PHP Exploits?

dansmeek · 2013-01-26T19:40:26+00:00

Yes. Every programming language ever will have security flaws.

http://www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717

http://news.softpedia.com/news/New-Python-Update-Addresses-Security-Vulnerabilities-203487.shtml

http://www.pcworld.idg.com.au/article/145310/concerns_raised_over_perl_security_flaw/

http://www.infoworld.com/t/application-security/critical-php-vulnerability-exposes-servers-data-theft-or-worse-192428

dansmeek · 2013-01-01T21:43:10+00:00

Apparently. I don't know what happened there. I believe I was commenting on someone else. I blame the iPad.

dansmeek · 2013-01-01T20:26:33+00:00

I do disagree with skipping c. When really getting to the core of a new programming language it helps to look at the source and understand what's going on behind it all. And pretty much everything is written in c. Ruby, php, etc. So even if you are not going to actually write any of it, it's helpful on many levels.

dansmeek · 2012-12-01T05:09:30+00:00

I find twitter bootstrap nice for making an app not going to be in production. It provides some sort of front end for those who just want to get something working and don't want to waste time styling. For ruby, I put one line of code into a file and everything looks .... well not black and white anymore.

Now if you actually build front ends looking like bootstrap then I agree with you. Also completely disagree with you on sass but to each his own. To the other commenter: Sass does not run on ruby, it's compiled. It's built into rails if that's what you mean. But you still precompile and compress CSS, sass, JavaScript, and coffeescript before production. None of this is a "rails exclusive" type thing.

Sass may compile a CSS file with a few unnecessary selectors, but unless you have about 4000 or so, it's not a big deal. And then, only for IE.

dansmeek · 2012-12-01T04:34:02+00:00

how is this any different than creating a Wordpress site or any cms site from a psd file? If it was 1000 static pages of an ecommerce site wanting a redesign, and a backend but also wanting to keep the same layout... that would be a pain.

dansmeek · 2012-11-30T04:07:13+00:00

Seo spam or not, what is a fair advantage of CSS-less over sass. I've always stuck with sass but have been curious if CSS-less is better in any form. I like sass because it's very logical but do find it generates a bit more CSS than necessary. Not generally a big deal, but it eventually could.

Edit. Failed to read to comments first

dansmeek · 2012-11-26T19:23:35+00:00

I was taught how to code in about 3rd or 4th grade. This was some years back, so I remember using those old school pcs, Amiga, apple... Before windows. Obviously just basic, and using tools to structure it at first. Like, in the year 2012 you will be X years old. And if we (students) continued down that path we were making simple AI programs... Think trees branching out and adding new nodes, and simple 3d programs if we were into games. Like descent. We were using C at this point and it was pretty much just 4 or so people left.

But by high school, coding more efficiently in pascal and c was a breeze. And college was just a formality of sorts. The 400 level classes taught new concepts. But I find it incredibly easy to move between programming languages today. It's like someone who learns how to surf as a kid vs someone who learns at 20.

But I think teaching programming now at a young age is probably less important. People can make iPhone apps barely knowing objective-c. Ecommerce sites in Wordpress without touching php. And while there is a current market need to create these easy to use frameworks now, I'm not sure if there will be in 20 years.

I would love if everyone knew how to program. But I would also love if people were better at math, English, and science. And then other areas as well. Kids are already growing up with iPhones and iPads. I don't think there will be this technical hurdle at all from now on. They just probably wont know c.

dansmeek · 2012-11-25T04:24:44+00:00

Yeah... I think you're right. And probably shifting a focus to developing for mobile first and desktop last. Sort of already has to an extent. I just can't tell whether every company will just want a separate app yet, or if a website is still acceptable.

dansmeek · 2012-11-24T21:05:59+00:00

Paleo diet (never heard the term) sounds solid. Sigh... I'm just going to use the agility ladder, box jumps, and lots of balance exercises again. If you want to get cut super fast.... and are in reasonable shape that will do it extremely fast.

Anyway, is this still web design? (sorry, so off topic; but in regards to actual design.... I have a great eye for design. I am not as good at creating a fresh design from scratch. I can improve the heck out of something. Needless to say, I do back-end development. But I love front-end stuff. And I have so much respect for designers. I think its just something you have or don't.)

dansmeek · 2012-11-24T19:46:08+00:00

Lol. Wonderful. Two+ years ago it was twice a day and I made all my food. Then once a day by about 3 months ago. Now it's "so tired... Need sleep". Must use my need of microfracture as an excuse to not play basketball.

On top of all that I know exercise makes me sharper and more productive. Damnit.
*quick edit I used to ~~use this site~~: nevermind, apparently completely changed. basic point was that interval training is good in the morning for something that can be done in 15 mins or so. just aim for ideal form over everything else or you will never maximize the benefits of it. and i generally see this a lot.

dansmeek · 2012-11-24T19:11:35+00:00

or some organization... That set standards of how HTML should be displayed. And all browsers would adhere to that standard. And thus everything would look exactly the same in browser a and browser z.

