« What's on your mind? »

Talk about anything
User avatar
tank
Posts: 2825
Joined: 28 Sep 2013, 22:15
Facebook: charlie.simmons.7334
Google: ttnnkkrr
GitHub: ttnnkkrr
Location: Irving TX
Contact:

Re: « What's on your mind? »

26 Nov 2013, 12:16

i have always wondered why PHP_SELF exists. It should return the same thing really as SCRIPT_NAME but instead allows dangerous code enjection exploits. it is taught in nearly every book i have seen as the best way to get the current script and path. and it is by far the single most dangerous thing to have in any php code
We are troubled on every side‚ yet not distressed; we are perplexed‚
but not in despair; Persecuted‚ but not forsaken; cast down‚ but not destroyed;
https://www.facebook.com/ahkscript.org
If you have forum suggestions please submit a pull request
Check Out WebWriter
Thanks Tank :thumbup:
User avatar
TLM
Posts: 1582
Joined: 01 Oct 2013, 07:52
GitHub: TLMcode
Contact:

Re: « What's on your mind? »

26 Nov 2013, 13:40

Yea its a pretty bad one. At least it only reveals the parent dir [as of 5.3.27].
I will say though, if someone really wants to find the script they will.
I recently wrote some AJAX calls with the function in the wrong place and it returned the entire php source.
Maybe its time to move away from php all together, just a thought.


btw maybe theres a .ini setting to block that? ( >> ; << Indices = On ;P jking )
User avatar
tank
Posts: 2825
Joined: 28 Sep 2013, 22:15
Facebook: charlie.simmons.7334
Google: ttnnkkrr
GitHub: ttnnkkrr
Location: Irving TX
Contact:

Re: « What's on your mind? »

26 Nov 2013, 18:17

well its an easy exploit to avoid i just wonder why no classroom or how to book covers it
We are troubled on every side‚ yet not distressed; we are perplexed‚
but not in despair; Persecuted‚ but not forsaken; cast down‚ but not destroyed;
https://www.facebook.com/ahkscript.org
If you have forum suggestions please submit a pull request
Check Out WebWriter
Thanks Tank :thumbup:
Elesar
Posts: 69
Joined: 31 Oct 2013, 07:56

Re: « What's on your mind? »

27 Nov 2013, 10:22

I am baffled by the users at my company. We constantly tell them that they must be logged into the computers and software as themselves, yet we get several calls daily that "this isn't like it should be". We go investigate, and find that Jane Smith is logged into the computer, John Doe, is logged into the software, and Bob Williams is the user attempting to do something.

Our Windows system only allows printing based on a user's department attribute in AD. (location restriction)
Our medical software only allows access to certain features based on a user's permissions in that software.

The users are told this almost every day, and still they act completely surprised when something wont work when they don't do what they are told to do.
User avatar
tank
Posts: 2825
Joined: 28 Sep 2013, 22:15
Facebook: charlie.simmons.7334
Google: ttnnkkrr
GitHub: ttnnkkrr
Location: Irving TX
Contact:

Re: « What's on your mind? »

27 Nov 2013, 14:32

1 of 2 things is true. the criteria of requireing a user to log out the curent workstation user and back in as themself to then use the medical software is too cumbersome. or the users are idiots. I am betting that its not the later. Often devs ignore the need for studying USE Cases during the planning process this sounds like an example. My statement assumes these are dept workstations and not in an individuals office
We are troubled on every side‚ yet not distressed; we are perplexed‚
but not in despair; Persecuted‚ but not forsaken; cast down‚ but not destroyed;
https://www.facebook.com/ahkscript.org
If you have forum suggestions please submit a pull request
Check Out WebWriter
Thanks Tank :thumbup:
User avatar
joedf
Posts: 7581
Joined: 29 Sep 2013, 17:08
Facebook: J0EDF
Google: +joedf
GitHub: joedf
Location: Canada
Contact:

Re: « What's on your mind? »

27 Nov 2013, 18:58

Holy moly!
Image Image Image Image Image
Windows 10 x64 Professional, Intel i5-8500, NVIDIA GTX 1060 6GB, 2x8GB G.Skill RipJaws V - DDR4 3280 MHz | [About Me] | [ASPDM - StdLib Distribution]
[Populate the AHK MiniCity!] | [Qonsole - Quake-like console emulator] | [LibCon - Autohotkey Console Library] | [About the AHK Foundation]
User avatar
joedf
Posts: 7581
Joined: 29 Sep 2013, 17:08
Facebook: J0EDF
Google: +joedf
GitHub: joedf
Location: Canada
Contact:

Re: « What's on your mind? »

29 Nov 2013, 03:10

nnnik's account has been banned today on autohotkey.com ... :(
This is too much...

