« What's on your mind? » Topic is solved

[tank]

i have always wondered why PHP_SELF exists. It should return the same thing really as SCRIPT_NAME but instead allows dangerous code enjection exploits. it is taught in nearly every book i have seen as the best way to get the current script and path. and it is by far the single most dangerous thing to have in any php code

[TLM]

Yea its a pretty bad one. At least it only reveals the parent dir [as of 5.3.27].
I will say though, if someone really wants to find the script they will.
I recently wrote some AJAX calls with the function in the wrong place and it returned the entire php source.
Maybe its time to move away from php all together, just a thought.


btw maybe theres a .ini setting to block that? ( >> ; << Indices = On ;P jking )

[tank]

well its an easy exploit to avoid i just wonder why no classroom or how to book covers it

[Elesar]

I am baffled by the users at my company. We constantly tell them that they must be logged into the computers and software as themselves, yet we get several calls daily that "this isn't like it should be". We go investigate, and find that Jane Smith is logged into the computer, John Doe, is logged into the software, and Bob Williams is the user attempting to do something.

Our Windows system only allows printing based on a user's department attribute in AD. (location restriction)
Our medical software only allows access to certain features based on a user's permissions in that software.

The users are told this almost every day, and still they act completely surprised when something wont work when they don't do what they are told to do.

[tank]

1 of 2 things is true. the criteria of requireing a user to log out the curent workstation user and back in as themself to then use the medical software is too cumbersome. or the users are idiots. I am betting that its not the later. Often devs ignore the need for studying USE Cases during the planning process this sounds like an example. My statement assumes these are dept workstations and not in an individuals office

[TLM]

BitCoin breaks $1000

[joedf]

Holy moly!

[joedf]

nnnik's account has been banned today on autohotkey.com ...
This is too much...

@nnnik sorry about the bad news today...

@tidbit Noooo!!!! Whyyy the caps! The caaappsss!!! Im still gonna use lowercase.. Hehe

[nnnik]

Well sh1t happens.
For quiet a while i have managed the de forum nearly alone.
It was like "my baby".
Now I feel like my baby is dying.

Due to the reason that i had this signature:
Also visit the new autohotkey forum that was created due to the vugs and problems here.

[tidbit]

nnnik's account has been banned today on autohotkey.com ...
This is too much...

@nnnik sorry about the bad news today...

@tidbit Noooo!!!! Whyyy the caps! The caaappsss!!! Im still gonna use lowercase.. Hehe

It was a test to see how long it would take someone to notice
it was less than a day. I changed it at about 13:15 GMT-6 11/28.
So far I think you're the first to say something, so... wooo. Now I can change back.

[joedf]

Because I care...

[tidbit]

Here's one free hug.
http://i.imgur.com/oMlsePR.jpg

[joedf]

haha lol

[tidbit]

Kohls has a commercial that has ASCII Art in it.
Cool.

[Alibaba]

Well sh1t happens.
For quiet a while i have managed the de forum nearly alone.
It was like "my baby".
Now I feel like my baby is dying.

Due to the reason that i had this signature:
Also visit the new autohotkey forum that was created due to the vugs and problems here.

As far as i can see, the thing i feared the most has happened to the german community.
I think, back a year and several months ago, there was such a big de community.
There were so many "core users". All forums were active, especially the offtopic, scripts and utilities forum.
That's important. I think those forums are indicators for the vitality of a community, because they are mostly used by long-term users. thus they differ from the support forum. they give a place for social conversation inside the community, besides from the normal subject-specific advices.
but if you take a look on the german community today, regardless if "old" or "new" forum, you see the same thing.
newbies, registering, asking for answers... only 2 or 3 persons who are replying... a big amount of threads staying unanswered... most new users leaving after a short time.
but no action in the other forums. they are entirely dead. and so is the german community. sad to say...

[joedf]

@tidbit Post a link!
@Alibaba :'( RIP de Forum...

Ps. Im not bipolar

[xZomBie]

joedf, you just need to post in every forum do you.
https://www.dropbox.com/s/x5rjjn4mr5pfa57/JoeDF.png

When I put the Image tags around the url, I get this "It was not possible to determine the dimensions of the image."

[joedf]

@xZomBie You know it! hehe ... so somebody finally noticed and mentioned it

[xZomBie]

@xZomBie You know it! hehe ... so somebody finally noticed and mentioned it

LOL...

[joedf]

joy!