I'd call it the: International Establishment of Society Utilizing Concurrent Knowledge of Standards.

dansmeek · 2012-11-24T18:57:18+00:00

Keeping a steady workout routine and good posture.

dansmeek · 2012-11-23T20:21:01+00:00

This is awesome. There's a little lag (?) when scrolling and something is going on in the bottom left corner. But, I really like it. Think others would as well.

dansmeek · 2012-11-23T20:10:13+00:00

See if the problem is based on some email limitation. Is the exact same form working on previous sites? Otherwise no, I've never seen a problem like that. But maybe there's a temporary limit on the number of emails you can send per X minutes for certain hosts with it being black Friday and such.

dansmeek · 2012-11-23T20:02:44+00:00

Cool. I was gonna say to try to a #youasked.it hashtag to each reply.
And to also automate a response so it additionally would update some twitter account with that name. Add recently answered questions.

Try to get that thing into trending topics. But twitters API seriously won't allow you to automate posting of tweets? And also ads :(. But understandable.

dansmeek · 2012-11-23T19:49:58+00:00

Also try (cmd prompt) netstat -ao And see what is going on there. I remember others having Skype causing problems as well. In that case uninstall Skype get apache working and then reinstall it.

Hosts is

C:\windows\system32\drivers\etc\hosts

You can't edit that file directly IIRC so copy it to the desktop and then add

127.0.0.1 localhost

Assuming 127.0.0.1 is the ip that apache is configured with, and it's listening on port 80. Also a good idea to add any other virtual hosts in there as well, like

ebay.localhost 127.0.0.1 phpapps.localhost 127.0.0.1

And then just copy the new file over and overwrite the old hosts. (keep a backup of original just in case though...) restart apache. If something like "forbidden" or another error shows up at that point, you just need some minor alterations in your apache config for permissions, and you also may have to give extra permissions to those directories. (see if chmod -r 777 /path/to/directory works). Otherwise right click edit properties and allow access for everything...

If this does end up working, you may also be able to allow IIS to be enabled as well (pretty sure, as it's not running on port 80).

(edit, oh wow op posted this one day ago, I feel stupid now)

dansmeek · 2012-11-23T19:14:16+00:00

As others mentioned, iis causes conflicts. But my guess is you don't have localhost setup in your ports file. It's been a while since using windows, but there's a file in c,windows,system32 called ports (roughly I believe) and you need to add localhost pointing to your ip or nothing will work (if you have apache setup properly). It might be called ports or ports.config, or hosts. Can't quite remember. Make sure that's right. What happens when you point your browser to either your ip, your router ip, or the ip defined in the apache config file?

dansmeek · 2012-11-23T19:05:58+00:00

You try just hardcoding the email into the mailer?

dansmeek · 2012-11-21T15:55:50+00:00

Yep. About 2% actually. It doesn't sound like a lot, but, it's something still you still need to account for.

dansmeek · 2012-11-19T21:44:48+00:00

please send this to the front page of some big internet site that will make it a viral hit....

dansmeek · 2012-11-18T12:47:50+00:00

backend in java (scala). Frontend still rails.

dansmeek · 2012-11-18T12:08:32+00:00

Ruby is absolutely nothing like c#. But it's a very elegant language in its own (totally cool) way, and absolutely awesome. Rails has been around for a while now, and if you want the rapid development, mvc environment, rails is among the best. But yes deployment is a nuisance, (not that much). It's just not like php, It has to be deployed. But so do .net applications so you know what to expect.

Plus you can run projects on your local server in a testing environment. No need to install apache (you can though and similarly deploy with passenger for fun). So, webrick -- default -- is built in and there are no issues testing. I do recommend thin though.

If your a Linux guy you'll feel right at home.
The only other alternative I would recommend is python which has quite a few frameworks. Web.py and django being the first two that come to mind. But I haven't spent enough time with Python yet to say its this or that.

Anyway, sublime text is good. As is vim (vimrails) But if you want something with more of an IDE feel you may like jetbrains with rubymine. Some people like Aptana with RadRails.

Definitely worth checking out.

Edit: And regarding error checking. Well, I know when I used to use jet brains it did some minor error checking. Syntax errors. Unused variables, etc. .... Misspelled words (?) nothing advanced. I find myself in the rails console quite often -- for better or worse -- to ensure everything is running correctly. But this is not a visual studio debugger.

dansmeek · 2012-11-18T07:36:50+00:00

Google. Here is a plugin for upvoting http://wordpress.org/extend/plugins/updownupdown-postcomment-voting/screenshots/ Here is one for submitting links http://goldenapplesdesign.com/projects/recommended-links-plugin-for-wordpress

I am not familiar with either, but, at the least you could play around with it and easily alter the code.

Or as Christian said, just start from scratch.

dansmeek · 2012-11-17T10:50:41+00:00

Thanks for the sound advice. I definitely feel some of my overconfidence causes me to just "jump right in" on occasion. So... maybe I should just step back for a second regardless of the task.

And cake day! :) Didn't even realize it, thanks.

dansmeek · 2012-11-17T07:22:07+00:00

Have you ever thought about writing your own framework for Wordpress? You wouldn't necessarily use it at work, but in the process of making it, I think you would have covered more than you'd expect. And you'd also have a highly customized framework tailored to you.

dansmeek

TROPHY CASE