@nnnik sorry about the bad news today...

@tidbit Noooo!!!! Whyyy :( the caps! The caaappsss!!! Im still gonna use lowercase.. Hehe ;)
Image Image Image Image Image
Windows 10 x64 Professional, Intel i5-8500, NVIDIA GTX 1060 6GB, 2x8GB G.Skill RipJaws V - DDR4 3280 MHz | [About Me] | [ASPDM - StdLib Distribution]
[Populate the AHK MiniCity!] | [Qonsole - Quake-like console emulator] | [LibCon - Autohotkey Console Library] | [About the AHK Foundation]
User avatar
nnnik
Posts: 4448
Joined: 30 Sep 2013, 01:01
Location: Germany

Re: « What's on your mind? »

29 Nov 2013, 05:46

Well sh1t happens.
For quiet a while i have managed the de forum nearly alone.
It was like "my baby".
Now I feel like my baby is dying.

Due to the reason that i had this signature:
Also visit the new autohotkey forum that was created due to the vugs and problems here.
Recommends AHK Studio
User avatar
tidbit
Posts: 1159
Joined: 29 Sep 2013, 17:15
Location: USA

Re: « What's on your mind? »

29 Nov 2013, 10:36

joedf wrote:nnnik's account has been banned today on autohotkey.com ... :(
This is too much...

@nnnik sorry about the bad news today...

@tidbit Noooo!!!! Whyyy :( the caps! The caaappsss!!! Im still gonna use lowercase.. Hehe ;)
It was a test to see how long it would take someone to notice :D
it was less than a day. I changed it at about 13:15 GMT-6 11/28.
So far I think you're the first to say something, so... wooo. Now I can change back.
rawr. fear me.
*poke*
Is it December 21, 2012 yet?
User avatar
joedf
Posts: 7581
Joined: 29 Sep 2013, 17:08
Facebook: J0EDF
Google: +joedf
GitHub: joedf
Location: Canada
Contact:

Re: « What's on your mind? »

29 Nov 2013, 12:06

Because I care... :P :mrgreen:
Image Image Image Image Image
Windows 10 x64 Professional, Intel i5-8500, NVIDIA GTX 1060 6GB, 2x8GB G.Skill RipJaws V - DDR4 3280 MHz | [About Me] | [ASPDM - StdLib Distribution]
[Populate the AHK MiniCity!] | [Qonsole - Quake-like console emulator] | [LibCon - Autohotkey Console Library] | [About the AHK Foundation]
User avatar
tidbit
Posts: 1159
Joined: 29 Sep 2013, 17:15
Location: USA

Re: « What's on your mind? »

29 Nov 2013, 16:43

Here's one free hug.
http://i.imgur.com/oMlsePR.jpg
rawr. fear me.
*poke*
Is it December 21, 2012 yet?
User avatar
joedf
Posts: 7581
Joined: 29 Sep 2013, 17:08
Facebook: J0EDF
Google: +joedf
GitHub: joedf
Location: Canada
Contact:

Re: « What's on your mind? »

29 Nov 2013, 16:49

:) :D haha lol
Image Image Image Image Image
Windows 10 x64 Professional, Intel i5-8500, NVIDIA GTX 1060 6GB, 2x8GB G.Skill RipJaws V - DDR4 3280 MHz | [About Me] | [ASPDM - StdLib Distribution]
[Populate the AHK MiniCity!] | [Qonsole - Quake-like console emulator] | [LibCon - Autohotkey Console Library] | [About the AHK Foundation]
User avatar
tidbit
Posts: 1159
Joined: 29 Sep 2013, 17:15
Location: USA

Re: « What's on your mind? »

02 Dec 2013, 16:47

Kohls has a commercial that has ASCII Art in it.
Cool.
rawr. fear me.
*poke*
Is it December 21, 2012 yet?
Alibaba
Posts: 479
Joined: 29 Sep 2013, 16:15
Location: Germany

Re: « What's on your mind? »

02 Dec 2013, 17:30

nnnik wrote:Well sh1t happens.
For quiet a while i have managed the de forum nearly alone.
It was like "my baby".
Now I feel like my baby is dying.

