
@PeeHaa埽 yeah ok funny well done
@LightningDust What's the HTTP status code of the image request?
@LightningDust Upvoted :p
What's the URL as well?
@DaveRandom Same question, because it seems like something is wrong with the settings
11:29
A bunch of (Aborted) on gravatars
In fact, it looks like you probably have an issue with gravatar (that's where my avatar is)
And 304 on imgurs
304 is expected and correct
^^^ We've started getting too many of these
Yes it is possible. — DaveRandom 10 secs ago
11:31
@DaveRandom +1 :p
@Mr.Alien Wait, I flagged as 'not a real question'. It was a real question. It was just a crap one. Hmm..
@Jimbo I am Vaibhav, Age 22, and am closing that question
@Mr.Alien the icon issue was caused by Abine Tracking Protection list. -_-
Now I feel dumb. :D
@LightningDust Than I guess some of my plugin is interefering
EasyList seems to be OK though
11:40
@LightningDust I'll try disabling all extensions when I encounter this issue again
Hopefully that'll help someone with the issue in future then at least
50 rep to 2k :D
@LightningDust :D
An hour on the [regex] tag should fix that :P
I am scared of regex
morning
11:48
@Mr.Alien, I love regex
Though it's used badly so much it's scary
Morning
hmm .. the "facebooks is dying" article is at the top of HN
@tereško It is, since 2011, It sux
@ircmaxell Heya
@LightningDust I never understand that
@tereško Doesn't say nothing about dying
you are really fast at this reading-thing
11:50
@NikiC You read that pretty fast
... or you only read the headlines
or I already read it before you posted it ;)
then you manage to understand nothing ... congratulations
Rather you interpreted more into it than there is
I think that nobody sane would think that Facebook is a good source for high quality interesting content - I don't think that ever was an objective
what's up?
11:54
hello
i need to know how can i repeatedly call mysql_query
I.e. the article talks about them failing in one particular aspect. I just don't think that is an important aspect to Facebook and as such also don't think it will lead to any "dying" ;)
@AmirHudani By repeatedly typing mysql_query
@ircmaxell morning
@Mr.Alien 'Sup ?
@HamZa Ssup..
11:57
Good morning!
No @Ihsan today
Good day people!
@dragon112 Ayo
@tereško crap
@webarto do you disagree with the post ?
11:58
> Let’s go back.
I never left.
Another Book Written
0
A: Best Practices: Salting & peppering passwords?

ircmaxellOk. Seeing as I need to write about this over and over, I'll do one last canonical answer on pepper alone. The Apparent Upside Of Peppers It seems quite obvious that peppers should make hash functions more secure. I mean, if the attacker only gets your database, then your users passwords should...

I guess we are all talking with ourselves, no common conversation topic
@tereško It has its points, but, who said that facebook is the source of good informations? For me, this room is 10x (random figure) more valuable than facebook. It's all relative.
people do not use facebook for "good information"
What cost do you use for the hashing in your applications?
12:03
Hi all
hashing by bcrypt that is
I use md5.
@Ihsan Heeeeeeelloooooooooooooooooo !
It's the best.
Hi @HamZa
12:04
@PeeHaa埽 10 minimum, and up to 13 depending on the server / app
@ircmaxell - Thanks for that answer, very informative.
Any time!
@webarto It's best to md5 your md5, so you can cryptographically secure your password within a cryptographically secure password.
And I'm glad to write it, as now I have a canonical answer to reference any time I need to reference "peppers"
@Jimbo I'm not surprised, I know some big sites used that technique :)
12:05
@ircmaxwell Will look more into the solution you suggested too
@Mr.Alien here I am... ;)
Check out the code in the bottom of this answer:
19
A: How to hash long passwords (>72 characters) with blowfish

ircmaxellThe problem here is basically a problem of entropy. So let's start looking there: Entropy Per Character The number of bits of entropy per byte are: Hex Characters Bits: 4 Values: 16 Entropy In 72 Chars: 288 bits Alpha-Numeric Bits: 6 Values: 62 Entropy In 72 Chars: 432 bits "Common" Sym...

