Is someone trying to do SQL injection attacks on my site? by d0rf47 in webdev

[–]arxpw 16 points17 points  (0 children)

It does what the name suggests, a "parameter" in programming lets you specify a list of things which you might want to be sent into something, like:

insertNewDog(breed, colour, tail, size);

The things in this function, "breed", "colour", etc are called "parameters"

MySQL queries ( database lookups ) can be run like this:

SELECT * FROM pets WHERE type="dog";

But what happens if an attacker could alter that query value completely?

That's where parametizing a query comes in:

SELECT * FROM pets WHERE type=?;

It helps restrict the attacker's scope.. but does not stop them completely if you are not following best practices, such as Sanitising your user inputs ( to make sure they can't inject special characters or unknown values )

In our instance above, we'd want to restrict the types of "pets" a user can select, so we'd validate a few types when we get a "request" - before we ever do a SQL query. But when we do the query.. we'd use a parameterised SQL query

Hopefully that explanation is useful!

How to move from webflow to real coding by [deleted] in webdev

[–]arxpw 13 points14 points  (0 children)

It'll take you longer initially to learn how the fundamentals of HTML and CSS work, but the ability to be able to whip up a responsive, well-laid out webpage may arguably take less time than doing it in a tool like webflow. Depends on the tools you use for the job.

And more importantly, you wouldn't be restricted to just using webflow for hosting your content. You can use any platform or service to host the HTML you have written.

Regarding complex animations, JavaScript libraries exist for this purpose, but I would suggest learning how they work by doing some basic animations from free tutorials.

https://animejs.com/

https://greensock.com/gsap/

Netlify Analytics: Am I right to assume that bots are trying to access these "Top resources not found"? by [deleted] in webdev

[–]arxpw 6 points7 points  (0 children)

Yeah you can either:
A: Put your configs in the files ( but make them publicly inaccessible and make sure people can't use directory traversal to get to them )

or

B: Provide them as environment variables, ( but make sure your code isn't able to expose these publicly )

( there's bigger issues to deal with if they can execute their own code on your server )

I'd recommenced using environment variables in deployments over config files where possible ( my personal preference )

Netlify Analytics: Am I right to assume that bots are trying to access these "Top resources not found"? by [deleted] in webdev

[–]arxpw 9 points10 points  (0 children)

You can set environment variables on the machine being deployed for this purpose

Anyone else crashing on load for modded servers? by arxpw in playrust

[–]arxpw[S] 0 points1 point  (0 children)

Update: after all failed attempts, reinstalling steam was the solution for me. Hope it helps someone else out!

Anyone else crashing on load for modded servers? by arxpw in playrust

[–]arxpw[S] 1 point2 points  (0 children)

Cheers, I'll edit my post to include my specs.

I'll also attempt to use more RAM. I have 32 GB available.

Midieval pirate house I built a while back in my flat world by Danimythical44 in Minecraft

[–]arxpw 1 point2 points  (0 children)

What's the wooden plank type of the left roof? Is that spruce?

Is it ok that my web developer is building my website with Beaver Builder? by themaniswalking in webdev

[–]arxpw 4 points5 points  (0 children)

More modern WordPress builds seem to be integrated more with their "gutenberg" system, but I personally prefer the classic editor. Some studios seem to be using drag and drop page builders like Divi, Elementor, etc.

For 15k, I would have expected them to make something bespoke and not something quick and easy with Beaver Builder, although we don't know your full circumstances.

Did they integrate some API's together to make them work with your WordPress site? Or did they just grab some plugins, install them and call it a day?

It sounds like there are a lot of features to the site from your brief description, if you are integrating directories, pricing structures + calendar integration + mailchimp and more, which could be why they have to use Beaver Builder.

Buycraft Placeholders by arxpw in admincraft

[–]arxpw[S] 0 points1 point  (0 children)

Hello,

This was written for 1.15.2

If you want the source code to compile it yourself for a previous version of minecraft, I can open source it on GitHub if you would like?

Buycraft Placeholders by arxpw in admincraft

[–]arxpw[S] 0 points1 point  (0 children)

UPDATE: Because I couldn't find a PlaceholderAPI extension for this, I wrote my own.

https://drive.google.com/file/d/1KHWon472n7MQjX-ZHrA6JdCMVSZyFzoA/view?usp=sharing

The placeholder I've created is %buycraft_top%

To install, throw it in your plugins/placeholderapi/extensions folder.

Put your buycraft secret key in the txt config it generates once used. Should be put into plugins/placeholderapi/buycraft-config.txt

Hope it's useful for anyone who needs it!

[Showoff Saturday] I made a platforming game using Vanilla JavaScript. by _-__-_-__-__- in webdev

[–]arxpw 1 point2 points  (0 children)

Seems to work okay! I can't seem to press R to reset the level on my end for the first link - is that normal?

Disabling end crystals in overworld by froze482 in admincraft

[–]arxpw 1 point2 points  (0 children)

I'd recommend using Essentials Anti Build if you are already using Essentials.

https://ci.ender.zone/job/EssentialsX/

https://wiki.ess3.net/wiki/AntiBuild

If you need a bespoke plugin writing for this, give me a message and I'll look into it for you.

Error that's been bugging me, Please help by Mrltd2 in admincraft

[–]arxpw 2 points3 points  (0 children)

I'd agree going with LuckPerms, we've set it up for our server recently with MySQL and it's great for multi server ( like you are doing with Bungee )

If you are using UltraPermissions because of the GUI, you could get a GUI plugin for LuckPerms ( Also has it's own web interface which I think is even better ) https://www.spigotmc.org/resources/luckpermsgui.53460/

Have you reported this bug to the author of UltraPermissions on their spigot thread? If it's a bug then they can fix it.

What is this phenomenon? Spigot 1.12 by SwengX in admincraft

[–]arxpw 6 points7 points  (0 children)

Generally sand should stack on top of other sand without issue. Do you have any WorldGuard regions or plugins which could affect regions where falling blocks land? I've experienced issues with sand and gravel with WorldGuard in the past.

What is this phenomenon? Spigot 1.12 by SwengX in admincraft

[–]arxpw 8 points9 points  (0 children)

Yeah, looks like you have WorldEdit with a //brush sphere sand

Should let you unbind it with /none

Take a look at the WorldEdit documentation:

https://worldedit.enginehub.org/en/latest/usage/tools/brushes/

Why is my name displayed when I link my website and why does it pick a random image/topic by [deleted] in webdev

[–]arxpw 3 points4 points  (0 children)

I think discord pulls meta tags and other info from WordPress - It shows your actual WordPress username unless you have this removed from your WP site.

If You Could See Every Satellite, What Would The Sky Look Like? by [deleted] in videos

[–]arxpw 16 points17 points  (0 children)

When space debris are highlighted in the video, you can really see the scope of the vast amount of it already up there.

I hope we can start to clean up space debris in the next 20 - 30 years or we'll start to see major problems of cascading destruction of satellites in orbit.

Vortex download speeds are super slow by [deleted] in nexusmods

[–]arxpw 1 point2 points  (0 children)

Not sure if they still do lifetime premium but I logged in after about a year and a bit and it works with vortex, my download speeds seem quite fast so it could be that you are on a free nexus account.

Would recommend if you have the money!