Due to the reason that i had this signature:
Also visit the new autohotkey forum that was created due to the vugs and problems here.
As far as i can see, the thing i feared the most has happened to the german community.
I think, back a year and several months ago, there was such a big de community.
There were so many "core users". All forums were active, especially the offtopic, scripts and utilities forum.
That's important. I think those forums are indicators for the vitality of a community, because they are mostly used by long-term users. thus they differ from the support forum. they give a place for social conversation inside the community, besides from the normal subject-specific advices.
but if you take a look on the german community today, regardless if "old" or "new" forum, you see the same thing.
newbies, registering, asking for answers... only 2 or 3 persons who are replying... a big amount of threads staying unanswered... most new users leaving after a short time.
but no action in the other forums. they are entirely dead. and so is the german community. sad to say...
"Nothing is quieter than a loaded gun." - Heinrich Heine
User avatar
joedf
Posts: 7581
Joined: 29 Sep 2013, 17:08
Facebook: J0EDF
Google: +joedf
GitHub: joedf
Location: Canada
Contact:

Re: « What's on your mind? »

02 Dec 2013, 18:13

@tidbit Post a link! :D
@Alibaba :'( RIP de Forum...

Ps. Im not bipolar ;)
Image Image Image Image Image
Windows 10 x64 Professional, Intel i5-8500, NVIDIA GTX 1060 6GB, 2x8GB G.Skill RipJaws V - DDR4 3280 MHz | [About Me] | [ASPDM - StdLib Distribution]
[Populate the AHK MiniCity!] | [Qonsole - Quake-like console emulator] | [LibCon - Autohotkey Console Library] | [About the AHK Foundation]
User avatar
xZomBie
Posts: 256
Joined: 02 Oct 2013, 02:57

Re: « What's on your mind? »

02 Dec 2013, 21:27

joedf, you just need to post in every forum do you.
https://www.dropbox.com/s/x5rjjn4mr5pfa57/JoeDF.png

When I put the Image tags around the url, I get this "It was not possible to determine the dimensions of the image."
User avatar
joedf
Posts: 7581
Joined: 29 Sep 2013, 17:08
Facebook: J0EDF
Google: +joedf
GitHub: joedf
Location: Canada
Contact:

Re: « What's on your mind? »

02 Dec 2013, 22:08

@xZomBie You know it! ;) hehe ... so somebody finally noticed and mentioned it :P :D
Image Image Image Image Image
Windows 10 x64 Professional, Intel i5-8500, NVIDIA GTX 1060 6GB, 2x8GB G.Skill RipJaws V - DDR4 3280 MHz | [About Me] | [ASPDM - StdLib Distribution]
[Populate the AHK MiniCity!] | [Qonsole - Quake-like console emulator] | [LibCon - Autohotkey Console Library] | [About the AHK Foundation]
User avatar
xZomBie
Posts: 256
Joined: 02 Oct 2013, 02:57

Re: « What's on your mind? »

02 Dec 2013, 23:38

joedf wrote:@xZomBie You know it! ;) hehe ... so somebody finally noticed and mentioned it :P :D
LOL... :D
User avatar
joedf
Posts: 7581
Joined: 29 Sep 2013, 17:08
Facebook: J0EDF
Google: +joedf
GitHub: joedf
Location: Canada
Contact:

Re: « What's on your mind? »

02 Dec 2013, 23:55

:D joy!
Image Image Image Image Image
Windows 10 x64 Professional, Intel i5-8500, NVIDIA GTX 1060 6GB, 2x8GB G.Skill RipJaws V - DDR4 3280 MHz | [About Me] | [ASPDM - StdLib Distribution]
[Populate the AHK MiniCity!] | [Qonsole - Quake-like console emulator] | [LibCon - Autohotkey Console Library] | [About the AHK Foundation]

Return to “Offtopic”

Who is online

Users browsing this forum: No registered users and 27 guests