@Ihsan Just told @HamZa that ihsan is missing :p
lol. No party without mee... :D
12:07
@HamZa You shrank down your name, nice :p
Yeah, thanks :)
(het is mijn voornaam trouwens :P)
That doesn't sound like a dutch name to me :o
@Ihsan Damn, we were bored
@tereško I'm not sure what it is now, really... But I hear that they give good salaries :P
@dragon112 HamZa sounds like a Bike name to me
12:09
@dragon112 it isn't :p
@HamZa Thank god, I'm not losing my mind. [citation needed]
@Mr.Alien "HamZa the biker" sounds good as a nickname :D
@ircmaxell - Nice, and I'm using ZF2 anyway.
:-D
I haven't tested that code too much, but it should work
@Ihsan qua I mean, hey @Ihsan
12:11
@HamZa Reminds me of roadrash.. :p I still have that game, lol... I also remember the cheat, xyzzyspoon shift+n :p
Now the problem is to send the password encrypted fron client to server...
@Jimbo I am not a duck... (quack) I am not a duck (quack) I am not a quack (duck) wt hell... :D
@ircmaxell What password encryption would you advice me to use in my new website (the encryption needs to be usable in C# as well).
bcrypt
and it's not encryption
it's hashing
Right, my bad.
@ircmaxell how did you learn all this stuff about hashing ? I mean do you recommend a book ?
12:14
hashcryption
@webarto I think you should use trollarto as username
@HamZa I learned from a metric-shit-ton of research and experimentation
@ircmaxell I see, your answers about hashing are always interesting to read, thanks !
I may write something on the subject...
stackoverflow.com/questions/16896433/… Why did I feed the help vampire? -_-
@ircmaxwell - Why bcrypt over scrypt?
12:18
three reasons to "avoid" scrypt: 1. Not in php core. 2. Has no libcrypt() bindings 3. Is still quite new and new is bad in the security realms
cya gguys....
@Mr.Alien bye
@ircmaxell - Would have thought with the value of the Litecoin economy if there was a severe issue with scrypt we would have seen it by now. :P
@LightningDust Well, look at AES-256. It was in use for over 20 years before a massive flaw was found (still quite secure, but experts are recommending AES-128 instead for certain usages)...
@ircmaxell - I'm doing my best to find a reason not to switch to it for an upcoming project though.
12:24
@LightningDust And I did find an issue with scrypt that's currently being leveraged against litecoin
What about PBKDF2?
@ircmaxell awesome answer as always +1
@LightningDust PBKDF2 is generally seen as weaker than bcrypt
@ircmaxell - But better tested, with more pedigree.
3DES (and scrypt?) prove that a stronger algo isn't necessarily a better choice.
the point is scrypt may not be a stronger algo in the first place
Interesting reading.
If site is being put into maintenance mode and I don't want search engines to inadvertently index the site when in such mode. Would putting Disallow: / in robots.txt cause the search engine to de-list previous indexing for the site?
Would you consider bcrypt tested enough to rely on for a mission critical implementation?
12:27
yes
@ircmaxell You mean you found a by-design issue :P
well
yes and no
it was originally "by design"
I've been using bcrypt up until now, @ircmaxwell, but recently found out about scrypt and was considering using it on an upcoming project.
but now it's appearing that they've taken the issue I've found and actually been able to improve upon it to beyond the by design tradeoff
@LightningDust first off, there's no w in my name
Oh, sorry :P
12:29
@LightningDust Are you sure about that? ;)
@crypticツ I think you should be returning a proper 502 error code, which any sensible search engine should understand not to index.
secondly, it's up to you. I typically recommend not, but at the same token that's not a strong "you shouldn't" but more of a "I'm on the fence about do or wait"
Fair enough, well you've been very helpful today on this count and the pepper.
@Danack would that not cause the browser to error? I'd like to show notice page for visitors that site is temporarily offline, never made custom error pages, but I could make a custom 503 page right?
12:32
Morning Folks!
Do we have any room for ubuntu/linux issues?
@crypticツ Chrome only shows its default error page if a) a non 200 response is sent and b) If the body sent in the response is not large enough.
If both of those are true it will discard the server response and display it's own page.
@udaysagar yeah, it's on SE chat
Actually, I am seeing a wierd issue....have a look at it
12:33
But so long as you send an error page big enough, even if you send a 502/503 error, your page will be displayed.
@crypticツ e.g. basereality.com/asddasdad
admin@admin-desktop:~$ zf
The program 'zf' is currently not installed.  You can install it by typing:
sudo apt-get install zend-framework-bin
admin@admin-desktop:~$ sudo apt-get install zend-framework-bin
[sudo] password for admin:
Reading package lists... Done
Building dependency tree
Reading state information... Done
zend-framework-bin is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
admin@admin-desktop:~$ zf
The program 'zf' is currently not installed.  You can install it by typing:
You see that its in the LOOOOOOOOOOP
ha ha
is a 500 error page but comes from the server, not chrome default.
zf doesn't exist in Zend Framework 2
(and yes I know it should be a 404 error there)
@webarto hola .... long time no see you here
12:36
@Danack should instead of Disallow: / should I just put Disallow: /maintenance and have all requests redirect to it with 307?
@LightningDust whatz the alternative then?
there isn't atm
are you using zf1 or 2?
Probably your ubuntu is installing zf2 which is very different from zf1
@crypticツ I don't know. Both should work, not sure which is going to work better or more widely.
12:38
Remember: Security Through Obscurity is not security. But it can help as long as you're not relying upon it...
@ircmaxell ^- ???
You could probably find a zf1 repo
Or just grab the tarball
I think 502/503 may be more appropriate as the content hasn't actually moved - it's just unavailable, which is a closer match to the 503 status meaning.
You can also set a "Retry-After" header to tell the search engine when to come back.
@Farkie zf2
@NikiC It's called obsecurity when you rely on obscurity for security. =o)
@udaysagar on the off chance that apt is still holding zf1 do whereis zf
12:41
ok
@crypticツ No that's when you encrypt the output buffer
admin@admin-desktop:~$ whereis zf
zf:
its nowhere
Ok so ubuntu forgot to take off the message, there is no zf for Zend 2
no idea....
12:43
@LightningDust what should i do?
^^ lol
will someone please have quick look at this stackoverflow.com/questions/16896730/…
You've probably used zf1 before if you use zf, which isn't even similar to Zend 2
@uday Do you need Zend 1 or 2?
2
its true, that i have used zend 1 earlier
12:44
but now i want 2
Ok so you don't need zf and anything that tells you to use zf is for Zend 1
Find the Zend Framework quick start guide to learn 2
It has a steep learning curve though
aha, okay
thanks
do you know zf2?
Yes
I use it at work
@NikiC I need to do a blog post on that
@ircmaxell and describe it quickly now :)
12:47
ok
doesn't make much sense to me
@NikiC Basically, security through obscurity is only bad if you rely upon it
can you suggest me good tutorial websites
@LightningDust @udaysagar there's ZFTool for that
@ircmaxell But if you don't rely on it, why do you need it at all?
12:48
But it can be useful as another layer of defense, as long as it doesn't compromise your actual security measures
Defense in depth is an information assurance (IA) concept in which multiple layers of security controls (defense) are placed throughout an information technology (IT) system. Its intent is to provide redundancy in the event a security control fails or a vulnerability is exploited that can cover aspects of personnel, procedural, technical and physical for the duration of the system's life cycle. Background The idea behind the defense in depth approach is to defend a system against any particular attack using several, varying methods. It is a layering tactic, conceived by the National Sec...
didnt get you @Ocramius
One or more of those layers could be obscurity. And that's ok. As long as it's not the bottom or only layer...
yeap, that one
12:50
how to make the select tag in php is mandatory
<label for="typeofuser" >TYPE OF USER</label>
<select name="priority" >
<option value="-1">Select</option>
<option value="admin">admin</option>
<option value="moderator">moderator</option>
<option value="user">user</option>
</select>
@CarrieKendall Looking at the comments.......funny.....
this is my examble
@NikiC make sense? Or disagree / not understand my statement?
i want to force the user to choose one of the options
pastebin.com/fZbwd4BW how is it possible my script generates an empty ZIP file :/
12:51
<3 people who post comments on the docs instead of actually opening PRs
first time im trying to zip a folder :/
any one can help ?
You check this on the server side by doing

if ($_POST['priority'] === "-1") {
//do something
}
why is this ubuntu behaving wierdly?
admin@admin-desktop:~$ sudo curl -s getcomposer.org/installer | php
The program 'php' is currently not installed.  You can install it by typing:
sudo apt-get install php5-cli
admin@admin-desktop:~$ sudo apt-get install php5-cli
Reading package lists... Done
Building dependency tree
Reading state information... Done
php5-cli is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
admin@admin-desktop:~$ sudo curl -s getcomposer.org/installer | php
@LightningDust any idea on the above issue?
12:56
@ircmaxell Doesn't really make sense
do you get defense in depth?
yes
Here, I'll give you an example
it gave me this error when i first open the page Notice: Undefined index: priority in C:\wamp\www\Ticket.sys\register.php on line 132
Call Stack
# Time Memory Function Location
1 0.0008 698624 {main}( ) ..\register.php:0
I don't bind SSH to port 22 on my personal boxes
I pick another non-standard port
does that actually increase security? No. Because someone could port-scan and figure it out
12:57
@ircmaxell Yes. But that's just because you don't want to delete the brute force logs ^^
BUT, it does defeat a large number of script kiddies who just poke port 22
that's effective security-through-obscurity
I'm not depending on it, but it does help mitigate a range of threats
@CarrieKendall i see your Radiohead cover and rise you Tool cover
=P
@ircmaxell I don't think you are mitigating any threads
you are trying to access the 'priority' but it doesn't exist. This probably means you need to check if the submit button is pressed:

if (isset($_POST['submitbuttonname'])) {
//do the if I posted before in here
}
12:59
@NikiC Sure I am. I am mitigating any threat that assumes I'm on port 22
@ircmaxell But it is no threat in the first place
Sure, it's not significant if someone wants to try to get in

« first day (961 days earlier)      last day (4212 days later) »